last executing test programs:

8m15.035250897s ago: executing program 0 (id=2859):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x58)

8m11.007074721s ago: executing program 0 (id=2864):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
sched_setattr(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r0 = syz_open_dev$video4linux(0x0, 0x5, 0x1801)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa1300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
r2 = syz_open_procfs$userns(0x0, &(0x7f0000000180))
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x8a, 0x0, {r2}}, 0x20)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1})
write$sndseq(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fallocate(r4, 0x33, 0x6, 0x4)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1", 0x5c, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
gettid()
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000009c0)={0x80000000, 0x0, 0x0})
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x40040)

8m10.687275042s ago: executing program 0 (id=2866):
r0 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "115e4ecd", {0x3, 0x100, 0x0, 0x4, 0x3, 0x8, 0xd}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084)
setresuid(0x0, 0xee01, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0x4, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r1}, 0x48)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[])

8m6.43795824s ago: executing program 0 (id=2876):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000008000000060000000100000f05000000feff00000400000003000000002e000000005f"], 0x0, 0x38}, 0x28)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r1, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004f40)=""/131, 0x83}], 0x1, &(0x7f00000050c0)=""/21, 0x15}, 0x3}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x4040080}, 0x4805)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000014080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)

8m5.870784007s ago: executing program 0 (id=2881):
r0 = memfd_secret(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), 0xffffffffffffffff)
connect$bt_sco(r0, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf2529000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r5 = dup(r2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r6=>0x0})
connect$can_j1939(r5, &(0x7f0000000200)={0x1d, r6, 0x2, {0x0, 0xf0, 0x2}, 0xfd}, 0x18)
r7 = openat$cgroup_ro(r0, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '\\!)]%'}, {0x20, 'cgroup.controllers\x00'}, {0x20, 'cpuset.effective_mems\x00'}]}, 0x5a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r7, 0x0)
preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r9, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x7fffffffffffffff})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x24, 0x2c, 0x107, 0x70bd2b, 0x2ddfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
ioctl$KDFONTOP_SET_DEF(r9, 0x4b72, &(0x7f0000000ac0)={0x2, 0x1, 0x1e, 0x13, 0x1cd, &(0x7f00000006c0)="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"})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})

8m1.191112988s ago: executing program 0 (id=2894):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="f000000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f00000100000000003a17a1eae51903520000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020001002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000340)={0x5, {{0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xa}}}, 0x88)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002ac0)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x0, 0x2000003, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfdfffffe, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x548, 0x400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x240000, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x0, 0x1, 0x1936, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffc, 0x0, 0x0, 0x6, 0x80000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x400, 0x1000000, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff000, 0x0, 0x6, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x0, 0x5, 0x4, 0x5, 0xb}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x494}}, 0x0)

7m45.657965499s ago: executing program 32 (id=2894):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="f000000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f00000100000000003a17a1eae51903520000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020001002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000340)={0x5, {{0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xa}}}, 0x88)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002ac0)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x0, 0x2000003, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfdfffffe, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x548, 0x400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x240000, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x0, 0x1, 0x1936, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffc, 0x0, 0x0, 0x6, 0x80000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x400, 0x1000000, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff000, 0x0, 0x6, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x0, 0x5, 0x4, 0x5, 0xb}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x494}}, 0x0)

7m32.02937765s ago: executing program 3 (id=2945):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x10)
connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

7m30.163273043s ago: executing program 3 (id=2947):
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000119078000000000000000000004e20009c90780100000003000000d00b0fb343ef15dbfba1469f806ac7537a8f2142e02bc60cc28bdec24eb721d9a9d2ca1dd752cd2dd5b75092d69f8be02fdec4a7994bae3fad59a730020000000000000053b035"], 0x0)
socket$key(0xf, 0x3, 0x2)
socket(0x1e, 0x1, 0x0)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8000)

7m27.904319833s ago: executing program 3 (id=2953):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0xb1, 0x0, 0x0, 0x2}]}, 0x10)

7m16.118960135s ago: executing program 3 (id=2961):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0xd, 0x6, 0x0, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x15a5d16c, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xd, 0x7, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0xe464, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x5, 0x8c, 0x1000, 0xffff, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x3, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e4, 0xc, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x2, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x29, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x200000, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x4d, 0x3, 0x7ff, 0x12b, 0x7fffffff, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x3, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x9, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x7800, 0x700, 0x4, 0x0, {{0x5, 0x4, 0x2, 0xf, 0x14, 0x64, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}})
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a060000000000000500000014000500200100000000000000000300000000001c0009"], 0x4c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r9 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r9, 0x1, 0x60bd27, 0x4, {0x5}}, 0x14}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x6e, 0xfa00, {0x1, 0x0, 0x106, 0x6}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)

7m13.467046901s ago: executing program 3 (id=2965):
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x4080800)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
unshare(0x20000400)
syz_io_uring_setup(0x4ff8, &(0x7f0000000140)={0x0, 0x8c36, 0x800, 0x2, 0xbfdffdf5}, 0x0, 0x0, &(0x7f0000000000))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001400)='syzkaller\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x8, 0x0, 0x0}}, 0x10)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
recvmmsg(r4, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)
rt_sigpending(&(0x7f0000000000), 0x8)

7m8.792003447s ago: executing program 3 (id=2971):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x2, 0xff, 0x0, 0xe}, {0x2d}, {0x6, 0x0, 0x0, 0x7fff7ffc}]})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'workdir'}}]})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x0, 0x7fff0000}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x8, 0x0, &(0x7f00000004c0))
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6m53.299014129s ago: executing program 33 (id=2971):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x2, 0xff, 0x0, 0xe}, {0x2d}, {0x6, 0x0, 0x0, 0x7fff7ffc}]})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'workdir'}}]})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x0, 0x7fff0000}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x8, 0x0, &(0x7f00000004c0))
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6m28.31379145s ago: executing program 4 (id=3013):
process_madvise(0xffffffffffffffff, &(0x7f0000003640)=[{0x0}], 0x1, 0x12, 0x0)

6m27.135099838s ago: executing program 4 (id=3015):
lstat(&(0x7f00000008c0)='./file0\x00', 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x103181)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd, 0x0, 0x0, 0x0, 0x2})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
futex(&(0x7f0000000200)=0x1, 0x6, 0xf2, &(0x7f0000000240)={0x77359400}, 0x0, 0x1)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x28)
ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f0000000500)=0x7)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf4e)
writev(r3, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)

6m24.293789273s ago: executing program 4 (id=3017):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x59)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000140)={0x40, 0x21, 0xb9, {0xb9, 0x0, "4345f977d617b965e6e010276a72793e554ee5ef7857764226e0df94fd10387124da48db1cd4be05a7ed8aa2518adcf33ccaecc34963169a750b5e79277d70083abcd0156d93ae43b0cb9804de4b467e0372ddad9c4b9a690f8fc986a6db82875f7dfe000e940fa14d4ed0bc05679062461cfb9794acad0ba0174d3af6cbf127b9a89c323279d014df80282ce3b4a5025256b1b0ecd7d05884cf8c47ca7d2b88a1558d3648358f48d787b5a93b90d38b0a5b1beb79867b"}}, &(0x7f0000000240)={0x0, 0x3, 0x33, @string={0x33, 0x3, "f5aeffdc7b9432d2cfb57d545981bd994a13cff730f7cf898b3a1b2300b8ca0602308335dca16d4654368e2708a7d8eb55"}}, &(0x7f00000002c0)={0x0, 0x22, 0xe, {[@global=@item_4={0x3, 0x1, 0x9, "d94b5fe2"}, @local=@item_012={0x2, 0x2, 0xa, "07e4"}, @global=@item_4={0x3, 0x1, 0x0, "03a97d33"}, @local=@item_012={0x0, 0x2, 0x1}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5b2f, 0x7, 0x1, {0x22, 0xb8c}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x0, 0x17, 0x75, "c0b7c7d8ed0a7bf9629664297567e4d05c9bfe05a5f8c316f557b17d367dc7ad7bee6413d8588ba17adfaeb6bf6f5443570f6a81c5112dd67f99101a39bb6a89bcd2afeeb6058540a7e37ea95d55242d356a0c20a972720e34d146bfaa425b647e91e89b54ccaf387ddc662d87a261fa7cb3bb9e59"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}, &(0x7f0000000480), &(0x7f0000000580)={0x20, 0x3, 0x1, 0x3}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0xac5)

6m22.058757845s ago: executing program 4 (id=3020):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r0, 0x77, 0x34}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'sm3-ce\x00'}}, &(0x7f00000001c0)="fd32ad486607aa0b47af9825d769c40c4ceac439d361391dc339a366ea50a15ab5c8e364d877420c3f8b264dea8322c5ff2770de1dd8aa233061f6dc24e8eda54864519ec7aeac23ddb2d54e9a5f1c39c85ddf82ccf8e431ed3c652bef217833be8d9013adc7d71f89ae9c71359a9e647abce80e339d04", &(0x7f0000000280)=""/52)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0dac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

6m8.97089179s ago: executing program 4 (id=3038):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

6m8.470744723s ago: executing program 4 (id=3041):
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x143042, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000ac0)={0x0, 0xd0}, &(0x7f0000000b00)=0x8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000340)})
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='-`ugetlb '], 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0xab, 0x6b, 0x2, 0x20, 0x4e6, 0x1, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0x98, 0x18, 0x4b, "", [{{0x9, 0x4, 0x13, 0xf, 0x0, 0x71, 0x2, 0x84, 0x9}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
unlink(0x0)

5m52.179200253s ago: executing program 34 (id=3041):
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x143042, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000ac0)={0x0, 0xd0}, &(0x7f0000000b00)=0x8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000340)})
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='-`ugetlb '], 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0xab, 0x6b, 0x2, 0x20, 0x4e6, 0x1, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0x98, 0x18, 0x4b, "", [{{0x9, 0x4, 0x13, 0xf, 0x0, 0x71, 0x2, 0x84, 0x9}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
unlink(0x0)

2m29.187500311s ago: executing program 2 (id=3481):
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008881}, 0x20000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000080005"], 0x24}}, 0x0)

2m29.133917347s ago: executing program 2 (id=3482):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000ac0)=""/97, 0x61}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000002c40)=""/4108, 0x100c}, {&(0x7f0000000b40)=""/174, 0xae}, {&(0x7f00000009c0)=""/66, 0x42}, {&(0x7f0000002a40)=""/95, 0x5f}, {&(0x7f0000001180)=""/46, 0x2e}, {&(0x7f0000002ac0)=""/147, 0x93}], 0x9}, 0x0)

2m28.886610171s ago: executing program 2 (id=3483):
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x20000000005b)
keyctl$revoke(0x3, r0)

2m28.583372456s ago: executing program 2 (id=3484):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000440)={0x0, 0xd, 0x5, "4c04dc1708"}, 0x0, 0x0, 0x0, 0x0})

2m26.398020448s ago: executing program 2 (id=3492):
syz_usb_connect(0x3, 0x6e1, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)={0x0, 0x0, 0x15, &(0x7f0000000980)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x5c5, 0xf00f, 0x1099, [0xf]}]}})

2m24.848127817s ago: executing program 2 (id=3501):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x80007f, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='io.stat\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
userfaultfd(0x801)
r1 = socket(0x2, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0)

2m9.667912316s ago: executing program 35 (id=3501):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x80007f, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='io.stat\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
userfaultfd(0x801)
r1 = socket(0x2, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0)

207.343939ms ago: executing program 1 (id=6069):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x259, 0x0, 0x140000}]})

197.560409ms ago: executing program 1 (id=6070):
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa8103, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

151.281357ms ago: executing program 1 (id=6071):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="31091a000000cf6b37195a9527d8f9654b3076aa322fe3dfc32b89"], 0x0, 0x0, 0x0, 0x0, 0x0})
fsopen(0x0, 0x0)

58.693275ms ago: executing program 1 (id=6072):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f000001c640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000180)={0x0})

54.034367ms ago: executing program 1 (id=6073):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000380)={0x14, &(0x7f0000000140)={0x0, 0xc, 0x2, {0x2, 0xa}}, 0x0}, 0x0)

0s ago: executing program 1 (id=6074):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f00000003c0)='U', 0x1)

kernel console output (not intermixed with test programs):

e interface with an up link
[  570.723914][T13766] team0: Port device team_slave_0 added
[  570.727316][T13766] team0: Port device team_slave_1 added
[  570.799951][T13766] batman_adv: batadv0: Adding interface: batadv_slave_0
[  570.799965][T13766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  570.799989][T13766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  570.849097][T13766] batman_adv: batadv0: Adding interface: batadv_slave_1
[  570.849112][T13766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  570.849137][T13766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  570.967925][T13766] hsr_slave_0: entered promiscuous mode
[  570.969188][T13766] hsr_slave_1: entered promiscuous mode
[  570.970087][T13766] debugfs: 'hsr0' already exists in 'hsr'
[  570.970108][T13766] Cannot create hsr debugfs directory
[  571.516810][T13253] Bluetooth: hci1: command tx timeout
[  571.912512][ T5331] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  572.261531][T13791] loop8: detected capacity change from 0 to 7
[  572.275051][T13791] Dev loop8: unable to read RDB block 7
[  572.275091][T13791]  loop8: unable to read partition table
[  572.275303][T13791] loop8: partition table beyond EOD, truncated
[  572.275331][T13791] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  572.314448][ T5331] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  572.314474][ T5331] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  572.314493][ T5331] usb 3-1: Product: syz
[  572.314505][ T5331] usb 3-1: Manufacturer: syz
[  572.314518][ T5331] usb 3-1: SerialNumber: syz
[  572.392305][ T5331] usb 3-1: config 0 descriptor??
[  572.420475][ T5331] ch341 3-1:0.0: ch341-uart converter detected
[  572.637148][T13786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  572.642169][T13786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  573.516294][ T5331] usb 3-1: failed to receive control message: -110
[  573.516350][ T5331] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[  573.592898][T13253] Bluetooth: hci1: command tx timeout
[  575.372622][   T10] usb 3-1: USB disconnect, device number 22
[  575.406541][   T10] ch341 3-1:0.0: device disconnected
[  575.674351][T13253] Bluetooth: hci1: command tx timeout
[  576.395752][ T5331] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  576.558028][ T5331] usb 4-1: Using ep0 maxpacket: 32
[  576.560081][ T5331] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  576.560103][ T5331] usb 4-1: config 0 has no interface number 0
[  576.644941][ T5331] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  576.644967][ T5331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.644984][ T5331] usb 4-1: Product: syz
[  576.644997][ T5331] usb 4-1: Manufacturer: syz
[  576.645010][ T5331] usb 4-1: SerialNumber: syz
[  576.694710][ T5331] usb 4-1: config 0 descriptor??
[  576.699969][ T5331] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  576.699990][ T5331] usb 4-1: selecting invalid altsetting 1
[  576.700004][ T5331] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  576.747847][ T5331] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  576.748338][ T5331] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  576.748385][ T5331] usb 4-1: media controller created
[  576.788827][ T5331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  576.862514][   T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  577.012493][   T10] usb 2-1: Using ep0 maxpacket: 32
[  577.015787][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  577.019888][   T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  577.019911][   T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  577.019930][   T10] usb 2-1: Product: syz
[  577.020030][   T10] usb 2-1: Manufacturer: syz
[  577.020044][   T10] usb 2-1: SerialNumber: syz
[  577.093052][   T10] usb 2-1: config 0 descriptor??
[  577.095190][T13818] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  577.120934][   T10] hub 2-1:0.0: bad descriptor, ignoring hub
[  577.120969][   T10] hub 2-1:0.0: probe with driver hub failed with error -5
[  578.232274][T13253] Bluetooth: hci1: command tx timeout
[  578.503100][ T5331] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  578.506457][ T5331] zl10353_read_register: readreg error (reg=127, ret==-110)
[  578.607147][T13816] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  579.021504][ T5331] usb 4-1: USB disconnect, device number 24
[  579.634124][T13766] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  579.672516][ T5331] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  579.835883][ T5331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[  579.835916][ T5331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 136, setting to 64
[  579.865439][ T5331] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  579.865465][ T5331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.865484][ T5331] usb 4-1: Product: syz
[  579.865497][ T5331] usb 4-1: Manufacturer: syz
[  579.865510][ T5331] usb 4-1: SerialNumber: syz
[  579.951275][ T5331] usb 4-1: config 0 descriptor??
[  579.958329][T13828] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  579.958913][T13828] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  579.995065][    C0] port100 4-1:0.0: NFC: Urb failure (status -71)
[  579.995804][    C0] port100 4-1:0.0: NFC: Urb failure (status -71)
[  579.998146][ T5331] port100 4-1:0.0: NFC: Could not get supported command types
[  580.197568][ T5331] usb 4-1: USB disconnect, device number 25
[  581.293878][ T5331] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  581.347460][T13766] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  581.350510][T13766] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  581.502519][ T5331] usb 4-1: Using ep0 maxpacket: 8
[  581.503840][ T5331] usb 4-1: unable to get BOS descriptor or descriptor too short
[  581.507582][ T5331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  581.507603][ T5331] usb 4-1: config 0 has no interfaces?
[  581.526660][ T5331] usb 4-1: string descriptor 0 read error: -22
[  581.526798][ T5331] usb 4-1: New USB device found, idVendor=0cde, idProduct=001c, bcdDevice=9a.60
[  581.526820][ T5331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.619092][ T5331] usb 4-1: config 0 descriptor??
[  581.627987][   T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  581.777973][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  581.778005][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  581.778040][   T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  581.778060][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.831232][   T10] usb 5-1: config 0 descriptor??
[  581.923317][    T9] usb 4-1: USB disconnect, device number 26
[  582.256420][   T10] cp2112 0003:10C4:EA90.0014: invalid report_count -497071143
[  582.256442][   T10] cp2112 0003:10C4:EA90.0014: item 0 4 1 9 parsing failed
[  582.259841][   T10] cp2112 0003:10C4:EA90.0014: parse failed
[  582.259977][   T10] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -22
[  582.369479][T13766] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  582.380386][T13766] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  582.467806][    T9] usb 5-1: USB disconnect, device number 39
[  583.100417][T13766] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  583.247713][T13766] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  584.326845][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2947'.
[  584.339056][T13766] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  598.360837][T13766] 8021q: adding VLAN 0 to HW filter on device bond0
[  604.078722][T13766] 8021q: adding VLAN 0 to HW filter on device team0
[  604.316772][ T2250] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.316988][ T2250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  604.938940][T13204] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.939464][T13204] bridge0: port 2(bridge_slave_1) entered forwarding state
[  605.889646][T13931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2969'.
[  610.440652][T13945] loop8: detected capacity change from 0 to 7
[  610.594256][T13945] Dev loop8: unable to read RDB block 7
[  610.594299][T13945]  loop8: unable to read partition table
[  610.594516][T13945] loop8: partition table beyond EOD, truncated
[  610.594557][T13945] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  617.852513][    T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  618.697197][    T9] usb 3-1: device descriptor read/all, error -71
[  618.955956][T13766] 8021q: adding VLAN 0 to HW filter on device batadv0
[  619.888668][   T31] usb 2-1: USB disconnect, device number 52
[  621.668478][ T5705] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  621.834995][ T5705] usb 5-1: Using ep0 maxpacket: 16
[  621.837598][ T5705] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  621.986456][ T5705] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  621.986484][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.986503][ T5705] usb 5-1: Product: syz
[  621.986515][ T5705] usb 5-1: Manufacturer: syz
[  621.986528][ T5705] usb 5-1: SerialNumber: syz
[  624.749236][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  624.749304][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  626.211917][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  626.212465][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  626.227604][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  626.227723][ T5705] r8152-cfgselector 5-1: Unknown version 0x0000
[  626.227738][ T5705] r8152-cfgselector 5-1: config 0 descriptor??
[  626.228055][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  626.228242][ T5705] r8152-cfgselector 5-1: can't set config #0, error -32
[  628.473963][ T5705] r8152-cfgselector 5-1: USB disconnect, device number 40
[  629.846481][   T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  629.889893][   T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  629.901476][   T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  629.940344][   T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  629.955807][   T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  630.313889][T14004] ipip0: entered promiscuous mode
[  630.313914][T14004] ipip0: entered allmulticast mode
[  631.992997][   T59] Bluetooth: hci6: command tx timeout
[  634.073146][   T59] Bluetooth: hci6: command tx timeout
[  634.858267][T13253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  634.900230][T13253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  634.919636][T13253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  634.938835][T13253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  634.939957][T13253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  636.152927][T13253] Bluetooth: hci6: command tx timeout
[  638.348960][   T59] Bluetooth: hci6: command tx timeout
[  638.349035][T13253] Bluetooth: hci3: command tx timeout
[  639.002542][ T5731] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  639.169844][ T5731] usb 3-1: unable to get BOS descriptor or descriptor too short
[  639.170391][ T5731] usb 3-1: not running at top speed; connect to a high speed hub
[  639.206502][ T5731] usb 3-1: config 247 has an invalid interface number: 164 but max is 1
[  639.206528][ T5731] usb 3-1: config 247 has an invalid interface number: 129 but max is 1
[  639.206558][ T5731] usb 3-1: config 247 has no interface number 0
[  639.206573][ T5731] usb 3-1: config 247 has no interface number 1
[  639.206646][ T5731] usb 3-1: config 247 interface 164 altsetting 7 has a duplicate endpoint with address 0x8, skipping
[  639.206669][ T5731] usb 3-1: config 247 interface 164 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  639.206688][ T5731] usb 3-1: config 247 interface 164 altsetting 7 endpoint 0x3 has invalid maxpacket 1471, setting to 1023
[  639.206713][ T5731] usb 3-1: config 247 interface 164 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  639.206732][ T5731] usb 3-1: config 247 interface 164 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  639.206752][ T5731] usb 3-1: config 247 interface 164 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  639.206777][ T5731] usb 3-1: config 247 interface 164 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  639.206795][ T5731] usb 3-1: config 247 interface 164 altsetting 7 has an endpoint descriptor with address 0x78, changing to 0x8
[  639.206818][ T5731] usb 3-1: config 247 interface 164 altsetting 7 has a duplicate endpoint with address 0x8, skipping
[  639.206840][ T5731] usb 3-1: config 247 interface 164 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  639.206863][ T5731] usb 3-1: config 247 interface 164 altsetting 7 has an endpoint descriptor with address 0x37, changing to 0x7
[  639.206885][ T5731] usb 3-1: config 247 interface 164 altsetting 7 has a duplicate endpoint with address 0x7, skipping
[  639.206904][ T5731] usb 3-1: config 247 interface 164 altsetting 7 has 14 endpoint descriptors, different from the interface descriptor's value: 12
[  639.206929][ T5731] usb 3-1: config 247 interface 164 has no altsetting 0
[  639.206945][ T5731] usb 3-1: config 247 interface 129 has no altsetting 0
[  639.491638][ T5731] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=10.18
[  639.491665][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.491684][ T5731] usb 3-1: Product: syz
[  639.491697][ T5731] usb 3-1: Manufacturer: 、
[  639.491709][ T5731] usb 3-1: SerialNumber: syz
[  639.916426][T14086] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  640.247841][ T5731] usb_ehset_test 3-1:247.164: probe with driver usb_ehset_test failed with error -32
[  640.282576][ T5731] usb_ehset_test 3-1:247.129: probe with driver usb_ehset_test failed with error -32
[  640.302897][ T5731] usb 3-1: USB disconnect, device number 25
[  640.393196][T13253] Bluetooth: hci3: command tx timeout
[  642.472894][T13253] Bluetooth: hci3: command tx timeout
[  642.920657][ T1535] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.552904][T13253] Bluetooth: hci3: command tx timeout
[  649.867835][T14112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3014'.
[  649.979232][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'.
[  650.536199][ T5705] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  650.749360][ T1535] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.914993][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  650.915025][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  650.915062][ T5705] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  650.915097][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.993499][ T5705] usb 5-1: config 0 descriptor??
[  651.778558][ T5705] cp2112 0003:10C4:EA90.0015: invalid report_count -497071143
[  651.778583][ T5705] cp2112 0003:10C4:EA90.0015: item 0 4 1 9 parsing failed
[  651.833142][ T5705] cp2112 0003:10C4:EA90.0015: parse failed
[  651.833276][ T5705] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -22
[  651.904586][ T5705] usb 5-1: USB disconnect, device number 41
[  658.901032][ T1535] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  659.512468][ T5731] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  659.678750][ T5731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[  659.678782][ T5731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  659.681316][ T5731] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  659.681347][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.681365][ T5731] usb 3-1: Product: syz
[  659.681378][ T5731] usb 3-1: Manufacturer: syz
[  659.681391][ T5731] usb 3-1: SerialNumber: syz
[  659.769206][ T5731] usb 3-1: config 0 descriptor??
[  659.842828][T14164] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  659.850026][ T5731] port100 3-1:0.0: NFC: Could not get supported command types
[  660.134611][ T5731] usb 3-1: USB disconnect, device number 26
[  660.570313][T14013] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.570512][T14013] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.570696][T14013] bridge_slave_0: entered allmulticast mode
[  660.601030][T14013] bridge_slave_0: entered promiscuous mode
[  660.612125][T14013] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.620778][T14013] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.620966][T14013] bridge_slave_1: entered allmulticast mode
[  660.641135][T14013] bridge_slave_1: entered promiscuous mode
[  661.287614][T14013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  661.472511][ T5705] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  661.659530][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  661.659562][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  661.659602][ T5705] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  661.659624][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.483974][ T5705] usb 3-1: config 0 descriptor??
[  662.889194][T14013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  662.962785][ T5705] cp2112 0003:10C4:EA90.0016: invalid report_count -497071143
[  662.962806][ T5705] cp2112 0003:10C4:EA90.0016: item 0 4 1 9 parsing failed
[  662.964821][ T5705] cp2112 0003:10C4:EA90.0016: parse failed
[  662.964966][ T5705] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -22
[  663.176800][ T5705] usb 3-1: USB disconnect, device number 27
[  664.901036][T14210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3037'.
[  670.456080][ T1535] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.987141][T14013] team0: Port device team_slave_0 added
[  671.133608][T14013] team0: Port device team_slave_1 added
[  671.137690][T14053] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.137806][T14053] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.137978][T14053] bridge_slave_0: entered allmulticast mode
[  671.181531][T14053] bridge_slave_0: entered promiscuous mode
[  671.284148][T14053] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.284358][T14053] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.284533][T14053] bridge_slave_1: entered allmulticast mode
[  671.287432][T14053] bridge_slave_1: entered promiscuous mode
[  671.370851][T14013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  671.370865][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  671.370890][T14013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  671.443467][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  671.466816][T14013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  671.466830][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  671.466856][T14013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  672.361539][T14053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  672.444890][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  672.444921][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  672.444965][    T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  672.444985][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.460823][    T9] usb 3-1: config 0 descriptor??
[  672.481719][T14053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.930115][    T9] cp2112 0003:10C4:EA90.0017: invalid report_count -497071143
[  672.930137][    T9] cp2112 0003:10C4:EA90.0017: item 0 4 1 9 parsing failed
[  672.930884][    T9] cp2112 0003:10C4:EA90.0017: parse failed
[  672.931012][    T9] cp2112 0003:10C4:EA90.0017: probe with driver cp2112 failed with error -22
[  675.088413][ T5705] usb 3-1: USB disconnect, device number 28
[  675.572020][T14053] team0: Port device team_slave_0 added
[  675.907183][T14053] team0: Port device team_slave_1 added
[  675.948247][T14013] hsr_slave_0: entered promiscuous mode
[  675.949552][T14013] hsr_slave_1: entered promiscuous mode
[  675.950468][T14013] debugfs: 'hsr0' already exists in 'hsr'
[  675.950490][T14013] Cannot create hsr debugfs directory
[  676.115364][T14053] batman_adv: batadv0: Adding interface: batadv_slave_0
[  676.115379][T14053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  676.115404][T14053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  676.977514][T14053] batman_adv: batadv0: Adding interface: batadv_slave_1
[  676.977529][T14053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  676.977555][T14053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  680.890162][T14262] loop8: detected capacity change from 0 to 7
[  680.904080][T14262] Dev loop8: unable to read RDB block 7
[  680.904120][T14262]  loop8: unable to read partition table
[  680.904329][T14262] loop8: partition table beyond EOD, truncated
[  680.904357][T14262] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  681.016971][T14053] hsr_slave_0: entered promiscuous mode
[  681.895722][T14053] hsr_slave_1: entered promiscuous mode
[  681.935566][T14053] debugfs: 'hsr0' already exists in 'hsr'
[  681.935592][T14053] Cannot create hsr debugfs directory
[  682.790854][   T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  682.862751][   T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  682.869495][   T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  682.892217][   T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  682.900155][   T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  683.856108][T13253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  685.033288][T13253] Bluetooth: hci0: command tx timeout
[  685.664781][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  685.671274][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  685.676549][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  685.676612][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  685.677564][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  685.716379][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  686.339582][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1
[  687.112545][   T59] Bluetooth: hci0: command tx timeout
[  687.916929][   T59] Bluetooth: hci1: command tx timeout
[  688.079710][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2
[  688.925007][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3
[  689.020504][T14275] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.020610][T14275] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.020765][T14275] bridge_slave_0: entered allmulticast mode
[  689.044313][T14275] bridge_slave_0: entered promiscuous mode
[  689.061299][T14275] bridge0: port 2(bridge_slave_1) entered blocking state
[  689.061414][T14275] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.061597][T14275] bridge_slave_1: entered allmulticast mode
[  689.088466][T14275] bridge_slave_1: entered promiscuous mode
[  689.193595][   T59] Bluetooth: hci0: command tx timeout
[  689.232127][T14275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  689.262596][T14275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  689.405684][T14275] team0: Port device team_slave_0 added
[  689.448681][T14275] team0: Port device team_slave_1 added
[  689.697323][T14275] batman_adv: batadv0: Adding interface: batadv_slave_0
[  689.697339][T14275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  689.697362][T14275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  689.774227][T14275] batman_adv: batadv0: Adding interface: batadv_slave_1
[  689.774241][T14275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  689.774265][T14275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  689.992655][   T59] Bluetooth: hci1: command tx timeout
[  690.408276][ T5609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  690.468073][ T5609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  690.469586][ T5609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  690.472189][ T5609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  690.501512][ T5609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  691.272629][   T59] Bluetooth: hci0: command tx timeout
[  692.074603][   T59] Bluetooth: hci1: command tx timeout
[  692.823796][   T59] Bluetooth: hci7: command tx timeout
[  694.152819][   T59] Bluetooth: hci1: command tx timeout
[  695.545516][   T59] Bluetooth: hci7: command tx timeout
[  696.400839][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4
[  699.185210][   T59] Bluetooth: hci7: command tx timeout
[  700.385954][ T1535] bridge_slave_1: left allmulticast mode
[  700.385986][ T1535] bridge_slave_1: left promiscuous mode
[  700.386228][ T1535] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.443984][ T1535] bridge_slave_0: left allmulticast mode
[  700.444014][ T1535] bridge_slave_0: left promiscuous mode
[  700.444228][ T1535] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.541410][T14424] FAULT_INJECTION: forcing a failure.
[  700.541410][T14424] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  700.541444][T14424] CPU: 0 UID: 0 PID: 14424 Comm: syz.2.3073 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  700.541475][T14424] Tainted: [L]=SOFTLOCKUP
[  700.541482][T14424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  700.541493][T14424] Call Trace:
[  700.541501][T14424]  <TASK>
[  700.541509][T14424]  dump_stack_lvl+0xe8/0x150
[  700.541536][T14424]  should_fail_ex+0x46b/0x600
[  700.541569][T14424]  _copy_to_user+0x31/0xb0
[  700.541592][T14424]  simple_read_from_buffer+0xe1/0x170
[  700.541624][T14424]  proc_fail_nth_read+0x1be/0x230
[  700.541654][T14424]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  700.541683][T14424]  ? rw_verify_area+0x2ac/0x4e0
[  700.541702][T14424]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  700.541728][T14424]  vfs_read+0x212/0xa80
[  700.541756][T14424]  ? __pfx_vfs_read+0x10/0x10
[  700.541778][T14424]  ? bpf_lsm_socket_connect+0x9/0x20
[  700.541800][T14424]  ? __sys_connect+0x338/0x450
[  700.541823][T14424]  ? __pfx___sys_connect+0x10/0x10
[  700.541849][T14424]  ksys_read+0x156/0x270
[  700.541871][T14424]  ? __pfx_ksys_read+0x10/0x10
[  700.541899][T14424]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.541919][T14424]  do_syscall_64+0x15f/0xf80
[  700.541941][T14424]  ? trace_irq_disable+0x3b/0x140
[  700.541961][T14424]  ? clear_bhb_loop+0x40/0x90
[  700.541987][T14424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.542005][T14424] RIP: 0033:0x7f344699d60e
[  700.542022][T14424] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  700.542037][T14424] RSP: 002b:00007f3444c35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  700.542056][T14424] RAX: ffffffffffffffda RBX: 00007f3444c366c0 RCX: 00007f344699d60e
[  700.542069][T14424] RDX: 000000000000000f RSI: 00007f3444c360a0 RDI: 0000000000000004
[  700.542081][T14424] RBP: 00007f3444c36090 R08: 0000000000000000 R09: 0000000000000000
[  700.542092][T14424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  700.542103][T14424] R13: 00007f3446c56038 R14: 00007f3446c55fa0 R15: 00007fff1573d208
[  700.542134][T14424]  </TASK>
[  701.422753][   T59] Bluetooth: hci7: command tx timeout
[  702.256675][ T1535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  702.323224][ T1535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  702.362700][ T1535] bond0 (unregistering): Released all slaves
[  702.738022][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3076'.
[  703.169778][T14275] hsr_slave_0: entered promiscuous mode
[  703.181732][T14275] hsr_slave_1: entered promiscuous mode
[  703.236014][T14275] debugfs: 'hsr0' already exists in 'hsr'
[  703.236039][T14275] Cannot create hsr debugfs directory
[  715.987159][T14459] F2FS-fs: Conflicting test_dummy_encryption options
[  719.109213][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'.
[  719.302578][   T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  719.463745][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  719.463775][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  719.463810][   T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  719.463839][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.522560][   T10] usb 3-1: config 0 descriptor??
[  719.944003][T14285] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.944446][T14285] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.945292][T14285] bridge_slave_0: entered allmulticast mode
[  719.949410][T14285] bridge_slave_0: entered promiscuous mode
[  719.998654][   T10] cp2112 0003:10C4:EA90.0018: invalid report_count -497071143
[  719.998676][   T10] cp2112 0003:10C4:EA90.0018: item 0 4 1 9 parsing failed
[  719.999423][   T10] cp2112 0003:10C4:EA90.0018: parse failed
[  719.999552][   T10] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -22
[  720.089453][T14285] bridge0: port 2(bridge_slave_1) entered blocking state
[  720.089574][T14285] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.089759][T14285] bridge_slave_1: entered allmulticast mode
[  720.105536][T14285] bridge_slave_1: entered promiscuous mode
[  720.217802][ T5331] usb 3-1: USB disconnect, device number 29
[  720.407713][T14285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  720.491903][T14285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  720.618047][T14285] team0: Port device team_slave_0 added
[  720.632247][T14285] team0: Port device team_slave_1 added
[  720.695878][T14285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  720.695894][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  720.695919][T14285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  720.770134][T14285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  720.770149][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  720.770175][T14285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  722.754592][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3088'.
[  723.421885][T14285] hsr_slave_0: entered promiscuous mode
[  723.429460][T14285] hsr_slave_1: entered promiscuous mode
[  723.430553][T14285] debugfs: 'hsr0' already exists in 'hsr'
[  723.430576][T14285] Cannot create hsr debugfs directory
[  725.299239][ T5705] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  725.627573][ T5705] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  725.627603][ T5705] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  725.627629][ T5705] usb 2-1: Product: syz
[  725.627643][ T5705] usb 2-1: Manufacturer: syz
[  725.627657][ T5705] usb 2-1: SerialNumber: syz
[  725.720650][ T5705] usb 2-1: config 0 descriptor??
[  725.775842][ T5705] ch341 2-1:0.0: ch341-uart converter detected
[  726.176063][T14503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  726.181961][T14503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  726.502504][ T5331] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  726.655683][ T5331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  726.655714][ T5331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  726.655805][ T5331] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  726.655827][ T5331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.705253][ T5331] usb 3-1: config 0 descriptor??
[  727.033258][ T5705] usb 2-1: failed to receive control message: -110
[  727.033383][ T5705] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[  727.207686][ T5331] cp2112 0003:10C4:EA90.0019: invalid report_count -497071143
[  727.207709][ T5331] cp2112 0003:10C4:EA90.0019: item 0 4 1 9 parsing failed
[  727.209108][ T5331] cp2112 0003:10C4:EA90.0019: parse failed
[  727.209238][ T5331] cp2112 0003:10C4:EA90.0019: probe with driver cp2112 failed with error -22
[  727.457323][ T5331] usb 3-1: USB disconnect, device number 30
[  727.848293][ T5331] usb 2-1: USB disconnect, device number 55
[  727.869863][ T5331] ch341 2-1:0.0: device disconnected
[  736.272478][   T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  736.422595][   T10] usb 2-1: Using ep0 maxpacket: 16
[  736.424765][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  736.424793][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  736.427111][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  736.427135][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.427153][   T10] usb 2-1: Product: syz
[  736.427166][   T10] usb 2-1: Manufacturer: syz
[  736.427179][   T10] usb 2-1: SerialNumber: syz
[  736.431023][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'.
[  736.521448][T14547] IPv6: NLM_F_CREATE should be specified when creating new route
[  736.531555][   T10] usb 2-1: config 0 descriptor??
[  736.560510][   T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  736.560538][   T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  737.177403][   T10] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  737.178257][   T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  737.651994][   T10] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  737.652014][   T10] em28xx 2-1:0.0: No AC97 audio processor
[  738.164633][ T1535] hsr_slave_0: left promiscuous mode
[  738.202929][ T1535] hsr_slave_1: left promiscuous mode
[  738.204719][ T1535] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  738.204750][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  738.249768][ T1535] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  738.249792][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  738.340307][ T1535] veth1_macvtap: left promiscuous mode
[  738.340405][ T1535] veth0_macvtap: left promiscuous mode
[  738.340645][ T1535] veth1_vlan: left promiscuous mode
[  738.340818][ T1535] veth0_vlan: left promiscuous mode
[  739.086186][   T10] usb 2-1: USB disconnect, device number 56
[  739.091724][   T10] em28xx 2-1:0.0: Disconnecting em28xx
[  739.341385][   T10] em28xx 2-1:0.0: Freeing device
[  740.906511][ T1535] team0 (unregistering): Port device team_slave_1 removed
[  740.963377][ T1535] team0 (unregistering): Port device team_slave_0 removed
[  741.982472][   T10] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  742.140116][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  742.140685][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[  742.141835][   T10] usb 3-1: config 247 has an invalid interface number: 164 but max is 1
[  742.141860][   T10] usb 3-1: config 247 has an invalid interface number: 129 but max is 1
[  742.141879][   T10] usb 3-1: config 247 has no interface number 0
[  742.141895][   T10] usb 3-1: config 247 has no interface number 1
[  742.141957][   T10] usb 3-1: config 247 interface 164 altsetting 7 has a duplicate endpoint with address 0x8, skipping
[  742.141979][   T10] usb 3-1: config 247 interface 164 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  742.141999][   T10] usb 3-1: config 247 interface 164 altsetting 7 endpoint 0x3 has invalid maxpacket 1471, setting to 1023
[  742.142023][   T10] usb 3-1: config 247 interface 164 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  742.142042][   T10] usb 3-1: config 247 interface 164 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  742.142063][   T10] usb 3-1: config 247 interface 164 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  742.142087][   T10] usb 3-1: config 247 interface 164 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  742.142106][   T10] usb 3-1: config 247 interface 164 altsetting 7 has an invalid endpoint descriptor of length 2, skipping
[  742.142130][   T10] usb 3-1: config 247 interface 164 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  742.142153][   T10] usb 3-1: config 247 interface 164 altsetting 7 has an endpoint descriptor with address 0x37, changing to 0x7
[  742.142176][   T10] usb 3-1: config 247 interface 164 altsetting 7 has a duplicate endpoint with address 0x7, skipping
[  742.142196][   T10] usb 3-1: config 247 interface 164 altsetting 7 has 14 endpoint descriptors, different from the interface descriptor's value: 12
[  742.142230][   T10] usb 3-1: config 247 interface 164 has no altsetting 0
[  742.142246][   T10] usb 3-1: config 247 interface 129 has no altsetting 0
[  742.449049][   T10] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=10.18
[  742.449077][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.449096][   T10] usb 3-1: Product: syz
[  742.449109][   T10] usb 3-1: Manufacturer: 、
[  742.449122][   T10] usb 3-1: SerialNumber: syz
[  742.996769][   T10] usb_ehset_test 3-1:247.164: probe with driver usb_ehset_test failed with error -32
[  743.105759][   T10] usb_ehset_test 3-1:247.129: probe with driver usb_ehset_test failed with error -32
[  743.142562][   T10] usb 3-1: USB disconnect, device number 31
[  743.893377][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  743.963763][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  744.012841][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  744.020252][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  744.040701][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  744.148284][   T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  744.201684][   T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  744.253976][   T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  744.255157][   T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  744.255918][   T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  745.485477][T14616] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3107'.
[  745.575632][T14374] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.575842][T14374] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.576067][T14374] bridge_slave_0: entered allmulticast mode
[  745.646953][T14374] bridge_slave_0: entered promiscuous mode
[  745.682197][T14374] bridge0: port 2(bridge_slave_1) entered blocking state
[  745.738916][T14374] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.739174][T14374] bridge_slave_1: entered allmulticast mode
[  746.434966][ T5609] Bluetooth: hci6: command tx timeout
[  746.449615][T14374] bridge_slave_1: entered promiscuous mode
[  746.632531][   T59] Bluetooth: hci4: command tx timeout
[  747.119277][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  747.119345][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  747.138539][T14374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  747.188743][T14374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  747.474806][T14374] team0: Port device team_slave_0 added
[  747.510807][T14374] team0: Port device team_slave_1 added
[  747.766556][T14374] batman_adv: batadv0: Adding interface: batadv_slave_0
[  747.766573][T14374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.766598][T14374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  747.827461][T14374] batman_adv: batadv0: Adding interface: batadv_slave_1
[  747.827476][T14374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  747.827501][T14374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  748.472498][   T59] Bluetooth: hci6: command tx timeout
[  748.712512][   T59] Bluetooth: hci4: command tx timeout
[  748.767479][T14648] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3113'.
[  750.553247][   T59] Bluetooth: hci6: command tx timeout
[  750.721810][ T5609] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  750.775840][ T5609] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  750.777287][ T5609] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  750.779765][ T5609] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  750.780786][ T5609] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  750.797032][   T59] Bluetooth: hci4: command tx timeout
[  751.618007][T14669] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3117'.
[  751.618033][T14669] openvswitch: netlink: Key type 16134 is out of range max 32
[  751.890602][T14672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3118'.
[  752.637994][ T5609] Bluetooth: hci6: command tx timeout
[  752.872573][ T5609] Bluetooth: hci4: command tx timeout
[  753.564607][T14591] bridge0: port 1(bridge_slave_0) entered blocking state
[  753.564788][T14591] bridge0: port 1(bridge_slave_0) entered disabled state
[  753.565047][T14591] bridge_slave_0: entered allmulticast mode
[  753.571237][T14591] bridge_slave_0: entered promiscuous mode
[  753.647477][T14591] bridge0: port 2(bridge_slave_1) entered blocking state
[  753.649321][T14591] bridge0: port 2(bridge_slave_1) entered disabled state
[  753.652218][T14591] bridge_slave_1: entered allmulticast mode
[  753.691208][T14591] bridge_slave_1: entered promiscuous mode
[  753.897166][T14591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  753.999658][T14591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.329334][T14591] team0: Port device team_slave_0 added
[  754.402141][T14591] team0: Port device team_slave_1 added
[  754.550976][T14594] bridge0: port 1(bridge_slave_0) entered blocking state
[  754.551174][T14594] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.551395][T14594] bridge_slave_0: entered allmulticast mode
[  754.575983][T14594] bridge_slave_0: entered promiscuous mode
[  754.599906][T14591] batman_adv: batadv0: Adding interface: batadv_slave_0
[  754.599920][T14591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  754.599945][T14591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  754.600778][T14594] bridge0: port 2(bridge_slave_1) entered blocking state
[  754.600914][T14594] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.601113][T14594] bridge_slave_1: entered allmulticast mode
[  754.678817][T14594] bridge_slave_1: entered promiscuous mode
[  754.681401][T14591] batman_adv: batadv0: Adding interface: batadv_slave_1
[  754.681414][T14591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  754.681441][T14591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  754.829978][T14594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  754.879053][T14594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  757.992654][   T59] Bluetooth: hci8: command tx timeout
[  760.072485][   T59] Bluetooth: hci8: command tx timeout
[  761.083282][T14790] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3139'.
[  761.199820][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3140'.
[  762.152394][   T59] Bluetooth: hci8: command tx timeout
[  762.230403][T14591] hsr_slave_0: entered promiscuous mode
[  762.231751][T14591] hsr_slave_1: entered promiscuous mode
[  762.250487][T14591] debugfs: 'hsr0' already exists in 'hsr'
[  762.250513][T14591] Cannot create hsr debugfs directory
[  762.367821][T14736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3131'.
[  762.533183][T14594] team0: Port device team_slave_0 added
[  762.596502][T14594] team0: Port device team_slave_1 added
[  762.685086][T14656] bridge0: port 1(bridge_slave_0) entered blocking state
[  762.685204][T14656] bridge0: port 1(bridge_slave_0) entered disabled state
[  762.685397][T14656] bridge_slave_0: entered allmulticast mode
[  762.688954][T14656] bridge_slave_0: entered promiscuous mode
[  762.888521][T14656] bridge0: port 2(bridge_slave_1) entered blocking state
[  762.890555][T14656] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.890756][T14656] bridge_slave_1: entered allmulticast mode
[  762.918982][T14656] bridge_slave_1: entered promiscuous mode
[  763.260282][T14810] netlink: 'syz.2.3147': attribute type 10 has an invalid length.
[  763.339557][T14594] batman_adv: batadv0: Adding interface: batadv_slave_0
[  763.339573][T14594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  763.339598][T14594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  763.551829][T14594] batman_adv: batadv0: Adding interface: batadv_slave_1
[  763.551846][T14594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  763.551872][T14594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  763.694480][T14656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  763.758349][T14814] netlink: 'syz.1.3149': attribute type 29 has an invalid length.
[  763.827847][T14656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  763.859001][T14815] netlink: 'syz.1.3149': attribute type 29 has an invalid length.
[  764.232546][   T59] Bluetooth: hci8: command tx timeout
[  765.180886][T14656] team0: Port device team_slave_0 added
[  765.491431][T14656] team0: Port device team_slave_1 added
[  765.541574][T14594] hsr_slave_0: entered promiscuous mode
[  765.555027][T14594] hsr_slave_1: entered promiscuous mode
[  765.556985][T14594] debugfs: 'hsr0' already exists in 'hsr'
[  765.557009][T14594] Cannot create hsr debugfs directory
[  766.569936][T14656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  766.569953][T14656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  766.569979][T14656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  766.903699][T14857] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3166'.
[  767.775448][ T1535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  767.853390][T14656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  767.853407][T14656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  767.853433][T14656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  768.560632][T14875] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3175'.
[  770.550798][T14908] comedi comedi0: pcl724: I/O base address or length out of range
[  771.340392][ T1535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.571660][   T59] Bluetooth: hci2: unexpected event for opcode 0x1009
[  771.986271][T14656] hsr_slave_0: entered promiscuous mode
[  771.987711][T14656] hsr_slave_1: entered promiscuous mode
[  772.015743][T14656] debugfs: 'hsr0' already exists in 'hsr'
[  772.015766][T14656] Cannot create hsr debugfs directory
[  772.721148][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3204'.
[  773.614729][T14960] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  774.344771][T14977] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3223'.
[  774.377910][ T1535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.362545][   T10] usb 2-1: new full-speed USB device number 57 using dummy_hcd
[  775.514551][   T10] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  775.514578][   T10] usb 2-1: config 0 has no interface number 0
[  775.514621][   T10] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  775.514646][   T10] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  775.519408][   T10] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  775.519434][   T10] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  775.519452][   T10] usb 2-1: Manufacturer: syz
[  775.519465][   T10] usb 2-1: SerialNumber: syz
[  775.613034][   T10] usb 2-1: config 0 descriptor??
[  776.250496][   T10] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71
[  776.355852][   T10] usb 2-1: USB disconnect, device number 57
[  776.547274][ T1535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.700250][T14591] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  776.783431][T14591] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  777.002596][    T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  777.050260][T14591] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  777.152528][    T9] usb 3-1: Using ep0 maxpacket: 16
[  777.156904][    T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  777.156930][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.195724][    T9] usb 3-1: config 0 descriptor??
[  777.223875][    T9] gspca_main: sonixj-2.14.0 probing 0471:0327
[  777.393050][T14591] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  777.931624][T14591] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  778.191322][T14591] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  778.296333][T15013] netlink: 'syz.1.3240': attribute type 29 has an invalid length.
[  778.420718][T14591] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  778.437416][    T9] gspca_sonixj: reg_w1 err -71
[  778.452567][    T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  778.460830][    T9] usb 3-1: USB disconnect, device number 32
[  778.561072][T14591] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  778.561523][T15014] netlink: 'syz.1.3240': attribute type 29 has an invalid length.
[  779.199334][T15020] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  779.199361][T15020] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  780.775109][T14594] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  781.226069][T14594] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  781.658056][T14594] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  781.804796][T14594] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  781.824611][ T5705] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  781.860199][T14594] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  782.011925][ T5705] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  782.011953][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.045838][T14594] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  782.062940][ T5705] usb 2-1: config 0 descriptor??
[  782.098385][ T5705] pwc: Samsung MPC-C10 USB webcam detected.
[  782.196597][    T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  782.315503][ T5705] pwc: send_video_command error -71
[  782.315520][ T5705] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  782.315643][ T5705] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  782.367159][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  782.367182][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  782.368959][    T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  782.368984][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  782.369003][    T9] usb 3-1: SerialNumber: syz
[  782.427930][ T5705] usb 2-1: USB disconnect, device number 58
[  782.720005][    T9] usb 3-1: 0:2 : does not exist
[  782.851255][    T9] usb 3-1: USB disconnect, device number 33
[  782.852679][ T5705] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  782.969114][T14474] udevd[14474]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  783.034962][ T5705] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  783.035088][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.077387][ T5705] usb 2-1: config 0 descriptor??
[  783.118742][ T5705] pwc: Samsung MPC-C10 USB webcam detected.
[  783.709736][ T5705] pwc: recv_control_msg error -71 req 02 val 2700
[  783.720560][ T5705] pwc: recv_control_msg error -71 req 04 val 1700
[  783.746234][ T5705] pwc: recv_control_msg error -71 req 02 val 2c00
[  783.764417][ T5705] pwc: recv_control_msg error -71 req 04 val 1000
[  783.766369][ T5705] pwc: recv_control_msg error -71 req 04 val 1300
[  783.766953][ T5705] pwc: recv_control_msg error -71 req 04 val 1400
[  783.769335][ T5705] pwc: recv_control_msg error -71 req 02 val 2000
[  783.772022][ T5705] pwc: recv_control_msg error -71 req 02 val 2100
[  783.775511][ T5705] pwc: recv_control_msg error -71 req 02 val 2200
[  783.819395][ T5705] pwc: recv_control_msg error -71 req 06 val 0600
[  783.819847][ T5705] pwc: recv_control_msg error -71 req 04 val 1500
[  783.820298][ T5705] pwc: recv_control_msg error -71 req 02 val 2500
[  783.845786][ T5705] pwc: recv_control_msg error -71 req 02 val 2400
[  783.846330][ T5705] pwc: recv_control_msg error -71 req 02 val 2600
[  783.846772][ T5705] pwc: recv_control_msg error -71 req 02 val 2900
[  783.847224][ T5705] pwc: recv_control_msg error -71 req 02 val 2800
[  783.850456][ T5705] pwc: recv_control_msg error -71 req 04 val 1100
[  783.851551][ T5705] pwc: recv_control_msg error -71 req 04 val 1200
[  783.945608][ T5705] pwc: Registered as video103.
[  783.961114][ T5705] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[  784.052557][ T5705] usb 2-1: USB disconnect, device number 59
[  784.743080][ T1535] bridge_slave_1: left allmulticast mode
[  784.743113][ T1535] bridge_slave_1: left promiscuous mode
[  784.743377][ T1535] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.079237][ T1535] bridge_slave_0: left allmulticast mode
[  785.079271][ T1535] bridge_slave_0: left promiscuous mode
[  785.079537][ T1535] bridge0: port 1(bridge_slave_0) entered disabled state
[  785.648106][ T1535] bridge_slave_1: left allmulticast mode
[  785.648139][ T1535] bridge_slave_1: left promiscuous mode
[  785.648379][ T1535] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.010083][ T1535] bridge_slave_0: left allmulticast mode
[  786.010117][ T1535] bridge_slave_0: left promiscuous mode
[  786.010372][ T1535] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.436175][ T1535] bridge_slave_1: left allmulticast mode
[  786.436208][ T1535] bridge_slave_1: left promiscuous mode
[  786.436447][ T1535] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.755266][ T1535] bridge_slave_0: left allmulticast mode
[  786.755299][ T1535] bridge_slave_0: left promiscuous mode
[  786.755772][ T1535] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.868875][T15118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3285'.
[  787.083013][ T1535] bridge_slave_1: left allmulticast mode
[  787.083047][ T1535] bridge_slave_1: left promiscuous mode
[  787.083336][ T1535] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.264255][ T1535] bridge_slave_0: left allmulticast mode
[  787.264288][ T1535] bridge_slave_0: left promiscuous mode
[  787.264518][ T1535] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.392987][ T1535] bridge_slave_1: left allmulticast mode
[  787.393022][ T1535] bridge_slave_1: left promiscuous mode
[  787.393250][ T1535] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.484842][ T1535] bridge_slave_0: left allmulticast mode
[  787.484874][ T1535] bridge_slave_0: left promiscuous mode
[  787.485096][ T1535] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.757670][ T1535] bridge_slave_1: left allmulticast mode
[  787.757705][ T1535] bridge_slave_1: left promiscuous mode
[  787.758037][ T1535] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.834270][ T1535] bridge_slave_0: left allmulticast mode
[  787.834303][ T1535] bridge_slave_0: left promiscuous mode
[  787.834526][ T1535] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.032889][ T1535] bridge_slave_1: left allmulticast mode
[  788.032932][ T1535] bridge_slave_1: left promiscuous mode
[  788.041368][ T1535] bridge0: port 2(bridge_slave_1) entered disabled state
[  788.116365][ T1535] bridge_slave_0: left allmulticast mode
[  788.116396][ T1535] bridge_slave_0: left promiscuous mode
[  788.116632][ T1535] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.754670][ T1535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  788.793812][ T1535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  788.856585][ T1535] bond0 (unregistering): Released all slaves
[  789.265873][ T1535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  789.376140][ T1535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  789.424893][ T1535] bond0 (unregistering): Released all slaves
[  789.737293][ T1535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  789.825160][ T1535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  789.864835][ T1535] bond0 (unregistering): Released all slaves
[  790.095030][ T1535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  790.155363][ T1535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  790.185241][ T1535] bond0 (unregistering): Released all slaves
[  790.397403][ T1535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  790.477567][ T1535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  790.536407][ T1535] bond0 (unregistering): Released all slaves
[  791.036614][ T1535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  791.093426][ T1535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  791.117887][ T1535] bond0 (unregistering): Released all slaves
[  791.634800][ T1535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  791.693673][ T1535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  791.715591][ T1535] bond0 (unregistering): Released all slaves
[  791.757697][T14594] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  791.919098][T14594] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  792.873025][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'.
[  793.148354][T14656] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  793.410064][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  793.471497][T14656] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  793.530971][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  793.572107][T14656] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  793.702706][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  793.745918][T14656] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  793.850222][T14656] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  794.426294][T14591] 8021q: adding VLAN 0 to HW filter on device bond0
[  794.727440][T14591] 8021q: adding VLAN 0 to HW filter on device team0
[  794.836059][ T1563] bridge0: port 1(bridge_slave_0) entered blocking state
[  794.837793][ T1563] bridge0: port 1(bridge_slave_0) entered forwarding state
[  795.147194][ T1563] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.147323][ T1563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  795.247498][T14594] 8021q: adding VLAN 0 to HW filter on device bond0
[  795.486469][T14594] 8021q: adding VLAN 0 to HW filter on device team0
[  795.706753][ T1563] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.709483][ T1563] bridge0: port 1(bridge_slave_0) entered forwarding state
[  795.855727][ T1563] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.856046][ T1563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  796.126579][T14656] 8021q: adding VLAN 0 to HW filter on device bond0
[  796.288564][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3303'.
[  796.624244][T14656] 8021q: adding VLAN 0 to HW filter on device team0
[  796.695381][T15192] program syz.2.3304 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  797.086601][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.086821][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state
[  797.211557][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.211685][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  797.482489][   T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  797.633409][   T10] usb 3-1: Using ep0 maxpacket: 8
[  797.637115][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  797.637164][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  797.637189][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  797.637214][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  797.639925][   T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  797.639950][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  797.639970][   T10] usb 3-1: Product: syz
[  797.639984][   T10] usb 3-1: Manufacturer: syz
[  797.639997][   T10] usb 3-1: SerialNumber: syz
[  797.773305][   T10] usb 3-1: config 0 descriptor??
[  798.020852][   T10] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  798.020876][   T10] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  798.245940][   T10] radio-si470x 3-1:0.0: software version 0, hardware version 0
[  798.245965][   T10] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  798.245985][   T10] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  798.575938][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5
[  798.752759][   T10] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110
[  798.753033][    C0] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  798.753261][    C0] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  798.753345][   T10] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -32
[  798.753832][   T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22
[  799.780737][   T10] usb 3-1: USB disconnect, device number 34
[  801.766571][T14591] 8021q: adding VLAN 0 to HW filter on device batadv0
[  802.770002][T14594] 8021q: adding VLAN 0 to HW filter on device batadv0
[  803.688416][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6
[  804.314429][T14597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  804.374657][T14597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  804.379171][T14597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  804.415433][T14597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  804.417708][T14597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  805.423797][T14597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  805.495454][T14597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  805.496977][T14597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  805.498819][T14597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  805.692565][T14597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  806.308748][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7
[  806.366191][T14656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  806.553944][   T59] Bluetooth: hci0: command tx timeout
[  808.001867][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8
[  808.152483][   T59] Bluetooth: hci1: command tx timeout
[  808.447356][T14656] veth0_vlan: entered promiscuous mode
[  808.558176][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  808.558244][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  808.632765][   T59] Bluetooth: hci0: command tx timeout
[  808.793021][T14656] veth1_vlan: entered promiscuous mode
[  809.532878][   T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  809.682974][   T10] usb 2-1: Using ep0 maxpacket: 16
[  809.685515][   T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  809.685541][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.719168][T14656] veth0_macvtap: entered promiscuous mode
[  809.761112][   T10] usb 2-1: config 0 descriptor??
[  809.803543][   T10] gspca_main: sonixj-2.14.0 probing 0471:0327
[  810.004080][T14656] veth1_macvtap: entered promiscuous mode
[  810.232431][   T59] Bluetooth: hci1: command tx timeout
[  810.712534][   T59] Bluetooth: hci0: command tx timeout
[  810.790259][   T10] gspca_sonixj: reg_w1 err -71
[  810.802682][   T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  810.829441][   T10] usb 2-1: USB disconnect, device number 60
[  811.073864][T15268] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.075571][T15268] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.075765][T15268] bridge_slave_0: entered allmulticast mode
[  811.081717][T15268] bridge_slave_0: entered promiscuous mode
[  811.168873][T15268] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.168990][T15268] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.169494][T15268] bridge_slave_1: entered allmulticast mode
[  811.197889][T15268] bridge_slave_1: entered promiscuous mode
[  811.208804][T15266] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.208921][T15266] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.209426][T15266] bridge_slave_0: entered allmulticast mode
[  811.247786][T15266] bridge_slave_0: entered promiscuous mode
[  811.508481][T14597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  811.540744][T14597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  811.553869][T14597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  811.658451][T15266] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.658578][T15266] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.658801][T15266] bridge_slave_1: entered allmulticast mode
[  811.690451][T15266] bridge_slave_1: entered promiscuous mode
[  811.816328][T15268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  812.180527][T14597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  812.185687][T14597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  812.313497][   T59] Bluetooth: hci1: command tx timeout
[  812.792536][T14597] Bluetooth: hci0: command tx timeout
[  813.329819][T15268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  813.418741][T15266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  814.392501][T14597] Bluetooth: hci1: command tx timeout
[  814.552911][T14597] Bluetooth: hci3: command tx timeout
[  814.812447][ T5705] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  814.812624][ T5331] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  814.938405][T15266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  814.967495][ T5331] usb 2-1: Using ep0 maxpacket: 16
[  814.967631][ T5705] usb 3-1: Using ep0 maxpacket: 16
[  814.984389][ T5705] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  814.984415][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.984489][ T5705] usb 3-1: Product: syz
[  814.984504][ T5705] usb 3-1: Manufacturer: syz
[  814.984517][ T5705] usb 3-1: SerialNumber: syz
[  815.029370][ T5331] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  815.029396][ T5331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.077747][ T5331] usb 2-1: config 0 descriptor??
[  815.080187][ T5705] usb 3-1: config 0 descriptor??
[  815.120452][ T5331] gspca_main: sonixj-2.14.0 probing 0471:0327
[  815.305325][ T5705] gspca_main: spca508-2.14.0 probing 041e:4018
[  815.385442][ T5705] gspca_spca508: reg_read err -32
[  815.390592][ T5705] gspca_spca508: reg_read err -32
[  815.426886][ T5705] gspca_spca508: reg_read err -32
[  815.650988][ T5705] gspca_spca508: reg_read err -71
[  815.652919][ T5705] gspca_spca508: reg write: error -71
[  815.653057][ T5705] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[  815.731998][ T5705] usb 3-1: USB disconnect, device number 35
[  815.934604][T15131] udevd[15131]: setting owner of /dev/bus/usb/003/035 to uid=0, gid=0 failed: No such file or directory
[  816.039910][ T5331] gspca_sonixj: reg_r err -32
[  816.040007][ T5331] sonixj 2-1:0.0: probe with driver sonixj failed with error -32
[  816.069032][ T5331] usb 2-1: USB disconnect, device number 61
[  816.632543][T14597] Bluetooth: hci3: command tx timeout
[  816.882480][ T5331] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  817.062530][ T5331] usb 2-1: Using ep0 maxpacket: 32
[  817.064991][ T5331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  817.065019][ T5331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  817.065054][ T5331] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  817.065076][ T5331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.070814][ T5331] usb 2-1: config 0 descriptor??
[  817.137909][ T5331] hub 2-1:0.0: USB hub found
[  817.420286][ T5331] hub 2-1:0.0: 1 port detected
[  818.043524][ T5705] hub 2-1:0.0: activate --> -90
[  818.648015][ T5331] usb 2-1: USB disconnect, device number 62
[  818.712814][T14597] Bluetooth: hci3: command tx timeout
[  818.752590][ T5705] usb 2-1-port1: config error
[  819.682656][ T5331] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  819.871509][ T5331] usb 3-1: Using ep0 maxpacket: 8
[  819.877841][ T5331] usb 3-1: unable to get BOS descriptor or descriptor too short
[  819.880711][ T5331] usb 3-1: config 14 has an invalid interface number: 109 but max is 0
[  819.880735][ T5331] usb 3-1: config 14 has no interface number 0
[  819.880765][ T5331] usb 3-1: config 14 interface 109 has no altsetting 0
[  819.928648][ T5331] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=f4.1c
[  819.928674][ T5331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.928693][ T5331] usb 3-1: Product: syz
[  819.928706][ T5331] usb 3-1: Manufacturer: syz
[  819.928720][ T5331] usb 3-1: SerialNumber: syz
[  820.225365][ T5331] net1080 3-1:14.109: probe with driver net1080 failed with error -22
[  820.246224][ T5331] usb 3-1: USB disconnect, device number 36
[  820.506415][T15409] sg_write: data in/out 262111/56 bytes for SCSI command 0x0-- guessing data in;
[  820.506415][T15409]    program syz.1.3337 not setting count and/or reply_len properly
[  820.792691][T14597] Bluetooth: hci3: command tx timeout
[  821.387728][T15268] team0: Port device team_slave_0 added
[  821.980137][T15268] team0: Port device team_slave_1 added
[  822.020315][T15266] team0: Port device team_slave_0 added
[  822.020748][T15431] tipc: Started in network mode
[  822.020774][T15431] tipc: Node identity ac14142f, cluster identity 4711
[  822.119972][T15431] tipc: New replicast peer: 0.0.0.0
[  822.163747][T15431] tipc: Enabled bearer <udp:syz2>, priority 10
[  822.388908][T15266] team0: Port device team_slave_1 added
[  822.825223][T15451] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3353'.
[  822.825360][T15451] netlink: Conntrack attr has 4 unknown bytes
[  823.147075][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'.
[  823.600405][ T5731] tipc: Node number set to 2886997039
[  823.916103][T15268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  823.916118][T15268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  823.916144][T15268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  824.383078][T15479] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3361'.
[  824.383199][T15479] netlink: Conntrack attr has 4 unknown bytes
[  824.964091][T15268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  824.964108][T15268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  824.964134][T15268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  825.162437][    T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  825.219259][T15266] batman_adv: batadv0: Adding interface: batadv_slave_0
[  825.219274][T15266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  825.219307][T15266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  825.404167][    T9] usb 2-1: Using ep0 maxpacket: 16
[  825.406732][    T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  825.406754][    T9] usb 2-1: config 0 has no interface number 0
[  825.406796][    T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  825.406820][    T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  825.409446][    T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  825.409470][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.409592][    T9] usb 2-1: Product: syz
[  825.409606][    T9] usb 2-1: Manufacturer: syz
[  825.409703][    T9] usb 2-1: SerialNumber: syz
[  825.508039][    T9] usb 2-1: config 0 descriptor??
[  825.583137][T15491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  825.583309][T15491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  825.803756][T15491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  825.804101][T15491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  826.008917][    T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  826.826526][T15266] batman_adv: batadv0: Adding interface: batadv_slave_1
[  826.826543][T15266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.826569][T15266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  827.023955][    T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  827.023983][    T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  827.024249][    T9] asix 2-1:0.34: probe with driver asix failed with error -71
[  827.079724][    T9] usb 2-1: USB disconnect, device number 63
[  827.652161][T15268] hsr_slave_0: entered promiscuous mode
[  827.672047][T15268] hsr_slave_1: entered promiscuous mode
[  827.679552][T15268] debugfs: 'hsr0' already exists in 'hsr'
[  827.679576][T15268] Cannot create hsr debugfs directory
[  827.818701][T15520] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3369'.
[  827.818822][T15520] netlink: Conntrack attr has 4 unknown bytes
[  828.454491][T15266] hsr_slave_0: entered promiscuous mode
[  828.456916][T15266] hsr_slave_1: entered promiscuous mode
[  828.457900][T15266] debugfs: 'hsr0' already exists in 'hsr'
[  828.457923][T15266] Cannot create hsr debugfs directory
[  828.685380][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  829.596117][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  830.668711][ T1535] hsr_slave_0: left promiscuous mode
[  830.756839][ T1535] hsr_slave_1: left promiscuous mode
[  830.758948][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  830.797840][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3377'.
[  830.948732][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  831.363690][T14597] Bluetooth: hci2: unexpected event for opcode 0x2062
[  831.441081][T15579] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3383'.
[  831.441106][T15579] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3383'.
[  831.441120][T15579] netlink: 'syz.1.3383': attribute type 6 has an invalid length.
[  831.441133][T15579] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3383'.
[  831.791336][ T1535] hsr_slave_0: left promiscuous mode
[  831.824624][ T1535] hsr_slave_1: left promiscuous mode
[  831.825654][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  831.860517][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  831.952722][ T1535] hsr_slave_0: left promiscuous mode
[  831.975923][ T1535] hsr_slave_1: left promiscuous mode
[  831.977649][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.023779][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  832.137207][ T1535] hsr_slave_0: left promiscuous mode
[  832.152643][ T1535] hsr_slave_1: left promiscuous mode
[  832.153712][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.200993][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  832.390784][ T1535] hsr_slave_0: left promiscuous mode
[  832.423378][ T1535] hsr_slave_1: left promiscuous mode
[  832.425110][ T1535] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  832.425134][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.458973][ T1535] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  832.458997][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  832.606624][ T1535] hsr_slave_0: left promiscuous mode
[  832.618375][ T1535] hsr_slave_1: left promiscuous mode
[  832.619499][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.701874][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  832.805654][ T1535] veth1_macvtap: left promiscuous mode
[  832.805750][ T1535] veth0_macvtap: left promiscuous mode
[  832.828027][ T1535] veth1_vlan: left promiscuous mode
[  832.828211][ T1535] veth0_vlan: left promiscuous mode
[  833.523248][ T1535] team0 (unregistering): Port device team_slave_1 removed
[  833.574694][ T1535] team0 (unregistering): Port device team_slave_0 removed
[  834.463516][ T1535] team0 (unregistering): Port device team_slave_1 removed
[  834.505995][ T1535] team0 (unregistering): Port device team_slave_0 removed
[  835.243692][ T1535] team0 (unregistering): Port device team_slave_1 removed
[  835.315778][ T1535] team0 (unregistering): Port device team_slave_0 removed
[  835.432938][T14597] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  835.433177][T14597] Bluetooth: hci2: Injecting HCI hardware error event
[  835.436306][   T59] Bluetooth: hci2: hardware error 0x00
[  835.894366][ T1535] team0 (unregistering): Port device team_slave_1 removed
[  835.977672][ T1535] team0 (unregistering): Port device team_slave_0 removed
[  836.740822][ T1535] team0 (unregistering): Port device team_slave_1 removed
[  836.794717][ T1535] team0 (unregistering): Port device team_slave_0 removed
[  837.512751][   T59] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  837.687166][ T1535] team0 (unregistering): Port device team_slave_1 removed
[  837.744854][ T1535] team0 (unregistering): Port device team_slave_0 removed
[  838.434657][ T1535] team0 (unregistering): Port device team_slave_1 removed
[  838.485459][ T1535] team0 (unregistering): Port device team_slave_0 removed
[  838.911957][T15576] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001
[  838.932183][T15579] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3383'.
[  839.392659][ T5731] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  839.620776][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3385'.
[  839.634022][ T5731] usb 3-1: Using ep0 maxpacket: 8
[  839.636457][ T5731] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  839.636514][ T5731] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  839.636536][ T5731] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  839.636559][ T5731] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  839.636581][ T5731] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  839.636620][ T5731] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  839.636640][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.966126][ T5731] usb 3-1: GET_CAPABILITIES returned 0
[  839.966174][ T5731] usbtmc 3-1:16.0: can't read capabilities
[  840.282167][ T5731] usb 3-1: USB disconnect, device number 37
[  840.636280][T15349] bridge0: port 1(bridge_slave_0) entered blocking state
[  840.636485][T15349] bridge0: port 1(bridge_slave_0) entered disabled state
[  840.637014][T15349] bridge_slave_0: entered allmulticast mode
[  840.639626][T15349] bridge_slave_0: entered promiscuous mode
[  840.677149][T15349] bridge0: port 2(bridge_slave_1) entered blocking state
[  840.677340][T15349] bridge0: port 2(bridge_slave_1) entered disabled state
[  840.677531][T15349] bridge_slave_1: entered allmulticast mode
[  840.680183][T15349] bridge_slave_1: entered promiscuous mode
[  840.763127][T15349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  840.787491][T15349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  840.980360][T15349] team0: Port device team_slave_0 added
[  841.021707][T15349] team0: Port device team_slave_1 added
[  841.802447][ T5731] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  841.994123][ T5731] usb 3-1: Using ep0 maxpacket: 16
[  842.032409][ T5705] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[  842.053345][ T5731] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  842.053369][ T5731] usb 3-1: config 0 has no interface number 0
[  842.053433][ T5731] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  842.053457][ T5731] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  842.056368][ T5731] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  842.056393][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.056413][ T5731] usb 3-1: Product: syz
[  842.056426][ T5731] usb 3-1: Manufacturer: syz
[  842.056440][ T5731] usb 3-1: SerialNumber: syz
[  842.134838][ T5731] usb 3-1: config 0 descriptor??
[  842.136816][T15613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  842.137072][T15613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  842.195786][ T5705] usb 2-1: config 150 has an invalid interface number: 204 but max is 2
[  842.195813][ T5705] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  842.195833][ T5705] usb 2-1: config 150 has no interface number 0
[  842.195945][ T5705] usb 2-1: config 150 interface 204 has no altsetting 0
[  842.240573][ T5705] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  842.240600][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.240620][ T5705] usb 2-1: Product: syz
[  842.240634][ T5705] usb 2-1: Manufacturer: syz
[  842.240647][ T5705] usb 2-1: SerialNumber: syz
[  842.357543][T15613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  842.357746][T15613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  842.559596][ T5731] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  842.608570][ T5705] xr_serial 2-1:150.204: skipping garbage
[  842.608621][ T5705] xr_serial 2-1:150.204: xr_serial converter detected
[  843.413511][ T5705] xr_serial ttyUSB0: Failed to set reg 0x0e: -71
[  843.413626][ T5705] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  843.548476][ T5705] usb 2-1: USB disconnect, device number 64
[  843.583758][ T5731] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  843.583784][ T5731] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  843.584040][ T5731] asix 3-1:0.34: probe with driver asix failed with error -71
[  843.627605][ T5705] xr_serial 2-1:150.204: device disconnected
[  843.658342][ T5731] usb 3-1: USB disconnect, device number 38
[  843.673595][T15589] udevd[15589]: setting mode of /dev/bus/usb/002/064 to 020664 failed: No such file or directory
[  843.673762][T15589] udevd[15589]: setting owner of /dev/bus/usb/002/064 to uid=0, gid=0 failed: No such file or directory
[  844.005364][T15349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  844.005379][T15349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  844.005399][T15349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  844.007620][T15349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  844.007633][T15349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  844.007658][T15349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  844.379782][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3393'.
[  844.700376][T15349] hsr_slave_0: entered promiscuous mode
[  844.701855][T15349] hsr_slave_1: entered promiscuous mode
[  844.716966][T15349] debugfs: 'hsr0' already exists in 'hsr'
[  844.716990][T15349] Cannot create hsr debugfs directory
[  845.405151][T15633] comedi comedi3: 8255: I/O base address not correctly aligned
[  845.854131][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'.
[  847.353334][ T5731] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  847.522399][ T5731] usb 3-1: Using ep0 maxpacket: 32
[  847.524742][ T5731] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  847.524766][ T5731] usb 3-1: config 0 has no interface number 0
[  847.524830][ T5731] usb 3-1: config 0 interface 184 has no altsetting 0
[  847.527212][ T5731] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  847.527237][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.527256][ T5731] usb 3-1: Product: syz
[  847.527269][ T5731] usb 3-1: Manufacturer: syz
[  847.527282][ T5731] usb 3-1: SerialNumber: syz
[  847.532873][ T5731] usb 3-1: config 0 descriptor??
[  848.178324][ T5731] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  848.178353][ T5731] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  850.035682][ T5731] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71
[  850.035713][ T5731] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71
[  850.035731][ T5731] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  850.035756][ T5731] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  850.036057][ T5731] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  850.093816][ T5731] usb 3-1: USB disconnect, device number 39
[  850.487485][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3416'.
[  850.487510][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3416'.
[  851.616178][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'.
[  851.616203][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'.
[  852.537913][    T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  852.721529][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  852.721587][    T9] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  852.721614][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  852.721644][    T9] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[  852.721665][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.780185][    T9] usb 2-1: config 0 descriptor??
[  852.925153][    T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  855.264422][    T9] usb 2-1: USB disconnect, device number 65
[  855.723430][    T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  855.879256][    T9] usb 2-1: Using ep0 maxpacket: 32
[  855.889216][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  855.930008][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40
[  855.930034][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.930053][    T9] usb 2-1: Manufacturer: Ч
[  855.930074][    T9] usb 2-1: SerialNumber: syz
[  856.323121][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'.
[  856.323199][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'.
[  856.410331][    T9] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 10, bLength 9, bSynchAddress 04
[  856.653480][    T9] usb 2-1: USB disconnect, device number 66
[  857.180844][T15590] udevd[15590]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  858.652454][    T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  858.802521][    T9] usb 2-1: Using ep0 maxpacket: 32
[  858.806085][    T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  858.806107][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  858.806132][    T9] usb 2-1: config 0 has no interface number 0
[  858.806172][    T9] usb 2-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  858.806198][    T9] usb 2-1: config 0 interface 184 has no altsetting 0
[  858.809700][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  858.809725][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.809744][    T9] usb 2-1: Product: syz
[  858.809757][    T9] usb 2-1: Manufacturer: syz
[  858.809770][    T9] usb 2-1: SerialNumber: syz
[  858.899664][    T9] usb 2-1: config 0 descriptor??
[  858.957068][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  858.957767][    T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22
[  859.163151][    T9] usb 2-1: USB disconnect, device number 67
[  859.692376][    T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  859.847461][    T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  859.847492][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.847512][    T9] usb 3-1: Product: syz
[  859.847525][    T9] usb 3-1: Manufacturer: syz
[  859.847539][    T9] usb 3-1: SerialNumber: syz
[  860.325708][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  860.325775][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  862.042196][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  862.049020][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  862.049522][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  862.049573][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  862.194299][    T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  862.527660][    T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  862.619008][    T9] usb 3-1: USB disconnect, device number 40
[  863.502869][ T5731] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  863.574649][T15268] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  863.653170][ T5731] usb 3-1: Using ep0 maxpacket: 16
[  863.660044][ T5731] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  863.660069][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.706920][T15268] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  863.710280][T15268] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  863.742146][ T5731] usb 3-1: config 0 descriptor??
[  863.791278][ T5731] gspca_main: sonixj-2.14.0 probing 0471:0327
[  864.216924][T15268] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  865.018818][ T5731] gspca_sonixj: reg_w1 err -71
[  865.039523][ T5731] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  865.068242][ T5731] usb 3-1: USB disconnect, device number 41
[  866.006143][T14597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  866.057356][T14597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  866.058939][T14597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  866.088829][T14597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  866.112499][T14597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  866.211019][   T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  866.259882][   T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  866.277010][   T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  866.323919][   T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  866.346234][   T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  868.554661][   T59] Bluetooth: hci6: command tx timeout
[  868.633659][   T59] Bluetooth: hci4: command tx timeout
[  868.672369][ T5705] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  868.813688][ T5705] usb 3-1: device descriptor read/64, error -71
[  869.056090][ T5705] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  869.184512][ T5705] usb 3-1: device descriptor read/64, error -71
[  869.295368][ T5705] usb usb3-port1: attempt power cycle
[  869.686355][ T5705] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  869.703624][ T5705] usb 3-1: device descriptor read/8, error -71
[  869.942473][ T5705] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  869.963154][ T5705] usb 3-1: device descriptor read/8, error -71
[  869.995688][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  869.995755][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  870.017645][T15823] syzkaller1: entered promiscuous mode
[  870.017669][T15823] syzkaller1: entered allmulticast mode
[  870.073001][ T5705] usb usb3-port1: unable to enumerate USB device
[  870.635805][   T59] Bluetooth: hci6: command tx timeout
[  870.721585][   T59] Bluetooth: hci4: command tx timeout
[  870.788963][T15828] binder: 15827:15828 ioctl 4018620d 0 returned -22
[  871.182361][ T5705] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  871.332633][ T5705] usb 2-1: Using ep0 maxpacket: 16
[  871.335136][ T5705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  871.335158][ T5705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  871.552780][ T5705] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  871.552809][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.552828][ T5705] usb 2-1: Product: syz
[  871.552841][ T5705] usb 2-1: Manufacturer: syz
[  871.552855][ T5705] usb 2-1: SerialNumber: syz
[  871.612534][ T5705] usb 2-1: 0:2 : does not exist
[  871.847365][ T5705] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  872.124937][ T5705] usb 2-1: USB disconnect, device number 68
[  872.488631][T14597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  872.535731][T14597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  872.539327][T14597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  872.609175][T14597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  872.641942][T14597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  872.717572][T14597] Bluetooth: hci6: command tx timeout
[  872.792462][   T59] Bluetooth: hci4: command tx timeout
[  872.942877][T15587] udevd[15587]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  874.796942][T14597] Bluetooth: hci6: command tx timeout
[  874.797025][   T59] Bluetooth: hci0: command tx timeout
[  874.872474][   T59] Bluetooth: hci4: command tx timeout
[  875.319142][T15761] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.319261][T15761] bridge0: port 1(bridge_slave_0) entered disabled state
[  875.319432][T15761] bridge_slave_0: entered allmulticast mode
[  875.352109][T15761] bridge_slave_0: entered promiscuous mode
[  875.500866][T15874] binder: 15873:15874 ioctl 4018620d 0 returned -22
[  875.843374][    T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  876.008797][T15871] netlink: 'syz.1.3464': attribute type 29 has an invalid length.
[  876.014646][T15761] bridge0: port 2(bridge_slave_1) entered blocking state
[  876.014775][T15761] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.015032][T15761] bridge_slave_1: entered allmulticast mode
[  876.022396][    T9] usb 3-1: Using ep0 maxpacket: 16
[  876.025180][    T9] usb 3-1: config 0 has an invalid interface number: 107 but max is 0
[  876.025202][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  876.025221][    T9] usb 3-1: config 0 has no interface number 0
[  876.025263][    T9] usb 3-1: config 0 interface 107 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  876.025284][    T9] usb 3-1: config 0 interface 107 altsetting 255 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  876.025309][    T9] usb 3-1: config 0 interface 107 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 13
[  876.025334][    T9] usb 3-1: config 0 interface 107 has no altsetting 0
[  876.028816][    T9] usb 3-1: New USB device found, idVendor=06a5, idProduct=0000, bcdDevice=f3.50
[  876.028839][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.028858][    T9] usb 3-1: Product: syz
[  876.028871][    T9] usb 3-1: Manufacturer: syz
[  876.028890][    T9] usb 3-1: SerialNumber: syz
[  876.192887][    T9] usb 3-1: config 0 descriptor??
[  876.221045][T15761] bridge_slave_1: entered promiscuous mode
[  876.427016][    T9] gspca_main: nw80x-2.14.0 probing 06a5:0000
[  876.427821][    T9] gspca_nw80x: reg_w err -71
[  876.427911][    T9] nw80x 3-1:0.107: probe with driver nw80x failed with error -71
[  876.457799][    T9] usb 3-1: USB disconnect, device number 46
[  876.683515][T15872] netlink: 'syz.1.3464': attribute type 29 has an invalid length.
[  876.745197][T15764] bridge0: port 1(bridge_slave_0) entered blocking state
[  876.745399][T15764] bridge0: port 1(bridge_slave_0) entered disabled state
[  876.745585][T15764] bridge_slave_0: entered allmulticast mode
[  876.751817][T15764] bridge_slave_0: entered promiscuous mode
[  876.827195][T15764] bridge0: port 2(bridge_slave_1) entered blocking state
[  876.827321][T15764] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.827498][T15764] bridge_slave_1: entered allmulticast mode
[  876.854153][T15764] bridge_slave_1: entered promiscuous mode
[  876.872429][   T59] Bluetooth: hci0: command tx timeout
[  876.905752][T15761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  876.952201][T15761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  877.102391][ T5705] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  877.303942][ T5705] usb 2-1: device descriptor read/64, error -71
[  877.429732][T15764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  877.490112][T15764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  877.513169][    T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  877.519699][T15761] team0: Port device team_slave_0 added
[  877.542516][ T5705] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  877.581819][T15761] team0: Port device team_slave_1 added
[  877.642426][    T9] usb 3-1: device descriptor read/64, error -71
[  877.672817][ T5705] usb 2-1: device descriptor read/64, error -71
[  877.699832][T15764] team0: Port device team_slave_0 added
[  877.783810][T15764] team0: Port device team_slave_1 added
[  877.784401][ T5705] usb usb2-port1: attempt power cycle
[  877.886712][    T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  878.012417][    T9] usb 3-1: device descriptor read/64, error -71
[  878.050504][T15761] batman_adv: batadv0: Adding interface: batadv_slave_0
[  878.050519][T15761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  878.050544][T15761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  878.128013][    T9] usb usb3-port1: attempt power cycle
[  878.142509][ T5705] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  878.164435][ T5705] usb 2-1: device descriptor read/8, error -71
[  878.170321][T15761] batman_adv: batadv0: Adding interface: batadv_slave_1
[  878.170335][T15761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  878.170362][T15761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  878.289595][T15764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  878.289611][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  878.289636][T15764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  878.366196][T15764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  878.366211][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  878.366236][T15764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  878.402418][ T5705] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  878.429508][ T5705] usb 2-1: device descriptor read/8, error -71
[  878.493007][    T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  878.513042][    T9] usb 3-1: device descriptor read/8, error -71
[  878.532795][ T5705] usb usb2-port1: unable to enumerate USB device
[  878.551269][T15761] hsr_slave_0: entered promiscuous mode
[  878.559864][T15761] hsr_slave_1: entered promiscuous mode
[  878.560868][T15761] debugfs: 'hsr0' already exists in 'hsr'
[  878.560892][T15761] Cannot create hsr debugfs directory
[  878.617789][T15764] hsr_slave_0: entered promiscuous mode
[  878.619129][T15764] hsr_slave_1: entered promiscuous mode
[  878.620064][T15764] debugfs: 'hsr0' already exists in 'hsr'
[  878.620087][T15764] Cannot create hsr debugfs directory
[  878.772352][    T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  878.793384][    T9] usb 3-1: device descriptor read/8, error -71
[  878.904153][    T9] usb usb3-port1: unable to enumerate USB device
[  878.952627][   T59] Bluetooth: hci0: command tx timeout
[  879.626631][T15838] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.626826][T15838] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.627020][T15838] bridge_slave_0: entered allmulticast mode
[  879.629626][T15838] bridge_slave_0: entered promiscuous mode
[  879.697610][T15838] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.697727][T15838] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.697918][T15838] bridge_slave_1: entered allmulticast mode
[  879.700874][T15838] bridge_slave_1: entered promiscuous mode
[  879.915678][T15838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  880.077095][T15838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  880.139586][T15838] team0: Port device team_slave_0 added
[  880.149196][T15838] team0: Port device team_slave_1 added
[  880.220510][T15838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  880.220525][T15838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  880.220551][T15838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  880.258897][    T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  880.279818][T15838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  880.279834][T15838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  880.279860][T15838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  880.425142][    T9] usb 2-1: config 9 has an invalid interface number: 7 but max is 0
[  880.425168][    T9] usb 2-1: config 9 has no interface number 0
[  880.425212][    T9] usb 2-1: config 9 interface 7 has no altsetting 0
[  880.429360][    T9] usb 2-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01
[  880.429387][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.429409][    T9] usb 2-1: Product: syz
[  880.429423][    T9] usb 2-1: Manufacturer: syz
[  880.429438][    T9] usb 2-1: SerialNumber: syz
[  880.751026][    T9] go7007 2-1:9.7: probe with driver go7007 failed with error -12
[  880.776283][    T9] usb 2-1: USB disconnect, device number 73
[  880.927453][T15838] hsr_slave_0: entered promiscuous mode
[  880.928930][T15838] hsr_slave_1: entered promiscuous mode
[  880.929884][T15838] debugfs: 'hsr0' already exists in 'hsr'
[  880.929920][T15838] Cannot create hsr debugfs directory
[  881.032569][   T59] Bluetooth: hci0: command tx timeout
[  881.642950][T15900] netlink: 'syz.2.3474': attribute type 29 has an invalid length.
[  881.644601][    T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  881.696786][T15901] netlink: 'syz.2.3474': attribute type 29 has an invalid length.
[  881.823320][    T9] usb 2-1: Using ep0 maxpacket: 32
[  881.825542][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  881.825570][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  881.825606][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  881.825628][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.890112][    T9] usb 2-1: config 0 descriptor??
[  881.912936][    T9] hub 2-1:0.0: USB hub found
[  882.039107][T15903] binder: 15902:15903 unknown command 0
[  882.039126][T15903] binder: 15902:15903 ioctl c0306201 2000000001c0 returned -22
[  882.111729][    T9] hub 2-1:0.0: 1 port detected
[  882.962724][ T5705] usb 2-1: USB disconnect, device number 74
[  883.423608][ T5331] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  883.576011][ T5331] usb 3-1: Using ep0 maxpacket: 16
[  883.578567][ T5331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  883.578590][ T5331] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  883.582109][ T5331] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  883.582135][ T5331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.582154][ T5331] usb 3-1: Product: syz
[  883.582168][ T5331] usb 3-1: Manufacturer: syz
[  883.582181][ T5331] usb 3-1: SerialNumber: syz
[  883.741624][ T5331] usb 3-1: 0:2 : does not exist
[  883.966464][ T5331] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  884.206681][ T5705] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  884.293411][ T5331] usb 3-1: USB disconnect, device number 51
[  884.402417][ T5705] usb 2-1: device descriptor read/64, error -71
[  884.587111][T15587] udevd[15587]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  884.642439][ T5705] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  884.832468][ T5705] usb 2-1: device descriptor read/64, error -71
[  884.945241][ T5705] usb usb2-port1: attempt power cycle
[  884.996872][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9
[  885.342431][ T5705] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  885.364404][ T5705] usb 2-1: device descriptor read/8, error -71
[  885.408889][T15933] netlink: 'syz.2.3482': attribute type 29 has an invalid length.
[  885.441409][T15933] netlink: 'syz.2.3482': attribute type 29 has an invalid length.
[  885.642447][ T5705] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  885.663272][ T5705] usb 2-1: device descriptor read/8, error -71
[  885.775190][ T5705] usb usb2-port1: unable to enumerate USB device
[  886.162460][ T5705] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  886.312674][ T5705] usb 3-1: Using ep0 maxpacket: 32
[  886.315059][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  886.315087][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  886.315122][ T5705] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  886.315151][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.374347][ T5705] usb 3-1: config 0 descriptor??
[  886.391174][ T5705] hub 3-1:0.0: USB hub found
[  886.593977][ T5705] hub 3-1:0.0: 1 port detected
[  886.791563][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10
[  887.422728][ T5731] usb 3-1: USB disconnect, device number 52
[  888.412510][ T5731] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  888.565300][ T5731] usb 3-1: Using ep0 maxpacket: 32
[  888.569250][ T5731] usb 3-1: config 9 has an invalid interface number: 249 but max is 1
[  888.569274][ T5731] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  888.569292][ T5731] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 2
[  888.569311][ T5731] usb 3-1: config 9 has no interface number 0
[  888.569354][ T5731] usb 3-1: config 9 interface 249 altsetting 14 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  888.569381][ T5731] usb 3-1: config 9 interface 249 altsetting 14 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  888.569405][ T5731] usb 3-1: config 9 interface 249 altsetting 14 has a duplicate endpoint with address 0xB, skipping
[  888.569425][ T5731] usb 3-1: config 9 interface 249 altsetting 14 has 4 endpoint descriptors, different from the interface descriptor's value: 10
[  888.569450][ T5731] usb 3-1: config 9 interface 249 has no altsetting 0
[  888.716967][ T5731] usb 3-1: New USB device found, idVendor=1410, idProduct=a007, bcdDevice=80.73
[  888.717001][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.717021][ T5731] usb 3-1: Product: syz
[  888.717035][ T5731] usb 3-1: Manufacturer: syz
[  888.717048][ T5731] usb 3-1: SerialNumber: syz
[  889.065711][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11
[  889.092367][ T5731] usb 3-1: USB disconnect, device number 53
[  890.022465][ T5731] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  890.174330][ T5731] usb 3-1: Using ep0 maxpacket: 16
[  890.177003][ T5731] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  890.177026][ T5731] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  890.180350][ T5731] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  890.180374][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.180393][ T5731] usb 3-1: Product: syz
[  890.180406][ T5731] usb 3-1: Manufacturer: syz
[  890.180419][ T5731] usb 3-1: SerialNumber: syz
[  890.323258][ T5731] usb 3-1: 0:2 : does not exist
[  890.536654][ T5731] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  890.732065][ T5731] usb 3-1: USB disconnect, device number 54
[  891.120344][T15587] udevd[15587]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  891.271378][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12
[  905.340089][T14597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  905.464744][T14597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  905.499714][T14597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  905.509588][T14597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  905.552980][T14597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  907.592493][T14597] Bluetooth: hci1: command tx timeout
[  909.672868][T14597] Bluetooth: hci1: command tx timeout
[  911.752690][T14597] Bluetooth: hci1: command tx timeout
[  913.832432][T14597] Bluetooth: hci1: command tx timeout
[  924.936080][   T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  924.991771][   T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  925.066921][   T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  925.070827][   T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  925.071668][   T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  925.909292][T14597] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  925.976949][T14597] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  925.979907][T14597] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  926.030681][T14597] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  926.031785][T14597] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  927.272735][   T59] Bluetooth: hci3: command tx timeout
[  928.552466][   T59] Bluetooth: hci7: command tx timeout
[  929.352489][   T59] Bluetooth: hci3: command tx timeout
[  930.632467][   T59] Bluetooth: hci7: command tx timeout
[  931.440086][   T59] Bluetooth: hci3: command tx timeout
[  931.440794][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  931.440857][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  932.722376][   T59] Bluetooth: hci7: command tx timeout
[  932.888412][T14597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  932.945390][T14597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  932.946857][T14597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  932.966944][T14597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  932.967767][T14597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  933.512436][T14597] Bluetooth: hci3: command tx timeout
[  934.792643][T14597] Bluetooth: hci7: command tx timeout
[  935.112983][T14597] Bluetooth: hci5: command tx timeout
[  937.192564][T14597] Bluetooth: hci5: command tx timeout
[  939.272415][T14597] Bluetooth: hci5: command tx timeout
[  941.352385][T14597] Bluetooth: hci5: command tx timeout
[  965.278637][   T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  965.319864][   T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  965.332458][   T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  965.358560][   T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  965.359319][   T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  967.512500][T14597] Bluetooth: hci8: command tx timeout
[  969.592458][T14597] Bluetooth: hci8: command tx timeout
[  971.672454][T14597] Bluetooth: hci8: command tx timeout
[  973.754096][T14597] Bluetooth: hci8: command tx timeout
[  985.641068][   T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  985.679266][   T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  985.680753][   T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  985.692912][   T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  985.693692][   T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  986.498522][   T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  986.551815][   T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  986.571330][   T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  986.606101][   T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  986.608721][   T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  987.759848][ T5609] Bluetooth: hci9: command tx timeout
[  988.793756][   T59] Bluetooth: hci10: command tx timeout
[  989.833062][T19448] Bluetooth: hci9: command tx timeout
[  989.928984][T13253] Bluetooth: hci4: command 0x0406 tx timeout
[  989.929534][T19448] Bluetooth: hci6: command 0x0406 tx timeout
[  990.873533][T19448] Bluetooth: hci10: command tx timeout
[  991.913023][T19448] Bluetooth: hci9: command tx timeout
[  992.875317][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  992.875387][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  992.978828][T13253] Bluetooth: hci10: command tx timeout
[  993.442139][   T59] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  993.494743][   T59] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  993.519837][   T59] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  993.538932][   T59] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  993.539809][   T59] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  993.993162][   T59] Bluetooth: hci9: command tx timeout
[  995.033348][   T59] Bluetooth: hci10: command tx timeout
[  995.033387][   T59] Bluetooth: hci0: command 0x0406 tx timeout
[ 1025.384327][   T59] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1025.430625][   T59] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1025.440466][   T59] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1025.442070][   T59] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1025.461048][   T59] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1033.627893][T20990] Bluetooth: hci1: command 0x0406 tx timeout
[ 1034.472566][   T38] INFO: task syz-executor:15764 blocked for more than 143 seconds.
[ 1034.472592][   T38]       Tainted: G             L      syzkaller #0
[ 1034.472604][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1034.472613][   T38] task:syz-executor    state:D stack:22552 pid:15764 tgid:15764 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1034.472660][   T38] Call Trace:
[ 1034.472668][   T38]  <TASK>
[ 1034.472681][   T38]  __schedule+0x16ec/0x5620
[ 1034.472731][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1034.472768][   T38]  ? __pfx___schedule+0x10/0x10
[ 1034.472786][   T38]  ? rt_mutex_slowlock_block+0x2e9/0x680
[ 1034.472829][   T38]  rt_mutex_schedule+0x76/0xf0
[ 1034.472851][   T38]  rt_mutex_slowlock_block+0x508/0x680
[ 1034.472889][   T38]  ? rt_mutex_slowlock_block+0x2e9/0x680
[ 1034.472919][   T38]  rt_mutex_slowlock+0x2dc/0x780
[ 1034.472940][   T38]  ? rt_mutex_slowlock+0x1fd/0x780
[ 1034.472959][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1034.472989][   T38]  ? del_device_store+0xd7/0x370
[ 1034.473014][   T38]  ? del_device_store+0xd7/0x370
[ 1034.473038][   T38]  ? del_device_store+0xd7/0x370
[ 1034.473055][   T38]  mutex_lock_nested+0x168/0x1d0
[ 1034.473087][   T38]  del_device_store+0xd7/0x370
[ 1034.473105][   T38]  ? sysfs_file_kobj+0x1a/0x230
[ 1034.473131][   T38]  ? __pfx_del_device_store+0x10/0x10
[ 1034.473149][   T38]  ? sysfs_file_kobj+0x1e4/0x230
[ 1034.473174][   T38]  ? sysfs_kf_write+0x166/0x260
[ 1034.473202][   T38]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1034.473224][   T38]  kernfs_fop_write_iter+0x3b0/0x540
[ 1034.473253][   T38]  vfs_write+0x629/0xba0
[ 1034.473284][   T38]  ? __pfx_vfs_write+0x10/0x10
[ 1034.473314][   T38]  ? do_sys_openat2+0x14c/0x200
[ 1034.473338][   T38]  ? kmem_cache_free+0x187/0x6c0
[ 1034.473375][   T38]  ksys_write+0x156/0x270
[ 1034.473398][   T38]  ? __pfx_ksys_write+0x10/0x10
[ 1034.473428][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.473449][   T38]  do_syscall_64+0x15f/0xf80
[ 1034.473473][   T38]  ? clear_bhb_loop+0x40/0x90
[ 1034.473496][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.473516][   T38] RIP: 0033:0x7f2e97b0d60e
[ 1034.473534][   T38] RSP: 002b:00007ffc3e925c28 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1034.473553][   T38] RAX: ffffffffffffffda RBX: 000055558fbe2500 RCX: 00007f2e97b0d60e
[ 1034.473567][   T38] RDX: 0000000000000001 RSI: 00007ffc3e925cb0 RDI: 0000000000000005
[ 1034.473580][   T38] RBP: 00007f2e97be35ec R08: 0000000000000000 R09: 0000000000000000
[ 1034.473592][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1034.473604][   T38] R13: 00007ffc3e925cb0 R14: 00007f2e988f4620 R15: 0000000000000003
[ 1034.473635][   T38]  </TASK>
[ 1034.473648][   T38] INFO: task syz-executor:15838 blocked for more than 143 seconds.
[ 1034.473664][   T38]       Tainted: G             L      syzkaller #0
[ 1034.473675][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1034.473683][   T38] task:syz-executor    state:D stack:22312 pid:15838 tgid:15838 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1034.473725][   T38] Call Trace:
[ 1034.473732][   T38]  <TASK>
[ 1034.473744][   T38]  __schedule+0x16ec/0x5620
[ 1034.473802][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1034.473897][   T38]  ? __pfx___schedule+0x10/0x10
[ 1034.473935][   T38]  rt_mutex_schedule+0x76/0xf0
[ 1034.473954][   T38]  rt_mutex_slowlock_block+0x508/0x680
[ 1034.473998][   T38]  rt_mutex_slowlock+0x2dc/0x780
[ 1034.474019][   T38]  ? rt_mutex_slowlock+0x1fd/0x780
[ 1034.474038][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1034.474069][   T38]  ? del_device_store+0xd7/0x370
[ 1034.474092][   T38]  ? del_device_store+0xd7/0x370
[ 1034.474117][   T38]  ? del_device_store+0xd7/0x370
[ 1034.474133][   T38]  mutex_lock_nested+0x168/0x1d0
[ 1034.474164][   T38]  del_device_store+0xd7/0x370
[ 1034.474182][   T38]  ? sysfs_file_kobj+0x1a/0x230
[ 1034.474207][   T38]  ? __pfx_del_device_store+0x10/0x10
[ 1034.474226][   T38]  ? sysfs_file_kobj+0x1e4/0x230
[ 1034.474250][   T38]  ? sysfs_kf_write+0x166/0x260
[ 1034.474277][   T38]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1034.474300][   T38]  kernfs_fop_write_iter+0x3b0/0x540
[ 1034.474335][   T38]  vfs_write+0x629/0xba0
[ 1034.474365][   T38]  ? __pfx_vfs_write+0x10/0x10
[ 1034.474389][   T38]  ? do_sys_openat2+0x14c/0x200
[ 1034.474412][   T38]  ? kmem_cache_free+0x187/0x6c0
[ 1034.474449][   T38]  ksys_write+0x156/0x270
[ 1034.474473][   T38]  ? __pfx_ksys_write+0x10/0x10
[ 1034.474502][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.474523][   T38]  do_syscall_64+0x15f/0xf80
[ 1034.474546][   T38]  ? clear_bhb_loop+0x40/0x90
[ 1034.474568][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.474586][   T38] RIP: 0033:0x7f05c82fd60e
[ 1034.474603][   T38] RSP: 002b:00007ffcd2624dd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1034.474622][   T38] RAX: ffffffffffffffda RBX: 00005555782c7500 RCX: 00007f05c82fd60e
[ 1034.474635][   T38] RDX: 0000000000000001 RSI: 00007ffcd2624e60 RDI: 0000000000000005
[ 1034.474648][   T38] RBP: 00007f05c83d35ec R08: 0000000000000000 R09: 0000000000000000
[ 1034.474660][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1034.474672][   T38] R13: 00007ffcd2624e60 R14: 00007f05c90e4620 R15: 0000000000000003
[ 1034.474704][   T38]  </TASK>
[ 1034.474746][   T38] 
[ 1034.474746][   T38] Showing all locks held in the system:
[ 1034.474756][   T38] 3 locks held by rcuc/1/28:
[ 1034.474772][   T38] 5 locks held by kworker/1:0/31:
[ 1034.474784][   T38] 5 locks held by kworker/1:1/36:
[ 1034.474795][   T38] 1 lock held by khungtaskd/38:
[ 1034.474806][   T38]  #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1034.474858][   T38] 5 locks held by kworker/u9:0/59:
[ 1034.474869][   T38]  #0: ffff888056d55138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1034.474914][   T38]  #1: ffffc9000125fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1034.474959][   T38]  #2: ffff88808ab54f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[ 1034.475004][   T38]  #3: ffff88808ab540b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[ 1034.475052][   T38]  #4: ffffffff8f4d7978 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
[ 1034.475104][   T38] 3 locks held by kworker/u8:6/158:
[ 1034.475114][   T38]  #0: ffff888032d1e138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1034.475158][   T38]  #1: ffffc90003b4fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1034.475203][   T38]  #2: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[ 1034.475251][   T38] 3 locks held by kworker/1:2/820:
[ 1034.475266][   T38] 6 locks held by kworker/u8:9/1535:
[ 1034.475290][   T38]  #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1034.475361][   T38]  #1: ffffc90006bdfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1034.475405][   T38]  #2: ffffffff8f3487a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1034.475448][   T38]  #3: ffff88802d6b8160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[ 1034.475498][   T38]  #4: ffff88802cf6e310 (&devlink->lock_key#12){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[ 1034.475550][   T38]  #5: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0
[ 1034.475600][   T38] 3 locks held by kworker/u8:12/2902:
[ 1034.475611][   T38]  #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1034.475660][   T38]  #1: ffffc9000e50fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1034.475701][   T38]  #2: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1034.475750][   T38] 1 lock held by dhcpcd/5260:
[ 1034.475759][   T38]  #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1034.475803][   T38] 2 locks held by getty/5358:
[ 1034.475814][   T38]  #0: ffff888036e9e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1034.475858][   T38]  #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[ 1034.475906][   T38] 3 locks held by kworker/1:4/5606:
[ 1034.475916][   T38] 5 locks held by kworker/u9:4/5609:
[ 1034.475927][   T38]  #0: ffff88803fa3d138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1034.475970][   T38]  #1: ffffc9000444fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1034.476013][   T38]  #2: ffff888061264f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[ 1034.476055][   T38]  #3: ffff8880612640b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[ 1034.476101][   T38]  #4: ffffffff8f4d7978 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
[ 1034.476151][   T38] 6 locks held by kworker/1:5/5738:
[ 1034.476162][   T38] 1 lock held by kworker/1:6/5739:
[ 1034.476172][   T38] 1 lock held by syz-executor/10290:
[ 1034.476183][   T38]  #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[ 1034.476227][   T38] 5 locks held by kworker/u8:17/13204:
[ 1034.476237][   T38] 4 locks held by kworker/u9:1/13253:
[ 1034.476247][   T38]  #0: ffff8880715f8938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1034.476292][   T38]  #1: ffffc9000523fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1034.476340][   T38]  #2: ffff88805fa6c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950
[ 1034.476380][   T38]  #3: ffffffff8f4d7978 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950
[ 1034.476449][   T38] 3 locks held by kworker/1:9/14012:
[ 1034.476460][   T38] 2 locks held by kworker/1:10/14021:
[ 1034.476471][   T38] 5 locks held by kworker/1:11/14051:
[ 1034.476483][   T38] 6 locks held by kworker/u9:2/14597:
[ 1034.476493][   T38]  #0: ffff888060b9c938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1034.476535][   T38]  #1: ffffc9000536fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1034.476577][   T38]  #2: ffff88808aa78f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[ 1034.476620][   T38]  #3: ffff88808aa780b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[ 1034.476668][   T38]  #4: ffffffff8f4d7978 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
[ 1034.476715][   T38]  #5: ffff888060e89370 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570
[ 1034.476788][   T38] 8 locks held by syz-executor/15761:
[ 1034.476799][   T38]  #0: ffff888033694480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1034.476846][   T38]  #1: ffff8880376bb878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1034.476892][   T38]  #2: ffff8880293115a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1034.476941][   T38]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1034.476984][   T38]  #4: ffff88802c912160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870
[ 1034.477030][   T38]  #5: ffff888072618310 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[ 1034.477078][   T38]  #6: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0
[ 1034.477118][   T38]  #7: ffff88805f210f78 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1197/0x22b0
[ 1034.477174][   T38] 4 locks held by syz-executor/15764:
[ 1034.477185][   T38]  #0: ffff888033694480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1034.477232][   T38]  #1: ffff88803a91a478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1034.477277][   T38]  #2: ffff8880293115a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1034.477331][   T38]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1034.477374][   T38] 4 locks held by syz-executor/15838:
[ 1034.477385][   T38]  #0: ffff888033694480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1034.477430][   T38]  #1: ffff888034af3878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1034.477475][   T38]  #2: ffff8880293115a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1034.477524][   T38]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1034.477568][   T38] 1 lock held by syz-executor/16539:
[ 1034.477579][   T38]  #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1034.477624][   T38] 1 lock held by syz-executor/17247:
[ 1034.477635][   T38]  #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1034.477679][   T38] 1 lock held by syz-executor/17260:
[ 1034.477691][   T38]  #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1034.477734][   T38] 3 locks held by kworker/1:3H/17414:
[ 1034.477745][   T38] 1 lock held by syz-executor/17422:
[ 1034.477756][   T38]  #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1034.477801][   T38] 1 lock held by syz-executor/18680:
[ 1034.477811][   T38]  #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1034.477856][   T38] 1 lock held by syz-executor/19412:
[ 1034.477866][   T38]  #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1034.477911][   T38] 1 lock held by syz-executor/19426:
[ 1034.477922][   T38]  #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1034.477966][   T38] 5 locks held by kworker/u9:3/19448:
[ 1034.477977][   T38]  #0: ffff88805e3d1138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1034.478022][   T38]  #1: ffffc9000534fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1034.478066][   T38]  #2: ffff88805f9b8f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[ 1034.478117][   T38]  #3: ffff88805f9b80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[ 1034.478166][   T38]  #4: ffffffff8f4d7978 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340
[ 1034.478214][   T38] 4 locks held by kworker/u9:5/19561:
[ 1034.478225][   T38]  #0: ffff88803a1f7938 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1034.478274][   T38]  #1: ffffc9000526fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1034.478333][   T38]  #2: ffff8880896600b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950
[ 1034.478378][   T38]  #3: ffffffff8f4d7978 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950
[ 1034.478424][   T38] 1 lock held by syz-executor/19569:
[ 1034.478435][   T38]  #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1034.478479][   T38] 1 lock held by syz-executor/20865:
[ 1034.478490][   T38]  #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1034.478533][   T38] 4 locks held by syz.1.6074/21235:
[ 1034.478546][   T38] 
[ 1034.478551][   T38] =============================================
[ 1034.478551][   T38] 
[ 1034.478567][   T38] NMI backtrace for cpu 0
[ 1034.478583][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1034.478608][   T38] Tainted: [L]=SOFTLOCKUP
[ 1034.478614][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1034.478624][   T38] Call Trace:
[ 1034.478632][   T38]  <TASK>
[ 1034.478640][   T38]  dump_stack_lvl+0xe8/0x150
[ 1034.478663][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 1034.478689][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1034.478712][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1034.478740][   T38]  sys_info+0x135/0x170
[ 1034.478762][   T38]  watchdog+0xfd3/0x1030
[ 1034.478791][   T38]  ? watchdog+0x1c9/0x1030
[ 1034.478816][   T38]  kthread+0x388/0x470
[ 1034.478840][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1034.478857][   T38]  ? __pfx_kthread+0x10/0x10
[ 1034.478881][   T38]  ret_from_fork+0x514/0xb70
[ 1034.478904][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1034.478924][   T38]  ? __switch_to+0xc79/0x1410
[ 1034.478951][   T38]  ? __pfx_kthread+0x10/0x10
[ 1034.478975][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1034.479012][   T38]  </TASK>
[ 1034.479019][   T38] Sending NMI from CPU 0 to CPUs 1:
[ 1034.479042][    C1] NMI backtrace for cpu 1
[ 1034.479058][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1034.479080][    C1] Tainted: [L]=SOFTLOCKUP
[ 1034.479087][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1034.479096][    C1] RIP: 0010:sched_clock_cpu+0x2c/0x440
[ 1034.479121][    C1] Code: 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 00 00 00 65 48 8b 05 cc de cd 10 48 89 84 24 80 00 00 00 <49> bd 00 00 00 00 00 fc ff df 4c 8d 74 24 60 48 c7 44 24 40 b3 8a
[ 1034.479135][    C1] RSP: 0018:ffffc90000a3fbc0 EFLAGS: 00000086
[ 1034.479150][    C1] RAX: ca4366a90e287d00 RBX: ffff8880b89244e8 RCX: 0000000000000046
[ 1034.479162][    C1] RDX: 0000000000000000 RSI: ffffffff8ba74fc0 RDI: 0000000000000001
[ 1034.479173][    C1] RBP: ffffc90000a3fc98 R08: ffffffff8f88eef7 R09: 1ffffffff1f11dde
[ 1034.479185][    C1] R10: dffffc0000000000 R11: fffffbfff1f11ddf R12: 0000000000000000
[ 1034.479196][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8d8ad798
[ 1034.479208][    C1] FS:  0000000000000000(0000) GS:ffff888126276000(0000) knlGS:0000000000000000
[ 1034.479221][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1034.479232][    C1] CR2: 00007f6db41e7ff8 CR3: 000000003789a000 CR4: 00000000003526f0
[ 1034.479246][    C1] Call Trace:
[ 1034.479253][    C1]  <TASK>
[ 1034.479260][    C1]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1034.479284][    C1]  irqtime_account_irq+0x69/0x200
[ 1034.479306][    C1]  handle_softirqs+0x5e5/0x6d0
[ 1034.479328][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[ 1034.479345][    C1]  run_ktimerd+0x69/0x100
[ 1034.479362][    C1]  smpboot_thread_fn+0x541/0xa50
[ 1034.479381][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[ 1034.479402][    C1]  kthread+0x388/0x470
[ 1034.479421][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1034.479438][    C1]  ? __pfx_kthread+0x10/0x10
[ 1034.479458][    C1]  ret_from_fork+0x514/0xb70
[ 1034.479475][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1034.479492][    C1]  ? __switch_to+0xc79/0x1410
[ 1034.479514][    C1]  ? __pfx_kthread+0x10/0x10
[ 1034.479533][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1034.479565][    C1]  </TASK>
[ 1034.480863][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1034.480880][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1034.480905][   T38] Tainted: [L]=SOFTLOCKUP
[ 1034.480912][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1034.480923][   T38] Call Trace:
[ 1034.480931][   T38]  <TASK>
[ 1034.480939][   T38]  vpanic+0x56c/0xa60
[ 1034.480964][   T38]  ? __pfx___schedule+0x10/0x10
[ 1034.480985][   T38]  ? __pfx_vpanic+0x10/0x10
[ 1034.481016][   T38]  panic+0xc5/0xd0
[ 1034.481038][   T38]  ? __pfx_panic+0x10/0x10
[ 1034.481060][   T38]  ? preempt_schedule_thunk+0x16/0x30
[ 1034.481091][   T38]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1034.481121][   T38]  watchdog+0x102c/0x1030
[ 1034.481148][   T38]  ? watchdog+0x1c9/0x1030
[ 1034.481174][   T38]  kthread+0x388/0x470
[ 1034.481198][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1034.481216][   T38]  ? __pfx_kthread+0x10/0x10
[ 1034.481240][   T38]  ret_from_fork+0x514/0xb70
[ 1034.481263][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1034.481284][   T38]  ? __switch_to+0xc79/0x1410
[ 1034.481328][   T38]  ? __pfx_kthread+0x10/0x10
[ 1034.481352][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1034.481389][   T38]  </TASK>
[ 1034.481724][   T38] Kernel Offset: disabled