last executing test programs:

12.686842756s ago: executing program 3 (id=268):
shmat(0x0, &(0x7f0000f4c000/0x2000)=nil, 0x4000)
syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f440102030109021200010000000009"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xffffbf7f)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x20040800)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x1, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r5 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
clock_adjtime(0x0, 0x0)
r6 = accept4(r4, 0x0, 0x0, 0x80800)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000000740)=""/103, 0x67}], 0x2}, 0x0)
r7 = socket(0xa, 0x5, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x2, 0x2b4, [0x0, 0x2000000001c0, 0x2000000001f0, 0x200000000220], 0x0, 0x0, 0x0}, 0x32c)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
sendmsg$NFT_BATCH(r7, &(0x7f0000004c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000006100)=ANY=[@ANYBLOB="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"], 0x4690}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000)
gettid()

9.886737232s ago: executing program 3 (id=281):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000700)={{<r2=>r0, &(0x7f0000000040)=',&,--{[}/.%#\x00', 0x98080, &(0x7f0000000080)={@align=0x8, {0x2, 0x2, 0x9, 0x2}}, 0x9, &(0x7f00000000c0), &(0x7f0000000140)=0x8000}, 0x4, &(0x7f0000000680)=[{0x1, 0x2, &(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)="9f25adaf2c6ee4d1fab0194c75a319d0f82cfc0321e35b6b717f08fb73f6001e308d84cb7a5e843db9e3e3de8866dc433314e3cda404cc2b7f5040d87b7f8ff98a9542d1c55f90d405489c13023552ef0cd479b990e10a3623f86c97f7220ce549a1e1e74391a5b5776e6f8e30d20011773acd2979af1b9a1a92e5f7515e3f578aae42a94bba888347bae98b198fc4b813c73ef60e79f4df4fb7e6f2247d46ace918720c3772b090f6756f7e6cef3d710793f97bd4", 0xb5, 0x30}, {0x3, 0x5, &(0x7f00000002c0)=']\x00', &(0x7f0000000300)="eabe7d012274da7f3b5ccb399ab3c9faac2abe88484de08cdf348181c59566b1153d98c7662db9b79cb78d408c1aa98f181d4f1bb51f18a96a0493eeec99ff7c407c7703234d874e861df183372d9abd070616e6cc10fe63477113a635dbb9bc04fa71912544787020268299cb5df4c5ca0b65dad51b52229b7943f1cd39250f9a71157de210f6209b0797d24a3fef644afd48207878e50ce34ce537e865f5ad2ef164c98d2d910e787f02cf53daae12384c", 0xb2}, {0x2aca8edecb5a03ff, 0x568b, &(0x7f00000003c0)='nl80211\x00', &(0x7f0000000480)="d4f64fb3487bd4645e5e8cd75d71879f97b66d4fd6acb4d82e522ce9d4a2707600a415ce848258c0200dd278a3611ddfa88fe3875afa5fb4b5644f5ffe44203a6c81b0dc06adfeab4a76f8bdc3115e11f73ce5b14fcf139b4ff40c6dea267c7f4ad17feffc8e5eec29f31840f3cb6d4dcf11f2f6d21398a4026e1fa6e8aff730c5517092886e24e0c5d10314960b033a5e285af5b6be28cbce89194e0e83486ef401fc33708743edbd551a70f9a16539ae5ce9318f6296efd0eed8", 0xbb}, {0x2, 0x1800000, &(0x7f0000000540)='{&!\x00', &(0x7f0000000580)="95b7b11ec0e20935422944249a5c407855cced335b5bf5cb5e7ee894078b154c3263e5addb408b556b60f6b6e53cab0db95506db398eaebe482da68d9a55df874ec471776093dec66946015928987786f9a52070267438ce1d43515d4435bb84fcf1c74f50e0d38a1b9ceb09213fff21758d44ab07c38fb789f363e4b73c39604e68e8366406bd75d6d99d0706b5d9919e87fa8e74725319d33eef8b81433080f303ce6a95e355b1fb5f67c8a4d37737844e60f8a267b6b0d1ddf4a44f5cc9376b3237cf4e84edd2140d26af39a8965181f7c27e9784c578cd0c91bbd58edc68f2090982240630ae9168cc67681385e81c", 0xf1, 0x10}]})
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000940)={&(0x7f0000000900)=[{0xfff9, 0x2c10, 0x19, &(0x7f0000000780)="efdfb97de90f4b29f65522fda3b18cfc02c9ec1860f03cf0a4"}, {0x5, 0x6000, 0x35, &(0x7f00000007c0)="120807d82450aa23400149291fd4c610b683baf1e71f200fb067c4dedc0f8abe793e357bc46b318d8666d3a32932e7d17fef53ae3b"}, {0x9, 0x2c11, 0xc3, &(0x7f0000000800)="3b632efd76715374568b864577b54cba5e47f58a4a3f93a150c8b3d8b423dc3d0e87b6cfda07f7ab2b2e72973904c4470266fbd10b4975552b627736167caec80b47ff3125056295ebf765641d47b78b056eebf54c56623bc58b6ac6de32fc9a64fafc1bdf37de595ee69981c1a5902a2066a047f7c4de7e37807faeab3f151f494599af769be16ca914c320aee779f8088c6d58b91df752566e2bf479ba57e45c110155769e01153d070fd2be9c1d1bd417ee6ea9d384b88e3e647bd2e0558d310d63"}], 0x3})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0)

9.705804759s ago: executing program 3 (id=282):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket(0x10, 0x0, 0x7)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b)
ioctl$TCFLSH(r0, 0x40085500, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x10)
futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r1, 0x1, 0x2e, 0x0, &(0x7f0000000280))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r5, &(0x7f0000000080), 0x10)

8.25197907s ago: executing program 1 (id=287):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r3, r2, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000680)=ANY=[], 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r5 = socket$pppoe(0x18, 0x1, 0x0)
preadv2(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/11, 0xb}], 0x1, 0x9, 0x7ff, 0x1)
getsockopt$sock_buf(r5, 0x1, 0x10, 0x0, &(0x7f0000000080))
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4})
sendmmsg$inet(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="9bb6070844984ef2b734ee2b740e32647974b7cfb8150605a2c635efcbc832fa56569acc96052ed730ec4473a0af21e1f7881620a9062897d734a7dac3c85d6973f29880e626e5e231b1b4edd98b9363876048487f344b980de2c6f0806915a8bb26e264035f0a378fe6662cfd45296d1cc391c761c06d689dd572f822269ffc2625c6d2a6d4228a91b303f6b9d8b45a6a9f8c7b49ec5bc49acd786101e2308bbaee6d51d8c582fe4bfedd220cae98dc1a86cbe3b3d03636b5c1c2951d9b0f18503ac03e3f52a34b9be308d86ced9df5c42e152849ff5ad87e599f2fd3af561520a835d3222667cb80625d2058ea5dcec77b644cb4927e43838cb632b09b823885e5729f163bdc6ab9725aa575d034c67d1985e0d1ac60f597a2747c3d6d6a366b9ab1f791d0ef4196371671865ad407d3d21586847479d116ebcd97848f0d846b4995eeb5", 0x145}], 0x1}}], 0x2, 0x42054)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r4, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0)

7.906465705s ago: executing program 4 (id=290):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003)
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104)
ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x40305828, &(0x7f0000000200)={{r3}, "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"})
write$FUSE_WRITE(r5, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xaf}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc5}, 0x24000806)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffffd, 0x200000000000000}, 0x0, 0x6e6bc0}, [@offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4090}, 0x2c000010)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x3, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010)
sendmmsg$inet(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="e22971ce9db45fb52ceafd0d7d8ae8251c3c56139fe91e5682ff6362aa78ea6863a4f066a199ecd88ac46a946aab8e368b42c040dbbea26adf", 0x39}, {&(0x7f0000000300)="b4b98f791417e9d68f2bfb2f299437050f4f43ac5a68311636bc061a6740c3c8dfb073d165ac78443e3882a721ec4cb748d16cf734", 0x35}], 0x2}}], 0x1, 0x2090)

7.22830322s ago: executing program 1 (id=291):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) (fail_nth: 5)

6.914033602s ago: executing program 1 (id=292):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045b45011c8c377fe00"}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c9cb860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f8e0100f30fc7b103006bb18000ffc00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000)
r7 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r7, 0x29, 0x46, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.865720996s ago: executing program 4 (id=293):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="ffffff7f00000000000000000000000000000100", @ANYRES32=0x0, @ANYBLOB="a086fba8aeac00000000"], 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x88)
r4 = socket(0x1, 0x1, 0x1)
getsockopt$SO_COOKIE(r4, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8)
r5 = dup2(r3, r3)
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r6, &(0x7f0000000540)=[{&(0x7f0000000140)="91d174dbb4", 0x5}], 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r7 = io_uring_setup(0x1196, &(0x7f0000000040)={0x0, 0x90fb, 0x0, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r7, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x40, 0xb, 0x5, 0x1, 0x101})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r5, 0x1275, 0x0)

6.809128682s ago: executing program 2 (id=294):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/binder0\x00', 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2, 0x3}, 0x8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

6.156058035s ago: executing program 0 (id=295):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020)
write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0'}, 0xb)
recvmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000240)=""/188, 0xbc}], 0x1}, 0x7}], 0x1, 0x40010340, 0x0) (fail_nth: 1)

6.139839819s ago: executing program 3 (id=296):
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
write$sndseq(r0, &(0x7f0000000580)=[{0xdb, 0x2, 0x2, 0x1, @tick=0x2, {0x5c, 0xb}, {0x4, 0x81}, @time=@time={0x4, 0x3}}, {0x8, 0x6, 0x8, 0x0, @time={0xfffffffe, 0x1ff}, {0x3, 0x7}, {0x92, 0x7f}, @raw8={"2f6d89f74959e77ce74f3d97"}}, {0x2, 0x4b, 0xb, 0x2, @tick=0x2, {0x7, 0x1}, {0xc, 0x1}, @ext={0x0, &(0x7f00000003c0)}}], 0x54)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r3 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=<r4=>0x0, 0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r3, r4, 0x0, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
syz_io_uring_setup(0x33dc, &(0x7f0000000680)={0x0, 0xe91f, 0x2000, 0x20007, 0x38e, 0x0, r0}, 0x0, 0x0, &(0x7f00000007c0))
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='cifs\x00', 0x800000, 0x0)
r6 = syz_io_uring_setup(0x414d, &(0x7f0000000400)={0x0, 0x287d, 0x400, 0x3, 0x4e}, &(0x7f0000002200), &(0x7f00000000c0), &(0x7f0000002280))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_ublk_add_dev(r0, r4, 0x0, 0x0, &(0x7f00000008c0)={0x2e, 0x3c, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, r7, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000880)=@new_dev={0x4, 0x163, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x129}}}, &(0x7f0000000940))
openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10)
r9 = socket$netlink(0x10, 0x3, 0x4)
writev(r9, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)
openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r10=>0x0, <r11=>0x0})
utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x0, 0xea60}, {r10, r11/1000+10000}}, 0x100)
socket$phonet_pipe(0x23, 0x5, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

5.717853698s ago: executing program 1 (id=297):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700})
r1 = userfaultfd(0x801)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe8, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48044}, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x596, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000500), 0x100, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000540)={0xffffeffe, 0x1, 0x2})

5.451748069s ago: executing program 2 (id=298):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000d85e461643555c008fbcaaab3758b600000000000c0000000c0000000200000000000000000000bca80000000000"], 0x0, 0x26}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019440)=ANY=[@ANYBLOB="09000000040000000400000002000000800000003fc3093c1344c1698f16ff95a68f21d7b0a460177832c8ac446148a880d4e43ec3ce2cee8a5f531081e4711a9234498d3929df67f3046675e93bae2ea0381a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000100"/28], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1000)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x2000)=nil)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}})
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r5 = dup3(r2, r4, 0x0)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000019300))
acct(&(0x7f0000002180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x44048000}, 0x11)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x8, {0x4174}})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000019340)={<r7=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f0000019380)=0x10)
timer_create(0x6df15f9925fd7a7c, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000193c0)={0x4, 0x108, 0x201, 0xad, 0x6, 0x1, 0x5, 0x7, r7}, 0x20)
mmap$IORING_OFF_CQ_RING(0x0, 0x8, 0x4, 0x13, 0xffffffffffffffff, 0x8000000)
mmap$IORING_OFF_SQES(0x0, 0x1, 0x0, 0x13, 0xffffffffffffffff, 0x10000000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000000070108000000000800000001000093a2a1ff000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x8040)

5.047344922s ago: executing program 4 (id=299):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, 0x0, 0x400)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
r5 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

4.990764346s ago: executing program 0 (id=300):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045b45011c8c377fe00"}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c9cb860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f8e0100f30fc7b103006bb18000ffc00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000)
r6 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r6, 0x29, 0x46, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.987818208s ago: executing program 3 (id=301):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d000009040101"], 0x0)
syz_usb_connect(0x6, 0x3ca, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x0, 0x1, 0xb4, 0xf, 0x40, 0x4}, 0x0, 0x0, 0x1, [{0x93, &(0x7f0000000600)=@string={0x93, 0x3, "32536bf4cdaedd15456db888fc7859880a4df3793cc138a48d8402a9ca4962993434c0dbd9d893a7f988e58a93c2f1feedd3d60ec04af1a7ae57c498b22f8abe23772d84d3f8cc796189742a73f08d35745d0307302fcf6d88d3f262b15f31a4d144c7538a79ecc41fd20d5f0cd6f9e797a28ef04ede9c159454ff41a602ccc80289e9fab11181538fa5e2090a4c6c928d"}}]})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6aab7d8300000000000000"], 0x50)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, &(0x7f0000000040)=0x24)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x1, 0x6f}, 0xfffffff4, 0x4})
close_range(r1, r2, 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000080)=0x1, 0x12)

4.256022501s ago: executing program 1 (id=302):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000000)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000005, 0x810, 0xffffffffffffffff, 0x0)
r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x10000100, 0x0, 0x0, 'queue0\x00'})
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x40, r6, 0x5, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f9eb801e1fc41c50decfa0f2d4a076dcc11156936cac52a3"}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20008801}, 0x808)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x7, 0x8002, 0x101})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20})
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002022)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={r9, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1}, 0xc)

4.116261941s ago: executing program 2 (id=303):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}})
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xd5d7, 0xd, 0xfffffe01, 0x40007fff, 0xb2, "fe67a00000ff0000000900", 0x6, 0x14})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x891c, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
r3 = syz_io_uring_setup(0x18f9, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffb}, &(0x7f0000000100), &(0x7f0000001280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4)

4.0451805s ago: executing program 4 (id=304):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
socket(0x2c, 0x3, 0x0)
socket$kcm(0x23, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
mkdir(0x0, 0x5)
close(r1)
r2 = inotify_init1(0x800)
fcntl$setstatus(r1, 0x4, 0x2c00)
r3 = gettid()
fcntl$setown(r1, 0x8, r3)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0)

3.166829556s ago: executing program 0 (id=305):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x40000000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x30, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff800000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000100)=""/54, 0x36)
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200)
rmdir(&(0x7f0000000180)='./cgroup/../file0\x00')
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r1, &(0x7f0000000340)="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", &(0x7f0000000440)=""/38, 0x4}, 0x20)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000680)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x9, 0xe63a, 0x4, 0x0, 0x4}, {0x7, 0x2, 0x10000, 0x3, 0x8, 0x4}], ['\x00', '\x00', '\x00', '\x00', '\x00']})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1b043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
ppoll(&(0x7f0000000180)=[{r5, 0x1072}], 0x1, 0x0, 0x0, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = io_uring_setup(0x67be, &(0x7f0000000580)={0x0, 0x0, 0x10})
io_uring_enter(r9, 0x1c48, 0xcbffffff, 0x7, &(0x7f0000000000)={[0x15f]}, 0x8)
write(r8, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0xfffffffa)
ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)={0xfffff678, 0x3, 0x101, 0x3, 0x2, "8510d66e573ccc84cc40631d9b55640c105c2d"})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
mount(&(0x7f0000000940)=@nullb, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='anon_inodefs\x00', 0x1b0020, &(0x7f0000000a00)='gretap\x00')
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60)
ioctl$KVM_GET_IRQCHIP(r11, 0xc208ae62, &(0x7f0000000240)={0x2, 0x0, @ioapic={0x1000, 0x561, 0x0, 0xffff, 0x0, [{0x4, 0x81, 0x10, '\x00', 0x3}, {0x4, 0x8, 0x3, '\x00', 0x1}, {0xb2, 0x0, 0x1, '\x00', 0x8}, {0x8, 0x2, 0xa4, '\x00', 0x1}, {0x0, 0x4f, 0x3, '\x00', 0x3}, {0x8, 0xd4, 0x9, '\x00', 0x25}, {0x0, 0x1, 0x40, '\x00', 0x1}, {0xa, 0x0, 0x6, '\x00', 0x9b}, {0xf7, 0x5, 0x77, '\x00', 0x10}, {0x50, 0x0, 0x6, '\x00', 0x6}, {0x7, 0xbf, 0x6, '\x00', 0x4}, {0x4, 0x5, 0x6}, {0x1, 0x4, 0x9, '\x00', 0xf7}, {0x4, 0xf1, 0xf0, '\x00', 0xe5}, {0xff, 0x0, 0x8, '\x00', 0x1}, {0x1, 0x6, 0x1, '\x00', 0x1}, {0x1, 0x4, 0x36, '\x00', 0x7}, {0x7, 0x2, 0x4b, '\x00', 0x4}, {0x80, 0x0, 0x5}, {0x7, 0x0, 0x7, '\x00', 0xa3}, {0x4c, 0xff, 0x8, '\x00', 0x2f}, {0x0, 0x5, 0x2, '\x00', 0x5}, {0x2, 0x6, 0xfd, '\x00', 0x5}, {0x3, 0x5, 0xbe}]}})

3.03077871s ago: executing program 2 (id=306):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="ffffff7f00000000000000000000000000000100", @ANYRES32=0x0, @ANYBLOB="a086fba8aeac00000000"], 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x88)
r4 = socket(0x1, 0x1, 0x1)
getsockopt$SO_COOKIE(r4, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000180)=0x8)
r5 = dup2(r3, r3)
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r6, &(0x7f0000000540)=[{&(0x7f0000000140)="91d174dbb4", 0x5}], 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
io_uring_setup(0x1196, &(0x7f0000000040)={0x0, 0x90fb, 0x0, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001480)}], 0x1)
sched_setscheduler(0x0, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x40, 0xb, 0x5, 0x1, 0x101})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r5, 0x1275, 0x0)

1.952540734s ago: executing program 0 (id=307):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

1.61818894s ago: executing program 1 (id=308):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045b45011c8c377fe00"}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.413471578s ago: executing program 2 (id=309):
r0 = socket(0xa, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x4, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x200, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000})
socket$nl_route(0x10, 0x3, 0x0)
r1 = gettid()
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580), 0x0)
sendmsg$inet_sctp(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x3, 0xa00, 0x7, 0x6}}], 0x18, 0x4855}, 0x24000052)

822.128747ms ago: executing program 3 (id=310):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)
r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
close(0x3)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r2 = socket$kcm(0x10, 0x2, 0x10)
io_setup(0x1, &(0x7f0000000b80))
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c020020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x40)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private1, 0x7, 0x8, 0x7f, 0x400, 0x4, 0x4000000, r6})

760.662299ms ago: executing program 0 (id=311):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000"], 0x48)
setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0)
ioctl(r2, 0x1, &(0x7f0000000080))
r3 = socket$nl_audit(0x10, 0x3, 0x9)
write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x2)
keyctl$setperm(0x5, 0x0, 0x30925)
keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0)

241.358349ms ago: executing program 2 (id=312):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700})
r1 = userfaultfd(0x801)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe8, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48044}, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000500), 0x100, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000540)={0xffffeffe, 0x1, 0x2})

240.075389ms ago: executing program 4 (id=313):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r1)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0xd81, &(0x7f0000002ec0)={@multicast, @random="d8be17d19221", @void, {@ipv6={0x86dd, @tcp={0xc, 0x6, "1ed996", 0xd4b, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@hopopts={0x67, 0xe, '\x00', [@hao={0xc9, 0x10, @local}, @pad1, @generic={0x2, 0x6, "1c11b9f8dca6"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x40, {0x2, 0xe, 0x5, 0x1ff, [0x8, 0x4, 0x0, 0x2, 0x1f, 0x8, 0x2]}}]}, @srh={0x3b, 0xe, 0x4, 0x7, 0x3b, 0x10, 0xf65, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @private1, @dev={0xfe, 0x80, '\x00', 0x12}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @empty]}, @srh={0x87, 0xe, 0x4, 0x7, 0x6, 0x0, 0x980, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x25}, @remote]}, @hopopts={0x2, 0x12, '\x00', [@pad1, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x40, {0x2, 0xe, 0x24, 0xfd6, [0x1, 0x200, 0x10000, 0x2, 0x8000000000000000, 0xd5, 0x4]}}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @mcast2}, @pad1]}, @dstopts={0x3c, 0x1, '\x00', [@ra={0x5, 0x2, 0x7fff}, @ra={0x5, 0x2, 0x5}, @pad1]}, @srh={0x0, 0x8, 0x4, 0x4, 0x5, 0x28, 0xa, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x0, 0xe, 0x4, 0x7, 0x7, 0x68, 0x8, [@local, @empty, @mcast2, @remote, @mcast1, @mcast2, @private0]}, @hopopts={0x33, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x7}, @pad1]}, @dstopts={0x5c, 0x12f, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @generic={0x0, 0x972, "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"}]}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x10, 0x4, 0x3ff, 0x0, 0x800, {[@mptcp=@mp_join={0x1e, 0x3}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "05015c010a065cb549b73199a5f8f27c"}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xa, "5c440e74789b14af"}, @sack_perm={0x4, 0x2}]}}, {"b8957e9c4dcbc1325ffba781d12fdee9ce40b6fae3c8fe54eb6b9a501753a3414659cebc82a79f3cb673195c56f20b3399d0ca015c846ff600ee121ca0992c9a2f1884f29c44085ed996885249760f6b35829f45de7983a9e3b2be0129a11d7dcfc04f92ca50be4ab37a3ec07fb5b8773a62103591c8f5603cac75eef081df1d946117"}}}}}}}, 0x0)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r3)
r8 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r7)
r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r8)
r10 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r9)
keyctl$clear(0x7, r10)

171.891336ms ago: executing program 0 (id=314):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2c8, r0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x81}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x58, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1040}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x238, 0x84, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x22, 0x1, @random="6438df60f2e37a5cb6a2d07e03c9dbf2c8fc593137f639283065d81ecb0e"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xe72}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1c00}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1b3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x200}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8c8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x400}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="49e796192e1d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xecc7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffe}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a6b11ea9adc6"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x18, 0x1, @random="57647956ed16d186ac2ab461215bf9196d9c96dd"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x89db}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6268}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x101e}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x57}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x34}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x44000}, 0x8805)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)

0s ago: executing program 4 (id=315):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="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"}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x783c, 0x1000, 0x1, 0x359}, &(0x7f0000000080), &(0x7f0000ff4000), &(0x7f0000000000))

kernel console output (not intermixed with test programs):

0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.203198][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.235683][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.242875][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.268953][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.334185][ T5612] hsr_slave_0: entered promiscuous mode
[   75.340280][ T5612] hsr_slave_1: entered promiscuous mode
[   75.346336][ T5612] debugfs: 'hsr0' already exists in 'hsr'
[   75.352457][ T5612] Cannot create hsr debugfs directory
[   75.363030][ T5609] hsr_slave_0: entered promiscuous mode
[   75.369103][ T5609] hsr_slave_1: entered promiscuous mode
[   75.375215][ T5609] debugfs: 'hsr0' already exists in 'hsr'
[   75.380928][ T5609] Cannot create hsr debugfs directory
[   75.452887][ T5607] hsr_slave_0: entered promiscuous mode
[   75.459032][ T5607] hsr_slave_1: entered promiscuous mode
[   75.465258][ T5607] debugfs: 'hsr0' already exists in 'hsr'
[   75.470970][ T5607] Cannot create hsr debugfs directory
[   75.794764][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.805562][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.815615][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.825726][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.843197][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.852744][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.867720][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.877456][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   75.932061][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.948708][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   75.960756][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.970057][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.978728][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.988098][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.998546][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.010005][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   76.088973][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   76.098471][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   76.106687][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   76.116416][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   76.125754][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   76.134645][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   76.142445][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   76.151072][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   76.222527][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.257977][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   76.270347][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   76.286380][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   76.295330][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   76.305555][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   76.315075][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   76.324041][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   76.333783][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   76.363674][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   76.400922][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.408250][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.433226][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.440326][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.453199][ T4927] Bluetooth: hci0: command tx timeout
[   76.483928][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.496206][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   76.506207][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   76.514693][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   76.522382][ T5613] Bluetooth: hci4: command tx timeout
[   76.523835][ T4927] Bluetooth: hci1: command tx timeout
[   76.528501][ T5628] Bluetooth: hci3: command tx timeout
[   76.536376][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   76.557678][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   76.566721][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   76.574749][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   76.583703][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   76.602103][ T5628] Bluetooth: hci2: command tx timeout
[   76.618845][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   76.660390][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.667496][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.694639][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.701962][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.715226][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.802811][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   76.854798][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.861959][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.887813][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.894985][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.907051][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.959725][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   76.986211][  T547] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.993383][  T547] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.021288][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.043735][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.050925][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.145542][ T5607] 8021q: adding VLAN 0 to HW filter on device team0
[   77.181522][  T547] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.188645][  T547] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.223396][  T547] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.230556][  T547] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.528456][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.660012][ T5606] veth0_vlan: entered promiscuous mode
[   77.696014][ T5606] veth1_vlan: entered promiscuous mode
[   77.778800][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.824890][ T5606] veth0_macvtap: entered promiscuous mode
[   77.845812][ T5606] veth1_macvtap: entered promiscuous mode
[   77.895624][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.956676][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.018994][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.043714][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.081875][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.110716][ T5610] veth0_vlan: entered promiscuous mode
[   78.118807][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.147117][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.178673][ T5610] veth1_vlan: entered promiscuous mode
[   78.190204][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.299849][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.317241][ T5610] veth0_macvtap: entered promiscuous mode
[   78.346237][ T5612] veth0_vlan: entered promiscuous mode
[   78.346336][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.356331][ T5610] veth1_macvtap: entered promiscuous mode
[   78.385198][ T5609] veth0_vlan: entered promiscuous mode
[   78.397503][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.449431][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.473660][ T5612] veth1_vlan: entered promiscuous mode
[   78.498440][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.524027][ T5628] Bluetooth: hci0: command tx timeout
[   78.544539][ T5609] veth1_vlan: entered promiscuous mode
[   78.552768][ T1025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.553268][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.561521][ T1025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.580778][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.594813][ T1025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.604104][ T5628] Bluetooth: hci1: command tx timeout
[   78.613851][ T5613] Bluetooth: hci4: command tx timeout
[   78.619507][ T5628] Bluetooth: hci3: command tx timeout
[   78.636321][ T1025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.646070][   T30] audit: type=1400 audit(1782741136.991:152): avc:  denied  { mounton } for  pid=5606 comm="syz-executor" path="/root/syzkaller.ZtVTmz/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   78.672226][   T30] audit: type=1400 audit(1782741136.991:153): avc:  denied  { mount } for  pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   78.696048][   T30] audit: type=1400 audit(1782741136.991:154): avc:  denied  { mounton } for  pid=5606 comm="syz-executor" path="/root/syzkaller.ZtVTmz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   78.721640][ T5628] Bluetooth: hci2: command tx timeout
[   78.728194][   T30] audit: type=1400 audit(1782741136.991:155): avc:  denied  { mount } for  pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   78.750846][ T5612] veth0_macvtap: entered promiscuous mode
[   78.751007][   T30] audit: type=1400 audit(1782741136.991:156): avc:  denied  { mounton } for  pid=5606 comm="syz-executor" path="/root/syzkaller.ZtVTmz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   78.761659][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   78.784319][   T30] audit: type=1400 audit(1782741137.011:157): avc:  denied  { mounton } for  pid=5606 comm="syz-executor" path="/root/syzkaller.ZtVTmz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   78.826394][   T30] audit: type=1400 audit(1782741137.011:158): avc:  denied  { unmount } for  pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   78.859424][   T30] audit: type=1400 audit(1782741137.031:159): avc:  denied  { mounton } for  pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   78.888712][ T5609] veth0_macvtap: entered promiscuous mode
[   78.894852][   T30] audit: type=1400 audit(1782741137.031:160): avc:  denied  { mount } for  pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=7719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   78.917483][   T30] audit: type=1400 audit(1782741137.031:161): avc:  denied  { mount } for  pid=5606 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   78.956533][ T5612] veth1_macvtap: entered promiscuous mode
[   78.979311][ T5609] veth1_macvtap: entered promiscuous mode
[   79.072791][ T5607] veth0_vlan: entered promiscuous mode
[   79.086828][ T5607] veth1_vlan: entered promiscuous mode
[   79.096823][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.106865][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.116287][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.130544][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.167889][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.196572][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.226213][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.243519][  T135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.255172][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.264580][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.278628][  T135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.293651][  T135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.323276][  T135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.333002][  T135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.388923][  T135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.407984][  T135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.429455][ T5607] veth0_macvtap: entered promiscuous mode
[   79.597987][ T5607] veth1_macvtap: entered promiscuous mode
[   79.774180][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'.
[   79.993657][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.004924][ T5814] Zero length message leads to an empty skb
[   80.606393][  T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.647380][ T5628] Bluetooth: hci0: command tx timeout
[   80.656354][  T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.730381][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.745130][ T5628] Bluetooth: hci3: command tx timeout
[   80.750939][ T5628] Bluetooth: hci4: command tx timeout
[   80.760242][ T5628] Bluetooth: hci1: command tx timeout
[   80.768655][ T5628] Bluetooth: hci2: command tx timeout
[   81.178165][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.188378][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.204343][  T992] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   81.238374][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.269241][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.288816][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.300854][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.465797][  T992] usb 1-1: too many configurations: 156, using maximum allowed: 8
[   81.495333][  T992] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 158
[   81.509770][  T542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.512464][  T992] usb 1-1: can't read configurations, error -22
[   81.518951][  T542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.633100][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.651381][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.722667][  T992] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   81.890182][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.899037][  T992] usb 1-1: too many configurations: 156, using maximum allowed: 8
[   81.921654][  T992] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 158
[   81.930615][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.969765][  T992] usb 1-1: can't read configurations, error -22
[   81.992405][  T992] usb usb1-port1: attempt power cycle
[   82.021412][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.030677][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.148432][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   82.352217][  T992] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   82.395818][  T992] usb 1-1: too many configurations: 156, using maximum allowed: 8
[   82.414324][  T992] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 158
[   82.423987][  T992] usb 1-1: can't read configurations, error -22
[   82.461873][ T5821] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   82.571396][  T992] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   82.729590][ T5821] usb 2-1: Using ep0 maxpacket: 32
[   82.778362][  T992] usb 1-1: too many configurations: 156, using maximum allowed: 8
[   82.816265][ T5845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'.
[   82.893796][ T5821] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[   82.924901][  T992] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 158
[   82.991025][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'.
[   83.199103][ T5821] usb 2-1: config 0 has no interface number 0
[   83.205258][  T992] usb 1-1: can't read configurations, error -22
[   83.217674][ T5821] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   83.231214][  T992] usb usb1-port1: unable to enumerate USB device
[   83.247018][ T5821] usb 2-1: config 0 interface 85 has no altsetting 0
[   83.289255][ T5821] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   83.306662][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.335307][ T5821] usb 2-1: Product: syz
[   83.348158][ T5821] usb 2-1: Manufacturer: syz
[   83.368373][ T5821] usb 2-1: SerialNumber: syz
[   83.409933][ T5821] usb 2-1: config 0 descriptor??
[   83.463597][ T5849] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   83.663983][   T30] kauditd_printk_skb: 43 callbacks suppressed
[   83.664000][   T30] audit: type=1400 audit(1782741142.021:205): avc:  denied  { name_bind } for  pid=5852 comm="syz.2.12" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   83.720488][   T30] audit: type=1400 audit(1782741142.051:206): avc:  denied  { node_bind } for  pid=5852 comm="syz.2.12" saddr=255.255.255.255 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   83.754098][ T5713] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   84.347693][ T5861] ceph: No mds server is up or the cluster is laggy
[   84.356173][ T5728] libceph: connect (1)[c::]:6789 error -101
[   84.384743][ T5728] libceph: mon0 (1)[c::]:6789 connect error
[   84.398440][ T5713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.430561][   T30] audit: type=1400 audit(1782741142.781:207): avc:  denied  { write } for  pid=5858 comm="syz.0.14" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   84.434015][ T5713] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   84.465482][ T5865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12'.
[   84.471192][   T30] audit: type=1400 audit(1782741142.821:208): avc:  denied  { write } for  pid=5852 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   84.665932][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.669134][   T30] audit: type=1400 audit(1782741143.021:209): avc:  denied  { read write } for  pid=5858 comm="syz.0.14" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   84.675690][ T5713] usb 4-1: Product: syz
[   84.736449][   T30] audit: type=1400 audit(1782741143.091:210): avc:  denied  { open } for  pid=5858 comm="syz.0.14" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   84.738242][ T5821] appletouch 2-1:0.85: Geyser mode initialized.
[   84.825453][ T5713] usb 4-1: Manufacturer: syz
[   84.829725][   T30] audit: type=1400 audit(1782741143.141:211): avc:  denied  { mounton } for  pid=5858 comm="syz.0.14" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   84.832837][ T5713] usb 4-1: SerialNumber: syz
[   84.899196][ T5821] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5
[   84.906583][   T30] audit: type=1400 audit(1782741143.261:212): avc:  denied  { unmount } for  pid=5858 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   85.079209][   T30] audit: type=1400 audit(1782741143.401:213): avc:  denied  { create } for  pid=5858 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   85.143122][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'.
[   85.153286][   T30] audit: type=1400 audit(1782741143.401:214): avc:  denied  { write } for  pid=5858 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   85.669954][ T5882] netlink: 224 bytes leftover after parsing attributes in process `syz.4.16'.
[   85.956200][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'.
[   86.366674][ T5886] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   86.420103][   T29] IPVS: starting estimator thread 0...
[   86.431332][ T5727] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   86.472745][  T805] cfg80211: failed to load regulatory.db
[   86.542585][ T5888] IPVS: using max 41 ests per chain, 98400 per kthread
[   86.652490][ T5727] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40
[   86.667470][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.676479][ T5727] usb 3-1: Product: syz
[   86.680667][ T5727] usb 3-1: Manufacturer: syz
[   86.688638][ T5727] usb 3-1: SerialNumber: syz
[   87.717869][ T5727] usb 3-1: 1:1 : unsupported format bits 0x2004
[   87.747867][ T5727] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[   87.777358][ T5727] usb 3-1: failed to enable PITCH for EP 0x1
[   88.753246][ T5727] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   88.760774][ T5727] usb 3-1: unit 2 not found!
[   88.771286][ T5727] usb 3-1: unit 64 not found!
[   89.191891][   T30] kauditd_printk_skb: 15 callbacks suppressed
[   89.191908][   T30] audit: type=1400 audit(1782741147.501:230): avc:  denied  { prog_run } for  pid=5892 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   89.201210][ T5713] cdc_ncm 4-1:1.0: bind() failure
[   89.252009][   T30] audit: type=1400 audit(1782741147.541:231): avc:  denied  { create } for  pid=5890 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   89.294329][   T30] audit: type=1400 audit(1782741147.541:232): avc:  denied  { setopt } for  pid=5890 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   89.321907][ T5727] usb 3-1: USB disconnect, device number 2
[   89.340762][   T30] audit: type=1400 audit(1782741147.691:233): avc:  denied  { create } for  pid=5900 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   89.365497][   T30] audit: type=1400 audit(1782741147.691:234): avc:  denied  { connect } for  pid=5902 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   89.385644][   T30] audit: type=1400 audit(1782741147.691:235): avc:  denied  { write } for  pid=5902 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   89.417915][   T30] audit: type=1400 audit(1782741147.691:236): avc:  denied  { setopt } for  pid=5900 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   89.438358][   T30] audit: type=1400 audit(1782741147.771:237): avc:  denied  { create } for  pid=5902 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   89.461837][  T805] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   89.491821][ T5343] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   89.512850][ T5713] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[   89.528568][ T5713] usb 4-1: USB disconnect, device number 2
[   89.601887][  T805] usb 5-1: device descriptor read/64, error -71
[   89.683196][ T5343] usb 1-1: device descriptor read/64, error -71
[   90.075338][  T805] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   90.221836][ T5343] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   90.313897][  T992] usb 2-1: USB disconnect, device number 2
[   90.335021][  T805] usb 5-1: device descriptor read/64, error -71
[   90.452514][  T805] usb usb5-port1: attempt power cycle
[   90.482993][  T992] appletouch 2-1:0.85: input: appletouch disconnected
[   90.897674][ T5727] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   90.915605][   T30] audit: type=1400 audit(1782741149.201:238): avc:  denied  { append } for  pid=5915 comm="syz.4.25" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   91.162748][ T5727] usb 3-1: Using ep0 maxpacket: 8
[   91.408334][ T5727] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[   91.467501][ T5727] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   91.479436][ T5727] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   91.493889][ T5727] usb 3-1: Product: syz
[   91.500361][ T5727] usb 3-1: Manufacturer: syz
[   91.507407][ T5727] usb 3-1: SerialNumber: syz
[   91.747265][ T5713] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   91.911842][   T30] audit: type=1400 audit(1782741150.251:239): avc:  denied  { ioctl } for  pid=5913 comm="syz.2.24" path="socket:[8701]" dev="sockfs" ino=8701 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   92.016173][ T5727] usb 3-1: palm_os_3_probe - error -110 getting connection information
[   92.025695][ T5727] visor 3-1:1.0: probe with driver visor failed with error -110
[   92.081566][ T5938] warning: `syz.4.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   92.099843][ T5713] usb 4-1: Using ep0 maxpacket: 32
[   92.212213][ T5914] mmap: syz.2.24 (5914) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   92.685839][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.713191][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.724420][ T5713] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   92.876596][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.884121][ T5713] usb 4-1: config 0 descriptor??
[   92.906428][ T5713] hub 4-1:0.0: USB hub found
[   92.943796][ T5936] binder: 5933:5936 ioctl c0306201 200000000040 returned -22
[   92.995747][ T5942] loop5: detected capacity change from 0 to 7
[   93.003093][ T5805] usb 3-1: USB disconnect, device number 3
[   93.008578][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.018217][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   93.053430][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.062642][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   93.075163][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.084360][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   93.092862][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.102045][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[   93.122282][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.131464][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[   93.139709][ T5713] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[   93.150508][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.159780][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   93.188266][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.197490][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   93.221804][ T5942] ldm_validate_partition_table(): Disk read failed.
[   93.248608][ T5942] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.264977][ T5942] Buffer I/O error on dev loop5, logical block 0, async page read
[   93.307196][ T5950] process 'syz.1.34' launched './file0' with NULL argv: empty string added
[   93.323941][ T5942] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.363500][ T5942] Buffer I/O error on dev loop5, logical block 0, async page read
[   93.371482][ T5942] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.381221][ T5942] Buffer I/O error on dev loop5, logical block 0, async page read
[   93.389414][ T5942] Dev loop5: unable to read RDB block 0
[   93.395707][ T5942]  loop5: unable to read partition table
[   93.403967][ T5942] loop5: partition table beyond EOD, truncated
[   93.421266][ T5942] loop_reread_partitions: partition scan of loop5 (��) failed (rc=-5)
[   93.704644][ T5957] Illegal XDP return value 4294967294 on prog  (id 5) dev N/A, expect packet loss!
[   94.423523][ T5964] =======================================================
[   94.423523][ T5964] WARNING: The mand mount option has been deprecated and
[   94.423523][ T5964]          and is ignored by this kernel. Remove the mand
[   94.423523][ T5964]          option from the mount to silence this warning.
[   94.423523][ T5964] =======================================================
[   94.664918][   T30] kauditd_printk_skb: 15 callbacks suppressed
[   94.664936][   T30] audit: type=1400 audit(1782741152.781:255): avc:  denied  { mounton } for  pid=5956 comm="syz.2.37" path="/5/file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   94.673741][ T5964] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   94.919699][   T30] audit: type=1400 audit(1782741152.811:256): avc:  denied  { mount } for  pid=5956 comm="syz.2.37" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   95.069879][ T5964] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[   95.103121][ T5964] overlayfs: failed to look up (tracing) for ino (-66)
[   95.324730][   T30] audit: type=1400 audit(1782741153.051:257): avc:  denied  { mount } for  pid=5956 comm="syz.2.37" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   96.391854][   T29] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   96.611831][   T29] usb 2-1: device descriptor read/64, error -71
[   96.739836][   T30] audit: type=1400 audit(1782741155.081:258): avc:  denied  { unmount } for  pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   97.028971][   T30] audit: type=1400 audit(1782741155.311:259): avc:  denied  { name_connect } for  pid=5967 comm="syz.0.40" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   97.724777][   T30] audit: type=1400 audit(1782741156.001:260): avc:  denied  { create } for  pid=5974 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   97.761876][   T30] audit: type=1400 audit(1782741156.031:262): avc:  denied  { write } for  pid=5974 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   97.841956][   T29] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   97.849610][   T30] audit: type=1400 audit(1782741156.031:261): avc:  denied  { write } for  pid=5974 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   97.871923][   T30] audit: type=1400 audit(1782741156.031:263): avc:  denied  { create } for  pid=5974 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   97.891998][   T30] audit: type=1400 audit(1782741156.041:264): avc:  denied  { create } for  pid=5974 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   98.021823][   T29] usb 2-1: Using ep0 maxpacket: 32
[   98.027264][ T5713] usbhid 4-1:0.0: can't add hid device: -71
[   98.033311][ T5713] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   98.064365][   T29] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[   98.082587][   T29] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   98.101298][ T5713] usb 4-1: USB disconnect, device number 3
[   98.133238][   T29] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   98.174031][   T29] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   98.197563][   T29] usb 2-1: config 0 interface 0 has no altsetting 0
[   98.216767][   T29] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   98.231150][   T29] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   98.252381][   T29] usb 2-1: Product: syz
[   98.260121][   T29] usb 2-1: Manufacturer: syz
[   98.265084][   T29] usb 2-1: SerialNumber: syz
[   98.287617][   T29] usb 2-1: config 0 descriptor??
[   98.300472][   T29] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   98.327137][   T29] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   98.342729][ T5727] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   98.399554][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.528990][ T5727] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   98.633515][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.781994][ T5727] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[   98.793408][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.802613][ T5727] usb 3-1: Product: syz
[   98.808653][ T5727] usb 3-1: Manufacturer: syz
[   98.812722][ T5713] usb 2-1: USB disconnect, device number 4
[   98.814397][ T5727] usb 3-1: SerialNumber: syz
[   98.859914][ T5713] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[   98.889822][ T5727] usb 3-1: config 0 descriptor??
[   99.030855][ T5992] loop5: detected capacity change from 0 to 7
[   99.045770][    C0] blk_print_req_error: 5 callbacks suppressed
[   99.045782][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   99.064912][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.074116][    C0] buffer_io_error: 5 callbacks suppressed
[   99.074125][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[   99.087880][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.097028][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[   99.105215][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.114401][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   99.126531][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.135727][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   99.146891][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.156063][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[   99.165326][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.174519][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[   99.182827][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.191976][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[   99.200316][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.209465][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[   99.217989][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.227152][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[   99.235218][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[   99.245745][ T5992] ldm_validate_partition_table(): Disk read failed.
[   99.261601][ T5992] Dev loop5: unable to read RDB block 0
[   99.281435][ T5992]  loop5: unable to read partition table
[   99.315127][ T5992] loop5: partition table beyond EOD, truncated
[   99.345432][ T5992] loop_reread_partitions: partition scan of loop5 (��) failed (rc=-5)
[   99.723352][   T30] kauditd_printk_skb: 13 callbacks suppressed
[   99.723370][   T30] audit: type=1400 audit(1782741158.071:278): avc:  denied  { module_load } for  pid=5997 comm="syz.1.48" path="/sys/kernel/uevent_seqnum" dev="sysfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[   99.821004][ T6007] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   99.980377][ T6007] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[   99.990890][ T6007] overlayfs: failed to look up (tracing) for ino (-66)
[  100.835217][ T5343] usb 3-1: USB disconnect, device number 4
[  101.208435][   T30] audit: type=1400 audit(1782741159.561:279): avc:  denied  { execute } for  pid=6008 comm="syz.0.51" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  101.264427][   T48] Bluetooth: hci5: Frame reassembly failed (-84)
[  101.286108][   T30] audit: type=1400 audit(1782741159.611:280): avc:  denied  { create } for  pid=6008 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  101.320249][   T30] audit: type=1400 audit(1782741159.631:281): avc:  denied  { listen } for  pid=6008 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  101.340127][   T30] audit: type=1400 audit(1782741159.671:282): avc:  denied  { connect } for  pid=6008 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  101.381095][   T30] audit: type=1400 audit(1782741159.721:283): avc:  denied  { read } for  pid=6008 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  102.389150][   T30] audit: type=1400 audit(1782741160.721:284): avc:  denied  { read } for  pid=6022 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  102.425130][   T30] audit: type=1400 audit(1782741160.771:285): avc:  denied  { write } for  pid=6022 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  103.011862][   T30] audit: type=1400 audit(1782741161.051:286): avc:  denied  { bind } for  pid=6026 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  103.144987][   T30] audit: type=1400 audit(1782741161.051:287): avc:  denied  { name_bind } for  pid=6026 comm="syz.0.55" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  103.323797][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  103.324185][ T5628] Bluetooth: hci5: command 0x1003 tx timeout
[  103.374217][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'.
[  103.383364][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'.
[  103.677910][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'.
[  103.725544][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'.
[  104.345043][ T6057] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  104.378632][ T6057] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  104.388706][ T6057] overlayfs: failed to look up (tracing) for ino (-66)
[  105.963638][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  105.963686][   T30] audit: type=1400 audit(1782741164.315:298): avc:  denied  { ioctl } for  pid=6065 comm="syz.0.68" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  106.305867][   T30] audit: type=1400 audit(1782741164.595:299): avc:  denied  { read } for  pid=6065 comm="syz.0.68" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  106.557186][   T30] audit: type=1400 audit(1782741164.605:300): avc:  denied  { open } for  pid=6065 comm="syz.0.68" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  106.557322][   T30] audit: type=1400 audit(1782741164.695:301): avc:  denied  { ioctl } for  pid=6065 comm="syz.0.68" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  106.751508][ T5805] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  106.995078][   T30] audit: type=1400 audit(1782741165.355:302): avc:  denied  { mount } for  pid=6077 comm="syz.3.69" name="/" dev="autofs" ino=9086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  107.043924][ T5805] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40
[  107.053083][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.071074][ T5805] usb 3-1: Product: syz
[  107.100258][ T5805] usb 3-1: Manufacturer: syz
[  107.143501][ T5805] usb 3-1: SerialNumber: syz
[  107.216314][   T30] audit: type=1400 audit(1782741165.565:303): avc:  denied  { append } for  pid=6082 comm="syz.0.70" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  107.732174][ T5343] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  108.081831][ T5343] usb 1-1: Using ep0 maxpacket: 16
[  108.091035][ T5343] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.114669][ T5343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  108.138993][ T5343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  108.177402][ T5343] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  108.200236][ T5343] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11
[  108.218184][   T30] audit: type=1400 audit(1782741166.575:304): avc:  denied  { create } for  pid=6092 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  108.260763][ T5343] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  108.273151][   T30] audit: type=1400 audit(1782741166.575:305): avc:  denied  { ioctl } for  pid=6092 comm="syz.4.73" path="socket:[9107]" dev="sockfs" ino=9107 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  108.318417][ T5343] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  108.328753][ T5343] usb 1-1: Manufacturer: syz
[  108.662488][   T30] audit: type=1400 audit(1782741167.005:306): avc:  denied  { create } for  pid=6092 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  108.683725][ T5343] usb 1-1: config 0 descriptor??
[  108.780390][   T30] audit: type=1400 audit(1782741167.135:307): avc:  denied  { listen } for  pid=6100 comm="syz.1.75" lport=48506 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  109.052363][ T5343] rc_core: IR keymap rc-hauppauge not found
[  109.214019][ T5343] Registered IR keymap rc-empty
[  109.222973][ T5343] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  109.318932][ T6112] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  109.468909][ T6112] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  109.479588][ T6112] overlayfs: failed to look up (tracing) for ino (-66)
[  110.204387][ T5805] usb 3-1: 1:1 : unsupported format bits 0x2004
[  110.214119][ T5805] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  110.214332][ T5343] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  110.552320][ T6114] xt_TCPMSS: Only works on TCP SYN packets
[  110.928112][ T5805] usb 3-1: failed to enable PITCH for EP 0x1
[  110.992820][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  111.151340][ T5343] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  111.173630][ T5805] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  111.193762][ T5343] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6
[  111.206839][ T5805] usb 3-1: unit 2 not found!
[  111.227293][ T5805] usb 3-1: unit 64 not found!
[  111.265913][ T5343] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  111.280353][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  111.280377][   T30] audit: type=1400 audit(1782741169.635:316): avc:  denied  { create } for  pid=6117 comm="syz.0.79" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  111.327666][ T5343] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  111.353176][ T6122] loop5: detected capacity change from 0 to 7
[  111.398693][   T30] audit: type=1400 audit(1782741169.675:317): avc:  denied  { write } for  pid=6117 comm="syz.0.79" name="file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  111.425536][ T5343] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  111.437984][    C0] blk_print_req_error: 11 callbacks suppressed
[  111.437995][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.453305][    C0] buffer_io_error: 10 callbacks suppressed
[  111.453314][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  111.518956][ T5805] usb 3-1: USB disconnect, device number 5
[  111.601252][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.610477][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  111.620002][ T5343] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  111.668914][   T30] audit: type=1400 audit(1782741169.675:318): avc:  denied  { open } for  pid=6117 comm="syz.0.79" path="/21/file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  111.697070][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.706271][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  111.831747][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.840939][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  111.884462][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.893648][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  111.984810][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.993999][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  112.004048][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.013255][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  112.021094][ T6122] ldm_validate_partition_table(): Disk read failed.
[  112.051266][ T5343] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  112.084611][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.086360][   T30] audit: type=1400 audit(1782741169.675:319): avc:  denied  { ioctl } for  pid=6117 comm="syz.0.79" path="/21/file0" dev="tmpfs" ino=130 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  112.093843][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  112.151886][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.161057][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  112.186971][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.196175][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  112.204099][ T6122] Dev loop5: unable to read RDB block 0
[  112.231686][ T6122]  loop5: unable to read partition table
[  112.271833][ T5343] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  112.276866][ T6122] loop5: partition table beyond EOD, truncated
[  112.341129][   T30] audit: type=1400 audit(1782741169.785:320): avc:  denied  { unlink } for  pid=5606 comm="syz-executor" name="file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  112.343564][ T5343] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  112.383648][ T6122] loop_reread_partitions: partition scan of loop5 (��) failed (rc=-5)
[  112.459921][   T30] audit: type=1400 audit(1782741170.665:321): avc:  denied  { ioctl } for  pid=6131 comm="syz.4.82" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  112.474612][ T6138] FAULT_INJECTION: forcing a failure.
[  112.474612][ T6138] name failslab, interval 1, probability 0, space 0, times 0
[  112.512336][ T5343] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  112.532191][ T5343] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  112.602176][ T5343] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  112.756335][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(full) 
[  112.756364][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  112.756383][ T6138] Call Trace:
[  112.756390][ T6138]  <TASK>
[  112.756397][ T6138]  dump_stack_lvl+0x100/0x190
[  112.756418][ T6138]  should_fail_ex.cold+0x5/0xa
[  112.756434][ T6138]  should_failslab+0xc2/0x120
[  112.756449][ T6138]  __kmalloc_noprof+0xfc/0x820
[  112.756463][ T6138]  ? __pfx_dynamic_dname+0x10/0x10
[  112.756480][ T6138]  ? tomoyo_encode2+0xfb/0x3c0
[  112.756499][ T6138]  tomoyo_encode2+0xfb/0x3c0
[  112.756518][ T6138]  tomoyo_encode+0x29/0x50
[  112.756533][ T6138]  tomoyo_realpath_from_path+0x18c/0x690
[  112.756553][ T6138]  tomoyo_path_number_perm+0x23c/0x580
[  112.756567][ T6138]  ? tomoyo_path_number_perm+0x22e/0x580
[  112.756583][ T6138]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  112.756612][ T6138]  ? find_held_lock+0x2b/0x80
[  112.756623][ T6138]  ? __fget_files+0x215/0x3d0
[  112.756634][ T6138]  ? hook_file_ioctl_common+0x140/0x440
[  112.756645][ T6138]  ? __fget_files+0x215/0x3d0
[  112.756659][ T6138]  ? __fget_files+0x21f/0x3d0
[  112.756673][ T6138]  security_file_ioctl+0xd3/0x230
[  112.756689][ T6138]  __x64_sys_ioctl+0xb7/0x210
[  112.756707][ T6138]  do_syscall_64+0x115/0x870
[  112.756723][ T6138]  ? clear_bhb_loop+0x40/0x90
[  112.756737][ T6138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.756753][ T6138] RIP: 0033:0x7fa1f919ce59
[  112.756763][ T6138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.756777][ T6138] RSP: 002b:00007fa1f73f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  112.756790][ T6138] RAX: ffffffffffffffda RBX: 00007fa1f9416090 RCX: 00007fa1f919ce59
[  112.756798][ T6138] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  112.756804][ T6138] RBP: 00007fa1f73f6090 R08: 0000000000000000 R09: 0000000000000000
[  112.756810][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.756817][ T6138] R13: 00007fa1f9416128 R14: 00007fa1f9416090 R15: 00007ffd1da62d28
[  112.756832][ T6138]  </TASK>
[  112.756853][ T6138] ERROR: Out of memory at tomoyo_realpath_from_path.
[  112.785696][ T5343] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  113.121646][ T5343] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  113.141099][ T5343] usb 1-1: USB disconnect, device number 8
[  113.180085][   T30] audit: type=1400 audit(1782741171.535:322): avc:  denied  { ioctl } for  pid=6144 comm="syz.1.87" path="/dev/sg0" dev="devtmpfs" ino=753 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  113.351322][   T30] audit: type=1400 audit(1782741171.595:323): avc:  denied  { write } for  pid=6147 comm="syz.3.88" name="config" dev="proc" ino=4026533344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  114.326731][ T6165] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  114.480949][ T6165] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  114.491027][ T6165] overlayfs: failed to look up (tracing) for ino (-66)
[  114.682019][ T5720] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  115.044563][ T5720] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.169126][ T5720] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  115.240323][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.331805][  T992] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  115.500009][  T992] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  115.508795][ T5720] usb 1-1: config 0 descriptor??
[  115.773847][  T992] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  115.880801][  T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.884479][ T5720] pwc: Askey VC010 type 2 USB webcam detected.
[  116.022468][  T992] usb 3-1: Product: syz
[  116.039003][  T992] usb 3-1: Manufacturer: syz
[  116.053976][  T992] usb 3-1: SerialNumber: syz
[  116.078151][  T992] usb 3-1: config 0 descriptor??
[  116.109557][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'.
[  116.144333][   T30] audit: type=1400 audit(1782741174.505:324): avc:  denied  { write } for  pid=6174 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  116.166210][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'.
[  116.184886][   T30] audit: type=1400 audit(1782741174.535:325): avc:  denied  { setattr } for  pid=6172 comm="syz.1.95" name="NETLINK" dev="sockfs" ino=10348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  116.220517][ T6176] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=161 sclass=netlink_xfrm_socket pid=6176 comm=syz.1.95
[  116.278229][ T5720] pwc: recv_control_msg error -71 req 02 val 2b00
[  116.314269][ T5720] pwc: recv_control_msg error -71 req 02 val 2700
[  116.345120][ T5720] pwc: recv_control_msg error -71 req 02 val 2c00
[  116.383054][ T5720] pwc: recv_control_msg error -71 req 04 val 1000
[  116.704674][ T5720] pwc: recv_control_msg error -71 req 04 val 1300
[  116.717090][ T5720] pwc: recv_control_msg error -71 req 04 val 1400
[  116.724903][ T5720] pwc: recv_control_msg error -71 req 02 val 2000
[  116.734573][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  116.734587][   T30] audit: type=1400 audit(1782741175.095:328): avc:  denied  { connect } for  pid=6159 comm="syz.2.91" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  116.819555][ T5720] pwc: recv_control_msg error -71 req 02 val 2100
[  116.833360][   T30] audit: type=1400 audit(1782741175.125:329): avc:  denied  { write } for  pid=6159 comm="syz.2.91" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  116.856705][   T30] audit: type=1400 audit(1782741175.145:330): avc:  denied  { create } for  pid=6159 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  116.880011][   T30] audit: type=1400 audit(1782741175.155:331): avc:  denied  { setopt } for  pid=6159 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  116.901444][  T992] usb 3-1: USB disconnect, device number 6
[  116.920078][ T6191] netlink: 'syz.4.100': attribute type 1 has an invalid length.
[  116.933218][ T5720] pwc: recv_control_msg error -71 req 04 val 1500
[  116.950814][ T5720] pwc: recv_control_msg error -71 req 02 val 2500
[  116.962077][ T5720] pwc: recv_control_msg error -71 req 02 val 2400
[  116.969602][ T5720] pwc: recv_control_msg error -71 req 02 val 2600
[  116.978156][ T5720] pwc: recv_control_msg error -71 req 02 val 2900
[  116.985872][ T5720] pwc: recv_control_msg error -71 req 02 val 2800
[  116.993655][ T5720] pwc: recv_control_msg error -71 req 04 val 1100
[  117.025724][ T5720] pwc: recv_control_msg error -71 req 04 val 1200
[  117.042955][ T5720] pwc: Registered as video103.
[  117.056877][ T5720] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[  117.093246][ T5720] usb 1-1: USB disconnect, device number 9
[  117.152853][ T6191] bond1: entered promiscuous mode
[  117.183058][ T6191] 8021q: adding VLAN 0 to HW filter on device bond1
[  117.327338][ T6193] bond1: (slave bridge1): making interface the new active one
[  117.469204][ T6193] bridge1: entered promiscuous mode
[  117.991907][ T6193] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  118.227445][ T6191] netlink: 72 bytes leftover after parsing attributes in process `syz.4.100'.
[  118.983700][ T6220] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  119.129711][ T6220] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  119.139822][ T6220] overlayfs: failed to look up (tracing) for ino (-66)
[  120.235566][   T30] audit: type=1400 audit(1782741178.595:332): avc:  denied  { write } for  pid=6215 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  120.474341][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'.
[  120.654864][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'.
[  121.100191][   T30] audit: type=1400 audit(1782741179.455:333): avc:  denied  { listen } for  pid=6240 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  121.211839][   T30] audit: type=1400 audit(1782741179.565:334): avc:  denied  { setcurrent } for  pid=6242 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  122.211805][ T5821] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  122.409141][ T6262] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  122.553598][ T6262] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  122.563735][ T6262] overlayfs: failed to look up (tracing) for ino (-66)
[  123.303782][ T5821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.313937][ T5821] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  123.414705][ T5821] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  123.428841][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.904391][ T5821] usb 3-1: Product: syz
[  123.908613][ T5821] usb 3-1: Manufacturer: syz
[  123.913267][ T5821] usb 3-1: SerialNumber: syz
[  125.164029][ T5613] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  125.174609][ T5613] Bluetooth: hci4: Injecting HCI hardware error event
[  125.186782][ T5628] Bluetooth: hci4: hardware error 0x00
[  125.394045][   T30] audit: type=1400 audit(1782741183.335:335): avc:  denied  { shutdown } for  pid=6270 comm="syz.3.123" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  125.471742][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  125.758314][   T30] audit: type=1400 audit(1782741184.115:336): avc:  denied  { mounton } for  pid=6280 comm="syz.3.124" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  125.797238][ T5821] usb 3-1: unit 5 not found!
[  126.053231][ T6290] xt_TCPMSS: Only works on TCP SYN packets
[  126.986937][ T5821] usb 3-1: USB disconnect, device number 7
[  127.022642][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'.
[  127.121628][ T6297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.129'.
[  127.130730][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'.
[  127.692242][ T5628] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  128.122887][   T30] audit: type=1400 audit(1782741186.475:337): avc:  denied  { create } for  pid=6306 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  128.216209][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'.
[  128.232141][   T30] audit: type=1400 audit(1782741186.535:338): avc:  denied  { connect } for  pid=6306 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  128.502582][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  128.831786][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  128.905504][  T992] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  129.136222][  T992] usb 5-1: config index 0 descriptor too short (expected 28277, got 36)
[  129.148602][  T992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.226871][ T6318] SELinux: failed to load policy
[  129.574530][   T30] audit: type=1400 audit(1782741187.575:339): avc:  denied  { load_policy } for  pid=6315 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  129.597976][  T992] usb 5-1: config 0 has no interfaces?
[  129.607496][  T992] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  129.620846][  T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.668974][  T992] usb 5-1: config 0 descriptor??
[  129.739668][   T30] audit: type=1400 audit(1782741188.095:340): avc:  denied  { open } for  pid=5606 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  129.815318][   T30] audit: type=1400 audit(1782741188.095:341): avc:  denied  { ioctl } for  pid=5606 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  129.852882][   T30] audit: type=1400 audit(1782741188.095:342): avc:  denied  { read write } for  pid=5609 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  130.027251][ T5713] usb 5-1: USB disconnect, device number 5
[  130.105429][  T992] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  130.438877][   T30] audit: type=1400 audit(1782741188.795:343): avc:  denied  { read write } for  pid=6329 comm="syz.3.137" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  130.516235][   T30] audit: type=1400 audit(1782741188.795:344): avc:  denied  { open } for  pid=6329 comm="syz.3.137" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  130.562026][  T992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.614272][  T992] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  130.627751][   T30] audit: type=1400 audit(1782741188.985:345): avc:  denied  { write } for  pid=6319 comm="syz.2.134" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  130.772274][  T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.781271][ T6334] netlink: 68 bytes leftover after parsing attributes in process `syz.3.138'.
[  130.870526][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'.
[  131.235929][  T992] usb 1-1: Product: syz
[  131.240156][  T992] usb 1-1: Manufacturer: syz
[  131.245208][  T992] usb 1-1: SerialNumber: syz
[  131.265116][   T30] audit: type=1400 audit(1782741189.215:346): avc:  denied  { create } for  pid=6331 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  131.322392][   T30] audit: type=1400 audit(1782741189.225:347): avc:  denied  { write } for  pid=6331 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  132.559155][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  132.570697][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  134.141309][ T5343] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  134.546710][ T5343] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  134.595159][ T5343] usb 5-1: config 0 has no interface number 0
[  134.612644][ T5343] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  134.692644][ T5343] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.731895][ T5343] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  134.741696][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.751435][ T5343] usb 5-1: Product: syz
[  134.756512][ T5343] usb 5-1: Manufacturer: syz
[  134.761168][ T5343] usb 5-1: SerialNumber: syz
[  134.863769][ T5343] usb 5-1: config 0 descriptor??
[  134.880905][ T6353] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  134.912063][  T992] cdc_ncm 1-1:1.0: bind() failure
[  134.912536][ T5343] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  134.994518][  T992] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  135.006010][  T992] usb 1-1: USB disconnect, device number 10
[  135.094005][ T5343] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  135.094211][    C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  135.468642][ T6369] SELinux: failed to load policy
[  135.745519][   T30] audit: type=1400 audit(1782741194.045:348): avc:  denied  { associate } for  pid=6372 comm="syz.1.148" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  135.877781][ T5821] usb 5-1: USB disconnect, device number 6
[  135.911800][   T30] audit: type=1400 audit(1782741194.045:349): avc:  denied  { setopt } for  pid=6365 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  135.938381][ T5821] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  135.949503][ T5821] cyberjack 5-1:0.69: device disconnected
[  135.956684][   T30] audit: type=1400 audit(1782741194.225:350): avc:  denied  { connect } for  pid=6351 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  135.981271][   T30] audit: type=1400 audit(1782741194.225:351): avc:  denied  { setopt } for  pid=6351 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  136.003674][   T30] audit: type=1400 audit(1782741194.225:352): avc:  denied  { bind } for  pid=6351 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  136.035743][   T30] audit: type=1400 audit(1782741194.225:353): avc:  denied  { write } for  pid=6351 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  136.055976][   T30] audit: type=1400 audit(1782741194.225:354): avc:  denied  { read } for  pid=6351 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  136.493936][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'.
[  136.733377][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'.
[  136.839569][ T6388] FAULT_INJECTION: forcing a failure.
[  136.839569][ T6388] name failslab, interval 1, probability 0, space 0, times 0
[  136.839679][ T6388] CPU: 1 UID: 0 PID: 6388 Comm: syz.0.150 Not tainted syzkaller #0 PREEMPT(full) 
[  136.839704][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  136.839716][ T6388] Call Trace:
[  136.839722][ T6388]  <TASK>
[  136.839730][ T6388]  dump_stack_lvl+0x100/0x190
[  136.839774][ T6388]  should_fail_ex.cold+0x5/0xa
[  136.839805][ T6388]  should_failslab+0xc2/0x120
[  136.839832][ T6388]  __kmalloc_cache_noprof+0x91/0x6c0
[  136.839866][ T6388]  ? vkms_plane_duplicate_state+0x87/0x130
[  136.839897][ T6388]  vkms_plane_duplicate_state+0x87/0x130
[  136.839921][ T6388]  drm_atomic_get_plane_state+0x279/0x7d0
[  136.839959][ T6388]  drm_client_modeset_commit_atomic+0x237/0x7e0
[  136.839993][ T6388]  ? __mutex_lock+0x26d/0x1bd0
[  136.840025][ T6388]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  136.840052][ T6388]  ? drm_master_internal_acquire+0x21/0x80
[  136.840075][ T6388]  ? __mutex_lock+0x8f7/0x1bd0
[  136.840125][ T6388]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  136.840164][ T6388]  drm_client_modeset_commit_locked+0x14d/0x580
[  136.840196][ T6388]  drm_fb_helper_pan_display+0x32d/0xa40
[  136.840233][ T6388]  fb_pan_display+0x195/0x820
[  136.840258][ T6388]  ? __pfx_drm_fb_helper_pan_display+0x10/0x10
[  136.840282][ T6388]  ? fbcon_switch+0xe0e/0x19f0
[  136.840312][ T6388]  bit_update_start+0x48/0x1f0
[  136.840343][ T6388]  fbcon_switch+0x1119/0x19f0
[  136.840380][ T6388]  ? __pfx_fbcon_switch+0x10/0x10
[  136.840424][ T6388]  ? __pfx_bit_cursor+0x10/0x10
[  136.840451][ T6388]  ? fbcon_cursor+0x24c/0x5e0
[  136.840476][ T6388]  ? io_schedule_timeout+0x70/0x110
[  136.840511][ T6388]  csi_J+0x872/0xad0
[  136.840529][ T6388]  ? irqentry_exit+0x24d/0xa00
[  136.840556][ T6388]  ? lockdep_hardirqs_on+0x78/0x100
[  136.840585][ T6388]  ? irqentry_exit+0x24d/0xa00
[  136.840621][ T6388]  csi_ECMA.constprop.0+0x51e/0x3b60
[  136.840650][ T6388]  ? __pfx_csi_ECMA.constprop.0+0x10/0x10
[  136.840677][ T6388]  ? do_con_write+0x2780/0x4a30
[  136.840706][ T6388]  do_con_write+0x3660/0x4a30
[  136.840733][ T6388]  ? __mutex_lock+0x8f7/0x1bd0
[  136.840777][ T6388]  ? __pfx_do_con_write+0x10/0x10
[  136.840801][ T6388]  ? mark_held_locks+0x40/0x70
[  136.840834][ T6388]  ? con_write+0x93/0xb0
[  136.840860][ T6388]  con_write+0x23/0xb0
[  136.840884][ T6388]  n_tty_write+0x431/0x1160
[  136.840926][ T6388]  ? __pfx_n_tty_write+0x10/0x10
[  136.840955][ T6388]  ? __pfx_woken_wake_function+0x10/0x10
[  136.840992][ T6388]  ? __pfx_n_tty_write+0x10/0x10
[  136.841021][ T6388]  file_tty_write.isra.0+0x4d2/0x890
[  136.841054][ T6388]  vfs_write+0x6ac/0x1050
[  136.841085][ T6388]  ? __pfx_tty_write+0x10/0x10
[  136.841110][ T6388]  ? __pfx_vfs_write+0x10/0x10
[  136.841138][ T6388]  ? find_held_lock+0x2b/0x80
[  136.841181][ T6388]  ksys_write+0x12a/0x250
[  136.841200][ T6388]  ? __pfx_ksys_write+0x10/0x10
[  136.841240][ T6388]  do_syscall_64+0x115/0x870
[  136.841267][ T6388]  ? clear_bhb_loop+0x40/0x90
[  136.841293][ T6388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.841315][ T6388] RIP: 0033:0x7fc3b119ce59
[  136.841336][ T6388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.841354][ T6388] RSP: 002b:00007fc3af3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  136.841373][ T6388] RAX: ffffffffffffffda RBX: 00007fc3b1416180 RCX: 00007fc3b119ce59
[  136.841387][ T6388] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000006
[  136.841399][ T6388] RBP: 00007fc3af3f6090 R08: 0000000000000000 R09: 0000000000000000
[  136.841412][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.841423][ T6388] R13: 00007fc3b1416218 R14: 00007fc3b1416180 R15: 00007fffcce07838
[  136.841456][ T6388]  </TASK>
[  137.400402][   T30] audit: type=1400 audit(1782741195.755:355): avc:  denied  { mount } for  pid=6387 comm="syz.2.152" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  137.674245][   T30] audit: type=1400 audit(1782741195.925:356): avc:  denied  { unmount } for  pid=6387 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  137.954678][ T5727] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  138.121875][ T5343] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  138.573622][ T5727] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.588037][ T5727] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  138.597387][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.605899][ T5727] usb 4-1: Product: syz
[  138.610237][ T5727] usb 4-1: Manufacturer: syz
[  138.615127][ T5727] usb 4-1: SerialNumber: syz
[  138.634336][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  138.658796][ T5343] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  138.669947][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  138.671295][   T30] audit: type=1400 audit(1782741197.025:357): avc:  denied  { ioctl } for  pid=6405 comm="syz.4.157" path="socket:[11174]" dev="sockfs" ino=11174 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  138.694035][ T5343] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  138.717451][ T5343] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  138.727892][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.736047][ T5343] usb 2-1: Product: syz
[  138.740357][ T5343] usb 2-1: Manufacturer: syz
[  138.747223][ T5343] usb 2-1: SerialNumber: syz
[  138.759545][ T5343] usb 2-1: config 0 descriptor??
[  138.771587][ T5343] ums-isd200 2-1:0.0: USB Mass Storage device detected
[  139.413666][ T5343] scsi host1: usb-storage 2-1:0.0
[  139.422415][ T5727] cdc_ncm 4-1:1.0: bind() failure
[  139.588718][ T5727] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[  139.601501][ T5343] usb 2-1: USB disconnect, device number 5
[  139.640593][ T5727] usb 4-1: USB disconnect, device number 4
[  139.984516][   T29] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  140.195389][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  140.251497][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.341928][   T29] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  140.419885][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.462341][   T29] usb 1-1: config 0 descriptor??
[  140.637618][ T6439] can0: slcan on ttyS3.
[  140.778781][   T30] kauditd_printk_skb: 45 callbacks suppressed
[  140.778822][   T30] audit: type=1400 audit(1782741199.135:403): avc:  denied  { module_request } for  pid=6441 comm="syz.2.168" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  141.029647][   T30] audit: type=1400 audit(1782741199.155:404): avc:  denied  { ioctl } for  pid=6440 comm="syz.1.167" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  141.101300][ T6449] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.166'.
[  141.180358][   T30] audit: type=1400 audit(1782741199.155:405): avc:  denied  { read } for  pid=6440 comm="syz.1.167" dev="nsfs" ino=4026532879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  141.251082][   T30] audit: type=1400 audit(1782741199.155:406): avc:  denied  { open } for  pid=6440 comm="syz.1.167" path="net:[4026532879]" dev="nsfs" ino=4026532879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  141.308091][ T6439] can0 (unregistered): slcan off ttyS3.
[  141.359753][   T30] audit: type=1400 audit(1782741199.155:407): avc:  denied  { create } for  pid=6440 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  141.521742][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  141.551795][   T30] audit: type=1400 audit(1782741199.265:408): avc:  denied  { read } for  pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  141.616158][   T30] audit: type=1400 audit(1782741199.485:409): avc:  denied  { search } for  pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  142.324985][   T30] audit: type=1400 audit(1782741199.485:410): avc:  denied  { search } for  pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  142.346649][   T30] audit: type=1400 audit(1782741199.485:411): avc:  denied  { search } for  pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  142.430551][   T30] audit: type=1400 audit(1782741199.485:412): avc:  denied  { read } for  pid=5271 comm="dhcpcd" name="n30" dev="tmpfs" ino=2681 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  142.473616][ T6467] syz.4.172 uses obsolete (PF_INET,SOCK_PACKET)
[  142.696255][   T29] usbhid 1-1:0.0: can't add hid device: -71
[  142.719193][   T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  142.737360][   T29] usb 1-1: USB disconnect, device number 11
[  144.170387][ T6486] loop5: detected capacity change from 0 to 7
[  144.436603][    C0] blk_print_req_error: 10 callbacks suppressed
[  144.436622][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.452036][    C0] buffer_io_error: 10 callbacks suppressed
[  144.452052][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  144.480674][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.489942][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  144.536122][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.545399][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  144.565623][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.574880][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  144.600526][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.609792][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  144.630603][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.639861][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  144.679696][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  144.688990][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  144.722171][   T29] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  144.724530][ T6486] ldm_validate_partition_table(): Disk read failed.
[  145.896638][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.905883][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  145.915201][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.924438][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  145.936709][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.945888][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  145.953814][ T6486] Dev loop5: unable to read RDB block 0
[  145.994214][ T6486]  loop5: unable to read partition table
[  146.017669][   T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.032228][ T6486] loop5: partition table beyond EOD, truncated
[  146.035870][   T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  146.050114][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.058297][ T6486] loop_reread_partitions: partition scan of loop5 (��) failed (rc=-5)
[  146.070143][   T29] usb 1-1: Product: syz
[  146.078531][   T29] usb 1-1: Manufacturer: syz
[  146.085051][   T29] usb 1-1: SerialNumber: syz
[  146.106669][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  146.106682][   T30] audit: type=1400 audit(1782741204.465:441): avc:  denied  { write } for  pid=6496 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  146.220685][   T30] audit: type=1400 audit(1782741204.465:442): avc:  denied  { remove_name } for  pid=6496 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2709 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  146.305487][   T30] audit: type=1400 audit(1782741204.465:443): avc:  denied  { unlink } for  pid=6496 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2709 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  146.412559][   T30] audit: type=1400 audit(1782741204.635:444): avc:  denied  { read } for  pid=6501 comm="syz.3.179" name="frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  146.448132][ T6510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.178'.
[  146.508165][   T30] audit: type=1400 audit(1782741204.675:445): avc:  denied  { read } for  pid=6497 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  146.591627][ T6512] FAULT_INJECTION: forcing a failure.
[  146.591627][ T6512] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  146.761664][ T6515] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  146.770580][ T6515] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  147.430947][   T30] audit: type=1400 audit(1782741204.695:446): avc:  denied  { create } for  pid=6501 comm="syz.3.179" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  147.454597][   T30] audit: type=1400 audit(1782741204.705:447): avc:  denied  { ioctl } for  pid=6501 comm="syz.3.179" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11856 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  147.500934][   T30] audit: type=1400 audit(1782741204.735:448): avc:  denied  { write } for  pid=6497 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  147.521514][   T30] audit: type=1400 audit(1782741204.735:449): avc:  denied  { map } for  pid=6501 comm="syz.3.179" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  147.602911][ T6515] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  147.611280][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.2.181 Not tainted syzkaller #0 PREEMPT(full) 
[  147.611305][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  147.611316][ T6512] Call Trace:
[  147.611323][ T6512]  <TASK>
[  147.611330][ T6512]  dump_stack_lvl+0x100/0x190
[  147.611365][ T6512]  should_fail_ex.cold+0x5/0xa
[  147.611392][ T6512]  strncpy_from_user+0x3b/0x2d0
[  147.611421][ T6512]  do_getname+0x78/0x390
[  147.611447][ T6512]  acct_on+0x93/0xa00
[  147.611468][ T6512]  ? __pfx_acct_on+0x10/0x10
[  147.611488][ T6512]  ? bpf_lsm_capable+0x9/0x10
[  147.611508][ T6512]  ? security_capable+0x80/0x260
[  147.611536][ T6512]  __x64_sys_acct+0x81/0x1e0
[  147.611553][ T6512]  ? lockdep_hardirqs_on+0x78/0x100
[  147.611580][ T6512]  do_syscall_64+0x115/0x870
[  147.611606][ T6512]  ? clear_bhb_loop+0x40/0x90
[  147.611631][ T6512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.611651][ T6512] RIP: 0033:0x7fa1f919ce59
[  147.611677][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.611696][ T6512] RSP: 002b:00007fa1f73f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[  147.611714][ T6512] RAX: ffffffffffffffda RBX: 00007fa1f9416090 RCX: 00007fa1f919ce59
[  147.611726][ T6512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  147.611738][ T6512] RBP: 00007fa1f73f6090 R08: 0000000000000000 R09: 0000000000000000
[  147.611748][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.611759][ T6512] R13: 00007fa1f9416128 R14: 00007fa1f9416090 R15: 00007ffd1da62d28
[  147.611787][ T6512]  </TASK>
[  147.785063][   T30] audit: type=1400 audit(1782741204.735:450): avc:  denied  { read write } for  pid=6501 comm="syz.3.179" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  148.502734][   T29] cdc_ncm 1-1:1.0: bind() failure
[  149.148319][ T6531] binder: 6530:6531 ioctl c0306201 2000000001c0 returned -14
[  149.613717][ T6538] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.185'.
[  149.788146][   T29] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  150.040551][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880338a1000: rx timeout, send abort
[  150.540895][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880338a1800: rx timeout, send abort
[  150.550471][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880338a1000: abort rx timeout. Force session deactivation
[  150.562587][ T6548] lo speed is unknown, defaulting to 1000
[  150.568920][ T6548] lo speed is unknown, defaulting to 1000
[  150.613249][ T6548] lo speed is unknown, defaulting to 1000
[  150.637307][ T6548] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  150.652456][ T6548] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  150.669860][ T6548] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  150.862294][ T6548] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  150.921591][ T6548] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  151.049171][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880338a1800: abort rx timeout. Force session deactivation
[  151.054846][ T6548] lo speed is unknown, defaulting to 1000
[  151.087249][ T6548] lo speed is unknown, defaulting to 1000
[  151.105432][ T6548] lo speed is unknown, defaulting to 1000
[  151.132023][ T6548] lo speed is unknown, defaulting to 1000
[  151.145703][ T6548] lo speed is unknown, defaulting to 1000
[  151.492819][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  151.492834][   T30] audit: type=1400 audit(1782741209.845:475): avc:  denied  { read } for  pid=4958 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  151.530766][   T30] audit: type=1400 audit(1782741209.845:476): avc:  denied  { search } for  pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  151.553019][   T30] audit: type=1400 audit(1782741209.845:477): avc:  denied  { write search } for  pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  151.575771][   T30] audit: type=1400 audit(1782741209.845:478): avc:  denied  { add_name } for  pid=4958 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  151.632501][   T29] usb 1-1: USB disconnect, device number 12
[  151.716808][   T30] audit: type=1400 audit(1782741209.845:479): avc:  denied  { create } for  pid=4958 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  151.782491][   T30] audit: type=1400 audit(1782741209.855:480): avc:  denied  { append open } for  pid=4958 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  151.848166][   T30] audit: type=1400 audit(1782741209.855:481): avc:  denied  { getattr } for  pid=4958 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  152.008074][   T30] audit: type=1400 audit(1782741210.035:482): avc:  denied  { write } for  pid=6507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  152.071073][   T30] audit: type=1400 audit(1782741210.235:483): avc:  denied  { write } for  pid=6561 comm="syz.0.191" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  152.095147][   T30] audit: type=1400 audit(1782741210.345:484): avc:  denied  { write } for  pid=6563 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  152.358520][ T6571] loop5: detected capacity change from 0 to 7
[  152.396303][    C0] blk_print_req_error: 5 callbacks suppressed
[  152.396320][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.411666][    C0] buffer_io_error: 5 callbacks suppressed
[  152.411680][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  152.432640][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.441905][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  152.451301][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.460536][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  152.469871][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.479106][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  152.490155][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.499375][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  152.508882][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.518085][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  152.529047][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.538227][    C1] Buffer I/O error on dev loop5, logical block 0, async page read
[  152.547972][ T6571] ldm_validate_partition_table(): Disk read failed.
[  152.555081][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.564279][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  152.572497][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.581690][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  152.632259][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  152.641503][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  152.659363][ T6571] Dev loop5: unable to read RDB block 0
[  152.726198][ T6571]  loop5: unable to read partition table
[  152.732996][ T6571] loop5: partition table beyond EOD, truncated
[  152.743498][ T6571] loop_reread_partitions: partition scan of loop5 (��) failed (rc=-5)
[  152.850373][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'.
[  152.891447][ T6579] gtp0: entered promiscuous mode
[  152.897430][ T6579] gtp0: entered allmulticast mode
[  153.537603][ T5628] Bluetooth: hci3: link tx timeout
[  153.543726][ T5628] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.554888][ T5628] Bluetooth: hci3: link tx timeout
[  153.560031][ T5628] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.565270][ T6591] overlayfs: missing 'lowerdir'
[  153.971795][ T5821] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  153.971820][ T5727] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  154.154219][ T5821] usb 2-1: config 218 has an invalid interface number: 38 but max is 2
[  154.162683][ T5821] usb 2-1: config 218 contains an unexpected descriptor of type 0x1, skipping
[  154.171591][ T5821] usb 2-1: config 218 has an invalid interface number: 233 but max is 2
[  154.180003][ T5727] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.180143][ T5821] usb 2-1: config 218 has an invalid interface number: 104 but max is 2
[  154.198556][ T5727] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=52.91
[  154.200379][ T5821] usb 2-1: config 218 has no interface number 0
[  154.219046][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.224542][ T5821] usb 2-1: config 218 has no interface number 1
[  154.240483][ T5727] ttusb_dec_send_command: command bulk message failed: error -22
[  154.258353][ T5821] usb 2-1: config 218 has no interface number 2
[  154.261526][ T5727] ttusb-dec 4-1:1.0: probe with driver ttusb-dec failed with error -22
[  154.271175][ T5821] usb 2-1: config 218 interface 38 altsetting 3 endpoint 0xD has invalid maxpacket 80, setting to 64
[  154.284907][ T5821] usb 2-1: config 218 interface 38 altsetting 3 has a duplicate endpoint with address 0xF, skipping
[  154.295740][ T5821] usb 2-1: config 218 interface 104 altsetting 127 has a duplicate endpoint with address 0xF, skipping
[  154.307292][ T5821] usb 2-1: config 218 interface 104 altsetting 127 endpoint 0xA has invalid maxpacket 512, setting to 64
[  154.318539][ T5821] usb 2-1: config 218 interface 104 altsetting 127 has a duplicate endpoint with address 0xB, skipping
[  154.330072][ T5821] usb 2-1: config 218 interface 104 altsetting 127 has an invalid descriptor for endpoint zero, skipping
[  154.341342][ T5821] usb 2-1: config 218 interface 38 has no altsetting 0
[  154.348236][ T5821] usb 2-1: config 218 interface 233 has no altsetting 0
[  154.354279][ T5720] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  154.357263][ T5821] usb 2-1: config 218 interface 104 has no altsetting 0
[  154.383524][ T5821] usb 2-1: New USB device found, idVendor=14aa, idProduct=0225, bcdDevice=6d.e6
[  154.397719][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.418344][ T5821] usb 2-1: Product: Ћ
[  154.429970][ T5821] usb 2-1: Manufacturer: я
[  154.436033][ T5821] usb 2-1: SerialNumber: Ќ
[  154.605265][ T5720] usb 3-1: device descriptor read/64, error -71
[  155.321963][ T5720] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  155.429105][ T5821] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in cold state, will try to load a firmware
[  155.442984][ T5821] usb 2-1: Direct firmware load for dvb-usb-wt220u-fc03.fw failed with error -2
[  155.452088][ T5821] usb 2-1: Falling back to sysfs fallback for: dvb-usb-wt220u-fc03.fw
[  155.501877][ T5720] usb 3-1: device descriptor read/64, error -71
[  155.622141][ T5720] usb usb3-port1: attempt power cycle
[  155.652039][ T5613] Bluetooth: hci3: command 0x0406 tx timeout
[  155.982142][ T5720] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  156.054371][ T5720] usb 3-1: device descriptor read/8, error -71
[  156.374087][ T5720] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  156.425694][ T5720] usb 3-1: device descriptor read/8, error -71
[  156.586060][ T5720] usb usb3-port1: unable to enumerate USB device
[  156.598237][ T5805] usb 4-1: USB disconnect, device number 5
[  157.900823][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'.
[  157.982981][ T5805] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  158.018807][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  158.018818][   T30] audit: type=1400 audit(1782741216.375:508): avc:  denied  { setattr } for  pid=6650 comm="syz.0.216" name="[io_uring]" dev="anon_inodefs" ino=13394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  158.123532][   T30] audit: type=1400 audit(1782741216.475:509): avc:  denied  { create } for  pid=6650 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  158.143572][ T5805] usb 4-1: unable to get BOS descriptor or descriptor too short
[  158.144012][ T5805] usb 4-1: not running at top speed; connect to a high speed hub
[  158.145032][ T5805] usb 4-1: config 66 has an invalid interface number: 119 but max is 0
[  158.151835][  T805] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  158.211919][   T30] audit: type=1400 audit(1782741216.555:510): avc:  denied  { read } for  pid=6650 comm="syz.0.216" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  158.241150][ T5805] usb 4-1: config 66 has no interface number 0
[  158.247503][   T30] audit: type=1400 audit(1782741216.555:511): avc:  denied  { open } for  pid=6650 comm="syz.0.216" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  158.288845][ T5805] usb 4-1: config 66 interface 119 has no altsetting 0
[  158.302668][   T30] audit: type=1400 audit(1782741216.555:512): avc:  denied  { ioctl } for  pid=6650 comm="syz.0.216" path="/dev/sg0" dev="devtmpfs" ino=753 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  158.310769][ T5805] usb 4-1: New USB device found, idVendor=d1f5, idProduct=e958, bcdDevice=cf.28
[  158.361204][ T5805] usb 4-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3
[  158.390749][ T5805] usb 4-1: Product: syz
[  158.406645][  T805] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  158.417052][  T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.434278][  T805] usb 5-1: Product: syz
[  158.443253][  T805] usb 5-1: Manufacturer: syz
[  158.452228][ T5805] usb 4-1: Manufacturer: syz
[  158.454435][  T805] usb 5-1: SerialNumber: syz
[  158.478886][ T5805] usb 4-1: SerialNumber: syz
[  158.679902][  T805] cdc_ncm 5-1:1.0: bind() failure
[  158.689505][  T805] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  158.701941][  T805] cdc_ncm 5-1:1.1: bind() failure
[  158.738980][  T805] usb 5-1: USB disconnect, device number 7
[  158.855890][ T6661] netlink: 'syz.3.212': attribute type 9 has an invalid length.
[  158.901153][ T6663] openvswitch: netlink: Flow actions attr not present in new flow.
[  159.601128][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.219'.
[  160.142875][ T6679] SELinux: failed to load policy
[  160.157782][   T30] audit: type=1400 audit(1782741218.485:513): avc:  denied  { write } for  pid=6674 comm="syz.4.223" name="file0" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  160.554560][ T5805] rndis_host 4-1:66.119: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  160.606153][   T30] audit: type=1400 audit(1782741218.485:514): avc:  denied  { open } for  pid=6674 comm="syz.4.223" path="/50/file0" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  160.640712][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'.
[  160.646828][ T5805] usb 4-1: USB disconnect, device number 6
[  161.040148][   T30] audit: type=1400 audit(1782741218.495:515): avc:  denied  { load_policy } for  pid=6674 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  161.081111][   T30] audit: type=1400 audit(1782741218.515:516): avc:  denied  { ioctl } for  pid=6674 comm="syz.4.223" path="/50/file0" dev="tmpfs" ino=278 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  161.108979][ T6678] FAULT_INJECTION: forcing a failure.
[  161.108979][ T6678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.122480][   T30] audit: type=1400 audit(1782741218.945:517): avc:  denied  { connect } for  pid=6673 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  161.147081][ T6678] CPU: 0 UID: 0 PID: 6678 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT(full) 
[  161.147108][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  161.147120][ T6678] Call Trace:
[  161.147127][ T6678]  <TASK>
[  161.147135][ T6678]  dump_stack_lvl+0x100/0x190
[  161.147167][ T6678]  should_fail_ex.cold+0x5/0xa
[  161.147191][ T6678]  _copy_from_user+0x2e/0xd0
[  161.147216][ T6678]  copy_msghdr_from_user+0x9f/0x4c0
[  161.147244][ T6678]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  161.147279][ T6678]  ? __lock_acquire+0x49f/0x1a40
[  161.147304][ T6678]  ? __lock_acquire+0x49f/0x1a40
[  161.147332][ T6678]  ___sys_recvmsg+0xdd/0x1a0
[  161.147358][ T6678]  ? __pfx____sys_recvmsg+0x10/0x10
[  161.147389][ T6678]  ? find_held_lock+0x2b/0x80
[  161.147436][ T6678]  do_recvmmsg+0x2f3/0x740
[  161.147467][ T6678]  ? __pfx_do_recvmmsg+0x10/0x10
[  161.147499][ T6678]  ? __mutex_unlock_slowpath+0x35d/0x930
[  161.147537][ T6678]  ? __fget_files+0x21f/0x3d0
[  161.147566][ T6678]  __x64_sys_recvmmsg+0x22a/0x280
[  161.147591][ T6678]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  161.147623][ T6678]  do_syscall_64+0x115/0x870
[  161.147651][ T6678]  ? clear_bhb_loop+0x40/0x90
[  161.147674][ T6678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.147694][ T6678] RIP: 0033:0x7fc3b119ce59
[  161.147710][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.147727][ T6678] RSP: 002b:00007fc3b1f72028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  161.147747][ T6678] RAX: ffffffffffffffda RBX: 00007fc3b1416090 RCX: 00007fc3b119ce59
[  161.147761][ T6678] RDX: 0000000000000001 RSI: 0000200000001e00 RDI: 0000000000000003
[  161.147773][ T6678] RBP: 00007fc3b1f72090 R08: 0000000000000000 R09: 0000000000000000
[  161.147786][ T6678] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000001
[  161.147798][ T6678] R13: 00007fc3b1416128 R14: 00007fc3b1416090 R15: 00007fffcce07838
[  161.147828][ T6678]  </TASK>
[  161.572728][ T5805] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  161.798193][ T5805] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  161.830623][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807e219800: rx timeout, send abort
[  161.925362][ T5805] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  161.996017][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.330767][    C1] vcan0: j1939_tp_rxtimer: 0xffff888022b71800: rx timeout, send abort
[  162.339048][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807e219800: abort rx timeout. Force session deactivation
[  162.435754][ T5805] usb 4-1: Product: syz
[  162.461443][ T5805] usb 4-1: Manufacturer: syz
[  162.485162][ T5805] usb 4-1: SerialNumber: syz
[  162.542038][ T6698] binder: 6696:6698 ioctl c0306201 200000000040 returned -22
[  162.772834][ T5805] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  162.805278][ T6708] openvswitch: netlink: Flow actions attr not present in new flow.
[  162.838985][    C1] vcan0: j1939_tp_rxtimer: 0xffff888022b71800: abort rx timeout. Force session deactivation
[  162.961509][ T5805] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[  162.997106][ T5805] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  163.005279][ T5805] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2
[  163.502000][ T5805] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  163.775057][ T5805] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2
[  163.893491][ T6722] SELinux: failed to load policy
[  163.905125][ T6722] blktrace: Concurrent blktraces are not allowed on loop6
[  164.341397][ T5805] usb 4-1: USB disconnect, device number 7
[  164.623577][ T5613] Bluetooth: hci3: unexpected event for opcode 0x2060
[  164.923724][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.738101][    C1] vcan0: j1939_tp_rxtimer: 0xffff888069bb2400: rx timeout, send abort
[  165.983700][ T6743] libceph: resolve 's' (ret=-3): failed
[  166.237496][    C1] vcan0: j1939_tp_rxtimer: 0xffff888069bb2000: rx timeout, send abort
[  166.246331][    C1] vcan0: j1939_tp_rxtimer: 0xffff888069bb2400: abort rx timeout. Force session deactivation
[  166.259796][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[  166.270123][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  166.270137][   T30] audit: type=1400 audit(1782741224.615:520): avc:  denied  { create } for  pid=6736 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  166.305491][ T6746] siw: device registration error -23
[  166.565454][ T5720] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  166.745686][    C1] vcan0: j1939_tp_rxtimer: 0xffff888069bb2000: abort rx timeout. Force session deactivation
[  166.791875][ T5720] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  166.833269][ T5720] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  166.854623][ T6750] netlink: 68 bytes leftover after parsing attributes in process `syz.1.243'.
[  166.865766][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.895713][ T5720] usb 5-1: Product: syz
[  166.905075][ T5720] usb 5-1: Manufacturer: syz
[  166.920385][ T5720] usb 5-1: SerialNumber: syz
[  166.921330][   T30] audit: type=1400 audit(1782741225.275:521): avc:  denied  { ioctl } for  pid=6754 comm="syz.0.246" path="socket:[12889]" dev="sockfs" ino=12889 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  166.943715][ T5720] usb 5-1: config 0 descriptor??
[  166.954912][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'.
[  167.029329][ T6759] openvswitch: netlink: Flow actions attr not present in new flow.
[  167.037393][   T30] audit: type=1400 audit(1782741225.305:522): avc:  denied  { setopt } for  pid=6754 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  167.207990][   T30] audit: type=1400 audit(1782741225.305:523): avc:  denied  { write } for  pid=6754 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  167.227800][   T30] audit: type=1400 audit(1782741225.335:524): avc:  denied  { append } for  pid=6754 comm="syz.0.246" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  167.252145][   T30] audit: type=1400 audit(1782741225.345:525): avc:  denied  { create } for  pid=6754 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  167.769469][   T30] audit: type=1400 audit(1782741226.125:526): avc:  denied  { connect } for  pid=6732 comm="syz.4.241" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  167.807674][   T30] audit: type=1400 audit(1782741226.145:527): avc:  denied  { write } for  pid=6732 comm="syz.4.241" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  168.065402][   T30] audit: type=1400 audit(1782741226.425:528): avc:  denied  { write } for  pid=6732 comm="syz.4.241" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  168.099217][ T6776] FAULT_INJECTION: forcing a failure.
[  168.099217][ T6776] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.112677][ T6776] CPU: 0 UID: 0 PID: 6776 Comm: syz.2.251 Not tainted syzkaller #0 PREEMPT(full) 
[  168.112703][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  168.112710][ T6776] Call Trace:
[  168.112715][ T6776]  <TASK>
[  168.112721][ T6776]  dump_stack_lvl+0x100/0x190
[  168.112741][ T6776]  should_fail_ex.cold+0x5/0xa
[  168.112758][ T6776]  _copy_to_user+0x32/0xd0
[  168.112774][ T6776]  simple_read_from_buffer+0xcb/0x170
[  168.112788][ T6776]  proc_fail_nth_read+0x1af/0x230
[  168.112805][ T6776]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  168.112823][ T6776]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  168.112839][ T6776]  vfs_read+0x1e4/0xb40
[  168.112860][ T6776]  ? __pfx_vfs_read+0x10/0x10
[  168.112876][ T6776]  ? __fget_files+0x215/0x3d0
[  168.112891][ T6776]  ? __fget_files+0x21f/0x3d0
[  168.112906][ T6776]  ksys_read+0x12a/0x250
[  168.112922][ T6776]  ? __pfx_ksys_read+0x10/0x10
[  168.112943][ T6776]  do_syscall_64+0x115/0x870
[  168.112959][ T6776]  ? clear_bhb_loop+0x40/0x90
[  168.112973][ T6776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.112984][ T6776] RIP: 0033:0x7fa1f915d68e
[  168.112995][ T6776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  168.113006][ T6776] RSP: 002b:00007fa1f73d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  168.113018][ T6776] RAX: ffffffffffffffda RBX: 00007fa1f73d56c0 RCX: 00007fa1f915d68e
[  168.113025][ T6776] RDX: 000000000000000f RSI: 00007fa1f73d50a0 RDI: 0000000000000007
[  168.113032][ T6776] RBP: 00007fa1f73d5090 R08: 0000000000000000 R09: 0000000000000000
[  168.113038][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.113045][ T6776] R13: 00007fa1f9416218 R14: 00007fa1f9416180 R15: 00007ffd1da62d28
[  168.113060][ T6776]  </TASK>
[  168.502146][ T6778] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  168.535019][   T30] audit: type=1400 audit(1782741226.895:529): avc:  denied  { read } for  pid=6732 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  168.891438][ T6786] SELinux: failed to load policy
[  169.389519][  T992] usb 5-1: USB disconnect, device number 8
[  169.449171][ T5805] lo speed is unknown, defaulting to 1000
[  169.640813][ T6791] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  169.666433][ T6791] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  170.020397][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055095000: rx timeout, send abort
[  170.134208][ T6800] siw: device registration error -23
[  170.520558][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055097400: rx timeout, send abort
[  170.529031][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055095000: abort rx timeout. Force session deactivation
[  170.967166][ T6811] SELinux: failed to load policy
[  170.977096][ T6811] blktrace: Concurrent blktraces are not allowed on loop0
[  171.028835][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055097400: abort rx timeout. Force session deactivation
[  171.757849][ T6814] can0: slcan on ttyS3.
[  171.852783][ T6814] can0 (unregistered): slcan off ttyS3.
[  172.245183][ T6814] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.261'.
[  172.662465][   T30] audit: type=1400 audit(1782741230.915:530): avc:  denied  { ioctl } for  pid=6818 comm="syz.2.263" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  172.858130][   T30] audit: type=1400 audit(1782741231.015:531): avc:  denied  { read } for  pid=6821 comm="syz.0.262" name="vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  172.900685][   T30] audit: type=1400 audit(1782741231.045:532): avc:  denied  { open } for  pid=6821 comm="syz.0.262" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  172.955880][   T30] audit: type=1400 audit(1782741231.245:533): avc:  denied  { ioctl } for  pid=6821 comm="syz.0.262" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  173.018959][   T30] audit: type=1400 audit(1782741231.255:534): avc:  denied  { block_suspend } for  pid=6821 comm="syz.0.262" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  173.157486][ T6839] bridge0: port 3(syz_tun) entered blocking state
[  173.186808][ T6839] bridge0: port 3(syz_tun) entered disabled state
[  173.194381][ T6839] syz_tun: entered allmulticast mode
[  173.210057][ T6839] syz_tun: entered promiscuous mode
[  173.244092][ T6839] bridge0: port 3(syz_tun) entered blocking state
[  173.251281][ T6839] bridge0: port 3(syz_tun) entered forwarding state
[  173.583030][   T30] audit: type=1400 audit(1782741231.945:535): avc:  denied  { create } for  pid=6847 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  173.635261][   T30] audit: type=1400 audit(1782741231.975:536): avc:  denied  { bind } for  pid=6847 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  173.695645][   T30] audit: type=1400 audit(1782741231.975:537): avc:  denied  { write } for  pid=6847 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  173.757243][ T6854] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  173.768963][   T30] audit: type=1400 audit(1782741232.035:538): avc:  denied  { write } for  pid=6819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  173.807165][ T6854] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  173.871820][  T992] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  174.166925][  T992] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  174.184046][  T992] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  174.201857][  T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.236672][   T30] audit: type=1400 audit(1782741232.595:539): avc:  denied  { mount } for  pid=6856 comm="syz.2.270" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  174.261855][  T992] usb 4-1: Product: syz
[  174.269755][  T992] usb 4-1: Manufacturer: syz
[  174.278081][  T992] usb 4-1: SerialNumber: syz
[  174.302427][  T992] usb 4-1: config 0 descriptor??
[  174.397917][ T6862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.271'.
[  174.701901][ T6871] SELinux: failed to load policy
[  175.197476][ T5343] usb 4-1: USB disconnect, device number 8
[  175.307852][ T6881] openvswitch: netlink: Port -2146435068 exceeds max allowable 65535
[  176.232271][ T6896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.333071][ T6898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.378896][ T6896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.425405][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'.
[  177.278256][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.283'.
[  177.986752][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  177.986768][   T30] audit: type=1400 audit(1782741236.345:545): avc:  denied  { getopt } for  pid=6931 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  178.079175][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'.
[  178.356463][ T6940] SELinux: failed to load policy
[  178.366687][ T6940] blktrace: Concurrent blktraces are not allowed on loop0
[  179.690007][ T6954] SELinux: failed to load policy
[  179.701694][ T6954] blktrace: Concurrent blktraces are not allowed on loop8
[  180.119766][ T6958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.194718][ T6958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.207633][ T6958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.257968][ T6965] FAULT_INJECTION: forcing a failure.
[  180.257968][ T6965] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.271147][ T6965] CPU: 0 UID: 0 PID: 6965 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) 
[  180.271175][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  180.271187][ T6965] Call Trace:
[  180.271194][ T6965]  <TASK>
[  180.271201][ T6965]  dump_stack_lvl+0x100/0x190
[  180.271231][ T6965]  should_fail_ex.cold+0x5/0xa
[  180.271256][ T6965]  _copy_from_user+0x2e/0xd0
[  180.271284][ T6965]  copy_msghdr_from_user+0x9f/0x4c0
[  180.271308][ T6965]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  180.271336][ T6965]  ? __lock_acquire+0x49f/0x1a40
[  180.271357][ T6965]  ? __lock_acquire+0x49f/0x1a40
[  180.271379][ T6965]  ___sys_recvmsg+0xdd/0x1a0
[  180.271401][ T6965]  ? __pfx____sys_recvmsg+0x10/0x10
[  180.271426][ T6965]  ? find_held_lock+0x2b/0x80
[  180.271456][ T6965]  do_recvmmsg+0x2f3/0x740
[  180.271481][ T6965]  ? __pfx_do_recvmmsg+0x10/0x10
[  180.271507][ T6965]  ? __mutex_unlock_slowpath+0x35d/0x930
[  180.271538][ T6965]  ? __fget_files+0x21f/0x3d0
[  180.271561][ T6965]  __x64_sys_recvmmsg+0x22a/0x280
[  180.271581][ T6965]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  180.271606][ T6965]  do_syscall_64+0x115/0x870
[  180.271629][ T6965]  ? clear_bhb_loop+0x40/0x90
[  180.271649][ T6965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.271666][ T6965] RIP: 0033:0x7fc3b119ce59
[  180.271681][ T6965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.271697][ T6965] RSP: 002b:00007fc3af3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  180.271717][ T6965] RAX: ffffffffffffffda RBX: 00007fc3b1416180 RCX: 00007fc3b119ce59
[  180.271729][ T6965] RDX: 0000000000000001 RSI: 0000200000006d00 RDI: 0000000000000003
[  180.271740][ T6965] RBP: 00007fc3af3f6090 R08: 0000000000000000 R09: 0000000000000000
[  180.271751][ T6965] R10: 0000000040010340 R11: 0000000000000246 R12: 0000000000000001
[  180.271763][ T6965] R13: 00007fc3b1416218 R14: 00007fc3b1416180 R15: 00007fffcce07838
[  180.271789][ T6965]  </TASK>
[  180.764415][   T30] audit: type=1400 audit(1782741239.125:546): avc:  denied  { execstack } for  pid=6969 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  180.822085][   T30] audit: type=1400 audit(1782741239.185:547): avc:  denied  { read } for  pid=6969 comm="syz.2.298" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  181.180395][   T30] audit: type=1400 audit(1782741239.205:548): avc:  denied  { open } for  pid=6969 comm="syz.2.298" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  181.966598][   T30] audit: type=1400 audit(1782741240.255:549): avc:  denied  { ioctl } for  pid=6969 comm="syz.2.298" path="/dev/usbmon0" dev="devtmpfs" ino=717 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  181.995035][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[  182.175265][   T30] audit: type=1400 audit(1782741240.535:550): avc:  denied  { ioctl } for  pid=6985 comm="syz.2.303" path="socket:[14221]" dev="sockfs" ino=14221 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  182.281898][ T5343] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  182.923327][ T5343] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.949258][ T5343] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  183.030739][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.064531][ T5343] usb 4-1: Product: syz
[  183.081762][ T5343] usb 4-1: Manufacturer: syz
[  183.094906][ T5343] usb 4-1: SerialNumber: syz
[  183.367284][ T6999] kAFS: unable to lookup cell '�({^�@'
[  183.508805][ T7003] SELinux: failed to load policy
[  184.258000][ T6999] ALSA: seq fatal error: cannot create timer (-16)
[  184.363391][ T7008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.448766][ T7008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.539324][ T7009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.306195][ T5343] cdc_ncm 4-1:1.0: bind() failure
[  185.411483][ T5343] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[  185.454270][ T5343] usb 4-1: USB disconnect, device number 9
[  185.807365][ T7022] can0: slcan on ttyS3.
[  185.929793][ T7025] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.310'.
[  186.022422][ T7022] can0 (unregistered): slcan off ttyS3.
[  186.279861][ T7033] ==================================================================
[  186.287944][ T7033] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0
[  186.295668][ T7033] Read of size 8 at addr ffff88802d523a18 by task syz.4.315/7033
[  186.303379][ T7033] 
[  186.305694][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.4.315 Not tainted syzkaller #0 PREEMPT(full) 
[  186.305722][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  186.305737][ T7033] Call Trace:
[  186.305746][ T7033]  <TASK>
[  186.305755][ T7033]  dump_stack_lvl+0x100/0x190
[  186.305789][ T7033]  print_report+0x13d/0x4b0
[  186.305822][ T7033]  ? __virt_addr_valid+0x239/0x430
[  186.305854][ T7033]  ? dvb_device_open+0x33f/0x3b0
[  186.305879][ T7033]  kasan_report+0xdf/0x1c0
[  186.305910][ T7033]  ? dvb_device_open+0x33f/0x3b0
[  186.305938][ T7033]  ? __pfx_dvb_device_open+0x10/0x10
[  186.305963][ T7033]  dvb_device_open+0x33f/0x3b0
[  186.305989][ T7033]  ? __pfx_dvb_device_open+0x10/0x10
[  186.306015][ T7033]  chrdev_open+0x234/0x6a0
[  186.306038][ T7033]  ? __pfx_chrdev_open+0x10/0x10
[  186.306062][ T7033]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  186.306093][ T7033]  do_dentry_open+0x6ab/0x14d0
[  186.306114][ T7033]  ? __pfx_chrdev_open+0x10/0x10
[  186.306139][ T7033]  vfs_open+0x82/0x3f0
[  186.306167][ T7033]  path_openat+0x2873/0x4280
[  186.306202][ T7033]  ? __pfx_path_openat+0x10/0x10
[  186.306231][ T7033]  do_file_open+0x20e/0x430
[  186.306256][ T7033]  ? __pfx_do_file_open+0x10/0x10
[  186.306291][ T7033]  ? alloc_fd+0x471/0x7a0
[  186.306316][ T7033]  ? do_getname+0x191/0x390
[  186.306344][ T7033]  do_sys_openat2+0x10f/0x1e0
[  186.306371][ T7033]  ? __pfx_do_sys_openat2+0x10/0x10
[  186.306400][ T7033]  ? __pfx_restore_altstack+0x10/0x10
[  186.306426][ T7033]  __x64_sys_openat+0x12d/0x210
[  186.306453][ T7033]  ? __pfx___x64_sys_openat+0x10/0x10
[  186.306481][ T7033]  ? __do_sys_rt_sigreturn+0x1da/0x2c0
[  186.306512][ T7033]  do_syscall_64+0x115/0x870
[  186.306543][ T7033]  ? clear_bhb_loop+0x40/0x90
[  186.306569][ T7033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.306592][ T7033] RIP: 0033:0x7fdb4955d68e
[  186.306610][ T7033] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  186.306633][ T7033] RSP: 002b:00007fdb4a38db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  186.306655][ T7033] RAX: ffffffffffffffda RBX: 00007fdb4a38e6c0 RCX: 00007fdb4955d68e
[  186.306671][ T7033] RDX: 0000000000000002 RSI: 00007fdb4a38dc00 RDI: ffffffffffffff9c
[  186.306686][ T7033] RBP: 00007fdb4a38dc00 R08: 0000000000000000 R09: 0000000000000000
[  186.306700][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  186.306714][ T7033] R13: 00007fdb49816038 R14: 00007fdb49815fa0 R15: 00007ffd31a24428
[  186.306738][ T7033]  </TASK>
[  186.306745][ T7033] 
[  186.555866][ T7033] Allocated by task 1:
[  186.559919][ T7033]  kasan_save_stack+0x30/0x50
[  186.564585][ T7033]  kasan_save_track+0x14/0x30
[  186.569246][ T7033]  __kasan_kmalloc+0xaa/0xb0
[  186.573815][ T7033]  __kmalloc_cache_noprof+0x2e5/0x6c0
[  186.579177][ T7033]  dvb_register_device+0x1d6/0x1e20
[  186.584356][ T7033]  dvb_register_frontend+0x552/0x820
[  186.589622][ T7033]  vidtv_bridge_probe+0x44b/0xa30
[  186.594647][ T7033]  platform_probe+0x106/0x1d0
[  186.599322][ T7033]  really_probe+0x241/0xa60
[  186.603807][ T7033]  __driver_probe_device+0x20e/0x450
[  186.609077][ T7033]  driver_probe_device+0x4a/0x140
[  186.614088][ T7033]  __driver_attach+0x21f/0x5b0
[  186.618839][ T7033]  bus_for_each_dev+0x13e/0x1d0
[  186.623683][ T7033]  bus_add_driver+0x305/0x5b0
[  186.628343][ T7033]  driver_register+0x1e2/0x360
[  186.633095][ T7033]  vidtv_bridge_init+0x52/0x80
[  186.637846][ T7033]  do_one_initcall+0x11d/0x700
[  186.642591][ T7033]  kernel_init_freeable+0x6ea/0x7b0
[  186.647771][ T7033]  kernel_init+0x1f/0x1e0
[  186.652085][ T7033]  ret_from_fork+0x72b/0xd50
[  186.656664][ T7033]  ret_from_fork_asm+0x1a/0x30
[  186.661406][ T7033] 
[  186.663705][ T7033] Freed by task 6837:
[  186.667661][ T7033]  kasan_save_stack+0x30/0x50
[  186.672320][ T7033]  kasan_save_track+0x14/0x30
[  186.676980][ T7033]  kasan_save_free_info+0x3b/0x70
[  186.681996][ T7033]  __kasan_slab_free+0x5f/0x80
[  186.686751][ T7033]  kfree+0x22b/0x6c0
[  186.690640][ T7033]  dvb_device_put.part.0+0x57/0x90
[  186.695739][ T7033]  dvb_device_open+0x2ba/0x3b0
[  186.700497][ T7033]  chrdev_open+0x234/0x6a0
[  186.704897][ T7033]  do_dentry_open+0x6ab/0x14d0
[  186.709645][ T7033]  vfs_open+0x82/0x3f0
[  186.713703][ T7033]  path_openat+0x2873/0x4280
[  186.718279][ T7033]  do_file_open+0x20e/0x430
[  186.722770][ T7033]  do_sys_openat2+0x10f/0x1e0
[  186.727437][ T7033]  __x64_sys_openat+0x12d/0x210
[  186.732272][ T7033]  do_syscall_64+0x115/0x870
[  186.736857][ T7033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.742732][ T7033] 
[  186.745038][ T7033] The buggy address belongs to the object at ffff88802d523a00
[  186.745038][ T7033]  which belongs to the cache kmalloc-256 of size 256
[  186.759071][ T7033] The buggy address is located 24 bytes inside of
[  186.759071][ T7033]  freed 256-byte region [ffff88802d523a00, ffff88802d523b00)
[  186.772760][ T7033] 
[  186.775075][ T7033] The buggy address belongs to the physical page:
[  186.781459][ T7033] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d522
[  186.790207][ T7033] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  186.798697][ T7033] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  186.806227][ T7033] page_type: f5(slab)
[  186.810197][ T7033] raw: 00fff00000000040 ffff88813fe02b40 dead000000000100 dead000000000122
[  186.818770][ T7033] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  186.827339][ T7033] head: 00fff00000000040 ffff88813fe02b40 dead000000000100 dead000000000122
[  186.835993][ T7033] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  186.844648][ T7033] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  186.853299][ T7033] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  186.861964][ T7033] page dumped because: kasan: bad access detected
[  186.868349][ T7033] page_owner tracks the page as allocated
[  186.874049][ T7033] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14633954721, free_ts 0
[  186.893749][ T7033]  post_alloc_hook+0xfd/0x120
[  186.898424][ T7033]  get_page_from_freelist+0xf48/0x3530
[  186.903863][ T7033]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  186.909734][ T7033]  new_slab+0xa2/0x650
[  186.913779][ T7033]  refill_objects+0xe3/0x410
[  186.918349][ T7033]  __pcs_replace_empty_main+0x376/0x680
[  186.923882][ T7033]  __kmalloc_cache_noprof+0x479/0x6c0
[  186.929244][ T7033]  bus_add_driver+0x92/0x5b0
[  186.933813][ T7033]  driver_register+0x1e2/0x360
[  186.938565][ T7033]  usb_register_driver+0x21c/0x3e0
[  186.943658][ T7033]  do_one_initcall+0x11d/0x700
[  186.948404][ T7033]  kernel_init_freeable+0x6ea/0x7b0
[  186.953579][ T7033]  kernel_init+0x1f/0x1e0
[  186.957891][ T7033]  ret_from_fork+0x72b/0xd50
[  186.962466][ T7033]  ret_from_fork_asm+0x1a/0x30
[  186.967208][ T7033] page_owner free stack trace missing
[  186.972547][ T7033] 
[  186.974846][ T7033] Memory state around the buggy address:
[  186.980453][ T7033]  ffff88802d523900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  186.988492][ T7033]  ffff88802d523980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  186.996531][ T7033] >ffff88802d523a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  187.004573][ T7033]                             ^
[  187.009400][ T7033]  ffff88802d523a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  187.017437][ T7033]  ffff88802d523b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  187.025475][ T7033] ==================================================================
[  187.121227][ T7033] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  187.128455][ T7033] CPU: 0 UID: 0 PID: 7033 Comm: syz.4.315 Not tainted syzkaller #0 PREEMPT(full) 
[  187.137656][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  187.147724][ T7033] Call Trace:
[  187.151005][ T7033]  <TASK>
[  187.153934][ T7033]  dump_stack_lvl+0x100/0x190
[  187.158628][ T7033]  vpanic+0x552/0x970
[  187.162623][ T7033]  ? __pfx_vpanic+0x10/0x10
[  187.167136][ T7033]  ? mark_held_locks+0x40/0x70
[  187.171912][ T7033]  ? dvb_device_open+0x33f/0x3b0
[  187.176861][ T7033]  panic+0xd1/0xe0
[  187.180587][ T7033]  ? __pfx_panic+0x10/0x10
[  187.185008][ T7033]  ? dvb_device_open+0x33f/0x3b0
[  187.189955][ T7033]  ? preempt_schedule_common+0x42/0xc0
[  187.195428][ T7033]  check_panic_on_warn.cold+0x19/0x34
[  187.200798][ T7033]  end_report.part.0+0x3a/0x90
[  187.205560][ T7033]  kasan_report.cold+0xe/0x18
[  187.210227][ T7033]  ? dvb_device_open+0x33f/0x3b0
[  187.215152][ T7033]  ? __pfx_dvb_device_open+0x10/0x10
[  187.220424][ T7033]  dvb_device_open+0x33f/0x3b0
[  187.225177][ T7033]  ? __pfx_dvb_device_open+0x10/0x10
[  187.230451][ T7033]  chrdev_open+0x234/0x6a0
[  187.234854][ T7033]  ? __pfx_chrdev_open+0x10/0x10
[  187.239778][ T7033]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  187.246096][ T7033]  do_dentry_open+0x6ab/0x14d0
[  187.250844][ T7033]  ? __pfx_chrdev_open+0x10/0x10
[  187.255769][ T7033]  vfs_open+0x82/0x3f0
[  187.259826][ T7033]  path_openat+0x2873/0x4280
[  187.264404][ T7033]  ? __pfx_path_openat+0x10/0x10
[  187.269335][ T7033]  do_file_open+0x20e/0x430
[  187.273830][ T7033]  ? __pfx_do_file_open+0x10/0x10
[  187.278850][ T7033]  ? alloc_fd+0x471/0x7a0
[  187.283164][ T7033]  ? do_getname+0x191/0x390
[  187.287662][ T7033]  do_sys_openat2+0x10f/0x1e0
[  187.292328][ T7033]  ? __pfx_do_sys_openat2+0x10/0x10
[  187.297514][ T7033]  ? __pfx_restore_altstack+0x10/0x10
[  187.302874][ T7033]  __x64_sys_openat+0x12d/0x210
[  187.307715][ T7033]  ? __pfx___x64_sys_openat+0x10/0x10
[  187.313074][ T7033]  ? __do_sys_rt_sigreturn+0x1da/0x2c0
[  187.318524][ T7033]  do_syscall_64+0x115/0x870
[  187.323107][ T7033]  ? clear_bhb_loop+0x40/0x90
[  187.327770][ T7033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.333646][ T7033] RIP: 0033:0x7fdb4955d68e
[  187.338049][ T7033] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  187.357643][ T7033] RSP: 002b:00007fdb4a38db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  187.366049][ T7033] RAX: ffffffffffffffda RBX: 00007fdb4a38e6c0 RCX: 00007fdb4955d68e
[  187.374003][ T7033] RDX: 0000000000000002 RSI: 00007fdb4a38dc00 RDI: ffffffffffffff9c
[  187.381954][ T7033] RBP: 00007fdb4a38dc00 R08: 0000000000000000 R09: 0000000000000000
[  187.389905][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  187.397861][ T7033] R13: 00007fdb49816038 R14: 00007fdb49815fa0 R15: 00007ffd31a24428
[  187.405826][ T7033]  </TASK>
[  187.409057][ T7033] Kernel Offset: disabled
[  187.413364][ T7033] Rebooting in 86400 seconds..