last executing test programs:

31.538949232s ago: executing program 2 (id=301):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000700), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000740)={0x1})

31.302463884s ago: executing program 2 (id=302):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000007c0)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

31.031030815s ago: executing program 2 (id=304):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

30.521308786s ago: executing program 2 (id=308):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x2}, {}, 0xffffffff, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c)

30.135721384s ago: executing program 2 (id=312):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x13}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
unshare(0x28000600)
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000600))
fallocate(0xffffffffffffffff, 0x2, 0x400000000000004, 0x5)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000100)=0x5, 0x4)
r1 = socket(0xa, 0x3, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0xc8, 0x0, &(0x7f0000000780)=[@free_buffer={0x40086303, r8}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@fd, @fd, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x0, 0x0, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000001740)=""/4096, 0x1000, 0x0, 0x16}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/81, 0x51, 0x2, 0x33}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r10, 0x4038ae7a, &(0x7f0000000240)={[{0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]})
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

22.609597663s ago: executing program 2 (id=327):
r0 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x40, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r2 = socket$isdn(0x22, 0x2, 0x26)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
mq_timedsend(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x80044943, &(0x7f00000002c0)={'wlan0\x00'})
r3 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x7, 0x0)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r4)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffd}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendto$packet(r5, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$SIOCSIFHWADDR(r4, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
read$FUSE(r4, &(0x7f0000020040)={0x2020}, 0x2020)

13.512159323s ago: executing program 3 (id=350):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022050000000000959905"], 0x0}, 0x0)

13.388762553s ago: executing program 4 (id=352):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000640)=ANY=[@ANYBLOB="120100003da377207205feca01550102030109023d000100000000090400000496dba8000905000000000000000705e17e1b82e609050b02"], 0x0)

12.397437058s ago: executing program 0 (id=354):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="f9aced89f174d7ee8162d8af47da9b2d9f6d2121d4fa87d34ad531814294a95cf79eb84aba490a8d33b28d63bc13445abac137393b0052c52bd12806f9d1b423452648a9", 0x44}], 0x1, 0x3, 0xd4bd)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x10000)

12.013693731s ago: executing program 1 (id=356):
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000081"], 0x1c}}, 0x0)

11.633133016s ago: executing program 0 (id=357):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="0000000000000000050021"], 0x30}}, 0x0)

11.47980127s ago: executing program 1 (id=358):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406a053500000000000001090224000100000000090400fd010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207000000095a800882"], 0x0}, 0x0)

11.091783504s ago: executing program 3 (id=359):
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x4)
syz_emit_vhci(&(0x7f0000000a80)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0xc9, 0xc8, 0x6}}}, 0x8)

11.015970876s ago: executing program 0 (id=360):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x80}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

10.522909431s ago: executing program 3 (id=361):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x8, "8fe1e8d3c27777d4"}, 0x0})

10.496592188s ago: executing program 0 (id=362):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

9.828991761s ago: executing program 0 (id=363):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000000000008d80402f000000000000109022400000000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)

9.285729095s ago: executing program 4 (id=364):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000240)={0x0, {{0x2, 0x0, @remote}}}, 0x88)

8.595960676s ago: executing program 1 (id=365):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xeb}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)

8.276089906s ago: executing program 4 (id=366):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev}, 0x10)
getpeername(r0, 0x0, 0x0)

7.991948173s ago: executing program 1 (id=367):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000e"], 0x58}}, 0x0)

7.544748019s ago: executing program 1 (id=368):
syz_usb_connect(0x0, 0x5d, &(0x7f0000001800)={{0x12, 0x1, 0x0, 0x93, 0x0, 0x7a, 0x40, 0x421, 0x7, 0xb851, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}, [@call_mgmt={0x5}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0)
epoll_create(0x3e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

7.35133921s ago: executing program 4 (id=369):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

7.268299753s ago: executing program 3 (id=370):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x4, 0x10100, 0x0, 0x40}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0})
io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0)

7.022794708s ago: executing program 0 (id=371):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000780)={@val={0x6f01, 0x8100}, @val={0x1, 0x3, 0x0, 0x4, 0x3d}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x3, 0x7, 0x3f, 0x68, 0x0, 0x0, 0x1, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x20}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x8, 0x4, 0x3, 0x33, 0x5, 0x67, 0x600, 0xc, 0x1, 0x7, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}, {[@rr={0x7, 0xb, 0x9, [@private=0xa010100, @private=0xa010101]}]}}, "2a448c"}}}}, 0x4d)

6.713468553s ago: executing program 3 (id=372):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0xeeef0000, 0x1000})

6.389352996s ago: executing program 3 (id=373):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000300)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x0, 0x69, &(0x7f00000001c0)=""/105}, {0x5000, 0x1a, &(0x7f0000000340)=""/26}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000})
io_uring_setup(0x30d3, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
io_setup(0x0, &(0x7f0000000680))
io_submit(0x0, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c00000008000000000000000000000300000000050000000100000000000000000000000400000d000000000f0000000000000000000000000000000f0000000000000000000000000000001000000000000007000000000000000000000006040000000000000000006100efd0d0899f0fbcabb3168244ec1a9bb60c2999ccb198342d73b804f1abf2849fbc8d9c09df32cd95616898d60f5a41bbc737a7e7425e90c2a5fdec16f3e1110e4db1160a9ba2741a826ba79c6c721252e4fc2d68b894337c8ff7bada3bcb573a956959d07b0b1d2d0ae9b5274b0d4318e84fea020194300a1615560c80"], &(0x7f0000000840)=""/41, 0x7c, 0x29, 0x1, 0x0, 0x0, @void, @value}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0xffffffffffffffaf)
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_set_ext_adv_params}}, 0x8)

5.566788551s ago: executing program 4 (id=374):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0xb, 0xa, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001680), 0x8000, r0}, 0x38)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000)='A', &(0x7f0000000140)=@tcp, 0x2}, 0x20)

4.923982205s ago: executing program 1 (id=375):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000300)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x0, 0x69, &(0x7f00000001c0)=""/105}, {0x5000, 0x1a, &(0x7f0000000340)=""/26}]})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
io_uring_setup(0x30d3, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
io_setup(0x0, &(0x7f0000000680))
io_submit(0x0, 0x0, &(0x7f0000000040))
socket$inet6_udplite(0xa, 0x2, 0x88)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c00000008000000000000000000000300000000050000000100000000000000000000000400000d000000000f0000000000000000000000000000000f0000000000000000000000000000001000000000000007000000000000000000000006040000000000000000006100efd0d0899f0fbcabb3168244ec1a9bb60c2999ccb198342d73b804f1abf2849fbc8d9c09df32cd95616898d60f5a41bbc737a7e7425e90c2a5fdec16f3e1110e4db1160a9ba2741a826ba79c6c721252e4fc2d68b894337c8ff7bada3bcb573a956959d07b0b1d2d0ae9b5274b0d4318e84fea020194300a1615560c80"], &(0x7f0000000840)=""/41, 0x7c, 0x29, 0x1, 0x0, 0x0, @void, @value}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0xffffffffffffffaf)
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_set_ext_adv_params}}, 0x8)

0s ago: executing program 4 (id=376):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "6e3565c0"}, @main=@item_012={0x1, 0x0, 0xb, 'i'}]}}, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts.
[   61.555568][ T5219] cgroup: Unknown subsys name 'net'
[   61.706294][ T5219] cgroup: Unknown subsys name 'cpuset'
[   61.714477][ T5219] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   63.247387][ T5219] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.498707][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.508050][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   65.516191][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   65.524994][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   65.532836][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   65.541486][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   65.545831][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.557195][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   65.566587][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   65.574380][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   65.575082][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.583980][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   65.595504][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.595969][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   65.610134][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.611062][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   65.618026][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   65.627080][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.632942][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.640577][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.646520][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.653766][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   65.659591][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.666565][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.684154][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.694888][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.703651][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   65.721156][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   65.728797][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.736484][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.991328][ T5246] chnl_net:caif_netlink_parms(): no params data found
[   66.227091][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.236405][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.244810][ T5246] bridge_slave_0: entered allmulticast mode
[   66.252484][ T5246] bridge_slave_0: entered promiscuous mode
[   66.296915][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.304182][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.311497][ T5246] bridge_slave_1: entered allmulticast mode
[   66.320881][ T5246] bridge_slave_1: entered promiscuous mode
[   66.328083][ T5247] chnl_net:caif_netlink_parms(): no params data found
[   66.346923][ T5245] chnl_net:caif_netlink_parms(): no params data found
[   66.393836][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.404961][ T5248] chnl_net:caif_netlink_parms(): no params data found
[   66.428844][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.504425][ T5246] team0: Port device team_slave_0 added
[   66.521175][ T5249] chnl_net:caif_netlink_parms(): no params data found
[   66.537588][ T5246] team0: Port device team_slave_1 added
[   66.608689][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.616866][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.624414][ T5247] bridge_slave_0: entered allmulticast mode
[   66.631231][ T5247] bridge_slave_0: entered promiscuous mode
[   66.645758][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.653357][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.679621][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.691395][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.698813][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.706455][ T5245] bridge_slave_0: entered allmulticast mode
[   66.713740][ T5245] bridge_slave_0: entered promiscuous mode
[   66.728685][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.736173][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.743494][ T5247] bridge_slave_1: entered allmulticast mode
[   66.750217][ T5247] bridge_slave_1: entered promiscuous mode
[   66.773626][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.780608][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.807071][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.819409][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.826594][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.834329][ T5245] bridge_slave_1: entered allmulticast mode
[   66.841195][ T5245] bridge_slave_1: entered promiscuous mode
[   66.880393][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.887608][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.895684][ T5248] bridge_slave_0: entered allmulticast mode
[   66.902461][ T5248] bridge_slave_0: entered promiscuous mode
[   66.928470][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.940320][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.949822][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.957192][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.964745][ T5248] bridge_slave_1: entered allmulticast mode
[   66.971452][ T5248] bridge_slave_1: entered promiscuous mode
[   66.991038][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.030104][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.059461][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.098944][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.121042][ T5246] hsr_slave_0: entered promiscuous mode
[   67.127718][ T5246] hsr_slave_1: entered promiscuous mode
[   67.145037][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.155988][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.164463][ T5249] bridge_slave_0: entered allmulticast mode
[   67.171204][ T5249] bridge_slave_0: entered promiscuous mode
[   67.181548][ T5247] team0: Port device team_slave_0 added
[   67.207507][ T5245] team0: Port device team_slave_0 added
[   67.213936][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.221210][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.228747][ T5249] bridge_slave_1: entered allmulticast mode
[   67.235773][ T5249] bridge_slave_1: entered promiscuous mode
[   67.244132][ T5247] team0: Port device team_slave_1 added
[   67.260062][ T5248] team0: Port device team_slave_0 added
[   67.267322][ T5245] team0: Port device team_slave_1 added
[   67.313973][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.320985][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.347075][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.361517][ T5248] team0: Port device team_slave_1 added
[   67.377944][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.385151][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.411579][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.425598][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.437783][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.451525][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.458983][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.485653][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.505655][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.512912][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.539250][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.600977][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.608078][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.634331][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.647798][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.655159][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.682445][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.699113][ T5249] team0: Port device team_slave_0 added
[   67.707432][ T5249] team0: Port device team_slave_1 added
[   67.723448][ T5240] Bluetooth: hci4: command tx timeout
[   67.723453][ T5241] Bluetooth: hci3: command tx timeout
[   67.781141][ T5247] hsr_slave_0: entered promiscuous mode
[   67.791211][ T5247] hsr_slave_1: entered promiscuous mode
[   67.792938][ T5241] Bluetooth: hci0: command tx timeout
[   67.802376][ T5240] Bluetooth: hci2: command tx timeout
[   67.802399][ T4620] Bluetooth: hci1: command tx timeout
[   67.803588][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.821367][ T5247] Cannot create hsr debugfs directory
[   67.844833][ T5245] hsr_slave_0: entered promiscuous mode
[   67.851470][ T5245] hsr_slave_1: entered promiscuous mode
[   67.858140][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.866094][ T5245] Cannot create hsr debugfs directory
[   67.883598][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.890666][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.917433][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.929798][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.937204][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.963664][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.026002][ T5248] hsr_slave_0: entered promiscuous mode
[   68.033731][ T5248] hsr_slave_1: entered promiscuous mode
[   68.039955][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.047673][ T5248] Cannot create hsr debugfs directory
[   68.182195][ T5249] hsr_slave_0: entered promiscuous mode
[   68.188896][ T5249] hsr_slave_1: entered promiscuous mode
[   68.196280][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.204422][ T5249] Cannot create hsr debugfs directory
[   68.350979][ T5246] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.381729][ T5246] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   68.418588][ T5246] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   68.445476][ T5246] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   68.514603][ T5248] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   68.545081][ T5248] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   68.556097][ T5248] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   68.571923][ T5248] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   68.599818][ T5249] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.617966][ T5249] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.628725][ T5249] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.645804][ T5249] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.734588][ T5245] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.749857][ T5245] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.761953][ T5245] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.786144][ T5245] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.818859][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.869797][ T5247] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.880649][ T5247] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.890457][ T5247] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.909207][ T5247] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.950174][ T5246] 8021q: adding VLAN 0 to HW filter on device team0
[   68.993420][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.000695][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.025342][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.037036][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.044174][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.117554][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.140530][ T5249] 8021q: adding VLAN 0 to HW filter on device team0
[   69.164425][ T5248] 8021q: adding VLAN 0 to HW filter on device team0
[   69.180749][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.188029][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.209288][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.216481][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.236235][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.243459][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.289038][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.296229][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.361329][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.415816][ T5249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.432515][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.450069][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.511547][ T5247] 8021q: adding VLAN 0 to HW filter on device team0
[   69.528884][ T5245] 8021q: adding VLAN 0 to HW filter on device team0
[   69.547428][ T5246] veth0_vlan: entered promiscuous mode
[   69.561793][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.569000][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.586691][ T5246] veth1_vlan: entered promiscuous mode
[   69.600036][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.612222][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.619623][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.647396][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.654576][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.665516][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.686905][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.694172][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.794440][ T5241] Bluetooth: hci3: command tx timeout
[   69.799984][ T5241] Bluetooth: hci4: command tx timeout
[   69.812506][ T5248] veth0_vlan: entered promiscuous mode
[   69.825165][ T5245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.850806][ T5246] veth0_macvtap: entered promiscuous mode
[   69.874150][ T5240] Bluetooth: hci2: command tx timeout
[   69.874295][ T4620] Bluetooth: hci1: command tx timeout
[   69.879682][ T5241] Bluetooth: hci0: command tx timeout
[   69.901895][ T5246] veth1_macvtap: entered promiscuous mode
[   69.910730][ T5248] veth1_vlan: entered promiscuous mode
[   69.927387][ T5249] veth0_vlan: entered promiscuous mode
[   69.949002][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.974919][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.000801][ T5249] veth1_vlan: entered promiscuous mode
[   70.010269][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.028262][ T5246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.038629][ T5246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.047897][ T5246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.057973][ T5246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.077586][ T5248] veth0_macvtap: entered promiscuous mode
[   70.088108][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.106210][ T5248] veth1_macvtap: entered promiscuous mode
[   70.160586][ T5249] veth0_macvtap: entered promiscuous mode
[   70.213715][ T5249] veth1_macvtap: entered promiscuous mode
[   70.244986][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.256030][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.268977][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.308461][ T5245] veth0_vlan: entered promiscuous mode
[   70.330138][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.340690][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.352009][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.365816][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.376873][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.394755][ T5248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.404586][ T5248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.414135][ T5248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.424094][ T5248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.447630][ T5247] veth0_vlan: entered promiscuous mode
[   70.464910][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.476193][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.486509][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.497221][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.508712][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.528878][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.528878][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.548341][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.558169][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.569046][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.579628][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.590755][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.609173][ T5247] veth1_vlan: entered promiscuous mode
[   70.636563][ T5245] veth1_vlan: entered promiscuous mode
[   70.646735][ T5249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.665467][ T5249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.674785][ T5249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.686634][ T5249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.725172][ T5246] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.787615][ T5245] veth0_macvtap: entered promiscuous mode
[   70.866000][ T5245] veth1_macvtap: entered promiscuous mode
[   70.890952][ T5247] veth0_macvtap: entered promiscuous mode
[   70.903772][ T5247] veth1_macvtap: entered promiscuous mode
[   70.920031][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.930636][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.940660][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.951217][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.961685][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.972287][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.984507][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.049519][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.061582][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.071757][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.084357][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.094833][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.106569][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.116962][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.127676][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.139406][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.148459][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.168252][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.172877][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.176987][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.208853][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.221286][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.231519][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.261251][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.278601][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.290168][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.307569][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.335021][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.347433][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.358053][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.369302][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.379500][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.390439][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.401363][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.411859][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.423804][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.444769][ T5247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.454540][ T5247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.463733][ T5247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.472813][ T5247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.562083][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[   71.562186][ T5245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.568689][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[   71.579666][ T5245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.592525][ T5245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.609961][ T5245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.633211][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.643456][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.664343][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.673837][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.874110][ T5241] Bluetooth: hci4: command tx timeout
[   71.874769][ T4620] Bluetooth: hci3: command tx timeout
[   71.930591][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   71.953664][ T4620] Bluetooth: hci0: command tx timeout
[   71.959545][ T4620] Bluetooth: hci2: command tx timeout
[   71.965530][ T4620] Bluetooth: hci1: command tx timeout
[   71.973829][ T5293] warning: `syz.3.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.033714][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   72.068852][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.078896][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.101794][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.111395][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.133044][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   72.215757][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.224480][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.353082][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   72.392269][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.419101][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.442675][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[   72.530876][ T5291] delete_channel: no stack
[   72.779357][ T5317] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0
[   72.799890][ T5307] IPVS: stopping backup sync thread 5317 ...
[   72.920980][ T5301] delete_channel: no stack
[   72.943034][ T5311] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   73.201508][ T5325] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8'.
[   73.229166][ T5325] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8'.
[   73.242793][ T5311] usb 2-1: Using ep0 maxpacket: 16
[   73.255668][ T5311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   73.279524][ T5328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8'.
[   73.298590][ T5311] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[   73.308033][ T5311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.317355][ T5311] usb 2-1: Product: syz
[   73.321570][ T5311] usb 2-1: Manufacturer: syz
[   73.327294][ T5324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9'.
[   73.344319][ T5311] usb 2-1: SerialNumber: syz
[   73.382343][ T5311] usb 2-1: config 0 descriptor??
[   73.421331][ T5330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9'.
[   73.449555][ T5329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9'.
[   73.465353][ T5311] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   73.628962][ T5315] delete_channel: no stack
[   73.667915][   T11] usb 2-1: Failed to submit usb control message: -71
[   73.679093][ T5286] usb 2-1: USB disconnect, device number 2
[   73.687815][   T11] usb 2-1: unable to send the bmi data to the device: -71
[   73.699338][   T11] usb 2-1: unable to get target info from device
[   73.708063][   T11] usb 2-1: could not get target info (-71)
[   73.731739][   T11] usb 2-1: could not probe fw (-71)
[   73.953061][ T5241] Bluetooth: hci4: command tx timeout
[   73.954081][ T4620] Bluetooth: hci3: command tx timeout
[   74.018157][ T5338] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10'.
[   74.030660][ T5338] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10'.
[   74.033293][ T4620] Bluetooth: hci1: command tx timeout
[   74.040656][ T5241] Bluetooth: hci2: command tx timeout
[   74.051391][ T5240] Bluetooth: hci0: command tx timeout
[   74.074464][ T5338] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10'.
[   74.518518][ T5346] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.662973][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   74.763329][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   74.872777][ T5284] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   74.920512][ T5351] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   74.940246][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   75.018210][ T4620] Bluetooth: Unknown BR/EDR signaling command 0x0f
[   75.030539][ T4620] Bluetooth: Wrong link type (-22)
[   75.042497][ T4620] Bluetooth: Unknown BR/EDR signaling command 0x0d
[   75.049443][ T4620] Bluetooth: Wrong link type (-22)
[   75.054708][ T4620] Bluetooth: Unknown BR/EDR signaling command 0x10
[   75.061331][ T4620] Bluetooth: Wrong link type (-22)
[   75.066688][ T4620] Bluetooth: Wrong link type (-71)
[   75.071870][ T4620] Bluetooth: Wrong link type (-71)
[   75.077667][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   75.088648][ T5284] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[   75.144269][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.213070][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   75.236323][ T5284] usb 1-1: config 0 descriptor??
[   75.280417][ T5284] ums-realtek 1-1:0.0: USB Mass Storage device detected
[   75.666460][ T5286] usb 1-1: USB disconnect, device number 2
[   75.949522][ T5357] delete_channel: no stack
[   76.022773][ T5286] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   76.148265][ T5361] delete_channel: no stack
[   76.222743][ T5286] usb 1-1: Using ep0 maxpacket: 8
[   76.291292][ T5286] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   76.315922][ T5286] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   76.330789][ T5286] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   76.342808][ T5286] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   76.367527][ T5286] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   76.388644][ T5286] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   76.398522][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.562814][ T5295] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   76.648214][ T5286] usb 1-1: GET_CAPABILITIES returned 0
[   76.683481][ T5286] usbtmc 1-1:16.0: can't read capabilities
[   76.725435][ T5295] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   76.756180][ T5371] delete_channel: no stack
[   76.783101][ T5295] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   76.811620][ T5295] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   76.824887][ T5295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.861833][ T5379] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   76.897747][ T5286] usb 1-1: USB disconnect, device number 3
[   76.933290][ T5295] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   77.351708][ T5394] xt_cgroup: invalid path, errno=-2
[   77.700153][ T5402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26'.
[   77.806948][ T5394] vxcan1: entered promiscuous mode
[   78.843469][ T4620] Bluetooth: Unknown BR/EDR signaling command 0x0f
[   78.850209][ T4620] Bluetooth: Wrong link type (-22)
[   78.855571][ T4620] Bluetooth: Unknown BR/EDR signaling command 0x0d
[   78.862842][ T4620] Bluetooth: Wrong link type (-22)
[   78.869772][ T4620] Bluetooth: Unknown BR/EDR signaling command 0x10
[   78.876547][ T4620] Bluetooth: Wrong link type (-22)
[   78.881755][ T4620] Bluetooth: Wrong link type (-71)
[   78.886948][ T4620] Bluetooth: Wrong link type (-71)
[   79.932107][ T5420] delete_channel: no stack
[   80.014036][ T5422] delete_channel: no stack
[   80.250894][ T5418] syz.4.32 (5418) used greatest stack depth: 18360 bytes left
[   80.422771][  T937] usb 3-1: USB disconnect, device number 2
[   80.723905][ T5295] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   80.961506][ T5295] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4
[   81.017500][ T5295] usb 5-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0
[   81.052852][ T5295] usb 5-1: Manufacturer: syz
[   81.091595][ T5295] usb 5-1: config 0 descriptor??
[   81.276010][ T5451] Zero length message leads to an empty skb
[   81.510480][  T937] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   81.684535][  T937] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[   81.684589][  T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.687962][  T937] usb 3-1: config 0 descriptor??
[   81.689929][  T937] ums-realtek 3-1:0.0: USB Mass Storage device detected
[   81.831485][    T8] cfg80211: failed to load regulatory.db
[   81.962250][   T51] usb 3-1: USB disconnect, device number 3
[   82.194009][ T5295] gs_usb 5-1:0.0: Couldn't send data format (err=-110)
[   82.194042][ T5295] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110
[   82.322273][   T51] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   82.481601][   T51] usb 3-1: Using ep0 maxpacket: 8
[   82.487597][   T51] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   82.487632][   T51] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   82.487650][   T51] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   82.487669][   T51] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   82.487686][   T51] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   82.487713][   T51] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   82.487731][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.705431][   T51] usb 3-1: GET_CAPABILITIES returned 0
[   82.734754][   T51] usbtmc 3-1:16.0: can't read capabilities
[   82.763562][ T5286] usb 5-1: USB disconnect, device number 2
[   82.937834][   T51] usb 3-1: USB disconnect, device number 4
[   83.049586][ T4620] Bluetooth: Unknown BR/EDR signaling command 0x0f
[   83.056428][ T4620] Bluetooth: Wrong link type (-22)
[   83.062365][ T4620] Bluetooth: Unknown BR/EDR signaling command 0x0d
[   83.069043][ T4620] Bluetooth: Wrong link type (-22)
[   83.077726][ T4620] Bluetooth: Unknown BR/EDR signaling command 0x10
[   83.084704][ T4620] Bluetooth: Wrong link type (-22)
[   83.089887][ T4620] Bluetooth: Wrong link type (-71)
[   83.095907][ T4620] Bluetooth: Wrong link type (-71)
[   83.875983][ T4620] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   83.888430][ T4620] Bluetooth: hci3: Injecting HCI hardware error event
[   83.896706][ T5240] Bluetooth: hci3: hardware error 0x00
[   83.942802][  T937] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   84.122965][  T937] usb 1-1: Using ep0 maxpacket: 32
[   84.153058][  T937] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[   84.174394][  T937] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   84.203447][  T937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.253041][  T937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[   84.293570][  T937] usb 1-1: config 1 has no interface number 0
[   84.313980][  T937] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[   84.334415][  T937] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   84.397484][  T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.413384][ T5477] delete_channel: no stack
[   84.497931][  T937] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[   84.534168][ T5481] delete_channel: no stack
[   84.708583][  T937] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values
[   84.719648][  T937] snd_usb_pod 1-1:1.1: invalid control EP
[   84.728539][  T937] snd_usb_pod 1-1:1.1: cannot start listening: -22
[   84.737966][  T937] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[   84.746233][  T937] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22
[   85.506805][ T5491] delete_channel: no stack
[   85.808605][ T5513] bridge0: port 3(dummy0) entered blocking state
[   85.817723][ T5513] bridge0: port 3(dummy0) entered disabled state
[   85.826879][ T5513] dummy0: entered allmulticast mode
[   85.835203][ T5513] dummy0: entered promiscuous mode
[   85.841740][ T5513] bridge0: port 3(dummy0) entered blocking state
[   85.848346][ T5513] bridge0: port 3(dummy0) entered forwarding state
[   85.952818][ T5240] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   86.262799][ T5282] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   86.444379][ T5282] usb 5-1: Using ep0 maxpacket: 32
[   86.467651][ T5282] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.487906][ T5282] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.513654][ T5282] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   86.544789][ T5282] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   86.563089][ T5282] usb 5-1: Product: syz
[   86.568967][ T5282] usb 5-1: Manufacturer: syz
[   86.618674][ T5282] hub 5-1:4.0: USB hub found
[   86.754081][ T5240] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   86.762974][ T5240] Bluetooth: hci2: Injecting HCI hardware error event
[   86.770940][ T4620] Bluetooth: hci2: hardware error 0x00
[   86.881973][ T5282] hub 5-1:4.0: 2 ports detected
[   87.058935][ T5513] syz.3.58 (5513): drop_caches: 2
[   87.163269][ T5528] mmap: syz.1.61 (5528) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   87.221314][ T5284] usb 1-1: USB disconnect, device number 4
[   87.282079][ T5528] netlink: 'syz.1.61': attribute type 32 has an invalid length.
[   87.290154][ T5528] __nla_validate_parse: 2 callbacks suppressed
[   87.290172][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'.
[   87.307555][ T5528] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   87.587058][ T1106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.746556][ T5534] netlink: 'syz.0.73': attribute type 32 has an invalid length.
[   87.770528][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'.
[   87.812998][ T5534] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   87.981787][ T5282] hub 5-1:4.0: hub_hub_status failed (err = -32)
[   88.021925][ T5282] hub 5-1:4.0: config failed, can't get hub status (err -32)
[   88.053491][ T5286] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   88.081346][ T1106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.235234][ T5286] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[   88.255037][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.298276][ T1106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.311439][ T5286] usb 2-1: config 0 descriptor??
[   88.355024][ T5286] ums-realtek 2-1:0.0: USB Mass Storage device detected
[   88.384076][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.403367][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.424281][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.444692][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.452712][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   88.461176][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.470766][   T30] audit: type=1326 audit(1727038139.126:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ea37def9 code=0x7ffc0000
[   88.527205][ T5552] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.638564][   T30] audit: type=1326 audit(1727038139.126:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ea37def9 code=0x7ffc0000
[   88.663676][   T30] audit: type=1326 audit(1727038139.166:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61ea37def9 code=0x7ffc0000
[   88.687067][   T30] audit: type=1326 audit(1727038139.166:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ea37def9 code=0x7ffc0000
[   88.712865][   T30] audit: type=1326 audit(1727038139.166:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ea37def9 code=0x7ffc0000
[   88.735664][   T30] audit: type=1326 audit(1727038139.166:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61ea37def9 code=0x7ffc0000
[   88.758666][   T30] audit: type=1326 audit(1727038139.166:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ea37def9 code=0x7ffc0000
[   88.780987][   T30] audit: type=1326 audit(1727038139.166:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ea37def9 code=0x7ffc0000
[   88.803267][   T30] audit: type=1326 audit(1727038139.166:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f61ea37def9 code=0x7ffc0000
[   88.825456][   T30] audit: type=1326 audit(1727038139.166:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ea37def9 code=0x7ffc0000
[   88.865174][ T1106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.882900][ T4620] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   88.962086][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.025887][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.210002][ T1106] bridge_slave_1: left allmulticast mode
[   89.216620][ T1106] bridge_slave_1: left promiscuous mode
[   89.223938][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.261437][ T1106] bridge_slave_0: left allmulticast mode
[   89.276618][ T1106] bridge_slave_0: left promiscuous mode
[   89.287252][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.443332][  T937] usb 5-1: USB disconnect, device number 3
[   90.048185][ T5558] delete_channel: no stack
[   90.117760][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.134389][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.148832][ T1106] bond0 (unregistering): Released all slaves
[   90.517644][ T4620] Bluetooth: hci4: command tx timeout
[   90.588938][  T937] usb 2-1: USB disconnect, device number 3
[   91.145155][ T1106] hsr_slave_0: left promiscuous mode
[   91.167508][ T1106] hsr_slave_1: left promiscuous mode
[   91.224762][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.248211][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.290946][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.306236][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.412251][ T1106] veth1_macvtap: left promiscuous mode
[   91.448639][ T1106] veth0_macvtap: left promiscuous mode
[   91.513521][ T1106] veth1_vlan: left promiscuous mode
[   91.541535][ T1106] veth0_vlan: left promiscuous mode
[   92.549224][ T1106] team0 (unregistering): Port device team_slave_1 removed
[   92.592719][ T4620] Bluetooth: hci4: command tx timeout
[   92.768549][ T1106] team0 (unregistering): Port device team_slave_0 removed
[   93.027217][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'.
[   93.038544][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'.
[   93.400974][ T5554] chnl_net:caif_netlink_parms(): no params data found
[   93.416279][ T5295] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   93.582813][ T5295] usb 1-1: Using ep0 maxpacket: 8
[   93.591819][ T5295] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[   93.607273][ T5295] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.641539][ T5554] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.649111][ T5295] usb 1-1: config 0 has no interface number 0
[   93.668133][ T5295] usb 1-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82
[   93.690044][ T5554] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.706599][ T5295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.733484][ T5554] bridge_slave_0: entered allmulticast mode
[   93.739009][ T5295] usb 1-1: Product: syz
[   93.767074][ T5554] bridge_slave_0: entered promiscuous mode
[   93.773803][ T5295] usb 1-1: Manufacturer: syz
[   93.778457][ T5295] usb 1-1: SerialNumber: syz
[   93.778632][ T5554] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.791304][ T5554] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.828922][ T5554] bridge_slave_1: entered allmulticast mode
[   93.839005][ T5295] usb 1-1: config 0 descriptor??
[   93.896128][ T5554] bridge_slave_1: entered promiscuous mode
[   94.088842][ T5295] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out.
[   94.090668][ T5554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.155235][ T5295] usb 1-1: USB disconnect, device number 5
[   94.229336][ T5554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.332495][ T5554] team0: Port device team_slave_0 added
[   94.383546][ T5554] team0: Port device team_slave_1 added
[   94.663796][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.672730][ T4620] Bluetooth: hci4: command tx timeout
[   94.736850][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.847835][ T5554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.937329][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.954675][ T5674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'.
[   94.974841][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.015136][ T4620] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   95.025386][ T4620] Bluetooth: hci0: Injecting HCI hardware error event
[   95.042300][ T4620] Bluetooth: hci0: hardware error 0x00
[   95.058505][ T5554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.097038][   T30] kauditd_printk_skb: 55 callbacks suppressed
[   95.097059][   T30] audit: type=1326 audit(1727038145.756:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.3.91" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61ea37def9 code=0x0
[   95.216607][ T5554] hsr_slave_0: entered promiscuous mode
[   95.226975][ T5554] hsr_slave_1: entered promiscuous mode
[   95.250378][ T5554] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.282702][ T5554] Cannot create hsr debugfs directory
[   95.542773][ T5286] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   95.722867][ T5286] usb 5-1: Using ep0 maxpacket: 8
[   95.747696][ T5286] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   95.775310][ T5286] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   95.803491][ T5286] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.820757][ T5286] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   95.831767][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.868580][ T5286] usb 5-1: Product: syz
[   95.889108][ T5286] usb 5-1: Manufacturer: syz
[   95.925073][ T5286] usb 5-1: SerialNumber: syz
[   96.249033][ T5282] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   96.367472][ T5286] usb 5-1: 0:2 : does not exist
[   96.391508][ T5286] usb 5-1: USB disconnect, device number 4
[   96.491181][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.528434][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.558047][ T5282] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[   96.620378][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.660093][ T5282] usb 1-1: config 0 descriptor??
[   96.693838][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'.
[   96.753030][ T5241] Bluetooth: hci4: command tx timeout
[   96.916488][ T5554] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   96.934020][ T5554] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   97.060191][ T5554] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   97.118652][ T5554] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   97.154059][ T4620] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   97.303156][ T5554] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.322906][   T51] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   97.335371][ T5554] 8021q: adding VLAN 0 to HW filter on device team0
[   97.365831][ T5282] hid-led 0003:1D34:000A.0001: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0
[   97.391426][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.398630][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.424534][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.425123][ T5282] hid-led 0003:1D34:000A.0001: Dream Cheeky Webmail Notifier initialized
[   97.431724][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.492977][   T51] usb 5-1: Using ep0 maxpacket: 8
[   97.548522][   T51] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[   97.587460][   T51] usb 5-1: config 0 has no interface number 0
[   97.631447][   T51] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   97.633712][ T5730] syz.1.103 uses obsolete (PF_INET,SOCK_PACKET)
[   97.647311][   T51] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[   97.663041][   T51] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[   97.682055][   T51] usb 5-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xAF, changing to 0x8F
[   97.700030][   T51] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   97.773306][   T51] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0
[   97.825927][   T51] usb 5-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82
[   97.844192][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.844228][   T51] usb 5-1: Product: syz
[   97.844257][   T51] usb 5-1: Manufacturer: syz
[   97.844276][   T51] usb 5-1: SerialNumber: syz
[   97.903557][   T51] usb 5-1: config 0 descriptor??
[   97.988448][ T5554] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.138047][   T51] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk.
[   98.138065][   T51] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out.
[   98.156588][   T51] usb 5-1: USB disconnect, device number 5
[   98.259214][ T5554] veth0_vlan: entered promiscuous mode
[   98.286819][ T4620] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   98.286870][ T4620] Bluetooth: hci1: Injecting HCI hardware error event
[   98.288022][ T5241] Bluetooth: hci1: hardware error 0x00
[   98.302315][ T5554] veth1_vlan: entered promiscuous mode
[   98.481287][ T5746] netlink: zone id is out of range
[   98.526023][ T5554] veth0_macvtap: entered promiscuous mode
[   98.557319][ T5554] veth1_macvtap: entered promiscuous mode
[   98.615347][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.636865][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.662364][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.714711][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.746002][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.778205][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.808168][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.859764][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.932782][ T5554] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.961546][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.038781][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.094780][ T5763] misc userio: The device must be registered before sending interrupts
[   99.108449][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.134808][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.157267][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.180717][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.222809][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.252743][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.292729][   T51] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   99.317933][ T5554] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.398865][ T5554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.449470][ T5554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.500662][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   99.546858][ T5554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.554240][    T9] usb 1-1: USB disconnect, device number 6
[   99.562742][   T51] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[   99.602058][ T5554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.611030][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[   99.669106][ T5777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.113'.
[   99.701315][   T51] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[   99.710616][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.721570][   T51] usb 5-1: Product: syz
[   99.727008][   T51] usb 5-1: Manufacturer: syz
[   99.731656][   T51] usb 5-1: SerialNumber: syz
[   99.742484][   T51] usb 5-1: config 0 descriptor??
[   99.749280][ T5762] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   99.757267][ T5762] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   99.765757][   T51] usb 5-1: ucan: probing device on interface #0
[   99.978696][   T51] usb 5-1: ucan: device protocol version 860775821 is not supported
[  100.012276][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.021001][   T51] usb 5-1: ucan: probe failed; try to update the device firmware
[  100.031306][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.085297][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.100250][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.190243][   T51] usb 5-1: USB disconnect, device number 6
[  100.263876][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  100.358516][ T5241] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  100.443025][    T9] usb 2-1: device descriptor read/64, error -71
[  100.713210][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  100.827558][ T5822] xt_TCPMSS: Only works on TCP SYN packets
[  100.873827][    T9] usb 2-1: device descriptor read/64, error -71
[  100.913716][    T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  101.003221][    T9] usb usb2-port1: attempt power cycle
[  101.074841][    T8] usb 4-1: Using ep0 maxpacket: 32
[  101.088029][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.111307][    T8] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  101.133603][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.141701][    T8] usb 4-1: Product: syz
[  101.153063][  T937] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  101.172804][    T8] usb 4-1: Manufacturer: syz
[  101.177500][    T8] usb 4-1: SerialNumber: syz
[  101.204222][    T8] usb 4-1: config 0 descriptor??
[  101.226108][    T8] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  101.335324][  T937] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  101.354849][  T937] usb 1-1: config 0 has no interface number 0
[  101.363573][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  101.395199][  T937] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  101.422977][  T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.423017][  T937] usb 1-1: Product: syz
[  101.423037][  T937] usb 1-1: Manufacturer: syz
[  101.423080][  T937] usb 1-1: SerialNumber: syz
[  101.434430][    T9] usb 2-1: device descriptor read/8, error -71
[  101.435768][  T937] usb 1-1: config 0 descriptor??
[  101.503482][ T5241] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  101.503514][ T5241] Bluetooth: Wrong link type (-22)
[  101.503859][ T5241] Bluetooth: Unknown BR/EDR signaling command 0x0d
[  101.503878][ T5241] Bluetooth: Wrong link type (-22)
[  101.503907][ T5241] Bluetooth: Unknown BR/EDR signaling command 0x10
[  101.503921][ T5241] Bluetooth: Wrong link type (-22)
[  101.503949][ T5241] Bluetooth: Wrong link type (-71)
[  101.503976][ T5241] Bluetooth: Wrong link type (-71)
[  101.676791][ T5852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.123'.
[  101.677554][ T5852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.123'.
[  101.678291][ T5852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.123'.
[  101.703588][  T937] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  101.711981][  T937] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  101.712359][  T937] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  101.712419][  T937] usb 1-1: media controller created
[  101.715379][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  101.733790][    T9] usb 2-1: device descriptor read/8, error -71
[  101.734753][    T8] gspca_sunplus: reg_r err -110
[  101.751032][  T937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  101.853447][    T9] usb usb2-port1: unable to enumerate USB device
[  101.887172][ T5857] process 'syz.2.131' launched './file0' with NULL argv: empty string added
[  101.902258][  T937] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  102.011473][  T937] usb 1-1: USB disconnect, device number 7
[  102.092750][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'.
[  102.228772][ T5229] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  102.385402][ T5229] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  102.398320][ T5229] usb 3-1: New USB device found, idVendor=0408, idProduct=4011, bcdDevice=fa.f1
[  102.407769][ T5229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.416656][ T5229] usb 3-1: Product: syz
[  102.421125][ T5229] usb 3-1: Manufacturer: syz
[  102.425860][ T5229] usb 3-1: SerialNumber: syz
[  102.433273][ T5229] usb 3-1: config 0 descriptor??
[  102.442565][ T5229] usb 3-1: Found UVC 0.00 device syz (0408:4011)
[  102.456812][ T5229] usb 3-1: No valid video chain found.
[  102.600595][ T5867] x_tables: duplicate underflow at hook 2
[  102.832898][    T8] sunplus 4-1:0.0: probe with driver sunplus failed with error -110
[  102.873364][    T8] usb 4-1: USB disconnect, device number 2
[  103.012760][ T5282] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  103.202370][ T5282] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  103.226368][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.254254][ T5282] usb 1-1: config 0 descriptor??
[  103.442747][ T5229] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  103.483996][ T5282] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  103.484033][ T5282] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  103.484419][ T5282] [drm:udl_init] *ERROR* Selecting channel failed
[  103.505556][ T5282] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  103.505591][ T5282] [drm] Initialized udl on minor 2
[  103.508497][ T5282] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  103.512463][ T5282] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  103.518314][ T5286] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  103.520408][ T5282] usb 1-1: USB disconnect, device number 8
[  103.521167][ T5286] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  103.597996][ T5229] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  103.598034][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.599841][ T5229] usb 2-1: config 0 descriptor??
[  103.609418][ T5229] cp210x 2-1:0.0: cp210x converter detected
[  103.825412][ T5229] usb 2-1: cp210x converter now attached to ttyUSB0
[  104.028325][ T5282] usb 2-1: USB disconnect, device number 8
[  104.075703][ T5282] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  104.112378][ T5282] cp210x 2-1:0.0: device disconnected
[  104.439889][ T5905] netlink: 32 bytes leftover after parsing attributes in process `syz.4.147'.
[  104.469715][ T5905] netlink: 32 bytes leftover after parsing attributes in process `syz.4.147'.
[  104.489479][ T5905] netlink: 32 bytes leftover after parsing attributes in process `syz.4.147'.
[  104.869776][ T5229] usb 3-1: USB disconnect, device number 5
[  104.870779][ T5912] netlink: 'syz.1.152': attribute type 1 has an invalid length.
[  105.122951][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[  105.177026][ T5898] delete_channel: no stack
[  105.223880][   T51] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  105.403024][   T51] usb 4-1: Using ep0 maxpacket: 8
[  105.411589][   T51] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  105.421911][   T51] usb 4-1: config 0 has no interface number 0
[  105.429331][   T51] usb 4-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2
[  105.443610][   T51] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  105.455176][   T51] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  105.466407][   T51] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  105.482832][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.505184][   T51] usb 4-1: config 0 descriptor??
[  105.554447][   T51] iowarrior 4-1:0.1: no interrupt-in endpoint found
[  105.657032][ T5933] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.164'.
[  105.778698][ T5282] usb 4-1: USB disconnect, device number 3
[  106.004353][   T51] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  106.179339][   T51] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  106.188645][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.228904][   T51] usb 5-1: config 0 descriptor??
[  106.245642][   T51] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  106.446972][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.480790][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.765860][   T51] gp8psk: usb in 128 operation failed.
[  106.781181][   T51] gp8psk: usb in 137 operation failed.
[  106.798189][   T51] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  106.828599][   T51] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  106.830213][ T5941] delete_channel: no stack
[  106.870327][   T51] usb 5-1: USB disconnect, device number 7
[  107.816400][ T5998] fuse: Bad value for 'fd'
[  107.852919][ T5229] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  108.045203][ T5229] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad
[  108.071316][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.143343][ T5229] usb 2-1: config 0 descriptor??
[  108.394860][ T5229] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22
[  108.612756][    T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  108.633329][ T5229] usb 2-1: USB disconnect, device number 9
[  108.673691][ T5996] delete_channel: no stack
[  108.678658][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'.
[  108.723130][ T6017] netlink: 'syz.0.202': attribute type 3 has an invalid length.
[  108.761752][ T6019] netlink: 'syz.2.203': attribute type 3 has an invalid length.
[  108.774883][    T8] usb 5-1: config 0 has an invalid interface number: 149 but max is 0
[  108.781812][ T6021] netlink: 36 bytes leftover after parsing attributes in process `syz.3.204'.
[  108.783869][    T8] usb 5-1: config 0 has no interface number 0
[  108.801229][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'.
[  108.810821][ T6021] tc_dump_action: action bad kind
[  108.819879][    T8] usb 5-1: config 0 interface 149 has no altsetting 0
[  108.842961][    T8] usb 5-1: New USB device found, idVendor=357d, idProduct=7788, bcdDevice=36.2f
[  108.860950][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.874866][    T8] usb 5-1: config 0 descriptor??
[  109.093028][    T8] usb 5-1: string descriptor 0 read error: -71
[  109.119701][    T8] usb-storage 5-1:0.149: USB Mass Storage device detected
[  109.136214][    T8] usb-storage 5-1:0.149: Quirks match for vid 357d pid 7788: 4800000
[  109.177619][    T8] usb 5-1: USB disconnect, device number 8
[  109.291225][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'.
[  109.307756][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'.
[  110.065211][ T6051] fuse: Bad value for 'fd'
[  110.233007][ T6053] netlink: 104 bytes leftover after parsing attributes in process `syz.3.215'.
[  110.353750][   T51] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  110.480444][   T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.554264][   T51] usb 5-1: Using ep0 maxpacket: 32
[  110.569408][   T51] usb 5-1: config 0 has an invalid interface number: 252 but max is 0
[  110.612706][   T51] usb 5-1: config 0 has no interface number 0
[  110.638571][   T51] usb 5-1: config 0 interface 252 has no altsetting 0
[  110.652929][   T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.668061][   T51] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=aa.f8
[  110.679233][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.684549][    T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  110.687572][   T51] usb 5-1: Product: syz
[  110.706391][   T51] usb 5-1: Manufacturer: syz
[  110.711280][   T51] usb 5-1: SerialNumber: syz
[  110.729496][   T51] usb 5-1: config 0 descriptor??
[  110.764967][   T51] pcwd_usb: The device isn't a Human Interface Device
[  110.834535][   T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.884835][    T8] usb 2-1: Using ep0 maxpacket: 32
[  110.911050][    T8] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  110.931129][    T8] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  110.952412][ T5229] usb 5-1: USB disconnect, device number 9
[  110.968340][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.983808][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  111.014887][    T8] usb 2-1: config 1 has no interface number 0
[  111.027336][    T8] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  111.050859][    T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  111.061182][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.137843][    T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  111.202309][   T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.213117][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  111.274189][ T4620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.288110][ T4620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.296801][ T4620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.313665][ T4620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.321561][ T4620] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  111.337656][    T8] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[  111.347598][ T4620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.372786][    T9] usb 3-1: Using ep0 maxpacket: 16
[  111.383148][    T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  111.393888][    T8] snd_usb_pod 2-1:1.1: invalid control EP
[  111.404826][    T8] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  111.411412][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.419792][    T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  111.428093][    T9] usb 3-1: Product: syz
[  111.434995][    T9] usb 3-1: Manufacturer: syz
[  111.439736][    T9] usb 3-1: SerialNumber: syz
[  111.444817][    T8] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[  111.476693][    T9] usb 3-1: config 0 descriptor??
[  111.486606][    T9] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  111.703431][    T9] usb 3-1: clie_3_5_startup: get config number bad return length: 0
[  111.753733][   T52] bridge_slave_1: left allmulticast mode
[  111.760119][   T52] bridge_slave_1: left promiscuous mode
[  111.772098][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.788456][   T52] bridge_slave_0: left allmulticast mode
[  111.830897][   T52] bridge_slave_0: left promiscuous mode
[  111.845106][    T9] visor 3-1:0.0: probe with driver visor failed with error -5
[  111.893400][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.930455][ T5282] usb 3-1: USB disconnect, device number 6
[  112.711597][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.756714][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.830618][   T52] bond0 (unregistering): Released all slaves
[  112.862103][   T52] bond1 (unregistering): Released all slaves
[  112.991449][   T52] bond2 (unregistering): Released all slaves
[  113.394052][ T4620] Bluetooth: hci3: command tx timeout
[  113.759150][ T5286] usb 2-1: USB disconnect, device number 10
[  113.959977][ T6107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'.
[  113.978089][ T6066] chnl_net:caif_netlink_parms(): no params data found
[  114.386948][   T52] hsr_slave_0: left promiscuous mode
[  114.452815][   T52] hsr_slave_1: left promiscuous mode
[  114.486693][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.508104][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.525642][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.537376][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.586389][   T52] veth1_macvtap: left promiscuous mode
[  114.605641][   T52] veth0_macvtap: left promiscuous mode
[  114.618784][   T52] veth1_vlan: left promiscuous mode
[  114.630623][   T52] veth0_vlan: left promiscuous mode
[  115.473097][ T4620] Bluetooth: hci3: command tx timeout
[  115.669259][ T6140] delete_channel: no stack
[  115.702347][   T52] team0 (unregistering): Port device team_slave_1 removed
[  115.791665][   T52] team0 (unregistering): Port device team_slave_0 removed
[  116.799260][ T6163] xt_CT: You must specify a L4 protocol and not use inversions on it
[  116.871318][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.914037][ T4620] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  116.923679][ T4620] Bluetooth: hci4: Injecting HCI hardware error event
[  116.931968][ T4620] Bluetooth: hci4: hardware error 0x00
[  116.939403][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.946803][ T6066] bridge_slave_0: entered allmulticast mode
[  116.955092][ T6066] bridge_slave_0: entered promiscuous mode
[  116.989361][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.042864][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.050149][ T6066] bridge_slave_1: entered allmulticast mode
[  117.074011][ T6066] bridge_slave_1: entered promiscuous mode
[  117.419996][ T6066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.451633][ T6066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.487134][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'.
[  117.553235][ T5241] Bluetooth: hci3: command tx timeout
[  117.623778][ T6066] team0: Port device team_slave_0 added
[  117.668453][ T6066] team0: Port device team_slave_1 added
[  118.298527][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.313116][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.465063][ T6066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.558720][ T6066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.592561][ T6066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.662454][ T6066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.784308][ T6236] netlink: 'syz.2.276': attribute type 4 has an invalid length.
[  118.792026][ T6236] netlink: 'syz.2.276': attribute type 2 has an invalid length.
[  118.985424][ T6066] hsr_slave_0: entered promiscuous mode
[  119.013188][ T6066] hsr_slave_1: entered promiscuous mode
[  119.027911][ T6066] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  119.041882][ T6066] Cannot create hsr debugfs directory
[  119.233679][ T4620] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  119.639770][ T4620] Bluetooth: hci3: command tx timeout
[  121.062245][ T6287] fuse: Unknown parameter '0x0000000000000005'
[  122.566132][ T6298] netlink: 124 bytes leftover after parsing attributes in process `syz.4.297'.
[  122.637120][ T6298] tipc: Started in network mode
[  122.676041][ T6298] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  122.722902][ T6298] tipc: Enabled bearer <eth:batadv0>, priority 10
[  123.863033][ T5282] tipc: Node number set to 8432298
[  126.499110][ T6340] delete_channel: no stack
[  129.563656][ T6364] netlink: 'syz.1.317': attribute type 29 has an invalid length.
[  131.352960][ T6066] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  131.443662][ T6066] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  131.575739][ T6066] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  131.597858][ T6388] netlink: 'syz.1.323': attribute type 1 has an invalid length.
[  131.660322][ T6357] syz.2.312 (6357): drop_caches: 2
[  131.976952][ T6066] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  132.395639][ T6066] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.478159][ T6066] 8021q: adding VLAN 0 to HW filter on device team0
[  132.525164][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.532411][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.542852][ T5286] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  132.610094][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.617368][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.739521][ T5286] usb 4-1: Using ep0 maxpacket: 16
[  132.779068][ T5286] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  132.802915][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.832834][ T5286] usb 4-1: Product: syz
[  132.850433][ T5286] usb 4-1: Manufacturer: syz
[  132.876956][ T5286] usb 4-1: SerialNumber: syz
[  132.939135][ T5286] usb 4-1: config 0 descriptor??
[  132.953709][ T5286] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  133.051693][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  133.084781][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  133.181845][ T5286] usb 4-1: clie_3_5_startup: get config number bad return length: 0
[  133.215869][ T5286] visor 4-1:0.0: probe with driver visor failed with error -5
[  133.444195][ T5286] usb 4-1: USB disconnect, device number 4
[  133.756378][ T6395] delete_channel: no stack
[  133.825252][ T6066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.039687][ T6421] veth1_macvtap: left promiscuous mode
[  134.081154][ T6421] macsec0: entered promiscuous mode
[  134.140949][ T6066] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.232269][ T6424] veth1_macvtap: entered promiscuous mode
[  134.248580][ T6424] macsec0: left promiscuous mode
[  134.534955][ T6066] veth0_vlan: entered promiscuous mode
[  134.609757][ T6066] veth1_vlan: entered promiscuous mode
[  134.692901][ T5286] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  134.864745][ T6066] veth0_macvtap: entered promiscuous mode
[  134.924703][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.949258][ T6066] veth1_macvtap: entered promiscuous mode
[  134.977481][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.074469][ T5286] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  135.117390][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.142808][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.179666][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.192383][ T5286] usb 4-1: config 0 descriptor??
[  135.247486][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.307597][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.348552][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.382788][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.439925][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.468138][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.530242][ T6066] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.625938][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.666750][ T5286] steelseries 0003:1038:1410.0002: item fetching failed at offset 3/7
[  135.714610][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.743273][ T5286] steelseries 0003:1038:1410.0002: parse failed
[  135.749702][ T5286] steelseries 0003:1038:1410.0002: probe with driver steelseries failed with error -22
[  135.799620][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.853579][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.922994][   T51] usb 4-1: USB disconnect, device number 5
[  135.928988][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.999000][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.063634][ T6066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.116989][ T6066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.181809][ T6066] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.308139][ T6066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.373033][ T6066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.443451][ T6066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.452232][ T6066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.043691][ T6448] IPVS: wlc: UDP 0.0.0.0:0 - no destination available
[  137.063184][ T5282] IPVS: starting estimator thread 0...
[  137.131747][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.190242][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.245614][ T6450] IPVS: using max 15 ests per chain, 36000 per kthread
[  137.386727][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.467468][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.308647][   T17] sched: DL replenish lagged too much
[  140.697600][ T6457] delete_channel: no stack
[  141.279650][   T30] audit: type=1326 audit(1727038191.936:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bdb7def9 code=0x7ffc0000
[  141.372747][ T5286] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  141.542734][ T5286] usb 4-1: Using ep0 maxpacket: 16
[  141.568205][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.637845][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.679256][ T5286] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  141.694152][ T5295] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  141.749313][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.791637][   T30] audit: type=1326 audit(1727038192.446:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f97bdb7def9 code=0x7ffc0000
[  141.821836][ T5286] usb 4-1: config 0 descriptor??
[  141.893634][ T5295] usb 5-1: Using ep0 maxpacket: 32
[  141.913364][ T5295] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.952957][   T30] audit: type=1326 audit(1727038192.446:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bdb7def9 code=0x7ffc0000
[  142.062751][ T5295] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  142.188705][ T5295] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81
[  142.285407][   T30] audit: type=1326 audit(1727038192.446:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bdb7def9 code=0x7ffc0000
[  142.318117][ T5295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33307, setting to 1024
[  142.399473][ T5286] razer 0003:1532:011B.0003: unknown main item tag 0x0
[  142.438765][ T5295] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  142.502857][ T5286] razer 0003:1532:011B.0003: unknown main item tag 0x0
[  142.509809][ T5286] razer 0003:1532:011B.0003: item fetching failed at offset 4/5
[  142.555962][ T5295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  142.643375][ T5286] razer 0003:1532:011B.0003: probe with driver razer failed with error -22
[  142.662809][ T5295] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  142.739866][ T5295] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  142.772765][ T5286] usb 4-1: USB disconnect, device number 6
[  143.162947][ T5295] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[  143.172102][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.181733][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'.
[  143.308970][ T5295] usb 5-1: Product: syz
[  143.349246][ T5295] usb 5-1: Manufacturer: syz
[  143.398351][ T5295] usb 5-1: SerialNumber: syz
[  143.463752][ T5295] usb 5-1: config 0 descriptor??
[  143.513226][ T6497] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  143.551110][   T51] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  143.819404][   T51] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.894344][   T51] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.012744][   T51] usb 2-1: config 0 interface 0 has no altsetting 0
[  144.091395][ T5295] cxacru 5-1:0.0: submit of write urb for cm 0x90 failed (-2)
[  144.107879][   T51] usb 2-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.00
[  144.130706][ T5241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  144.152209][ T5241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  144.163191][ T5241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  144.173868][ T5241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  144.181690][ T5241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  144.192045][ T5241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  144.245006][ T5295] cxacru 5-1:0.0: usbatm_usb_probe: invalid endpoint 02!
[  144.278145][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.310918][ T5295] cxacru 5-1:0.0: probe with driver cxacru failed with error -22
[  144.343708][   T51] usb 2-1: config 0 descriptor??
[  144.443865][ T5295] usb 5-1: USB disconnect, device number 10
[  144.581602][   T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  144.814774][   T25] usb 4-1: Using ep0 maxpacket: 8
[  144.877926][   T51] wacom 0003:056A:0035.0004: hidraw0: USB HID v0.00 Device [HID 056a:0035] on usb-dummy_hcd.1-1/input0
[  144.889450][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.953547][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.010138][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  145.052788][ T5282] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  145.079743][   T25] usb 4-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00
[  145.090637][   T51] usb 2-1: USB disconnect, device number 11
[  145.122174][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.184555][   T25] usb 4-1: config 0 descriptor??
[  145.242932][ T5282] usb 1-1: Using ep0 maxpacket: 8
[  145.276349][ T5282] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  145.342852][ T5282] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  145.416860][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.507981][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.572311][ T5282] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  145.617451][   T25] ntrig 0003:1B96:0010.0005: unknown main item tag 0x0
[  145.653203][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.679238][   T25] ntrig 0003:1B96:0010.0005: unknown main item tag 0x0
[  145.728364][ T5282] usb 1-1: config 0 descriptor??
[  145.737563][   T25] ntrig 0003:1B96:0010.0005: unknown main item tag 0x0
[  145.806318][   T25] ntrig 0003:1B96:0010.0005: unknown main item tag 0x0
[  145.856011][   T25] ntrig 0003:1B96:0010.0005: unknown main item tag 0x0
[  145.891932][ T6531] chnl_net:caif_netlink_parms(): no params data found
[  145.934412][   T25] ntrig 0003:1B96:0010.0005: unknown main item tag 0x0
[  145.993710][   T25] ntrig 0003:1B96:0010.0005: unknown main item tag 0x0
[  146.073353][   T25] ntrig 0003:1B96:0010.0005: hidraw0: USB HID v0.00 Device [HID 1b96:0010] on usb-dummy_hcd.3-1/input0
[  146.184878][   T25] ntrig 0003:1B96:0010.0005: Firmware version: 1.10.3.62.2 (e8d3 c277)
[  146.235880][ T5282] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0
[  146.276667][ T5241] Bluetooth: hci5: command tx timeout
[  146.296892][ T5282] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0
[  146.372739][ T5282] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0
[  146.410160][   T25] usb 4-1: USB disconnect, device number 7
[  146.472821][ T5282] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0
[  146.556983][ T5282] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0
[  146.692856][ T5282] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found
[  146.751775][ T5282] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found
[  146.819502][ T5282] usb 1-1: USB disconnect, device number 9
[  146.899231][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.960421][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.023725][ T6531] bridge_slave_0: entered allmulticast mode
[  147.083529][ T6531] bridge_slave_0: entered promiscuous mode
[  147.154149][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.224444][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.231748][ T6531] bridge_slave_1: entered allmulticast mode
[  147.337439][ T6531] bridge_slave_1: entered promiscuous mode
[  147.403614][   T51] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  147.633556][   T51] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  147.675266][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.686298][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.746946][   T51] usb 2-1: Product: syz
[  147.792130][   T51] usb 2-1: Manufacturer: syz
[  147.811349][   T51] usb 2-1: SerialNumber: syz
[  147.832202][ T6567] bridge1: entered promiscuous mode
[  147.855688][   T51] usb 2-1: config 0 descriptor??
[  147.895982][   T51] rndis_host 2-1:0.0: More than one union descriptor, skipping ...
[  147.917909][ T6567] bridge1: entered allmulticast mode
[  147.952841][   T51] usb 2-1: bad CDC descriptors
[  147.988035][   T51] cdc_acm 2-1:0.0: More than one union descriptor, skipping ...
[  148.052006][ T6567] team0: Port device bridge1 added
[  148.147036][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.255573][ T5282] usb 2-1: USB disconnect, device number 12
[  148.354488][ T5241] Bluetooth: hci5: command tx timeout
[  150.432763][ T5241] Bluetooth: hci5: command tx timeout
[  152.512779][ T5241] Bluetooth: hci5: command tx timeout
[  152.661255][ T6392] coredump: 184(syz.4.324): written to core: VMAs: 36, size 80642048; core: 59950134 bytes, pos 80650240
[  169.334120][ T6531] team0: Port device team_slave_0 added
[  169.358305][ T6531] team0: Port device team_slave_1 added
[  169.461813][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.495882][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.578272][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.639859][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.665017][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.750172][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.221633][ T6531] hsr_slave_0: entered promiscuous mode
[  170.285520][ T6531] hsr_slave_1: entered promiscuous mode
[  170.362918][ T6531] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.374705][ T6531] Cannot create hsr debugfs directory
[  170.919222][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.297487][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.420249][ T6531] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.078160][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.167435][ T6531] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.241147][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.332121][ T6531] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.570898][ T6531] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.678047][   T11] bridge_slave_1: left allmulticast mode
[  173.690850][   T11] bridge_slave_1: left promiscuous mode
[  173.699404][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.741594][   T11] bridge_slave_0: left allmulticast mode
[  173.750126][   T11] bridge_slave_0: left promiscuous mode
[  173.763225][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.246976][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.307987][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.324509][   T11] bond0 (unregistering): Released all slaves
[  175.542064][ T6531] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  175.587130][ T6531] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  175.638680][ T6531] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  175.683667][ T6531] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  175.950220][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.021018][ T6531] 8021q: adding VLAN 0 to HW filter on device team0
[  176.112850][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.120011][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.155576][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.162766][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.231484][ T6531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  176.281875][ T6531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  176.392043][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.519430][ T6531] veth0_vlan: entered promiscuous mode
[  176.578353][ T6531] veth1_vlan: entered promiscuous mode
[  176.716857][ T6531] veth0_macvtap: entered promiscuous mode
[  176.740732][ T6531] veth1_macvtap: entered promiscuous mode
[  176.809398][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.852185][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.893963][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.942855][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.962797][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.012458][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.033468][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.076113][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.120836][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.144251][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.181124][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.247611][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.275265][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.315682][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.345381][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.382642][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.409663][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.441717][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.475238][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.505879][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.547527][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.589673][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.748415][ T6531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.793242][ T6531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.801985][ T6531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.839701][ T6531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.412193][   T11] hsr_slave_0: left promiscuous mode
[  183.434683][   T11] hsr_slave_1: left promiscuous mode
[  183.440629][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.459423][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.470615][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.485830][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.538650][   T11] veth1_macvtap: left promiscuous mode
[  183.555379][   T11] veth0_macvtap: left promiscuous mode
[  183.570237][   T11] veth1_vlan: left promiscuous mode
[  183.583064][   T11] veth0_vlan: left promiscuous mode
[  185.279394][   T11] team0 (unregistering): Port device team_slave_1 removed
[  185.391224][   T11] team0 (unregistering): Port device team_slave_0 removed
[  188.503285][ T4620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  188.512762][ T4620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  188.522287][ T4620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  188.530688][ T4620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  188.538503][ T4620] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  188.559148][ T4620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  192.302891][ T5241] Bluetooth: hci3: Opcode 0x0c39 failed: -110
[  192.309513][ T4620] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  192.720858][ T4620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  192.753158][ T4620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  192.761918][ T4620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  192.773106][ T4620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  192.780370][ T4620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  192.792051][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  192.802444][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  192.812188][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  192.821783][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  192.829669][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  192.838375][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  192.848029][ T4620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  192.856397][ T4620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  192.879113][ T4620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  192.888828][ T5242] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  192.912749][ T5242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  192.919883][ T5242] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  192.934125][ T5242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  193.056319][ T6618] Bluetooth: hci4: Opcode 0x0c03 failed: -4
[  193.774171][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  193.806425][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  193.822031][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.831241][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.839707][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  193.847568][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.455281][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  194.461654][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  194.913991][ T5232] Bluetooth: hci3: command tx timeout
[  194.992870][ T5232] Bluetooth: hci7: command tx timeout
[  195.072762][ T5232] Bluetooth: hci6: command tx timeout
[  195.874305][ T5232] Bluetooth: hci4: command tx timeout
[  196.992878][ T5232] Bluetooth: hci3: command tx timeout
[  197.073962][ T5232] Bluetooth: hci7: command tx timeout
[  197.152788][ T5232] Bluetooth: hci6: command tx timeout
[  197.952790][ T5232] Bluetooth: hci4: command tx timeout
[  199.072921][ T5232] Bluetooth: hci3: command tx timeout
[  199.152844][ T5232] Bluetooth: hci7: command tx timeout
[  199.232854][ T5232] Bluetooth: hci6: command tx timeout
[  200.035290][ T5232] Bluetooth: hci4: command tx timeout
[  201.152709][ T5232] Bluetooth: hci3: command tx timeout
[  201.232747][ T5232] Bluetooth: hci7: command tx timeout
[  201.312921][ T5232] Bluetooth: hci6: command tx timeout
[  202.112768][ T5232] Bluetooth: hci4: command tx timeout
[  203.083221][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  203.092222][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  203.105976][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  203.122448][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  203.133307][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  203.142294][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  205.232893][ T5232] Bluetooth: hci0: command tx timeout
[  207.312796][ T5232] Bluetooth: hci0: command tx timeout
[  209.392822][ T5232] Bluetooth: hci0: command tx timeout
[  211.472809][ T5232] Bluetooth: hci0: command tx timeout
[  219.133442][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  219.146861][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  219.155456][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  219.171096][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  219.178910][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  219.193120][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  220.597638][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  220.607974][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  220.623699][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  220.633498][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  220.642704][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  220.650206][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  221.232875][ T5232] Bluetooth: hci1: command tx timeout
[  222.753052][ T5232] Bluetooth: hci2: command tx timeout
[  223.312770][ T5232] Bluetooth: hci1: command tx timeout
[  224.832978][ T5232] Bluetooth: hci2: command tx timeout
[  225.399637][ T5232] Bluetooth: hci1: command tx timeout
[  225.583611][ T5240] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  225.600174][ T5240] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  225.610612][ T5240] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  225.625080][ T5240] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  225.637542][ T5240] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  225.646527][ T5240] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  226.912767][ T5240] Bluetooth: hci2: command tx timeout
[  227.472828][ T5240] Bluetooth: hci1: command tx timeout
[  227.713131][ T5240] Bluetooth: hci8: command tx timeout
[  228.992958][ T5240] Bluetooth: hci2: command tx timeout
[  229.795645][ T5240] Bluetooth: hci8: command tx timeout
[  231.872816][ T5240] Bluetooth: hci8: command tx timeout
[  233.957856][ T5240] Bluetooth: hci8: command tx timeout
[  255.528056][ T5232] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  255.538045][ T5232] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  255.551444][ T5232] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  255.572767][ T5232] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  255.592033][ T5232] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  255.599558][ T5232] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  255.875316][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  255.881669][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  257.639837][ T5232] Bluetooth: hci9: command tx timeout
[  259.712682][ T5232] Bluetooth: hci9: command tx timeout
[  261.792835][ T5232] Bluetooth: hci9: command tx timeout
[  263.224473][ T5240] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  263.242760][ T5240] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  263.256997][ T5240] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  263.265457][ T5240] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  263.273354][ T5240] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  263.281020][ T5240] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  263.872787][ T5240] Bluetooth: hci9: command tx timeout
[  265.393193][ T5240] Bluetooth: hci10: command tx timeout
[  267.472986][ T5240] Bluetooth: hci10: command tx timeout
[  268.198766][ T5240] Bluetooth: hci5: command 0x0406 tx timeout
[  269.553192][ T5240] Bluetooth: hci10: command tx timeout
[  271.633065][ T5240] Bluetooth: hci10: command tx timeout
[  279.620988][ T5241] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  279.630673][ T5241] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  279.639124][ T5241] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  279.648512][ T5241] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  279.659876][ T5241] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  279.672741][ T5241] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  281.149012][ T5242] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  281.159430][ T5242] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  281.168102][ T5242] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  281.176941][ T5242] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  281.189364][ T5242] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  281.198144][ T5242] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  285.665262][ T4620] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  285.674413][ T4620] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  285.682377][ T4620] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  285.693561][ T4620] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  285.707716][ T4620] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  285.715257][ T4620] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  315.955711][   T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  315.965166][   T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  315.978519][   T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  315.986737][   T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  316.000733][   T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  316.009975][   T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  317.343138][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  317.349540][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  319.405006][ T6827] Bluetooth: hci3: command 0x0406 tx timeout
[  319.411445][ T6828] Bluetooth: hci7: command 0x0406 tx timeout
[  319.417730][ T6827] Bluetooth: hci6: command 0x0406 tx timeout
[  319.424238][ T6828] Bluetooth: hci4: command 0x0406 tx timeout
[  323.874275][ T6829] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  323.887017][ T6829] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  323.895392][ T6829] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  323.907087][ T6829] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  323.918174][ T6829] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  323.926063][ T6829] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  329.637188][ T6827] Bluetooth: hci0: command 0x0406 tx timeout
[  340.225588][ T6838] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  340.234839][ T6838] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  340.242883][ T6838] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  340.250878][ T6838] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  340.258897][ T6838] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  340.277215][ T6838] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  341.716813][ T6843] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  341.726656][ T6843] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  341.739413][ T6843] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  341.749359][ T6843] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  341.757794][ T6843] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  341.766229][ T6843] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  344.997011][ T6847] Bluetooth: hci1: command 0x0406 tx timeout
[  345.004178][ T6847] Bluetooth: hci2: command 0x0406 tx timeout
[  346.234892][ T6848] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  346.244548][ T6848] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  346.253310][ T6848] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  346.262293][ T6848] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  346.270499][ T6848] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  346.278419][ T6848] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  348.035791][   T31] INFO: task kworker/u8:0:11 blocked for more than 143 seconds.
[  348.072783][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  348.080141][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  348.146324][   T31] task:kworker/u8:0    state:D stack:22032 pid:11    tgid:11    ppid:2      flags:0x00004000
[  348.225627][   T31] Workqueue: netns cleanup_net
[  348.230503][   T31] Call Trace:
[  348.289521][   T31]  <TASK>
[  348.294562][   T31]  __schedule+0x1895/0x4b30
[  348.299163][   T31]  ? __pfx___schedule+0x10/0x10
[  348.318061][   T31]  ? __pfx_lock_release+0x10/0x10
[  348.324724][   T31]  ? __mutex_trylock_common+0x92/0x2e0
[  348.330240][   T31]  ? kthread_data+0x52/0xd0
[  348.340891][   T31]  ? schedule+0x90/0x320
[  348.345981][   T31]  ? wq_worker_sleeping+0x66/0x240
[  348.351155][   T31]  ? schedule+0x90/0x320
[  348.363704][   T31]  schedule+0x14b/0x320
[  348.367931][   T31]  schedule_preempt_disabled+0x13/0x30
[  348.379887][   T31]  __mutex_lock+0x6a7/0xd70
[  348.386038][   T31]  ? __mutex_lock+0x52a/0xd70
[  348.390862][   T31]  ? wg_destruct+0x25/0x2e0
[  348.401758][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  348.409693][   T31]  ? __pfx_free_percpu+0x10/0x10
[  348.422661][   T31]  ? kobject_put+0x272/0x480
[  348.427339][   T31]  ? __pfx_wg_destruct+0x10/0x10
[  348.432335][   T31]  wg_destruct+0x25/0x2e0
[  348.445078][   T31]  ? __pfx_wg_destruct+0x10/0x10
[  348.450812][   T31]  netdev_run_todo+0xe1a/0x1000
[  348.461275][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  348.469619][   T31]  ? unregister_netdevice_queue+0x26b/0x370
[  348.480691][   T31]  ? batadv_softif_destroy_netlink+0x1e3/0x270
[  348.489673][   T31]  default_device_exit_batch+0xa24/0xaa0
[  348.500515][   T31]  ? __pfx___might_resched+0x10/0x10
[  348.510430][   T31]  ? __pfx_default_device_exit_batch+0x10/0x10
[  348.523482][   T31]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  348.529007][   T31]  ? cfg802154_pernet_exit+0xc3/0xe0
[  348.540645][   T31]  ? __pfx_default_device_exit_batch+0x10/0x10
[  348.548871][   T31]  cleanup_net+0x89d/0xcc0
[  348.557028][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  348.562036][   T31]  ? process_scheduled_works+0x976/0x1850
[  348.572342][   T31]  process_scheduled_works+0xa63/0x1850
[  348.580604][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  348.591526][   T31]  ? assign_work+0x364/0x3d0
[  348.599032][   T31]  worker_thread+0x870/0xd30
[  348.608420][   T31]  ? __kthread_parkme+0x169/0x1d0
[  348.619544][   T31]  ? __pfx_worker_thread+0x10/0x10
[  348.629455][   T31]  kthread+0x2f0/0x390
[  348.636364][   T31]  ? __pfx_worker_thread+0x10/0x10
[  348.641543][   T31]  ? __pfx_kthread+0x10/0x10
[  348.652182][   T31]  ret_from_fork+0x4b/0x80
[  348.659951][   T31]  ? __pfx_kthread+0x10/0x10
[  348.669620][   T31]  ret_from_fork_asm+0x1a/0x30
[  348.688010][   T31]  </TASK>
[  348.691193][   T31] INFO: task kworker/1:0:25 blocked for more than 144 seconds.
[  348.712611][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  348.721486][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  348.737832][   T31] task:kworker/1:0     state:D stack:20752 pid:25    tgid:25    ppid:2      flags:0x00004000
[  348.749879][   T31] Workqueue: events_power_efficient reg_check_chans_work
[  348.763432][   T31] Call Trace:
[  348.766791][   T31]  <TASK>
[  348.772574][   T31]  __schedule+0x1895/0x4b30
[  348.777187][   T31]  ? __pfx___schedule+0x10/0x10
[  348.782094][   T31]  ? __pfx_lock_release+0x10/0x10
[  348.794503][   T31]  ? preempt_schedule_thunk+0x1a/0x30
[  348.799959][   T31]  ? schedule+0x90/0x320
[  348.810824][   T31]  schedule+0x14b/0x320
[  348.817660][   T31]  schedule_preempt_disabled+0x13/0x30
[  348.829758][   T31]  __mutex_lock+0x6a7/0xd70
[  348.848138][   T31]  ? __mutex_lock+0x52a/0xd70
[  348.862604][   T31]  ? reg_check_chans_work+0x99/0xfd0
[  348.867964][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  348.882039][   T31]  ? process_scheduled_works+0x976/0x1850
[  348.888240][   T31]  reg_check_chans_work+0x99/0xfd0
[  348.900862][   T31]  ? __pfx_lock_acquire+0x10/0x10
[  348.906310][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  348.912415][   T31]  ? __pfx_reg_check_chans_work+0x10/0x10
[  348.922541][   T31]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  348.928951][   T31]  ? process_scheduled_works+0x976/0x1850
[  348.945900][   T31]  process_scheduled_works+0xa63/0x1850
[  348.951543][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  348.961523][   T31]  ? assign_work+0x364/0x3d0
[  348.971808][   T31]  worker_thread+0x870/0xd30
[  348.980410][   T31]  ? __kthread_parkme+0x169/0x1d0
[  348.989811][   T31]  ? __pfx_worker_thread+0x10/0x10
[  348.999265][   T31]  kthread+0x2f0/0x390
[  349.007177][   T31]  ? __pfx_worker_thread+0x10/0x10
[  349.012351][   T31]  ? __pfx_kthread+0x10/0x10
[  349.021046][   T31]  ret_from_fork+0x4b/0x80
[  349.030650][   T31]  ? __pfx_kthread+0x10/0x10
[  349.040280][   T31]  ret_from_fork_asm+0x1a/0x30
[  349.050539][   T31]  </TASK>
[  349.057371][   T31] INFO: task kworker/u8:2:29 blocked for more than 144 seconds.
[  349.069860][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  349.080856][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  349.094780][   T31] task:kworker/u8:2    state:D stack:20728 pid:29    tgid:29    ppid:2      flags:0x00004000
[  349.116293][   T31] Workqueue: events_unbound linkwatch_event
[  349.122348][   T31] Call Trace:
[  349.134678][   T31]  <TASK>
[  349.137770][   T31]  __schedule+0x1895/0x4b30
[  349.142344][   T31]  ? __pfx___schedule+0x10/0x10
[  349.154119][   T31]  ? __pfx_lock_release+0x10/0x10
[  349.159222][   T31]  ? __mutex_trylock_common+0x92/0x2e0
[  349.171391][   T31]  ? kthread_data+0x52/0xd0
[  349.177522][   T31]  ? schedule+0x90/0x320
[  349.181827][   T31]  ? wq_worker_sleeping+0x66/0x240
[  349.194522][   T31]  ? schedule+0x90/0x320
[  349.198860][   T31]  schedule+0x14b/0x320
[  349.208424][   T31]  schedule_preempt_disabled+0x13/0x30
[  349.218587][   T31]  __mutex_lock+0x6a7/0xd70
[  349.228037][   T31]  ? __mutex_lock+0x52a/0xd70
[  349.237076][   T31]  ? linkwatch_event+0xe/0x60
[  349.241832][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  349.251808][   T31]  ? process_scheduled_works+0x976/0x1850
[  349.260297][   T31]  linkwatch_event+0xe/0x60
[  349.267684][   T31]  process_scheduled_works+0xa63/0x1850
[  349.280097][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  349.290414][   T31]  ? assign_work+0x364/0x3d0
[  349.299971][   T31]  worker_thread+0x870/0xd30
[  349.307601][   T31]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  349.320992][   T31]  ? __kthread_parkme+0x169/0x1d0
[  349.328893][   T31]  ? __pfx_worker_thread+0x10/0x10
[  349.340286][   T31]  kthread+0x2f0/0x390
[  349.347251][   T31]  ? __pfx_worker_thread+0x10/0x10
[  349.352419][   T31]  ? __pfx_kthread+0x10/0x10
[  349.362103][   T31]  ret_from_fork+0x4b/0x80
[  349.371182][   T31]  ? __pfx_kthread+0x10/0x10
[  349.380954][   T31]  ret_from_fork_asm+0x1a/0x30
[  349.388464][   T31]  </TASK>
[  349.391754][   T31] INFO: task kworker/u8:5:1039 blocked for more than 144 seconds.
[  349.409990][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  349.417653][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  349.441405][   T31] task:kworker/u8:5    state:D stack:20632 pid:1039  tgid:1039  ppid:2      flags:0x00004000
[  349.457417][   T31] Workqueue: ipv6_addrconf addrconf_verify_work
[  349.470836][   T31] Call Trace:
[  349.474999][   T31]  <TASK>
[  349.477987][   T31]  __schedule+0x1895/0x4b30
[  349.490040][   T31]  ? __pfx___schedule+0x10/0x10
[  349.495544][   T31]  ? __pfx_lock_release+0x10/0x10
[  349.500642][   T31]  ? __mutex_trylock_common+0x92/0x2e0
[  349.513914][   T31]  ? kthread_data+0x52/0xd0
[  349.518492][   T31]  ? schedule+0x90/0x320
[  349.529426][   T31]  ? wq_worker_sleeping+0x66/0x240
[  349.539456][   T31]  ? schedule+0x90/0x320
[  349.550471][   T31]  schedule+0x14b/0x320
[  349.556255][   T31]  schedule_preempt_disabled+0x13/0x30
[  349.561783][   T31]  __mutex_lock+0x6a7/0xd70
[  349.572607][   T31]  ? __mutex_lock+0x52a/0xd70
[  349.577348][   T31]  ? addrconf_verify_work+0x19/0x30
[  349.590363][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  349.598035][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  349.612757][   T31]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  349.619161][   T31]  ? process_scheduled_works+0x976/0x1850
[  349.631831][   T31]  addrconf_verify_work+0x19/0x30
[  349.637356][   T31]  process_scheduled_works+0xa63/0x1850
[  349.651626][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  349.658469][   T31]  ? assign_work+0x364/0x3d0
[  349.670535][   T31]  worker_thread+0x870/0xd30
[  349.675511][   T31]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  349.681469][   T31]  ? __kthread_parkme+0x169/0x1d0
[  349.692600][   T31]  ? __pfx_worker_thread+0x10/0x10
[  349.697774][   T31]  kthread+0x2f0/0x390
[  349.701877][   T31]  ? __pfx_worker_thread+0x10/0x10
[  349.716135][   T31]  ? __pfx_kthread+0x10/0x10
[  349.720795][   T31]  ret_from_fork+0x4b/0x80
[  349.732986][   T31]  ? __pfx_kthread+0x10/0x10
[  349.737655][   T31]  ret_from_fork_asm+0x1a/0x30
[  349.750305][   T31]  </TASK>
[  349.756526][   T31] INFO: task dhcpcd:4895 blocked for more than 145 seconds.
[  349.770816][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  349.787839][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  349.807254][   T31] task:dhcpcd          state:D stack:20128 pid:4895  tgid:4895  ppid:4894   flags:0x00000002
[  349.821037][   T31] Call Trace:
[  349.829284][   T31]  <TASK>
[  349.832269][   T31]  __schedule+0x1895/0x4b30
[  349.839361][   T31]  ? __pfx___schedule+0x10/0x10
[  349.850156][   T31]  ? __pfx_lock_release+0x10/0x10
[  349.859652][   T31]  ? __mutex_trylock_common+0x92/0x2e0
[  349.869970][   T31]  ? schedule+0x90/0x320
[  349.877813][   T31]  schedule+0x14b/0x320
[  349.882374][   T31]  schedule_preempt_disabled+0x13/0x30
[  349.893092][   T31]  __mutex_lock+0x6a7/0xd70
[  349.897743][   T31]  ? __mutex_lock+0x52a/0xd70
[  349.902460][   T31]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  349.915058][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  349.920185][   T31]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  349.929021][   T31]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  349.940754][   T31]  ? __lock_acquire+0x1384/0x2050
[  349.950063][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  349.962942][   T31]  netlink_rcv_skb+0x1e3/0x430
[  349.967782][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  349.980026][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  349.986819][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  349.992196][   T31]  netlink_unicast+0x7f6/0x990
[  350.002847][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  350.008191][   T31]  ? __virt_addr_valid+0x183/0x530
[  350.020015][   T31]  ? __check_object_size+0x48e/0x900
[  350.027299][   T31]  netlink_sendmsg+0x8e4/0xcb0
[  350.032187][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.042931][   T31]  ? aa_sock_msg_perm+0x91/0x160
[  350.047955][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.061778][   T31]  __sock_sendmsg+0x221/0x270
[  350.066969][   T31]  ____sys_sendmsg+0x52a/0x7e0
[  350.071801][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  350.084708][   T31]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  350.090812][   T31]  __sys_sendmsg+0x2aa/0x390
[  350.105544][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  350.110740][   T31]  ? netlink_bind+0xaeb/0xc90
[  350.122040][   T31]  ? __pfx___sys_bind+0x10/0x10
[  350.129677][   T31]  ? fd_install+0x35c/0x5d0
[  350.139287][   T31]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  350.148649][   T31]  ? do_syscall_64+0x100/0x230
[  350.160079][   T31]  ? do_syscall_64+0xb6/0x230
[  350.167613][   T31]  do_syscall_64+0xf3/0x230
[  350.172182][   T31]  ? clear_bhb_loop+0x35/0x90
[  350.183844][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.189825][   T31] RIP: 0033:0x7fdcdc09fa4b
[  350.195141][ T6853] Bluetooth: hci8: command 0x0406 tx timeout
[  350.209717][   T31] RSP: 002b:00007ffce9e56358 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  350.219849][   T31] RAX: ffffffffffffffda RBX: 00007fdcdbfc76c0 RCX: 00007fdcdc09fa4b
[  350.237073][   T31] RDX: 0000000000000000 RSI: 00007ffce9e6a508 RDI: 0000000000000019
[  350.247933][   T31] RBP: 0000000000000019 R08: 0000000000000000 R09: 00007ffce9e6a508
[  350.265075][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff
[  350.279787][   T31] R13: 00007ffce9e6a508 R14: 0000000000000044 R15: 0000000000000001
[  350.290759][   T31]  </TASK>
[  350.298524][   T31] INFO: task syz-executor:6531 blocked for more than 145 seconds.
[  350.310056][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  350.323087][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  350.331803][   T31] task:syz-executor    state:D stack:19952 pid:6531  tgid:6531  ppid:1      flags:0x00004004
[  350.350193][   T31] Call Trace:
[  350.357778][   T31]  <TASK>
[  350.360763][   T31]  __schedule+0x1895/0x4b30
[  350.372703][   T31]  ? __pfx___schedule+0x10/0x10
[  350.377850][   T31]  ? __pfx_lock_release+0x10/0x10
[  350.390517][   T31]  ? __mutex_trylock_common+0x92/0x2e0
[  350.396872][   T31]  ? schedule+0x90/0x320
[  350.401173][   T31]  schedule+0x14b/0x320
[  350.412535][   T31]  schedule_preempt_disabled+0x13/0x30
[  350.418072][   T31]  __mutex_lock+0x6a7/0xd70
[  350.431605][   T31]  ? __mutex_lock+0x52a/0xd70
[  350.437022][   T31]  ? ieee80211_register_hw+0x2c4e/0x3e10
[  350.450040][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  350.455543][   T31]  ieee80211_register_hw+0x2c4e/0x3e10
[  350.469644][   T31]  ? ieee80211_register_hw+0x1501/0x3e10
[  350.475863][   T31]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  350.481738][   T31]  ? __asan_memset+0x23/0x50
[  350.493883][   T31]  ? __hrtimer_init+0x170/0x250
[  350.499266][   T31]  mac80211_hwsim_new_radio+0x2a9f/0x4a90
[  350.513148][   T31]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  350.519326][   T31]  hwsim_new_radio_nl+0xece/0x2290
[  350.531546][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[  350.538157][   T31]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  350.550955][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  350.557710][   T31]  genl_rcv_msg+0xb14/0xec0
[  350.570667][   T31]  ? mark_lock+0x9a/0x360
[  350.575431][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  350.580540][   T31]  ? __pfx_lock_acquire+0x10/0x10
[  350.596570][   T31]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  350.602178][   T31]  ? __pfx___might_resched+0x10/0x10
[  350.615684][   T31]  netlink_rcv_skb+0x1e3/0x430
[  350.620517][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  350.629592][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  350.639065][   T31]  ? __netlink_deliver_tap+0x77e/0x7c0
[  350.650900][   T31]  genl_rcv+0x28/0x40
[  350.659030][   T31]  netlink_unicast+0x7f6/0x990
[  350.669428][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  350.680396][   T31]  ? __virt_addr_valid+0x183/0x530
[  350.689256][   T31]  ? __check_object_size+0x48e/0x900
[  350.698460][   T31]  netlink_sendmsg+0x8e4/0xcb0
[  350.707024][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.716685][   T31]  ? aa_sock_msg_perm+0x91/0x160
[  350.721687][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.730955][   T31]  __sock_sendmsg+0x221/0x270
[  350.739635][   T31]  __sys_sendto+0x398/0x4f0
[  350.748175][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  350.761684][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  350.772635][   T31]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  350.779047][   T31]  __x64_sys_sendto+0xde/0x100
[  350.791184][   T31]  do_syscall_64+0xf3/0x230
[  350.796189][   T31]  ? clear_bhb_loop+0x35/0x90
[  350.801421][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.814899][   T31] RIP: 0033:0x7fb5da37fd8c
[  350.819545][   T31] RSP: 002b:00007fb5da65fe80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  350.832772][   T31] RAX: ffffffffffffffda RBX: 00007fb5db064620 RCX: 00007fb5da37fd8c
[  350.851636][   T31] RDX: 0000000000000024 RSI: 00007fb5db064670 RDI: 0000000000000003
[  350.861753][   T31] RBP: 0000000000000000 R08: 00007fb5da65fed4 R09: 000000000000000c
[  350.879349][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  350.888857][   T31] R13: 0000000000000000 R14: 00007fb5db064670 R15: 0000000000000000
[  350.902872][   T31]  </TASK>
[  350.907601][   T31] INFO: task syz.1.375:6594 blocked for more than 146 seconds.
[  350.920925][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  350.937644][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  350.949061][   T31] task:syz.1.375       state:D stack:24144 pid:6594  tgid:6587  ppid:5249   flags:0x00004002
[  350.966609][   T31] Call Trace:
[  350.969964][   T31]  <TASK>
[  350.977358][   T31]  __schedule+0x1895/0x4b30
[  350.982226][   T31]  ? __pfx___schedule+0x10/0x10
[  350.998240][   T31]  ? __pfx_lock_release+0x10/0x10
[  351.008826][   T31]  ? __mutex_trylock_common+0x92/0x2e0
[  351.018568][   T31]  ? schedule+0x90/0x320
[  351.026689][   T31]  schedule+0x14b/0x320
[  351.030905][   T31]  schedule_preempt_disabled+0x13/0x30
[  351.040349][   T31]  __mutex_lock+0x6a7/0xd70
[  351.048720][   T31]  ? __mutex_lock+0x52a/0xd70
[  351.057278][   T31]  ? tun_chr_close+0x3b/0x1b0
[  351.062147][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  351.071410][   T31]  ? __pfx_call_rcu+0x10/0x10
[  351.087170][   T31]  tun_chr_close+0x3b/0x1b0
[  351.091744][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  351.100171][   T31]  __fput+0x23f/0x880
[  351.111022][   T31]  task_work_run+0x24f/0x310
[  351.118869][   T31]  ? kasan_quarantine_put+0xdc/0x230
[  351.129114][   T31]  ? __pfx_task_work_run+0x10/0x10
[  351.137002][   T31]  ? do_exit+0xa2a/0x28e0
[  351.141488][   T31]  ? kmem_cache_free+0x1a2/0x420
[  351.151380][   T31]  ? do_exit+0xa2a/0x28e0
[  351.158914][   T31]  do_exit+0xa2f/0x28e0
[  351.169570][   T31]  ? __pfx_do_exit+0x10/0x10
[  351.178443][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  351.188694][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  351.197377][   T31]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  351.206765][   T31]  ? _raw_spin_lock_irq+0xdf/0x120
[  351.211945][   T31]  do_group_exit+0x207/0x2c0
[  351.221696][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  351.229551][   T31]  ? lockdep_hardirqs_on+0x99/0x150
[  351.241334][   T31]  get_signal+0x176f/0x1810
[  351.246233][   T31]  ? lockdep_hardirqs_on+0x99/0x150
[  351.251495][   T31]  ? do_sys_openat2+0x17a/0x1d0
[  351.265407][   T31]  ? __pfx_get_signal+0x10/0x10
[  351.270322][   T31]  ? do_sys_openat2+0x17a/0x1d0
[  351.281900][   T31]  arch_do_signal_or_restart+0x96/0x860
[  351.290259][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  351.300140][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  351.310027][   T31]  ? syscall_exit_to_user_mode+0xa3/0x370
[  351.319784][   T31]  syscall_exit_to_user_mode+0xc9/0x370
[  351.330161][   T31]  do_syscall_64+0x100/0x230
[  351.338647][   T31]  ? clear_bhb_loop+0x35/0x90
[  351.348925][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.358833][   T31] RIP: 0033:0x7fdfd677def9
[  351.367738][   T31] RSP: 002b:00007fdfd75e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  351.381073][   T31] RAX: 0000000000000004 RBX: 00007fdfd6936130 RCX: 00007fdfd677def9
[  351.396042][   T31] RDX: 0000000000000002 RSI: 00000000200015c0 RDI: ffffffffffffff9c
[  351.407727][   T31] RBP: 00007fdfd67f0b76 R08: 0000000000000000 R09: 0000000000000000
[  351.420135][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  351.432169][   T31] R13: 0000000000000000 R14: 00007fdfd6936130 R15: 00007fdfd6a5fa28
[  351.449212][   T31]  </TASK>
[  351.455349][   T31] INFO: task syz.4.376:6616 blocked for more than 146 seconds.
[  351.469744][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  351.477940][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  351.492924][   T31] task:syz.4.376       state:D stack:25712 pid:6616  tgid:6615  ppid:5248   flags:0x00004006
[  351.513892][   T31] Call Trace:
[  351.517220][   T31]  <TASK>
[  351.520183][   T31]  __schedule+0x1895/0x4b30
[  351.532357][   T31]  ? __pfx___schedule+0x10/0x10
[  351.537583][   T31]  ? __pfx_lock_release+0x10/0x10
[  351.549830][   T31]  ? __mutex_trylock_common+0x92/0x2e0
[  351.556305][   T31]  ? schedule+0x90/0x320
[  351.560606][   T31]  schedule+0x14b/0x320
[  351.572170][   T31]  schedule_preempt_disabled+0x13/0x30
[  351.577952][   T31]  __mutex_lock+0x6a7/0xd70
[  351.585438][   T31]  ? __mutex_lock+0x52a/0xd70
[  351.590175][   T31]  ? tun_chr_close+0x3b/0x1b0
[  351.604073][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  351.609164][   T31]  ? __pfx_call_rcu+0x10/0x10
[  351.619875][   T31]  tun_chr_close+0x3b/0x1b0
[  351.625947][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[  351.631173][   T31]  __fput+0x23f/0x880
[  351.641347][   T31]  task_work_run+0x24f/0x310
[  351.647875][   T31]  ? kasan_quarantine_put+0xdc/0x230
[  351.659250][   T31]  ? __pfx_task_work_run+0x10/0x10
[  351.666336][   T31]  ? do_exit+0xa2a/0x28e0
[  351.670710][   T31]  ? kmem_cache_free+0x1a2/0x420
[  351.682836][   T31]  ? do_exit+0xa2a/0x28e0
[  351.691077][   T31]  do_exit+0xa2f/0x28e0
[  351.699484][   T31]  ? __pfx_do_exit+0x10/0x10
[  351.708108][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  351.717416][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  351.727384][   T31]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  351.738143][   T31]  ? _raw_spin_lock_irq+0xdf/0x120
[  351.747323][   T31]  do_group_exit+0x207/0x2c0
[  351.751978][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  351.762665][   T31]  ? lockdep_hardirqs_on+0x99/0x150
[  351.767951][   T31]  get_signal+0x176f/0x1810
[  351.779487][   T31]  ? lockdep_hardirqs_on+0x99/0x150
[  351.785313][   T31]  ? do_sys_openat2+0x17a/0x1d0
[  351.791818][   T31]  ? __pfx_get_signal+0x10/0x10
[  351.808703][   T31]  ? do_sys_openat2+0x17a/0x1d0
[  351.814103][   T31]  arch_do_signal_or_restart+0x96/0x860
[  351.819974][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  351.832547][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  351.838628][   T31]  ? syscall_exit_to_user_mode+0xa3/0x370
[  351.851863][   T31]  syscall_exit_to_user_mode+0xc9/0x370
[  351.857766][   T31]  do_syscall_64+0x100/0x230
[  351.862411][   T31]  ? clear_bhb_loop+0x35/0x90
[  351.874545][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.880501][   T31] RIP: 0033:0x7f97bdb7c890
[  351.898553][   T31] RSP: 002b:00007f97be9f2ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  351.909068][   T31] RAX: 0000000000000003 RBX: 0000000000000002 RCX: 00007f97bdb7c890
[  351.922869][   T31] RDX: 0000000000000002 RSI: 00007f97bdbf090c RDI: 00000000ffffff9c
[  351.930893][   T31] RBP: 00007f97bdbf090c R08: 0000000000000000 R09: 0000000000000000
[  351.947739][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  351.959812][   T31] R13: 0000000000000036 R14: 0000000020000040 R15: 00007f97bde5fa28
[  351.971779][   T31]  </TASK>
[  351.978737][   T31] INFO: task syz-executor:6769 blocked for more than 147 seconds.
[  351.990438][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  352.007241][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  352.020585][   T31] task:syz-executor    state:D stack:24688 pid:6769  tgid:6769  ppid:1      flags:0x00004004
[  352.036127][   T31] Call Trace:
[  352.039880][   T31]  <TASK>
[  352.049074][   T31]  __schedule+0x1895/0x4b30
[  352.058595][   T31]  ? __pfx___schedule+0x10/0x10
[  352.066179][   T31]  ? __pfx_lock_release+0x10/0x10
[  352.071272][   T31]  ? __mutex_trylock_common+0x92/0x2e0
[  352.081737][   T31]  ? schedule+0x90/0x320
[  352.088755][   T31]  schedule+0x14b/0x320
[  352.101084][   T31]  schedule_preempt_disabled+0x13/0x30
[  352.110025][   T31]  __mutex_lock+0x6a7/0xd70
[  352.119660][   T31]  ? __mutex_lock+0x52a/0xd70
[  352.127258][   T31]  ? register_nexthop_notifier+0x84/0x290
[  352.139798][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  352.148040][   T31]  ? __asan_memset+0x23/0x50
[  352.157956][   T31]  register_nexthop_notifier+0x84/0x290
[  352.168168][   T31]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  352.178783][   T31]  ? __pfx_debug_check_no_locks_freed+0x10/0x10
[  352.187877][   T31]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  352.200752][   T31]  ? __asan_memset+0x23/0x50
[  352.208601][   T31]  ops_init+0x31e/0x590
[  352.217085][   T31]  ? lockdep_init_map_type+0xa1/0x910
[  352.226366][   T31]  setup_net+0x287/0x9e0
[  352.230662][   T31]  ? __pfx_down_read_killable+0x10/0x10
[  352.240212][   T31]  ? __pfx_setup_net+0x10/0x10
[  352.248778][   T31]  copy_net_ns+0x33f/0x570
[  352.259086][   T31]  create_new_namespaces+0x425/0x7b0
[  352.268572][   T31]  unshare_nsproxy_namespaces+0x124/0x180
[  352.278221][   T31]  ksys_unshare+0x619/0xc10
[  352.286818][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  352.291892][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  352.302299][   T31]  ? do_syscall_64+0x100/0x230
[  352.311998][   T31]  __x64_sys_unshare+0x38/0x40
[  352.319466][   T31]  do_syscall_64+0xf3/0x230
[  352.329459][   T31]  ? clear_bhb_loop+0x35/0x90
[  352.338686][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.350131][   T31] RIP: 0033:0x7f4ce0b7f6f7
[  352.357329][   T31] RSP: 002b:00007f4ce0e5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  352.370936][   T31] RAX: ffffffffffffffda RBX: 00007f4ce0bf22ec RCX: 00007f4ce0b7f6f7
[  352.381842][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  352.392663][   T31] RBP: 0000000000000000 R08: 00007f4ce1867d60 R09: 0000000000000000
[  352.400697][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  352.419958][   T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  352.430743][   T31]  </TASK>
[  352.439905][   T31] INFO: task syz-executor:6770 blocked for more than 147 seconds.
[  352.451575][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  352.466184][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  352.478618][   T31] task:syz-executor    state:D stack:24816 pid:6770  tgid:6770  ppid:1      flags:0x00004006
[  352.496215][   T31] Call Trace:
[  352.499561][   T31]  <TASK>
[  352.507789][   T31]  __schedule+0x1895/0x4b30
[  352.512390][   T31]  ? __pfx___schedule+0x10/0x10
[  352.523035][   T31]  ? __pfx_lock_release+0x10/0x10
[  352.528146][   T31]  ? __mutex_trylock_common+0x92/0x2e0
[  352.541645][   T31]  ? schedule+0x90/0x320
[  352.547244][   T31]  schedule+0x14b/0x320
[  352.551451][   T31]  schedule_preempt_disabled+0x13/0x30
[  352.563015][   T31]  __mutex_lock+0x6a7/0xd70
[  352.567764][   T31]  ? __mutex_lock+0x52a/0xd70
[  352.580172][   T31]  ? register_nexthop_notifier+0x84/0x290
[  352.586368][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  352.591454][   T31]  ? __asan_memset+0x23/0x50
[  352.602964][   T31]  register_nexthop_notifier+0x84/0x290
[  352.611754][   T31]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  352.623076][   T31]  ? __pfx_debug_check_no_locks_freed+0x10/0x10
[  352.629403][   T31]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  352.641854][   T31]  ? __asan_memset+0x23/0x50
[  352.648655][   T31]  ops_init+0x31e/0x590
[  352.660780][   T31]  ? lockdep_init_map_type+0xa1/0x910
[  352.667960][   T31]  setup_net+0x287/0x9e0
[  352.672261][   T31]  ? __pfx_down_read_killable+0x10/0x10
[  352.685614][   T31]  ? __pfx_setup_net+0x10/0x10
[  352.690447][   T31]  copy_net_ns+0x33f/0x570
[  352.698915][   T31]  create_new_namespaces+0x425/0x7b0
[  352.708110][   T31]  unshare_nsproxy_namespaces+0x124/0x180
[  352.719211][   T31]  ksys_unshare+0x619/0xc10
[  352.727853][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  352.736827][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  352.748026][   T31]  ? do_syscall_64+0x100/0x230
[  352.756977][   T31]  __x64_sys_unshare+0x38/0x40
[  352.761809][   T31]  do_syscall_64+0xf3/0x230
[  352.771048][   T31]  ? clear_bhb_loop+0x35/0x90
[  352.779667][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.789580][   T31] RIP: 0033:0x7f51d017f6f7
[  352.798283][   T31] RSP: 002b:00007f51d045ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  352.810682][   T31] RAX: ffffffffffffffda RBX: 00007f51d01f22ec RCX: 00007f51d017f6f7
[  352.827491][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  352.842170][   T31] RBP: 0000000000000000 R08: 00007f51d0e67d60 R09: 0000000000000000
[  352.858214][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  352.867740][   T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  352.882360][   T31]  </TASK>
[  352.886662][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  352.901866][   T31] INFO: task syz-executor:6771 blocked for more than 148 seconds.
[  352.916673][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  352.932873][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  352.941591][   T31] task:syz-executor    state:D stack:25264 pid:6771  tgid:6771  ppid:1      flags:0x00004004
[  352.959904][   T31] Call Trace:
[  352.963656][   T31]  <TASK>
[  352.966635][   T31]  __schedule+0x1895/0x4b30
[  352.971210][   T31]  ? __pfx___schedule+0x10/0x10
[  352.983743][   T31]  ? __pfx_lock_release+0x10/0x10
[  352.988933][   T31]  ? __mutex_trylock_common+0x92/0x2e0
[  353.003851][   T31]  ? schedule+0x90/0x320
[  353.008150][   T31]  schedule+0x14b/0x320
[  353.012358][   T31]  schedule_preempt_disabled+0x13/0x30
[  353.027526][   T31]  __mutex_lock+0x6a7/0xd70
[  353.032106][   T31]  ? __mutex_lock+0x52a/0xd70
[  353.038569][   T31]  ? register_nexthop_notifier+0x84/0x290
[  353.050477][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  353.057057][   T31]  ? __asan_memset+0x23/0x50
[  353.062298][   T31]  register_nexthop_notifier+0x84/0x290
[  353.074138][   T31]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  353.080011][   T31]  ? __pfx_debug_check_no_locks_freed+0x10/0x10
[  353.097084][   T31]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  353.106962][   T31]  ? __asan_memset+0x23/0x50
[  353.111717][   T31]  ops_init+0x31e/0x590
[  353.125208][   T31]  ? lockdep_init_map_type+0xa1/0x910
[  353.130686][   T31]  setup_net+0x287/0x9e0
[  353.138974][   T31]  ? __pfx_down_read_killable+0x10/0x10
[  353.149985][   T31]  ? __pfx_setup_net+0x10/0x10
[  353.160523][   T31]  copy_net_ns+0x33f/0x570
[  353.169101][   T31]  create_new_namespaces+0x425/0x7b0
[  353.178388][   T31]  unshare_nsproxy_namespaces+0x124/0x180
[  353.188043][   T31]  ksys_unshare+0x619/0xc10
[  353.196519][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  353.201696][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  353.211600][   T31]  ? do_syscall_64+0x100/0x230
[  353.220838][   T31]  __x64_sys_unshare+0x38/0x40
[  353.231402][   T31]  do_syscall_64+0xf3/0x230
[  353.240889][   T31]  ? clear_bhb_loop+0x35/0x90
[  353.249502][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.259542][   T31] RIP: 0033:0x7f186757f6f7
[  353.267854][   T31] RSP: 002b:00007f186785ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  353.280114][   T31] RAX: ffffffffffffffda RBX: 00007f18675f22ec RCX: 00007f186757f6f7
[  353.292126][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  353.304061][   T31] RBP: 0000000000000000 R08: 00007f1868267d60 R09: 0000000000000000
[  353.312084][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  353.329210][   T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  353.340930][   T31]  </TASK>
[  353.349292][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  353.361275][   T31] INFO: task syz-executor:6777 blocked for more than 148 seconds.
[  353.383807][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  353.391210][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  353.407565][   T31] task:syz-executor    state:D stack:25168 pid:6777  tgid:6777  ppid:1      flags:0x00004004
[  353.421009][   T31] Call Trace:
[  353.429608][   T31]  <TASK>
[  353.437626][   T31]  __schedule+0x1895/0x4b30
[  353.442214][   T31]  ? __pfx___schedule+0x10/0x10
[  353.449952][   T31]  ? __pfx_lock_release+0x10/0x10
[  353.460280][   T31]  ? __mutex_trylock_common+0x92/0x2e0
[  353.468705][   T31]  ? schedule+0x90/0x320
[  353.478574][   T31]  schedule+0x14b/0x320
[  353.485412][   T31]  schedule_preempt_disabled+0x13/0x30
[  353.490924][   T31]  __mutex_lock+0x6a7/0xd70
[  353.502285][   T31]  ? __mutex_lock+0x52a/0xd70
[  353.509715][   T31]  ? register_nexthop_notifier+0x84/0x290
[  353.520072][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  353.527830][   T31]  ? __asan_memset+0x23/0x50
[  353.538945][   T31]  register_nexthop_notifier+0x84/0x290
[  353.547788][   T31]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  353.559067][   T31]  ? __pfx_debug_check_no_locks_freed+0x10/0x10
[  353.568025][   T31]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  353.578660][   T31]  ? __asan_memset+0x23/0x50
[  353.588320][   T31]  ops_init+0x31e/0x590
[  353.594136][   T31]  ? lockdep_init_map_type+0xa1/0x910
[  353.599565][   T31]  setup_net+0x287/0x9e0
[  353.609976][   T31]  ? __pfx_down_read_killable+0x10/0x10
[  353.617138][   T31]  ? __pfx_setup_net+0x10/0x10
[  353.621987][   T31]  copy_net_ns+0x33f/0x570
[  353.634223][   T31]  create_new_namespaces+0x425/0x7b0
[  353.639596][   T31]  unshare_nsproxy_namespaces+0x124/0x180
[  353.653687][   T31]  ksys_unshare+0x619/0xc10
[  353.658279][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  353.670979][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  353.677509][   T31]  ? do_syscall_64+0x100/0x230
[  353.682334][   T31]  __x64_sys_unshare+0x38/0x40
[  353.692560][   T31]  do_syscall_64+0xf3/0x230
[  353.697141][   T31]  ? clear_bhb_loop+0x35/0x90
[  353.701869][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.716041][   T31] RIP: 0033:0x7f756a77f6f7
[  353.720511][   T31] RSP: 002b:00007f756aa5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  353.734754][   T31] RAX: ffffffffffffffda RBX: 00007f756a7f22ec RCX: 00007f756a77f6f7
[  353.750517][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  353.760122][   T31] RBP: 0000000000000000 R08: 00007f756b467d60 R09: 0000000000000000
[  353.775037][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  353.787990][   T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  353.798637][   T31]  </TASK>
[  353.801709][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  353.817774][   T31] INFO: task syz-executor:6781 blocked for more than 149 seconds.
[  353.828360][   T31]       Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  353.842384][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  353.853847][   T31] task:syz-executor    state:D stack:25504 pid:6781  tgid:6781  ppid:1      flags:0x00000004
[  353.870813][   T31] Call Trace:
[  353.882720][   T31]  <TASK>
[  353.885831][   T31]  __schedule+0x1895/0x4b30
[  353.890508][   T31]  ? __pfx___schedule+0x10/0x10
[  353.904767][   T31]  ? __pfx_lock_release+0x10/0x10
[  353.909874][   T31]  ? __mutex_trylock_common+0x92/0x2e0
[  353.923876][   T31]  ? schedule+0x90/0x320
[  353.928194][   T31]  schedule+0x14b/0x320
[  353.932409][   T31]  schedule_preempt_disabled+0x13/0x30
[  353.947953][   T31]  __mutex_lock+0x6a7/0xd70
[  353.960158][   T31]  ? __mutex_lock+0x52a/0xd70
[  353.965440][   T31]  ? register_nexthop_notifier+0x84/0x290
[  353.971295][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  353.985370][   T31]  ? __asan_memset+0x23/0x50
[  353.990355][   T31]  register_nexthop_notifier+0x84/0x290
[  354.003057][   T31]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  354.008936][   T31]  ? __pfx_debug_check_no_locks_freed+0x10/0x10
[  354.022881][   T31]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  354.029285][   T31]  ? __asan_memset+0x23/0x50
[  354.041121][   T31]  ops_init+0x31e/0x590
[  354.047232][   T31]  ? lockdep_init_map_type+0xa1/0x910
[  354.060723][   T31]  setup_net+0x287/0x9e0
[  354.065524][   T31]  ? __pfx_down_read_killable+0x10/0x10
[  354.071133][   T31]  ? __pfx_setup_net+0x10/0x10
[  354.082546][   T31]  copy_net_ns+0x33f/0x570
[  354.087033][   T31]  create_new_namespaces+0x425/0x7b0
[  354.093541][   T31]  unshare_nsproxy_namespaces+0x124/0x180
[  354.099322][   T31]  ksys_unshare+0x619/0xc10
[  354.111261][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  354.119998][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  354.132531][   T31]  ? do_syscall_64+0x100/0x230
[  354.137368][   T31]  __x64_sys_unshare+0x38/0x40
[  354.142182][   T31]  do_syscall_64+0xf3/0x230
[  354.156459][   T31]  ? clear_bhb_loop+0x35/0x90
[  354.161220][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.173592][   T31] RIP: 0033:0x7f4010f7f6f7
[  354.178149][   T31] RSP: 002b:00007f401125ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  354.194254][   T31] RAX: ffffffffffffffda RBX: 00007f4010ff22ec RCX: 00007f4010f7f6f7
[  354.202284][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  354.217048][   T31] RBP: 0000000000000000 R08: 00007f4011c67d60 R09: 0000000000000000
[  354.228496][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  354.241326][   T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  354.253625][   T31]  </TASK>
[  354.256687][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  354.272182][   T31] 
[  354.272182][   T31] Showing all locks held in the system:
[  354.282673][   T31] 5 locks held by kworker/0:0/8:
[  354.287654][   T31] 4 locks held by kworker/u8:0/11:
[  354.301794][   T31]  #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  354.320156][   T31]  #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  354.331102][   T31]  #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  354.348820][   T31]  #3: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0
[  354.361413][   T31] 3 locks held by kworker/1:0/25:
[  354.372864][   T31]  #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  354.393784][   T31]  #1: ffffc900001f7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  354.412206][   T31]  #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[  354.427305][   T31] 3 locks held by kworker/u8:2/29:
[  354.438800][   T31]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  354.455961][   T31]  #1: ffffc90000a57d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  354.476685][   T31]  #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  354.489717][   T31] 1 lock held by khungtaskd/31:
[  354.498858][   T31]  #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  354.512817][   T31] 5 locks held by kworker/u9:0/54:
[  354.518009][   T31]  #0: ffff888028cd6948 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  354.537013][   T31]  #1: ffffc90000bf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  354.560818][   T31]  #2: ffff88807f7c8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  354.571211][   T31]  #3: ffff88807f7c8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  354.588858][   T31]  #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  354.600541][   T31] 3 locks held by kworker/u8:5/1039:
[  354.612287][   T31]  #0: ffff88814bbcf148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  354.632537][   T31]  #1: ffffc90003e57d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  354.653680][   T31]  #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[  354.669983][   T31] 4 locks held by kworker/u9:1/4620:
[  354.678303][   T31]  #0: ffff888084baf148 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  354.697482][   T31]  #1: ffffc9000d74fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  354.718615][   T31]  #2: ffff888082f6c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  354.731351][   T31]  #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  354.746874][   T31] 1 lock held by dhcpcd/4895:
[  354.751595][   T31]  #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  354.770876][   T31] 2 locks held by getty/4979:
[  354.775958][   T31]  #0: ffff88814c0790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  354.794303][   T31]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  354.811118][   T31] 6 locks held by kworker/u9:2/5232:
[  354.818376][   T31]  #0: ffff888026b4e948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  354.835442][   T31]  #1: ffffc90003c77d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  354.851802][   T31]  #2: ffff88804cb1cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  354.870638][   T31]  #3: ffff88804cb1c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  354.881580][   T31]  #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  354.898801][   T31]  #5: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  354.910620][   T31] 5 locks held by kworker/u9:3/5237:
[  354.923429][   T31]  #0: ffff888063745948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  354.941319][   T31]  #1: ffffc90003d67d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  354.962229][   T31]  #2: ffff888061380d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  354.974162][   T31]  #3: ffff888061380078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  354.991945][   T31]  #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  355.009598][   T31] 4 locks held by kworker/u9:4/5240:
[  355.018935][   T31]  #0: ffff88803cea0948 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  355.038187][   T31]  #1: ffffc90003da7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  355.058412][   T31]  #2: ffff888080624078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  355.070528][   T31]  #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  355.088995][   T31] 4 locks held by kworker/u9:5/5241:
[  355.094672][   T31]  #0: ffff88803cf87948 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  355.112831][   T31]  #1: ffffc900020dfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  355.133391][   T31]  #2: ffff88803df34078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  355.151185][   T31]  #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  355.165688][   T31] 4 locks held by kworker/u9:6/5242:
[  355.180065][   T31]  #0: ffff888046386948 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  355.200982][   T31]  #1: ffffc900020cfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  355.220829][   T31]  #2: ffff888026bec078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  355.231504][   T31]  #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  355.251941][   T31] 5 locks held by kworker/u9:7/5243:
[  355.258071][   T31]  #0: ffff88804e4d2948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  355.278838][   T31]  #1: ffffc90003db7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  355.300766][   T31]  #2: ffff888061338d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  355.311255][   T31]  #3: ffff888061338078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  355.329203][   T31]  #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  355.340410][   T31] 5 locks held by kworker/u9:8/5244:
[  355.355938][   T31]  #0: ffff888061ccb948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  355.372703][   T31]  #1: ffffc90003dd7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  355.394094][   T31]  #2: ffff88804affcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  355.409202][   T31]  #3: ffff88804affc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  355.422286][   T31]  #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  355.436524][   T31] 3 locks held by kworker/1:8/5295:
[  355.447202][   T31]  #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  355.470751][   T31]  #1: ffffc90004277d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  355.485746][   T31]  #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  355.504425][   T31] 2 locks held by syz.2.327/6404:
[  355.509502][   T31] 3 locks held by syz-executor/6531:
[  355.520501][   T31]  #0: ffffffff8fd31a30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[  355.538184][   T31]  #1: ffffffff8fd318e8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0
[  355.550058][   T31]  #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_register_hw+0x2c4e/0x3e10
[  355.567609][   T31] 1 lock held by syz.3.373/6578:
[  355.574231][   T31]  #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  355.590943][   T31] 1 lock held by syz.1.375/6594:
[  355.598038][   T31]  #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  355.612627][   T31] 1 lock held by syz.4.376/6616:
[  355.617636][   T31]  #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  355.636119][   T31] 2 locks held by syz-executor/6769:
[  355.641499][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  355.656709][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  355.669641][   T31] 2 locks held by syz-executor/6770:
[  355.680074][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  355.698520][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  355.710880][   T31] 2 locks held by syz-executor/6771:
[  355.723812][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  355.740023][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  355.751825][   T31] 2 locks held by syz-executor/6777:
[  355.763402][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  355.778985][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  355.793789][   T31] 2 locks held by syz-executor/6781:
[  355.799139][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  355.815831][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  355.830716][   T31] 2 locks held by syz-executor/6788:
[  355.839286][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  355.854130][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  355.869509][   T31] 2 locks held by syz-executor/6791:
[  355.879377][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  355.898156][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  355.909837][   T31] 2 locks held by syz-executor/6796:
[  355.921251][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  355.933344][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  355.949593][   T31] 2 locks held by syz-executor/6800:
[  355.960361][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  355.977401][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  355.991912][   T31] 2 locks held by syz-executor/6807:
[  356.002561][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  356.012086][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  356.029559][   T31] 2 locks held by syz-executor/6813:
[  356.039104][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  356.056644][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  356.069765][   T31] 2 locks held by syz-executor/6816:
[  356.081497][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  356.095365][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  356.110768][   T31] 2 locks held by syz-executor/6819:
[  356.118943][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  356.132522][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  356.149047][   T31] 2 locks held by syz-executor/6826:
[  356.155361][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  356.172298][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  356.191589][   T31] 5 locks held by kworker/u9:9/6827:
[  356.202533][   T31]  #0: ffff88807fa6a148 ((wq_completion)hci2#3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  356.221322][   T31]  #1: ffffc90003217d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  356.239476][   T31]  #2: ffff88806d088d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  356.252220][   T31]  #3: ffff88806d088078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  356.266011][   T31]  #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  356.280655][   T31] 5 locks held by kworker/u9:10/6828:
[  356.291962][   T31]  #0: ffff88804d55d948 ((wq_completion)hci1#3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  356.312199][   T31]  #1: ffffc90003207d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  356.332302][   T31]  #2: ffff88802cf30d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  356.343535][   T31]  #3: ffff88802cf30078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  356.362852][   T31]  #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  356.383403][   T31] 5 locks held by kworker/u9:11/6829:
[  356.388822][   T31]  #0: ffff888048b7d948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  356.410231][   T31]  #1: ffffc9000323fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  356.430217][   T31]  #2: ffff888061384d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  356.441003][   T31]  #3: ffff888061384078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  356.458531][   T31]  #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  356.469988][   T31] 4 locks held by kworker/u9:12/6830:
[  356.481305][   T31]  #0: ffff88808b28f148 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  356.502632][   T31]  #1: ffffc90003c17d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  356.522562][   T31]  #2: ffff888084c7c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  356.540803][   T31]  #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  356.551965][   T31] 2 locks held by syz-executor/6835:
[  356.564632][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  356.579139][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  356.593569][   T31] 4 locks held by kworker/u9:13/6838:
[  356.598999][   T31]  #0: ffff88808ccda148 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  356.618590][   T31]  #1: ffffc9000308fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  356.632253][   T31]  #2: ffff88808b67c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  356.648526][   T31]  #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  356.660620][   T31] 2 locks held by syz-executor/6840:
[  356.672162][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  356.683700][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  356.701877][   T31] 4 locks held by kworker/u9:14/6843:
[  356.710602][   T31]  #0: ffff888045800948 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  356.728456][   T31]  #1: ffffc900022efd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  356.742725][   T31]  #2: ffff88808c4e4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  356.761077][   T31]  #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  356.771999][   T31] 2 locks held by syz-executor/6845:
[  356.784700][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  356.800173][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  356.819197][   T31] 5 locks held by kworker/u9:15/6846:
[  356.825034][   T31]  #0: ffff88806e32a148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  356.843231][   T31]  #1: ffffc900020afd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  356.864049][   T31]  #2: ffff888051844d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  356.878928][   T31]  #3: ffff888051844078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  356.891369][   T31]  #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  356.907726][   T31] 4 locks held by kworker/u9:17/6848:
[  356.917990][   T31]  #0: ffff88804bbd4948 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  356.934444][   T31]  #1: ffffc90002d4fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  356.952632][   T31]  #2: ffff88803516c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0
[  356.969673][   T31]  #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0
[  356.980675][   T31] 2 locks held by syz-executor/6852:
[  356.994578][   T31]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  357.013519][   T31]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  357.033117][   T31] 
[  357.035491][   T31] =============================================
[  357.035491][   T31] 
[  357.052239][   T31] NMI backtrace for cpu 1
[  357.056620][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  357.066811][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  357.076904][   T31] Call Trace:
[  357.080208][   T31]  <TASK>
[  357.083167][   T31]  dump_stack_lvl+0x241/0x360
[  357.087892][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.093131][   T31]  ? __pfx__printk+0x10/0x10
[  357.097767][   T31]  nmi_cpu_backtrace+0x49c/0x4d0
[  357.102755][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  357.108258][   T31]  ? _printk+0xd5/0x120
[  357.112450][   T31]  ? __pfx__printk+0x10/0x10
[  357.117094][   T31]  ? __wake_up_klogd+0xcc/0x110
[  357.121988][   T31]  ? __pfx__printk+0x10/0x10
[  357.126621][   T31]  ? __rcu_read_unlock+0xa1/0x110
[  357.131683][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  357.137700][   T31]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  357.143741][   T31]  watchdog+0xff4/0x1040
[  357.148031][   T31]  ? watchdog+0x1ea/0x1040
[  357.152491][   T31]  ? __pfx_watchdog+0x10/0x10
[  357.157203][   T31]  kthread+0x2f0/0x390
[  357.161295][   T31]  ? __pfx_watchdog+0x10/0x10
[  357.166015][   T31]  ? __pfx_kthread+0x10/0x10
[  357.170729][   T31]  ret_from_fork+0x4b/0x80
[  357.175189][   T31]  ? __pfx_kthread+0x10/0x10
[  357.179947][   T31]  ret_from_fork_asm+0x1a/0x30
[  357.184867][   T31]  </TASK>
[  357.188837][   T31] Sending NMI from CPU 1 to CPUs 0:
[  357.194754][    C0] NMI backtrace for cpu 0
[  357.194768][    C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  357.194790][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  357.194802][    C0] RIP: 0010:deref_stack_reg+0xa/0x210
[  357.194833][    C0] Code: fe ff ff e8 48 e7 80 0a 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 20 48 89 54 24 18 49 89 f0 49 89 fe 48 ba 00 00 00 00 00
[  357.194850][    C0] RSP: 0018:ffffc90000156dd8 EFLAGS: 00000287
[  357.194867][    C0] RAX: fffffffffffffff0 RBX: ffffffff91231b82 RCX: 0000000000000000
[  357.194881][    C0] RDX: ffffc90000156f20 RSI: ffffc900001579f0 RDI: ffffc90000156ee0
[  357.194895][    C0] RBP: dffffc0000000000 R08: ffffc90000156f3f R09: 0000000000000000
[  357.194908][    C0] R10: ffffc90000156f30 R11: fffff5200002ade8 R12: ffffc90000158000
[  357.194922][    C0] R13: ffffc90000156ee0 R14: ffffffff89926ccb R15: ffffc90000156f30
[  357.194937][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  357.194953][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  357.194966][    C0] CR2: 00007fdfd6761060 CR3: 000000000e734000 CR4: 00000000003506f0
[  357.194982][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  357.194994][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  357.195006][    C0] Call Trace:
[  357.195013][    C0]  <NMI>
[  357.195020][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  357.195049][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  357.195078][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  357.195104][    C0]  ? nmi_handle+0x2a/0x5a0
[  357.195130][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  357.195154][    C0]  ? nmi_handle+0x14f/0x5a0
[  357.195171][    C0]  ? nmi_handle+0x2a/0x5a0
[  357.195189][    C0]  ? deref_stack_reg+0xa/0x210
[  357.195216][    C0]  ? default_do_nmi+0x63/0x160
[  357.195234][    C0]  ? exc_nmi+0x123/0x1f0
[  357.195250][    C0]  ? end_repeat_nmi+0xf/0x53
[  357.195273][    C0]  ? net_rx_action+0x89b/0x1240
[  357.195296][    C0]  ? deref_stack_reg+0xa/0x210
[  357.195323][    C0]  ? deref_stack_reg+0xa/0x210
[  357.195351][    C0]  ? deref_stack_reg+0xa/0x210
[  357.195377][    C0]  </NMI>
[  357.195383][    C0]  <TASK>
[  357.195390][    C0]  ? net_rx_action+0x89b/0x1240
[  357.195409][    C0]  unwind_next_frame+0x1799/0x22d0
[  357.195440][    C0]  ? __napi_poll+0xcb/0x490
[  357.195458][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  357.195480][    C0]  arch_stack_walk+0x11c/0x150
[  357.195501][    C0]  ? net_rx_action+0x89b/0x1240
[  357.195523][    C0]  stack_trace_save+0x118/0x1d0
[  357.195544][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  357.195567][    C0]  ? __lock_acquire+0x1384/0x2050
[  357.195596][    C0]  kasan_save_stack+0x3f/0x60
[  357.195612][    C0]  ? kasan_save_stack+0x3f/0x60
[  357.195628][    C0]  ? __kasan_record_aux_stack+0xac/0xc0
[  357.195651][    C0]  ? kmem_cache_free+0x2e9/0x420
[  357.195674][    C0]  ? nf_conntrack_free+0x2fd/0x390
[  357.195694][    C0]  ? nf_conntrack_in+0xb51/0x1890
[  357.195715][    C0]  ? nf_hook_slow+0xc3/0x220
[  357.195732][    C0]  ? NF_HOOK+0x29e/0x450
[  357.195766][    C0]  ? __netif_receive_skb+0x2bf/0x650
[  357.195782][    C0]  ? process_backlog+0x662/0x15b0
[  357.195800][    C0]  ? __napi_poll+0xcb/0x490
[  357.195846][    C0]  ? __phys_addr+0xba/0x170
[  357.195863][    C0]  __kasan_record_aux_stack+0xac/0xc0
[  357.195888][    C0]  kmem_cache_free+0x2e9/0x420
[  357.195909][    C0]  ? __pfx___nf_conntrack_find_get+0x10/0x10
[  357.195930][    C0]  ? nf_conntrack_free+0x2fd/0x390
[  357.195951][    C0]  nf_conntrack_free+0x2fd/0x390
[  357.195982][    C0]  nf_conntrack_in+0xb51/0x1890
[  357.196012][    C0]  ? __pfx_nf_conntrack_in+0x10/0x10
[  357.196037][    C0]  ? ipt_do_table+0x312/0x1860
[  357.196058][    C0]  ? __pfx_ipt_do_table+0x10/0x10
[  357.196079][    C0]  ? ipv4_conntrack_defrag+0x2a2/0x5a0
[  357.196094][    C0]  ? ip_sabotage_in+0x55/0x290
[  357.196119][    C0]  ? __pfx_ipv4_conntrack_in+0x10/0x10
[  357.196136][    C0]  nf_hook_slow+0xc3/0x220
[  357.196153][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  357.196176][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  357.196199][    C0]  NF_HOOK+0x29e/0x450
[  357.196221][    C0]  ? __lock_acquire+0x1384/0x2050
[  357.196245][    C0]  ? NF_HOOK+0x9a/0x450
[  357.196268][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  357.196290][    C0]  ? ip_rcv_core+0x801/0xd10
[  357.196313][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  357.196340][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  357.196364][    C0]  __netif_receive_skb+0x2bf/0x650
[  357.196381][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  357.196404][    C0]  ? __pfx___netif_receive_skb+0x10/0x10
[  357.196419][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  357.196443][    C0]  ? __pfx_lock_release+0x10/0x10
[  357.196466][    C0]  ? _raw_spin_lock_irq+0xdf/0x120
[  357.196490][    C0]  process_backlog+0x662/0x15b0
[  357.196508][    C0]  ? process_backlog+0x33b/0x15b0
[  357.196529][    C0]  ? __pfx_process_backlog+0x10/0x10
[  357.196545][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  357.196570][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  357.196595][    C0]  __napi_poll+0xcb/0x490
[  357.196612][    C0]  net_rx_action+0x89b/0x1240
[  357.196637][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  357.196654][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  357.196691][    C0]  handle_softirqs+0x2c5/0x980
[  357.196715][    C0]  ? run_ksoftirqd+0xca/0x130
[  357.196739][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  357.196782][    C0]  ? preempt_schedule+0xe1/0xf0
[  357.196804][    C0]  run_ksoftirqd+0xca/0x130
[  357.196826][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  357.196848][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  357.196872][    C0]  ? __pfx_ksoftirqd_should_run+0x10/0x10
[  357.196894][    C0]  ? smpboot_thread_fn+0x2d3/0xa30
[  357.196916][    C0]  ? smpboot_thread_fn+0x4fb/0xa30
[  357.196937][    C0]  ? smpboot_thread_fn+0x656/0xa30
[  357.196959][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  357.196981][    C0]  smpboot_thread_fn+0x544/0xa30
[  357.197003][    C0]  ? smpboot_thread_fn+0x4e/0xa30
[  357.197028][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  357.197049][    C0]  kthread+0x2f0/0x390
[  357.197064][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  357.197086][    C0]  ? __pfx_kthread+0x10/0x10
[  357.197101][    C0]  ret_from_fork+0x4b/0x80
[  357.197123][    C0]  ? __pfx_kthread+0x10/0x10
[  357.197138][    C0]  ret_from_fork_asm+0x1a/0x30
[  357.197167][    C0]  </TASK>
[  357.859713][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  357.866634][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  357.876913][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  357.887029][   T31] Call Trace:
[  357.890329][   T31]  <TASK>
[  357.893304][   T31]  dump_stack_lvl+0x241/0x360
[  357.898023][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.903286][   T31]  ? __pfx__printk+0x10/0x10
[  357.907905][   T31]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  357.914112][   T31]  ? vscnprintf+0x5d/0x90
[  357.918502][   T31]  panic+0x349/0x880
[  357.922436][   T31]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  357.928665][   T31]  ? __pfx_panic+0x10/0x10
[  357.933124][   T31]  ? tick_nohz_tick_stopped+0x82/0xb0
[  357.938537][   T31]  ? __irq_work_queue_local+0x137/0x410
[  357.944124][   T31]  ? preempt_schedule_thunk+0x1a/0x30
[  357.949530][   T31]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  357.955729][   T31]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  357.961931][   T31]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  357.968143][   T31]  watchdog+0x1033/0x1040
[  357.972519][   T31]  ? watchdog+0x1ea/0x1040
[  357.977068][   T31]  ? __pfx_watchdog+0x10/0x10
[  357.981786][   T31]  kthread+0x2f0/0x390
[  357.985890][   T31]  ? __pfx_watchdog+0x10/0x10
[  357.990611][   T31]  ? __pfx_kthread+0x10/0x10
[  357.995233][   T31]  ret_from_fork+0x4b/0x80
[  357.999691][   T31]  ? __pfx_kthread+0x10/0x10
[  358.004308][   T31]  ret_from_fork_asm+0x1a/0x30
[  358.009213][   T31]  </TASK>
[  358.012519][   T31] Kernel Offset: disabled
[  358.016853][   T31] Rebooting in 86400 seconds..