last executing test programs:

22.580611763s ago: executing program 1 (id=829):
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
io_uring_enter(r0, 0x3e57, 0x10, 0x8, &(0x7f0000000040)={[0x591]}, 0x8)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3}, 0x0, 0x0)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000000)="05000000010001", 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYRESHEX=r1, @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

21.07098125s ago: executing program 1 (id=833):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x100, 0xffffffff, 0x3c})
r9 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r9, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)
write$binfmt_misc(r7, &(0x7f0000000180)="3d8d9947326e7ba3c1ca15177c539f10", 0x10)
pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x8, 0x0, 0x9, 0x0, 0x203, 0x200000000000000}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x87b1, 0x197f}, 0x0, 0x0)
splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0)
setns(r5, 0x24020000)
syz_clone(0x3fa01500, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r11, r11, 0x2)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)

19.504536216s ago: executing program 1 (id=842):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_io_uring_setup(0x40088d, &(0x7f0000000140)={0x0, 0xe2bb, 0x1000, 0x1, 0x3b7}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpgrp(0x0)
fanotify_init(0x0, 0x101000)
syz_open_procfs(0xffffffffffffffff, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r8 = socket(0x2, 0x3, 0xff)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
sendfile(r8, r7, 0x0, 0xffba83)

18.506051033s ago: executing program 1 (id=843):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x95)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff5f2624e908b2e6a832261431b850ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe8800000000000000000000000002b38f004e0000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0xc0c0c0c0})
recvmmsg(r4, 0x0, 0x0, 0x122, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f", 0x6c, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
close(r7)
socket(0x1d, 0x2, 0x6)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="0c00c5d744dfe7c8242a56e5224db49390b12ff828642c21840bdcf093304d26c9b1105fae7ed4c38dbe3fea15c849bc05f420ea512deb3b84799577fdedd87d64f8511c15239350341450d3236eb7d379ce227efbfe9d7777"])
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd010000000008000100ac141400100016800c00018008000100", @ANYRES32, @ANYBLOB="08001e00af3900000600150004000000cd43cdfb859626bc880f03af8842f4fe90c7cadfdfa70af69a6070b8e71b360d666dc89fbb6605e3dc5c68f7f61a37777c6a73a2607b7ba458a23fc2d4c299e051fc29917412ce5c46430f8cdec617e74d3ced0c95899e4271669559155d35cd83718fe65b80d207045051efe1c7aa2771e123ce4a3d810fbe273ef055e8e0c73e11c9275d160d0e9aca35a00ce94c81fe1afe31f8c032e3bb04d16802966abbe545ae8694a5f3059b9cf6cc102d722334"], 0x44}}, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)

16.233854636s ago: executing program 1 (id=849):
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdca, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000200)={0x7fff, {{0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x3ff}}}, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/26], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.472949839s ago: executing program 1 (id=850):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x20001, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x804, 0x2)
syz_usb_connect(0x2, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f9000905030000000000000905042d75"], 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="4000000012000501000000000000000005001900ff00000028001a"], 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040810)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x8, 0x0, 0x32344d59, 0x8, 0x3, [{0x4, 0x7}, {0x5, 0x10}, {0xffff, 0x3}, {0x0, 0xfff}, {0x7, 0xfffff3cd}, {0x4, 0x6}, {0x47e, 0x1}, {0x5, 0x3}], 0x1, 0x2, 0x0, 0x2, 0x6}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
prlimit64(0x0, 0x0, &(0x7f0000000340)={0xf1a, 0xfffffffffffffff8}, &(0x7f00000003c0))
io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r7, 0xc06855c8, &(0x7f00000000c0)={0x6, 0x100, {0x53, 0x6, 0x8, {0x6aa, 0x5d}, {0x200, 0x8}, @ramp={0x8, 0x4, {0x5, 0x1ff, 0x0, 0xa45}}}, {0x56, 0x0, 0xb56, {0x1, 0x5}, {0x6, 0x5}, @period={0x5b, 0x2, 0x59e2, 0x4, 0x1, {0x2, 0x7, 0x200, 0x5}, 0x3, &(0x7f0000000040)=[0x1ff, 0x9, 0x7]}}})

13.284610808s ago: executing program 2 (id=858):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x25, 0x1, 0x0)
recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000003c0)=0x4980, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4, 0x30}, &(0x7f0000000240)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x4)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40)
r4 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0xf0)
sendto$inet6(r4, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
writev(r3, &(0x7f0000000080), 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000003060103000000000009150aa414cfc1e12414def0cc0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_VRING_NUM(r5, 0x4008af10, &(0x7f0000000080)={0x2, 0x2})
syz_io_uring_setup(0x83, &(0x7f0000000400)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880))

9.698045035s ago: executing program 2 (id=867):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x1d, 0xa, 0x1ba, 0x0})

8.662327934s ago: executing program 2 (id=869):
ioprio_set$pid(0x2, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) (async)
io_setup(0x2, &(0x7f0000000000)) (async)
eventfd(0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 32)
r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$update(0x2, r5, &(0x7f0000000140)="c4", 0x1) (async)
add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b", 0x5f, r5) (async)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@allocspi={0x14c, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860d, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x2502, 0xa, 0x0, 0x1}, 0x3, 0xffff}, [@etimer_thresh={0x8, 0x22, 0x9}, @algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0x180}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)

7.280442343s ago: executing program 2 (id=872):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x37)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg}, 0x94)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$radio(0x0, 0x0, 0x2)
gettid()
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
prctl$PR_SET_THP_DISABLE(0x44, 0x200000000003)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
close(r0)

7.044190834s ago: executing program 3 (id=873):
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG<v\xb8\x18\x80\xe1Kf\xf8R\xdd\x06\xe8\xfbl\v\xb0\xdd\x05\x05\xd8\xdb\xfd`\xf9\xf8\x915\b\x8c\xad\xc8\x9d=\xfeN\x8b\x1eR\x1e\xf8\x9dn\x19H\xd2aE\xa0\x06\xb0Yv\xf9^\x8c\x8f\xc3\xa5\x985\x85U\x8cZ/\'\xbd\xe2\xdc\xe3\xb9\x8e$Z\xef\xa8\xe5(Mt\xd3\xd9\xf6X\x1a\x9b\t$N\xd0U\xe2z\xeb\x01\x80!0\xe8\xc3\xce\xf8\x03\xde\x92s\xf9', &(0x7f0000000ac0)='fuseblk\x00M\x13k\x92#\x05z)\xe0c\\35\xdf%\xa3\xac!zoO\xf8\xcex\xb3\f\xad@\x853o\x0f0\x1a\xc0\"\xf7\x11Z\x01\xc1\xd9\x9fbJ7\xd1\xad\xe1\xed\x87\xae\x11-s\xb4\xbd\x1e\x9a\xd7\xc1crt\x88%\x92\x8fL\x8d\xb3-\xb60O \xc5\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xfa\xeb\x1e|M\x98W\x81\xa2@{_\xba^\xa2\x82k\x10G\xfc\xd4\x99Pl\xfa\xe8\x7f\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000200)=':+\x00', &(0x7f0000000500)="b681a5805e7a", 0x6)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000300)='(\xed\xef(.(\\-]\x00', &(0x7f0000000340)="0f", 0x1)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0)

6.82083466s ago: executing program 3 (id=874):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x37)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg}, 0x94)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$radio(0x0, 0x0, 0x2)
gettid()
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
prctl$PR_SET_THP_DISABLE(0x44, 0x200000000003)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
close(r0)

5.958054669s ago: executing program 3 (id=876):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
r1 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}})
io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0)

5.192435744s ago: executing program 2 (id=878):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_io_uring_setup(0x40088d, &(0x7f0000000140)={0x0, 0xe2bb, 0x1000, 0x1, 0x3b7}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpgrp(0x0)
fanotify_init(0x0, 0x101000)
syz_open_procfs(0xffffffffffffffff, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r8 = socket(0x2, 0x3, 0xff)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
sendfile(r8, r7, 0x0, 0xffba83)

4.903478408s ago: executing program 0 (id=879):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'veth1_vlan\x00', {}, {0xff}, 0x3b, 0x3, 0x0, 0x60}, 0x0, 0x1e0, 0x200, 0x60030000, {0x0, 0xff000000}, [@common=@rt={{0x138}, {0x4, [0x8, 0x7], 0x5, 0x8, 0xb, [@dev={0xfe, 0x80, '\x00', 0x3c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @remote, @private2, @empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}], 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2a030040000000004c0012800b00010067656e6576651400001400f80700000000000000000500000000000000010800"/59], 0x74}}, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x158, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xfff8, 0xfff1}, {0xffff, 0x10}, {0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x128, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0xcbe}, @TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x2}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4c010}, 0xc0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x3e, 0x2c, 0x680, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xd, 0xfff3}, {}, {0xe, 0xffe0}}, [@TCA_RATE={0x0, 0x5, {0x5, 0x9}}]}, 0x52}, 0x1, 0x0, 0x0, 0x400c800}, 0x2)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
preadv(r7, 0x0, 0x0, 0x9, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
r8 = socket(0xa, 0xa, 0xff)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
file_setattr(0xffffffffffffffff, &(0x7f0000001700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)={0x80011282, 0x3, 0x7, 0x4, 0x100}, 0x18, 0x1000)
sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

3.995564675s ago: executing program 0 (id=881):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x1e4, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x0, 0x80000000}, {0x0, 0x0, 0xffffffff}, 0x70bd2d, 0x0, 0x2, 0x4, 0x0, 0x4c}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x8d, 0x14, {{'hmac(sha256)\x00'}, 0x208, 0x80, "aef356316f6f7d6ab0f8637b42ff0300008aa309bdd3f9dcffb669556b74c61e032441fd13571c4c64597441f3cf2a548c89a004673b82b4618529a52c676f7c94"}}]}, 0x1e4}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x8024)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, &(0x7f0000000780), 0x12)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r4], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0x80000017})
sendmmsg$inet(r6, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400})
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$sock_int(r8, 0x1, 0xe, 0x0, &(0x7f0000000440))
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r9, 0x5421, &(0x7f0000000440)=0x6)
connect$bt_rfcomm(r9, 0x0, 0x0)
close(r9)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x202403, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xafe317f42540e13d}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x2c, 0x4, 0x70bd27, 0x25dfdbfd, {0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x890)
socket$key(0xf, 0x3, 0x2)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r11, 0x0, 0x48a, &(0x7f0000000080)={0x2, 0x80000000, 0x7}, 0xc)

3.4045965s ago: executing program 4 (id=883):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x100, 0xffffffff, 0x3c})
r9 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r9, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)
write$binfmt_misc(r7, &(0x7f0000000180)="3d8d9947326e7ba3c1ca15177c539f10", 0x10)
pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x8, 0x0, 0x9, 0x0, 0x203, 0x200000000000000}, 0x0, &(0x7f0000000100)={0x18, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x87b1, 0x197f}, 0x0, 0x0)
splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0)
setns(r5, 0x24020000)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000b40)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x9}, @from_mac=@broadcast, @broadcast, @device_b, {0x8, 0x4}, "", @void, @value=@ver_80211n={0x0, 0x2200, 0x2, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1}}, @random="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"}, 0x55e)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r11, r11, 0x2)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)

3.400959888s ago: executing program 0 (id=884):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x83, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffc, 0x40, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x9, 0x17}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x40, 0x11, 0xaf, {0xaf, 0x6, "f86886327e3ff6a6874f0d8cf54eaa298c01bb1b4fcbe68ea7e37223487fe1b424a2adab716b05a285938b9f00cccc35c9ae65401d5501d333bb4a8dbdd6703b63803270ca228495593bf136e8b9b3a2fab47a6f5a61c2ac1097b6e55c615072b6ab5fac2c80dc88912c0b4fbcd2c1f03c23fdb36603f754ba1549a7cca05086080ea52491c392dbb31bf79d17eafd7efeeac815d06c403f09bb4b6157540e1baa80742b04e9214e11664133d4"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000880)={0x84, 0x0, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
pipe2(0x0, 0x4000)
fallocate(r3, 0x1, 0x100000000, 0x10000)

3.114428177s ago: executing program 3 (id=885):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x95)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff5f2624e908b2e6a832261431b850ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe8800000000000000000000000002b38f004e0000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0xc0c0c0c0})
recvmmsg(r4, 0x0, 0x0, 0x122, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f", 0x6c, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
close(r7)
socket(0x1d, 0x2, 0x6)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="0c00c5d744dfe7c8242a56e5224db49390b12ff828642c21840bdcf093304d26c9b1105fae7ed4c38dbe3fea15c849bc05f420ea512deb3b84799577fdedd87d64f8511c15239350341450d3236eb7d379ce227efbfe9d7777"])
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd010000000008000100ac141400100016800c00018008000100", @ANYRES32, @ANYBLOB="08001e00af3900000600150004000000cd43cdfb859626bc880f03af8842f4fe90c7cadfdfa70af69a6070b8e71b360d666dc89fbb6605e3dc5c68f7f61a37777c6a73a2607b7ba458a23fc2d4c299e051fc29917412ce5c46430f8cdec617e74d3ced0c95899e4271669559155d35cd83718fe65b80d207045051efe1c7aa2771e123ce4a3d810fbe273ef055e8e0c73e11c9275d160d0e9aca35a00ce94c81fe1afe31f8c032e3bb04d16802966abbe545ae8694a5f3059b9cf6cc102d722334"], 0x44}}, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)

2.804298129s ago: executing program 0 (id=886):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x37)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg}, 0x94)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$radio(0x0, 0x0, 0x2)
gettid()
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
prctl$PR_SET_THP_DISABLE(0x44, 0x200000000003)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
close(r0)

1.836686104s ago: executing program 0 (id=887):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x8000, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = socket(0x400000000010, 0x3, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(0x0, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="2a004f800c00d700"], 0x218}}, 0xc000)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x40, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0xcfb, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x5, 0x800008, 0x4, 0x401, 0xfffffffd]})
sendfile(r1, r1, 0x0, 0x8)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8000000000015)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440000001000010400f69b000200000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000260000002600000002000000040000000121a60f0100000000000000000000000800000049000000000000000f00ffde000000000000"], 0x0, 0x42, 0x0, 0xfffffffc}, 0x28)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x20, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dc", 0x0, 0x2055ea38, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

1.790891461s ago: executing program 4 (id=888):
socket$key(0xf, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./file2\x00', 0xa5)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x1400)
unlink(&(0x7f00000002c0)='./file0\x00')
rename(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
mq_open(&(0x7f0000000140)='wpan0\x00', 0x1, 0x80, 0x0)
r4 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20)
io_uring_enter(r4, 0x64f5, 0x90f4, 0x1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$hiddev(r5, &(0x7f0000000040)=""/143, 0x26)

1.477514384s ago: executing program 2 (id=889):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)=[0x0], 0x0, 0xfffffbfffffffffe, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_procfs(0x0, 0x0)
r5 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe98, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x9, 0x67fb, 0x7}, {0x100, 0x80000000, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x800}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x4, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x401}, {0xfffffff9, 0x6, 0xfffffffa, 0x7, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x400000, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x9, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0x1, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x0, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x400, 0x7}, {0x28000, 0xf, 0x9, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x80000000, 0x4, 0x70a, 0x8}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d5, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0xffffffff, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0xc4, 0x62182213, 0x8, 0x3, 0x8f4c}, {0x36b, 0xb6, 0xfffffffd, 0x5f60be42, 0x8, 0x9}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x6, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x9, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0x1, 0x3ff}, {0xfffffffe, 0x800, 0x1, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x8000, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x1, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x1ff, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x0, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x2, 0x39, 0x9d6, 0x5}, {0xf, 0xf, 0x1, 0x5c665eda, 0x9, 0x2}, {0x0, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0x2, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x1, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x800}, {0x8, 0xf, 0x7, 0x3, 0x8000, 0x400}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0x7, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0000, 0x2}, {0x401b, 0x9, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0xa}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x2, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x1, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x5, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x9, 0x30, 0x7, 0x7}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x6, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x6, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r5, 0x0, 0x0)
fchdir(r7)
inotify_init1(0x800)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008", @ANYRES16=r0], 0x40}, 0x1, 0x0, 0x0, 0x4004410}, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0xb, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x8, 0x1, 'GPL\x00'}]}, 0x24}}, 0x8040)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r9, &(0x7f0000004440)=""/4096, 0x1000)

1.217861552s ago: executing program 0 (id=890):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = getpgid(0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = pidfd_getfd(r2, r2, 0x0)
setns(r3, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000005c0), 0x10)
recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0)
link(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00')

1.024470142s ago: executing program 3 (id=891):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000, 0x1, 0xfffffffe, 0x81}, 0x10)
r1 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118)
r5 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r5)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000007c0)={0x0, 0x9, 0x2, "a1b2"}, 0x0, 0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="1807000000000000000000000080000018110000", @ANYRES32=r7, @ANYBLOB="00000008000000009500007b00"/24], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r4, 0x0, 0x0, 0x0, 0x12001, 0x1})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0)
landlock_restrict_self(r10, 0x0)
bind$unix(r9, &(0x7f0000003000)=@file={0x1}, 0x6e)
listen(r9, 0x0)
connect$unix(r8, &(0x7f0000000640)=@file={0x1}, 0x6e)
io_uring_enter(r1, 0x5d62, 0x0, 0x0, 0x0, 0x0)

565.332716ms ago: executing program 4 (id=892):
r0 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r0, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc)

383.665744ms ago: executing program 32 (id=850):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x20001, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x804, 0x2)
syz_usb_connect(0x2, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f9000905030000000000000905042d75"], 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="4000000012000501000000000000000005001900ff00000028001a"], 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040810)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x8, 0x0, 0x32344d59, 0x8, 0x3, [{0x4, 0x7}, {0x5, 0x10}, {0xffff, 0x3}, {0x0, 0xfff}, {0x7, 0xfffff3cd}, {0x4, 0x6}, {0x47e, 0x1}, {0x5, 0x3}], 0x1, 0x2, 0x0, 0x2, 0x6}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
prlimit64(0x0, 0x0, &(0x7f0000000340)={0xf1a, 0xfffffffffffffff8}, &(0x7f00000003c0))
io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r7, 0xc06855c8, &(0x7f00000000c0)={0x6, 0x100, {0x53, 0x6, 0x8, {0x6aa, 0x5d}, {0x200, 0x8}, @ramp={0x8, 0x4, {0x5, 0x1ff, 0x0, 0xa45}}}, {0x56, 0x0, 0xb56, {0x1, 0x5}, {0x6, 0x5}, @period={0x5b, 0x2, 0x59e2, 0x4, 0x1, {0x2, 0x7, 0x200, 0x5}, 0x3, &(0x7f0000000040)=[0x1ff, 0x9, 0x7]}}})

380.930816ms ago: executing program 4 (id=894):
signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x7]}, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002050000000100000000000085d0f4c23cf3ca475b52a70b00000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffdcb702000008000000b7030000fcffffff850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

226.794077ms ago: executing program 4 (id=895):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
r1 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000600))
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0)

1.327944ms ago: executing program 3 (id=896):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
listen(r4, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a8000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000001c080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

0s ago: executing program 4 (id=897):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x37)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg}, 0x94)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$radio(0x0, 0x0, 0x2)
gettid()
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
prctl$PR_SET_THP_DISABLE(0x44, 0x200000000003)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
close(r0)

kernel console output (not intermixed with test programs):

d  { write } for  pid=6223 comm="syz.1.79" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  103.266229][   T29] audit: type=1400 audit(1771595743.005:305): avc:  denied  { ioctl } for  pid=6223 comm="syz.1.79" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  103.339837][ T5876] usb 1-1: USB disconnect, device number 7
[  103.402151][   T29] audit: type=1400 audit(1771595743.005:306): avc:  denied  { write } for  pid=6223 comm="syz.1.79" name="event2" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  103.502855][   T29] audit: type=1400 audit(1771595743.005:307): avc:  denied  { ioctl } for  pid=6223 comm="syz.1.79" path="/dev/input/event2" dev="devtmpfs" ino=920 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  103.565160][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  103.735338][   T29] audit: type=1400 audit(1771595743.575:308): avc:  denied  { write } for  pid=6233 comm="syz.2.81" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  104.292878][ T6234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.527498][ T6234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.632016][ T6234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.265134][ T6259] Zero length message leads to an empty skb
[  105.869676][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'.
[  106.932792][   T29] audit: type=1400 audit(1771595746.705:309): avc:  denied  { watch watch_reads } for  pid=6274 comm="syz.1.89" path="/20" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  107.285978][   T29] audit: type=1400 audit(1771595747.125:310): avc:  denied  { read write } for  pid=6282 comm="syz.1.91" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  107.341407][   T29] audit: type=1400 audit(1771595747.125:311): avc:  denied  { open } for  pid=6282 comm="syz.1.91" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  107.395104][   T29] audit: type=1400 audit(1771595747.125:312): avc:  denied  { mount } for  pid=6282 comm="syz.1.91" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  107.472878][   T29] audit: type=1400 audit(1771595747.265:313): avc:  denied  { read write } for  pid=6282 comm="syz.1.91" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  107.867883][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'.
[  108.676573][ T5876] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  109.042195][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  109.042210][   T29] audit: type=1400 audit(1771595748.875:317): avc:  denied  { ioctl } for  pid=6305 comm="syz.0.99" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  109.097097][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  109.119367][ T5876] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  109.132784][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.149793][ T5876] usb 2-1: Product: syz
[  109.182220][   T29] audit: type=1400 audit(1771595748.975:318): avc:  denied  { ioctl } for  pid=6305 comm="syz.0.99" path="socket:[11006]" dev="sockfs" ino=11006 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  109.207731][ T5876] usb 2-1: Manufacturer: syz
[  109.212348][ T5876] usb 2-1: SerialNumber: syz
[  109.235858][ T5876] usb 2-1: config 0 descriptor??
[  109.274141][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  109.299888][ T5876] hub 2-1:0.0: bad descriptor, ignoring hub
[  109.306067][ T5876] hub 2-1:0.0: probe with driver hub failed with error -5
[  110.599503][ T5876] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5
[  110.629446][ T5883] usb 3-1: Using ep0 maxpacket: 16
[  110.644381][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.282803][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  112.312581][ T5883] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  112.322229][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.757658][ T5883] usb 3-1: config 0 descriptor??
[  112.763882][ T5883] usb 3-1: can't set config #0, error -71
[  112.771358][ T5883] usb 3-1: USB disconnect, device number 2
[  113.268558][   T24] libceph: connect (1)[c::]:6789 error -101
[  113.294727][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  113.337519][   T24] libceph: connect (1)[c::]:6789 error -101
[  113.378314][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  113.580172][   T29] audit: type=1400 audit(1771595753.385:319): avc:  denied  { write } for  pid=6299 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  113.707510][   T24] libceph: connect (1)[c::]:6789 error -101
[  113.717829][ T6333] ceph: No mds server is up or the cluster is laggy
[  113.736967][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  114.117135][ T6345] capability: warning: `syz.3.107' uses deprecated v2 capabilities in a way that may be insecure
[  114.127788][   T29] audit: type=1400 audit(1771595759.953:320): avc:  denied  { create } for  pid=6344 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  114.182309][ T5818] usb 2-1: USB disconnect, device number 4
[  114.190022][   T29] audit: type=1400 audit(1771595759.953:321): avc:  denied  { ioctl } for  pid=6344 comm="syz.3.107" path="socket:[11381]" dev="sockfs" ino=11381 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  114.348857][   T29] audit: type=1400 audit(1771595760.183:322): avc:  denied  { create } for  pid=6349 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  114.400144][   T29] audit: type=1400 audit(1771595760.183:323): avc:  denied  { setopt } for  pid=6349 comm="syz.0.110" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  114.454260][   T29] audit: type=1400 audit(1771595760.223:324): avc:  denied  { append } for  pid=6351 comm="syz.1.109" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  114.884292][   T29] audit: type=1400 audit(1771595760.283:325): avc:  denied  { bind } for  pid=6351 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  114.912095][   T29] audit: type=1400 audit(1771595760.363:326): avc:  denied  { name_bind } for  pid=6355 comm="syz.3.111" src=20128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  114.935142][   T29] audit: type=1400 audit(1771595760.383:327): avc:  denied  { mounton } for  pid=6355 comm="syz.3.111" path="/21/file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  114.960262][   T29] audit: type=1400 audit(1771595760.453:328): avc:  denied  { create } for  pid=6355 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  114.990300][   T29] audit: type=1400 audit(1771595760.463:329): avc:  denied  { sqpoll } for  pid=6355 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  115.048703][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.056975][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.357417][ T6369] netlink: 44 bytes leftover after parsing attributes in process `syz.4.114'.
[  115.501669][ T6357] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.531301][ T6357] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.873758][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'.
[  115.915008][ T5869] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  116.088784][ T1115] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.127359][ T1115] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.151097][ T5869] usb 3-1: config 8 has an invalid interface number: 80 but max is 0
[  116.161501][ T1115] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.176501][ T5869] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  116.188690][ T1115] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.198766][ T5869] usb 3-1: config 8 has no interface number 0
[  116.206348][ T5869] usb 3-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87
[  116.218840][ T5869] usb 3-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  116.312171][ T5869] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  116.322674][ T5869] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[  116.336771][ T5869] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  116.346217][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.360030][ T5869] usb 3-1: NFC: intf ffff888059b92000 id ffffffff8f7c1b20
[  116.434100][ T5869] nfcmrvl 3-1:8.80: NFC: registered with nci successfully
[  116.571943][ T5883] usb 3-1: USB disconnect, device number 3
[  116.579071][ T5883] usb 3-1: NFC: intf ffff888059b92000
[  119.032943][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  119.278363][   T24] usb 1-1: Using ep0 maxpacket: 16
[  119.298345][   T24] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  119.330846][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  119.345639][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  119.354891][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.364241][   T24] usb 1-1: Product: syz
[  119.375141][   T24] usb 1-1: Manufacturer: syz
[  119.389813][   T24] usb 1-1: SerialNumber: syz
[  119.432880][ T5883] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  119.596867][ T5883] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  119.616945][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.642968][ T5883] usb 3-1: Product: syz
[  119.647157][ T5883] usb 3-1: Manufacturer: syz
[  119.660167][ T5883] usb 3-1: SerialNumber: syz
[  119.671822][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  119.671838][   T29] audit: type=1400 audit(1771595765.513:343): avc:  denied  { write } for  pid=6395 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  119.708508][ T5883] usb 3-1: config 0 descriptor??
[  119.905179][   T29] audit: type=1400 audit(1771595765.703:344): avc:  denied  { create } for  pid=6406 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  119.905244][   T29] audit: type=1400 audit(1771595765.723:345): avc:  denied  { shutdown } for  pid=6406 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  119.905305][   T29] audit: type=1400 audit(1771595765.733:346): avc:  denied  { read } for  pid=6406 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  119.981825][ T5883] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  120.162811][  T945] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  120.201764][ T6403] netlink: 260 bytes leftover after parsing attributes in process `syz.2.122'.
[  120.377062][  T945] usb 2-1: unable to get BOS descriptor or descriptor too short
[  120.393912][  T945] usb 2-1: config 6 has an invalid interface number: 158 but max is 0
[  120.409051][  T945] usb 2-1: config 6 has no interface number 0
[  120.436844][  T945] usb 2-1: config 6 interface 158 has no altsetting 0
[  120.454598][  T945] usb 2-1: string descriptor 0 read error: -22
[  120.461950][  T945] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[  120.475504][  T945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.702833][  T945] rtsx_usb 2-1:6.158: probe with driver rtsx_usb failed with error -71
[  120.819484][  T945] usb 2-1: USB disconnect, device number 5
[  121.054072][ T6398] syz.0.120 (6398) used greatest stack depth: 18952 bytes left
[  121.114508][   T24] usb 1-1: 0:2 : does not exist
[  121.484827][   T24] usb 1-1: USB disconnect, device number 8
[  121.732583][   T29] audit: type=1400 audit(1771595767.553:347): avc:  denied  { name_connect } for  pid=6422 comm="syz.0.129" dest=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  121.848694][ T5883] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  121.944926][   T29] audit: type=1400 audit(1771595767.633:348): avc:  denied  { listen } for  pid=6422 comm="syz.0.129" lport=49262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  121.965591][   T29] audit: type=1400 audit(1771595767.643:349): avc:  denied  { accept } for  pid=6422 comm="syz.0.129" lport=49262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  121.988696][ T5883] usb 3-1: USB disconnect, device number 4
[  122.502977][ T1115] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  122.591860][   T29] audit: type=1400 audit(1771595768.413:350): avc:  denied  { create } for  pid=6429 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  122.840078][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'.
[  123.039687][ T6442] wg1: entered promiscuous mode
[  123.045413][ T6442] wg1: entered allmulticast mode
[  123.122492][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'.
[  123.148779][ T6446] overlayfs: missing 'lowerdir'
[  123.166146][ T6443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.133'.
[  123.742575][   T29] audit: type=1326 audit(1771595769.383:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  123.854141][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'.
[  124.280610][   T29] audit: type=1326 audit(1771595769.383:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  124.739624][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  124.739642][   T29] audit: type=1400 audit(1771595770.553:371): avc:  denied  { create } for  pid=6453 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  124.915775][   T29] audit: type=1400 audit(1771595770.553:372): avc:  denied  { setopt } for  pid=6453 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  124.941768][   T29] audit: type=1400 audit(1771595770.613:373): avc:  denied  { setopt } for  pid=6453 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  125.136753][   T29] audit: type=1400 audit(1771595770.973:374): avc:  denied  { mounton } for  pid=6459 comm="syz.2.138" path="/22/file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  125.773043][ T5883] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  126.133197][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'.
[  126.537060][ T5883] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  126.574190][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.703424][   T29] audit: type=1400 audit(1771595772.443:375): avc:  denied  { mount } for  pid=6466 comm="syz.3.140" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  126.894872][ T5883] usb 1-1: Product: syz
[  126.899061][ T5883] usb 1-1: Manufacturer: syz
[  126.903958][ T5883] usb 1-1: SerialNumber: syz
[  126.966867][ T5883] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  127.090683][    T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  127.246553][   T29] audit: type=1400 audit(1771595773.083:376): avc:  denied  { unmount } for  pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  127.741075][ T6493] sctp: [Deprecated]: syz.1.144 (pid 6493) Use of int in maxseg socket option.
[  127.741075][ T6493] Use struct sctp_assoc_value instead
[  127.755716][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  127.835480][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'.
[  128.174685][    T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  128.246472][   T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  128.255326][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.267112][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  128.277003][    T9] ath9k_htc: Failed to initialize the device
[  128.293191][   T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  128.478924][    T9] usb 1-1: ath9k_htc: USB layer deinitialized
[  128.542389][   T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  128.554837][   T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  128.570364][   T24] usb 5-1: Product: syz
[  128.580457][   T24] usb 5-1: Manufacturer: syz
[  128.614605][   T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  128.796189][ T5869] usb 1-1: USB disconnect, device number 9
[  128.831161][   T24] usb 5-1: USB disconnect, device number 2
[  129.134392][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'.
[  129.154297][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'.
[  129.165708][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'.
[  129.177989][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'.
[  129.189004][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'.
[  129.423702][   T29] audit: type=1400 audit(1771595775.243:377): avc:  denied  { getopt } for  pid=6503 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  129.450785][   T29] audit: type=1400 audit(1771595775.243:378): avc:  denied  { create } for  pid=6503 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  129.545544][ T6504] syzkaller0: entered promiscuous mode
[  129.551023][ T6504] syzkaller0: entered allmulticast mode
[  129.556916][   T29] audit: type=1400 audit(1771595775.243:379): avc:  denied  { ioctl } for  pid=6503 comm="syz.0.148" path="socket:[12712]" dev="sockfs" ino=12712 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  129.819503][   T29] audit: type=1400 audit(1771595775.553:380): avc:  denied  { write } for  pid=6480 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  130.069496][ T6512] overlayfs: missing 'lowerdir'
[  130.898434][   T29] audit: type=1400 audit(1771595776.723:381): avc:  denied  { write } for  pid=6517 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  132.137752][   T29] audit: type=1400 audit(1771595777.973:382): avc:  denied  { create } for  pid=6529 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  132.532873][   T29] audit: type=1400 audit(1771595778.003:383): avc:  denied  { write } for  pid=6529 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  132.682106][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  132.690601][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  132.854738][   T29] audit: type=1400 audit(1771595778.263:384): avc:  denied  { read } for  pid=6529 comm="syz.2.156" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  133.052985][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  133.127255][   T29] audit: type=1400 audit(1771595778.263:385): avc:  denied  { open } for  pid=6529 comm="syz.2.156" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  133.389447][    T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  133.401451][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.422465][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  133.483101][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  133.562096][    T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  133.582018][    T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  133.623828][    T9] usb 4-1: Product: syz
[  133.650547][ T6549] sctp: [Deprecated]: syz.4.160 (pid 6549) Use of int in maxseg socket option.
[  133.650547][ T6549] Use struct sctp_assoc_value instead
[  133.729189][    T9] usb 4-1: Manufacturer: syz
[  133.772248][    T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  134.460521][    T9] usb 4-1: USB disconnect, device number 3
[  134.943805][   T29] audit: type=1400 audit(1771595780.763:386): avc:  denied  { execute } for  pid=6563 comm="syz.2.163" name="file1" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  134.975984][   T29] audit: type=1400 audit(1771595780.773:387): avc:  denied  { execute_no_trans } for  pid=6563 comm="syz.2.163" path="/28/file1" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  135.406681][ T6571] syz.3.164 uses obsolete (PF_INET,SOCK_PACKET)
[  135.585998][ T6567] netlink: 76 bytes leftover after parsing attributes in process `syz.2.163'.
[  135.698071][ T6576] FAULT_INJECTION: forcing a failure.
[  135.698071][ T6576] name failslab, interval 1, probability 0, space 0, times 0
[  135.720096][ T6576] CPU: 1 UID: 0 PID: 6576 Comm: syz.2.165 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  135.720132][ T6576] Tainted: [L]=SOFTLOCKUP
[  135.720139][ T6576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  135.720152][ T6576] Call Trace:
[  135.720159][ T6576]  <TASK>
[  135.720168][ T6576]  dump_stack_lvl+0x100/0x190
[  135.720210][ T6576]  should_fail_ex.cold+0x5/0xa
[  135.720238][ T6576]  should_failslab+0xc2/0x120
[  135.720272][ T6576]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  135.720301][ T6576]  ? security_inode_alloc+0x3b/0x2c0
[  135.720336][ T6576]  ? lockdep_init_map_type+0x5c/0x250
[  135.720376][ T6576]  security_inode_alloc+0x3b/0x2c0
[  135.720412][ T6576]  inode_init_always_gfp+0xced/0x1040
[  135.720439][ T6576]  alloc_inode+0x8e/0x250
[  135.720466][ T6576]  new_inode+0x22/0x1c0
[  135.720497][ T6576]  shmem_get_inode+0x212/0x1040
[  135.720530][ T6576]  ? __pfx_shmem_get_inode+0x10/0x10
[  135.720554][ T6576]  ? d_add+0x443/0x850
[  135.720583][ T6576]  ? do_raw_spin_unlock+0x145/0x1e0
[  135.720613][ T6576]  shmem_mknod+0x20c/0x470
[  135.720641][ T6576]  ? __pfx_shmem_mknod+0x10/0x10
[  135.720664][ T6576]  ? bpf_lsm_inode_create+0x9/0x10
[  135.720698][ T6576]  ? __pfx_shmem_create+0x10/0x10
[  135.720724][ T6576]  lookup_open.isra.0+0xc47/0x11b0
[  135.720762][ T6576]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  135.720798][ T6576]  ? __pfx___might_resched+0x10/0x10
[  135.720821][ T6576]  ? mnt_get_write_access+0x52/0x2f0
[  135.720856][ T6576]  ? __pfx_down_write+0x10/0x10
[  135.720880][ T6576]  ? mnt_get_write_access+0x1e9/0x2f0
[  135.720913][ T6576]  path_openat+0x2291/0x31a0
[  135.720943][ T6576]  ? __pfx_path_openat+0x10/0x10
[  135.720975][ T6576]  do_file_open+0x20e/0x430
[  135.720998][ T6576]  ? __pfx_do_file_open+0x10/0x10
[  135.721025][ T6576]  ? alloc_fd+0x476/0x790
[  135.721038][ T6576]  ? do_getname+0x191/0x390
[  135.721052][ T6576]  do_sys_openat2+0x10d/0x1e0
[  135.721066][ T6576]  ? __pfx_do_sys_openat2+0x10/0x10
[  135.721078][ T6576]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  135.721093][ T6576]  ? __fget_files+0x21f/0x3d0
[  135.721106][ T6576]  __x64_sys_openat+0x12d/0x210
[  135.721120][ T6576]  ? __pfx___x64_sys_openat+0x10/0x10
[  135.721132][ T6576]  ? ksys_write+0x1ac/0x250
[  135.721157][ T6576]  do_syscall_64+0x106/0xf80
[  135.721176][ T6576]  ? clear_bhb_loop+0x40/0x90
[  135.721200][ T6576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.721221][ T6576] RIP: 0033:0x7f05ebf9c629
[  135.721242][ T6576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.721253][ T6576] RSP: 002b:00007f05ece02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  135.721264][ T6576] RAX: ffffffffffffffda RBX: 00007f05ec215fa0 RCX: 00007f05ebf9c629
[  135.721272][ T6576] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c
[  135.721281][ T6576] RBP: 00007f05ece02090 R08: 0000000000000000 R09: 0000000000000000
[  135.721288][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.721294][ T6576] R13: 00007f05ec216038 R14: 00007f05ec215fa0 R15: 00007ffc569282b8
[  135.721310][ T6576]  </TASK>
[  136.249181][   T29] audit: type=1400 audit(1771595782.073:388): avc:  denied  { create } for  pid=6577 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  136.566994][   T29] audit: type=1400 audit(1771595782.083:389): avc:  denied  { sys_admin } for  pid=6577 comm="syz.0.168" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  136.679872][   T29] audit: type=1400 audit(1771595782.313:390): avc:  denied  { read } for  pid=6577 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  137.134781][ T6593] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  137.144058][  T945] IPVS: starting estimator thread 0...
[  137.863042][ T6595] IPVS: using max 64 ests per chain, 153600 per kthread
[  138.382773][   T29] audit: type=1326 audit(1771595784.203:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  138.382833][   T29] audit: type=1326 audit(1771595784.203:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  138.382860][   T29] audit: type=1326 audit(1771595784.203:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  138.382883][   T29] audit: type=1326 audit(1771595784.203:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  138.382907][   T29] audit: type=1326 audit(1771595784.203:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  139.319702][ T6611] xt_connbytes: Forcing CT accounting to be enabled
[  139.319905][ T6611] Cannot find set identified by id 0 to match
[  139.962812][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  139.962831][   T29] audit: type=1326 audit(1771595785.793:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  140.247701][ T6620] SELinux: failure in selinux_parse_skb(), unable to parse packet
[  140.271886][ T6623] sctp: [Deprecated]: syz.1.172 (pid 6623) Use of int in maxseg socket option.
[  140.271886][ T6623] Use struct sctp_assoc_value instead
[  140.606897][   T29] audit: type=1400 audit(1771595786.073:399): avc:  denied  { connect } for  pid=6612 comm="syz.4.174" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  141.223541][   T29] audit: type=1400 audit(1771595786.073:400): avc:  denied  { write } for  pid=6612 comm="syz.4.174" path="socket:[12946]" dev="sockfs" ino=12946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  141.476919][   T29] audit: type=1400 audit(1771595787.273:401): avc:  denied  { write } for  pid=6628 comm="syz.3.177" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  141.682898][ T5869] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  141.842921][ T5869] usb 4-1: Using ep0 maxpacket: 16
[  141.848194][ T5883] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  141.869559][ T5869] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 4
[  141.986720][ T5869] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52
[  141.997572][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.033960][ T5869] usb 4-1: Product: syz
[  142.038288][ T5869] usb 4-1: Manufacturer: syz
[  142.043136][ T5883] usb 2-1: device descriptor read/64, error -71
[  142.522317][ T5869] usb 4-1: SerialNumber: syz
[  142.527140][ T5883] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  142.551206][ T5869] usb 4-1: config 0 descriptor??
[  142.672875][ T5883] usb 2-1: device descriptor read/64, error -71
[  142.790867][ T5883] usb usb2-port1: attempt power cycle
[  142.830862][   T29] audit: type=1400 audit(1771595788.663:402): avc:  denied  { create } for  pid=6628 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  142.876535][ T6640] binder: BINDER_SET_CONTEXT_MGR already set
[  142.893171][ T6640] binder: 6639:6640 ioctl 4018620d 200000000040 returned -16
[  142.911157][   T29] audit: type=1400 audit(1771595788.693:403): avc:  denied  { bind } for  pid=6628 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  142.933431][ T5869] usb 4-1: USB disconnect, device number 4
[  142.933563][ T6640] binder: 6639:6640 ioctl c0306201 2000000003c0 returned -14
[  142.981239][   T29] audit: type=1400 audit(1771595788.703:404): avc:  denied  { ioctl } for  pid=6639 comm="syz.2.181" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  143.126755][   T29] audit: type=1400 audit(1771595788.703:405): avc:  denied  { set_context_mgr } for  pid=6639 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  143.170091][   T29] audit: type=1400 audit(1771595788.713:406): avc:  denied  { map } for  pid=6639 comm="syz.2.181" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  143.212786][ T5883] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  143.273899][ T5883] usb 2-1: device descriptor read/8, error -71
[  143.406207][ T6648] 9p: Bad value for 'wfdno'
[  143.471197][   T29] audit: type=1400 audit(1771595789.233:407): avc:  denied  { ioctl } for  pid=6642 comm="syz.0.183" path="socket:[13085]" dev="sockfs" ino=13085 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  143.522920][ T5883] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  143.689128][ T5883] usb 2-1: device descriptor read/8, error -71
[  144.034060][ T5883] usb usb2-port1: unable to enumerate USB device
[  144.209732][ T6654] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size.
[  145.424362][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'.
[  145.894404][ T1115] wlan1: Trigger new scan to find an IBSS to join
[  146.109233][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  146.109248][   T29] audit: type=1400 audit(1771595791.943:414): avc:  denied  { mounton } for  pid=6684 comm="syz.0.194" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  146.311163][   T29] audit: type=1400 audit(1771595792.143:415): avc:  denied  { ioctl } for  pid=6686 comm="syz.0.195" path="socket:[13252]" dev="sockfs" ino=13252 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  147.100961][ T5818] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  147.304289][ T5818] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  147.316988][ T5818] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.333176][ T5818] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  147.391550][ T5818] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  147.418539][ T5818] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  147.427803][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  147.440193][ T5818] usb 3-1: Product: syz
[  147.447973][ T5818] usb 3-1: Manufacturer: syz
[  147.453358][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  147.476645][ T5818] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  147.659826][   T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  147.702825][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.835527][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  147.864176][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  147.921517][   T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  147.966497][   T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  147.982328][ T5818] usb 3-1: USB disconnect, device number 5
[  147.998542][   T24] usb 2-1: Product: syz
[  148.033298][   T24] usb 2-1: Manufacturer: syz
[  148.096311][   T24] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  148.521960][ T6723] overlayfs: failed to clone lowerpath
[  148.527709][   T29] audit: type=1400 audit(1771595794.353:416): avc:  denied  { mount } for  pid=6722 comm="syz.0.205" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  148.698598][ T6725] usb usb8: usbfs: process 6725 (syz.4.202) did not claim interface 0 before use
[  149.707028][   T35] wlan1: Trigger new scan to find an IBSS to join
[  149.785575][  T945] usb 2-1: USB disconnect, device number 10
[  149.842169][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'.
[  150.313456][   T29] audit: type=1400 audit(1771595796.153:417): avc:  denied  { kexec_image_load } for  pid=6741 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  150.378353][   T29] audit: type=1400 audit(1771595796.193:418): avc:  denied  { execute } for  pid=6741 comm="syz.2.210" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  150.439634][   T29] audit: type=1400 audit(1771595796.193:419): avc:  denied  { call } for  pid=6741 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  150.690157][ T6744] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  150.705329][   T29] audit: type=1400 audit(1771595796.543:420): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  150.766794][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'.
[  150.978072][ T1115] wlan1: Creating new IBSS network, BSSID 4a:21:e6:a2:28:d6
[  151.158058][   T29] audit: type=1326 audit(1771595796.933:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  151.283838][   T29] audit: type=1326 audit(1771595796.933:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  151.360131][   T29] audit: type=1326 audit(1771595796.933:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  151.395699][   T29] audit: type=1326 audit(1771595796.933:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  151.418936][ T5883] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  151.427541][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'.
[  151.438415][   T29] audit: type=1326 audit(1771595796.933:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  151.468194][   T29] audit: type=1326 audit(1771595796.933:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  151.497166][   T29] audit: type=1326 audit(1771595796.963:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  151.522383][   T29] audit: type=1326 audit(1771595796.963:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  151.551165][   T29] audit: type=1326 audit(1771595796.973:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  151.577161][   T29] audit: type=1326 audit(1771595796.973:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.1.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  151.606390][ T5883] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  151.635491][ T5883] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.682804][ T5883] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  151.716961][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0
[  151.726584][ T5883] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  151.744997][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.811925][ T5883] usb 3-1: config 0 descriptor??
[  153.115807][ T6764] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.212'.
[  154.116955][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'.
[  154.145886][ T6768] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  154.393166][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  154.582887][   T24] usb 4-1: Using ep0 maxpacket: 16
[  154.626619][   T24] usb 4-1: config 0 has no interfaces?
[  154.677487][   T24] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  154.688856][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.702391][   T24] usb 4-1: Product: syz
[  154.706847][   T24] usb 4-1: Manufacturer: syz
[  154.712289][   T24] usb 4-1: SerialNumber: syz
[  154.874431][   T24] usb 4-1: config 0 descriptor??
[  154.893358][   T50] libceph: connect (1)[c::]:6789 error -101
[  154.907706][   T50] libceph: mon0 (1)[c::]:6789 connect error
[  155.608527][ T5883] usbhid 3-1:0.0: can't add hid device: -71
[  155.614863][ T5883] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  155.615944][   T50] libceph: connect (1)[c::]:6789 error -101
[  155.626283][ T5883] usb 3-1: USB disconnect, device number 6
[  155.654146][   T50] libceph: mon0 (1)[c::]:6789 connect error
[  155.870663][ T6793] overlay: Unknown parameter '/'
[  156.250973][   T50] libceph: connect (1)[c::]:6789 error -101
[  156.258972][   T50] libceph: mon0 (1)[c::]:6789 connect error
[  156.837561][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'.
[  156.981768][ T6774] ceph: No mds server is up or the cluster is laggy
[  157.572783][    T9] usb 4-1: USB disconnect, device number 5
[  157.582055][   T29] kauditd_printk_skb: 14 callbacks suppressed
[  157.582071][   T29] audit: type=1326 audit(1771595803.413:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  157.816576][ T6802] overlayfs: failed lookup in lower (newroot/44, name='bus', err=-40): overlapping layers
[  157.830764][   T29] audit: type=1326 audit(1771595803.413:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  157.860633][ T6802] overlayfs: failed to get inode (-116)
[  157.867081][ T6802] overlayfs: failed to get inode (-116)
[  157.906573][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'.
[  157.950234][   T29] audit: type=1326 audit(1771595803.413:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  158.007600][   T29] audit: type=1326 audit(1771595803.423:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  158.844331][   T29] audit: type=1326 audit(1771595803.423:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  159.038569][   T29] audit: type=1326 audit(1771595803.443:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  159.169306][   T29] audit: type=1326 audit(1771595803.483:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  159.292867][   T29] audit: type=1326 audit(1771595803.483:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  159.394900][   T29] audit: type=1326 audit(1771595803.493:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  159.720784][   T29] audit: type=1326 audit(1771595803.493:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1159c629 code=0x7ffc0000
[  160.062779][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  160.595341][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'.
[  160.604397][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'.
[  160.635513][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'.
[  160.644509][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'.
[  160.884366][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.895838][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.978557][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  160.988119][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.003303][    T9] usb 2-1: config 0 descriptor??
[  161.251688][ T6859] netlink: del zone limit has 4 unknown bytes
[  161.861252][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  161.873618][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  161.916225][    T9] usb 2-1: USB disconnect, device number 11
[  162.247404][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'.
[  162.333991][   T50] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  162.493134][   T50] usb 4-1: Using ep0 maxpacket: 16
[  162.521199][   T50] usb 4-1: config 0 has no interfaces?
[  162.550912][   T50] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  162.561339][   T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.574513][   T50] usb 4-1: Product: syz
[  162.578800][   T50] usb 4-1: Manufacturer: syz
[  162.597107][   T50] usb 4-1: SerialNumber: syz
[  162.683989][   T50] usb 4-1: config 0 descriptor??
[  163.645578][ T6891] overlay: Unknown parameter '/'
[  164.981169][   T85] Bluetooth: hci5: Frame reassembly failed (-84)
[  165.159669][ T5884] usb 4-1: USB disconnect, device number 6
[  165.626879][   T85] Bluetooth: hci5: Frame reassembly failed (-84)
[  165.676515][ T6907] overlayfs: missing 'lowerdir'
[  166.972795][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  167.063963][   T29] kauditd_printk_skb: 64 callbacks suppressed
[  167.063984][   T29] audit: type=1400 audit(1771595812.893:519): avc:  denied  { write } for  pid=6930 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  167.274212][   T29] audit: type=1400 audit(1771595813.113:520): avc:  denied  { write } for  pid=6928 comm="syz.3.259" path="socket:[14935]" dev="sockfs" ino=14935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  167.472215][ T6946] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  167.507799][   T29] audit: type=1400 audit(1771595813.323:521): avc:  denied  { read } for  pid=6939 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  167.722443][ T6949] sctp: [Deprecated]: syz.0.265 (pid 6949) Use of int in maxseg socket option.
[  167.722443][ T6949] Use struct sctp_assoc_value instead
[  168.890086][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'.
[  169.830483][   T29] audit: type=1400 audit(1771595815.653:522): avc:  denied  { bind } for  pid=6967 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  170.355838][ T6985] IPv6: NLM_F_CREATE should be specified when creating new route
[  172.162833][   T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  172.302830][   T24] usb 5-1: device descriptor read/64, error -71
[  172.370065][ T7013] cgroup: Unknown subsys name 'uid>00000000000000000000'
[  172.543297][   T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  172.703547][   T24] usb 5-1: device descriptor read/64, error -71
[  173.053338][   T24] usb usb5-port1: attempt power cycle
[  173.433901][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  173.930238][   T24] usb 5-1: device descriptor read/8, error -71
[  173.970546][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.978089][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.164253][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.198030][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.552777][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.582346][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.603630][ T1115] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.614259][   T35] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.690293][ T7065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.728654][ T7068] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  175.832532][ T7072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.149916][   T29] audit: type=1400 audit(1771595821.983:523): avc:  denied  { write } for  pid=7081 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  177.789817][ T7101] netlink: 'syz.4.303': attribute type 10 has an invalid length.
[  177.815229][ T7101] batman_adv: batadv0: Adding interface: netdevsim0
[  177.833329][ T7101] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.902082][ T7101] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  178.058244][ T7110] capability: warning: `syz.2.307' uses 32-bit capabilities (legacy support in use)
[  178.100013][ T7110] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  178.149365][ T7115] tmpfs: Bad value for 'mpol'
[  178.430817][ T7121] netlink: 44 bytes leftover after parsing attributes in process `syz.4.308'.
[  180.492756][   T29] audit: type=1400 audit(1771595826.313:524): avc:  denied  { create } for  pid=7117 comm="syz.2.310" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  180.572310][   T29] audit: type=1400 audit(1771595826.313:525): avc:  denied  { read write } for  pid=7117 comm="syz.2.310" name="file1" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  180.626728][   T29] audit: type=1400 audit(1771595826.313:526): avc:  denied  { open } for  pid=7117 comm="syz.2.310" path="/57/file1" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  180.852817][   T29] audit: type=1400 audit(1771595826.683:527): avc:  denied  { mount } for  pid=7138 comm="syz.1.315" name="/" dev="autofs" ino=15330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  181.002127][ T1115] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  181.373879][ T7137] SELinux: failure in selinux_parse_skb(), unable to parse packet
[  181.759564][ T7151] netlink: 140 bytes leftover after parsing attributes in process `syz.1.318'.
[  181.770027][ T7152] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  181.796641][ T7152] CIFS mount error: No usable UNC path provided in device string!
[  181.796641][ T7152] 
[  181.809899][ T7152] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  183.399976][   T29] audit: type=1400 audit(1771595829.233:528): avc:  denied  { unmount } for  pid=7165 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  184.605134][ T7181] netlink: 44 bytes leftover after parsing attributes in process `syz.0.328'.
[  185.337048][ T7189] sctp: [Deprecated]: syz.2.329 (pid 7189) Use of int in maxseg socket option.
[  185.337048][ T7189] Use struct sctp_assoc_value instead
[  185.869429][ T7090] Set syz1 is full, maxelem 65536 reached
[  186.314143][   T29] audit: type=1400 audit(1771595832.143:529): avc:  denied  { ioctl } for  pid=7200 comm="syz.2.334" path="socket:[15444]" dev="sockfs" ino=15444 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  186.409688][   T29] audit: type=1400 audit(1771595832.203:530): avc:  denied  { bind } for  pid=7200 comm="syz.2.334" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  186.605483][   T29] audit: type=1400 audit(1771595832.203:531): avc:  denied  { name_bind } for  pid=7200 comm="syz.2.334" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  186.630412][   T29] audit: type=1400 audit(1771595832.203:532): avc:  denied  { node_bind } for  pid=7200 comm="syz.2.334" saddr=::ffff:172.30.0.3 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  186.973478][ T7206] netlink: 'syz.3.335': attribute type 1 has an invalid length.
[  187.077431][ T7206] 8021q: adding VLAN 0 to HW filter on device bond1
[  187.144882][ T7215] fuse: Bad value for 'fd'
[  187.298583][ T7209] 8021q: adding VLAN 0 to HW filter on device bond1
[  187.305928][ T7209] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  187.869189][ T7209] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  187.902818][   T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  187.915238][ T7216] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  187.937460][ T7216] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  188.124787][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  188.219916][   T24] usb 5-1: config 6 has an invalid interface number: 158 but max is 0
[  188.231180][   T24] usb 5-1: config 6 has no interface number 0
[  188.242652][   T24] usb 5-1: config 6 interface 158 has no altsetting 0
[  188.288055][   T24] usb 5-1: string descriptor 0 read error: -22
[  188.302863][   T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[  188.311938][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.664042][   T24] rtsx_usb 5-1:6.158: probe with driver rtsx_usb failed with error -71
[  189.170127][   T24] usb 5-1: USB disconnect, device number 7
[  189.216164][ T7235] fuse: Unknown parameter '0xffffffffffffffff'
[  189.523211][   T29] audit: type=1400 audit(1771595835.363:533): avc:  denied  { getopt } for  pid=7241 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  189.578652][   T29] audit: type=1400 audit(1771595835.383:534): avc:  denied  { bind } for  pid=7241 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  189.898648][ T7253] sctp: [Deprecated]: syz.4.343 (pid 7253) Use of int in maxseg socket option.
[  189.898648][ T7253] Use struct sctp_assoc_value instead
[  190.008172][ T7255] 9p: Bad value for 'wfdno'
[  190.631797][ T7268] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.349'.
[  191.477507][ T5816] Bluetooth: hci4: command 0x0406 tx timeout
[  191.483624][ T5128] Bluetooth: hci2: command 0x0406 tx timeout
[  191.489730][ T5816] Bluetooth: hci0: command 0x0406 tx timeout
[  191.496150][ T5813] Bluetooth: hci3: command 0x0406 tx timeout
[  191.502145][ T5128] Bluetooth: hci1: command 0x0406 tx timeout
[  191.604383][   T29] audit: type=1400 audit(1771595837.433:535): avc:  denied  { accept } for  pid=7270 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  192.504911][ T7279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=7279 comm=syz.3.353
[  192.528942][   T29] audit: type=1400 audit(1771595838.363:536): avc:  denied  { create } for  pid=7278 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  192.593327][   T29] audit: type=1400 audit(1771595838.393:537): avc:  denied  { setopt } for  pid=7278 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  192.648308][ T7284] pim6reg: entered allmulticast mode
[  193.312644][ T7290] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  193.368222][   T29] audit: type=1400 audit(1771595839.203:538): avc:  denied  { ioctl } for  pid=7289 comm="syz.3.356" path="socket:[15565]" dev="sockfs" ino=15565 ioctlcmd=0x8b2e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  193.739268][ T7301] sctp: [Deprecated]: syz.2.360 (pid 7301) Use of int in maxseg socket option.
[  193.739268][ T7301] Use struct sctp_assoc_value instead
[  193.825433][ T5869] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  193.996112][ T5869] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  194.004372][ T5869] usb 4-1: config 0 has no interface number 0
[  194.014801][ T5869] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  194.024917][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.033294][ T5869] usb 4-1: Product: syz
[  194.040488][ T5869] usb 4-1: Manufacturer: syz
[  194.050941][ T5869] usb 4-1: SerialNumber: syz
[  194.071420][ T5869] usb 4-1: config 0 descriptor??
[  194.101752][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  194.108583][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  194.287350][   T29] audit: type=1400 audit(1771595840.123:539): avc:  denied  { append } for  pid=7312 comm="syz.4.362" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  194.337039][ T5869] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[  194.351840][ T5869] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[  194.390728][   T29] audit: type=1400 audit(1771595840.223:540): avc:  denied  { firmware_load } for  pid=5869 comm="kworker/0:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  194.392561][ T5869] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[  195.511272][ T7331] overlay: Unknown parameter '/'
[  196.986064][   T29] audit: type=1400 audit(1771595842.823:541): avc:  denied  { read } for  pid=7346 comm="syz.4.372" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  197.012468][   T29] audit: type=1400 audit(1771595842.823:542): avc:  denied  { open } for  pid=7346 comm="syz.4.372" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  197.058899][   T29] audit: type=1400 audit(1771595842.893:543): avc:  denied  { getopt } for  pid=7345 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  197.080882][ T7348] 9p: Unknown access argument 00000000004294967295��H���%: -22
[  197.301829][ T7352] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  197.368901][   T29] audit: type=1400 audit(1771595843.193:544): avc:  denied  { associate } for  pid=7350 comm="syz.4.373" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  197.855922][ T7355] overlayfs: failed to clone upperpath
[  198.165392][ T7357] fuse: Bad value for 'fd'
[  199.426157][   T29] audit: type=1400 audit(1771595845.233:545): avc:  denied  { connect } for  pid=7366 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  199.793040][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'.
[  199.838823][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'.
[  199.851408][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'.
[  199.862719][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'.
[  200.472871][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  200.496515][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'.
[  200.644681][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  200.653467][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.692730][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  200.726061][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  200.758123][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  200.758854][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'.
[  200.782986][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  200.815075][    T9] usb 5-1: Product: syz
[  200.819266][    T9] usb 5-1: Manufacturer: syz
[  200.864014][    T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  200.952862][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'.
[  200.961670][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'.
[  201.035533][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.043086][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.070903][ T5876] usb 5-1: USB disconnect, device number 8
[  201.104888][   T29] audit: type=1400 audit(1771595846.943:546): avc:  denied  { listen } for  pid=7395 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  201.172437][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'.
[  201.406522][   T29] audit: type=1400 audit(1771595847.243:547): avc:  denied  { ioctl } for  pid=7395 comm="syz.1.388" path="socket:[15758]" dev="sockfs" ino=15758 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  201.495807][ T7390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.518539][ T7390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.780452][   T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.789765][   T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.406465][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'.
[  202.438776][   T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  202.491805][   T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.927920][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'.
[  205.243323][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.403'.
[  205.313682][ T7447] 9p: Bad value for 'wfdno'
[  205.419942][ T7445] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7445 comm=syz.4.403
[  205.897300][ T7451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7451 comm=syz.1.405
[  206.167824][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'.
[  210.156509][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'.
[  210.361106][ T7482] 9p: Bad value for 'wfdno'
[  210.607775][ T7488] veth0_macvtap: left promiscuous mode
[  212.131770][ T1115] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  212.162461][   T29] audit: type=1400 audit(1771595857.983:548): avc:  denied  { create } for  pid=7493 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  212.300354][   T29] audit: type=1400 audit(1771595858.063:549): avc:  denied  { write } for  pid=7493 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  212.614051][ T7505] 9p: Bad value for 'wfdno'
[  213.425370][ T7496] netlink: 32 bytes leftover after parsing attributes in process `syz.2.420'.
[  213.482455][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'.
[  213.508404][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.420'.
[  216.059955][ T7548] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.430'.
[  216.566328][ T7552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7552 comm=syz.0.433
[  216.625034][ T7554] netlink: 52 bytes leftover after parsing attributes in process `syz.4.434'.
[  216.698327][ T7557] netlink: 108 bytes leftover after parsing attributes in process `syz.4.434'.
[  216.707511][ T7557] netlink: 108 bytes leftover after parsing attributes in process `syz.4.434'.
[  216.716674][ T7557] netlink: 108 bytes leftover after parsing attributes in process `syz.4.434'.
[  217.017570][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.118086][ T7563] netlink: 400 bytes leftover after parsing attributes in process `syz.0.436'.
[  217.177056][ T7557] netlink: 108 bytes leftover after parsing attributes in process `syz.4.434'.
[  217.190053][ T7557] netlink: 108 bytes leftover after parsing attributes in process `syz.4.434'.
[  217.202265][ T7557] netlink: 108 bytes leftover after parsing attributes in process `syz.4.434'.
[  217.560928][ T7579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.800693][ T7585] netlink: 48 bytes leftover after parsing attributes in process `syz.3.444'.
[  217.812801][   T29] audit: type=1400 audit(1771595863.633:550): avc:  denied  { nlmsg_read } for  pid=7584 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  217.860456][ T7583] 9p: Bad value for 'wfdno'
[  219.963040][   T29] audit: type=1400 audit(1771595865.763:551): avc:  denied  { name_connect } for  pid=7596 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  220.244267][    T9] libceph: connect (1)[c::]:6789 error -101
[  220.253042][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  220.331537][ T7599] ceph: No mds server is up or the cluster is laggy
[  220.343564][ T5807] Bluetooth: hci2: connection err: -111
[  220.461437][   T29] audit: type=1400 audit(1771595866.253:552): avc:  denied  { read } for  pid=7609 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  220.523074][    T9] libceph: connect (1)[c::]:6789 error -101
[  220.529424][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  221.124823][   T29] audit: type=1400 audit(1771595866.963:553): avc:  denied  { ioctl } for  pid=7620 comm="syz.2.453" path="socket:[18789]" dev="sockfs" ino=18789 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  221.863559][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  222.046578][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  222.065784][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  222.193676][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  222.209779][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  222.247527][   T29] audit: type=1326 audit(1771595868.083:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  222.291835][ T7642] __nla_validate_parse: 1 callbacks suppressed
[  222.291855][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'.
[  222.455618][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  222.536453][   T29] audit: type=1326 audit(1771595868.083:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  222.574362][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'.
[  222.904204][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  222.970549][    T9] usb 5-1: Product: syz
[  222.974875][    T9] usb 5-1: Manufacturer: syz
[  222.998577][    T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  223.057729][   T29] audit: type=1326 audit(1771595868.083:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  223.182805][   T29] audit: type=1326 audit(1771595868.083:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  223.242062][    T9] usb 5-1: USB disconnect, device number 9
[  223.248125][   T29] audit: type=1326 audit(1771595868.083:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  223.452924][   T29] audit: type=1326 audit(1771595868.113:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  223.512929][   T29] audit: type=1326 audit(1771595868.153:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  223.547187][   T29] audit: type=1326 audit(1771595868.153:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  223.571993][   T29] audit: type=1326 audit(1771595868.163:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  223.617880][   T29] audit: type=1326 audit(1771595868.283:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  223.676267][   T29] audit: type=1326 audit(1771595868.283:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  223.717457][   T29] audit: type=1326 audit(1771595868.293:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  225.079026][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[  225.686033][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'.
[  226.489538][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'.
[  226.500046][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'.
[  226.509203][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'.
[  226.518200][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'.
[  226.558122][ T7706] Malformed UNC in devname
[  226.558122][ T7706] 
[  226.608139][ T7706] CIFS: VFS: Malformed UNC in devname
[  226.932771][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  227.116837][    T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  227.126306][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.141064][    T9] usb 5-1: Product: syz
[  227.145519][    T9] usb 5-1: Manufacturer: syz
[  227.150231][    T9] usb 5-1: SerialNumber: syz
[  227.158093][    T9] usb 5-1: config 0 descriptor??
[  227.585506][ T7711] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  227.836855][    T9] usb 5-1: Firmware version (0.0) predates our first public release.
[  227.849919][    T9] usb 5-1: Please update to version 0.2 or newer
[  227.951711][    T9] usb 5-1: Firmware: build ����b�𨷅�ƿ-�o�	��}�r�X��٫�gD�\���,��y�
��r�r���:Sk�K�S���~9'y�,W���e�'
[  228.067739][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'.
[  228.158423][   T29] kauditd_printk_skb: 25 callbacks suppressed
[  228.159320][   T29] audit: type=1326 audit(1771595873.993:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.2.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  228.379523][    T9] usb 5-1: USB disconnect, device number 10
[  228.474779][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'.
[  228.886890][   T29] audit: type=1326 audit(1771595873.993:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.2.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  228.951028][ T7736] fuse: Bad value for 'fd'
[  228.957568][   T29] audit: type=1326 audit(1771595873.993:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.2.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  228.983664][   T29] audit: type=1326 audit(1771595873.993:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.2.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  229.009850][   T29] audit: type=1326 audit(1771595873.993:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.2.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  229.691531][   T29] audit: type=1326 audit(1771595874.033:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.2.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  229.727190][ T7747] netlink: 40 bytes leftover after parsing attributes in process `syz.2.488'.
[  229.768508][   T29] audit: type=1326 audit(1771595874.073:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.2.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  229.903860][   T29] audit: type=1326 audit(1771595874.073:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.2.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  229.930457][   T29] audit: type=1326 audit(1771595874.133:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.2.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  230.002760][   T29] audit: type=1326 audit(1771595874.133:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.2.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  230.528360][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'.
[  230.553866][ T7776] overlayfs: failed to clone lowerpath
[  230.639927][ T7778] netlink: 36 bytes leftover after parsing attributes in process `syz.2.498'.
[  230.810739][ T7785] sctp: [Deprecated]: syz.4.499 (pid 7785) Use of int in maxseg socket option.
[  230.810739][ T7785] Use struct sctp_assoc_value instead
[  231.821535][ T7811] 9p: Bad value for 'wfdno'
[  231.902160][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'.
[  232.532758][ T5876] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  232.725006][ T5876] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  232.763241][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  232.810170][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  232.859346][ T5876] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  232.920166][ T5876] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  232.960725][ T5807] Bluetooth: hci2: Unable to find connection for big 0x00
[  232.965932][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  233.023162][ T5876] usb 5-1: Product: syz
[  233.033171][ T5876] usb 5-1: Manufacturer: syz
[  233.094562][ T5876] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  233.921606][  T792] usb 5-1: USB disconnect, device number 11
[  234.217746][ T7846] fuse: Bad value for 'fd'
[  235.001454][ T7859] sctp: [Deprecated]: syz.2.520 (pid 7859) Use of int in maxseg socket option.
[  235.001454][ T7859] Use struct sctp_assoc_value instead
[  235.181868][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'.
[  235.421088][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'.
[  236.343637][ T7876] syzkaller0: entered promiscuous mode
[  236.349171][ T7876] syzkaller0: entered allmulticast mode
[  236.668618][ T7884] overlayfs: unescaped trailing colons in lowerdir mount option.
[  237.609762][ T7898] netlink: 64 bytes leftover after parsing attributes in process `syz.0.529'.
[  238.187294][ T7909] fuse: Bad value for 'fd'
[  238.939256][ T7919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7919 comm=syz.3.535
[  241.036915][ T7944] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  241.042762][  T792] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  241.352915][  T792] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  241.361570][  T792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  241.371705][  T792] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  241.382215][  T792] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  241.919972][  T792] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  241.930218][  T792] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  241.958762][  T792] usb 5-1: Product: syz
[  241.963026][  T792] usb 5-1: Manufacturer: syz
[  241.974043][  T792] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  242.213789][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  242.213807][   T29] audit: type=1326 audit(1771595888.043:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.1.540" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb1159c629 code=0x0
[  242.358615][   T50] usb 5-1: USB disconnect, device number 12
[  242.633237][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'.
[  242.772777][   T29] audit: type=1326 audit(1771595888.083:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  242.887615][ T7963] new mount options do not match the existing superblock, will be ignored
[  243.512791][   T29] audit: type=1326 audit(1771595888.083:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  243.587343][   T29] audit: type=1326 audit(1771595888.083:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  243.638219][   T29] audit: type=1326 audit(1771595888.083:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  243.646226][ T7966] xt_limit: Overflow, try lower: 2147483649/3300
[  243.722265][   T29] audit: type=1326 audit(1771595888.083:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  243.931144][   T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  243.941745][   T29] audit: type=1326 audit(1771595888.083:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  243.966864][   T29] audit: type=1326 audit(1771595888.083:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  243.969900][ T7970] sit0: entered promiscuous mode
[  243.991036][   T29] audit: type=1326 audit(1771595888.083:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  244.030395][ T7970] netlink: 'syz.3.546': attribute type 1 has an invalid length.
[  244.032508][   T29] audit: type=1326 audit(1771595888.083:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  244.048681][ T7970] netlink: 1 bytes leftover after parsing attributes in process `syz.3.546'.
[  244.237985][    T9] libceph: connect (1)[c::]:6789 error -101
[  244.244820][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  244.395124][ T7975] ceph: No mds server is up or the cluster is laggy
[  245.663410][ T7996] sctp: [Deprecated]: syz.0.552 (pid 7996) Use of int in maxseg socket option.
[  245.663410][ T7996] Use struct sctp_assoc_value instead
[  245.833784][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'.
[  245.843559][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'.
[  245.853035][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'.
[  245.862024][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'.
[  245.870965][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'.
[  246.177320][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'.
[  247.683831][ T8016] overlayfs: failed to clone upperpath
[  248.860880][ T8044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.573443][ T8050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.668447][   T29] kauditd_printk_skb: 32 callbacks suppressed
[  249.668465][   T29] audit: type=1326 audit(1771595895.463:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  249.811268][   T29] audit: type=1326 audit(1771595895.463:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  249.835598][   T29] audit: type=1326 audit(1771595895.463:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  249.882754][   T29] audit: type=1326 audit(1771595895.503:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  249.973445][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'.
[  250.342076][   T29] audit: type=1326 audit(1771595895.503:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  250.366023][   T29] audit: type=1326 audit(1771595895.543:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  250.394966][   T29] audit: type=1326 audit(1771595895.543:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  250.422995][   T29] audit: type=1326 audit(1771595895.543:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  250.458161][   T29] audit: type=1326 audit(1771595895.543:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  250.488043][   T29] audit: type=1326 audit(1771595895.643:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8051 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  250.852385][ T5883] libceph: connect (1)[c::]:6789 error -101
[  250.862003][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  250.958950][ T8069] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.572'.
[  251.423028][ T5883] libceph: connect (1)[c::]:6789 error -101
[  251.429214][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  251.442936][ T8063] ceph: No mds server is up or the cluster is laggy
[  251.594981][ T8074] fuse: Bad value for 'fd'
[  252.892803][   T12] wlan1: Trigger new scan to find an IBSS to join
[  253.309370][ T8093] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.576'.
[  254.327874][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'.
[  255.379501][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  255.379519][   T29] audit: type=1326 audit(1771595901.133:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  255.460112][   T29] audit: type=1326 audit(1771595901.133:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  255.535171][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.541469][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  255.548587][ T5869] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  255.576344][ T5869] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[  255.606843][ T5869] usb 4-1: USB disconnect, device number 7
[  255.716422][ T8107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.916900][ T8109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.733565][   T12] wlan1: Trigger new scan to find an IBSS to join
[  256.743758][ T8120] FAULT_INJECTION: forcing a failure.
[  256.743758][ T8120] name failslab, interval 1, probability 0, space 0, times 0
[  256.756403][ T8120] CPU: 1 UID: 0 PID: 8120 Comm: syz.4.583 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  256.756423][ T8120] Tainted: [L]=SOFTLOCKUP
[  256.756427][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  256.756445][ T8120] Call Trace:
[  256.756450][ T8120]  <TASK>
[  256.756457][ T8120]  dump_stack_lvl+0x100/0x190
[  256.756481][ T8120]  should_fail_ex.cold+0x5/0xa
[  256.756497][ T8120]  ? tomoyo_realpath_from_path+0xb6/0x690
[  256.756512][ T8120]  should_failslab+0xc2/0x120
[  256.756530][ T8120]  __kmalloc_noprof+0xe0/0x850
[  256.756549][ T8120]  tomoyo_realpath_from_path+0xb6/0x690
[  256.756567][ T8120]  tomoyo_path_number_perm+0x23c/0x580
[  256.756585][ T8120]  ? tomoyo_path_number_perm+0x22e/0x580
[  256.756605][ T8120]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  256.756639][ T8120]  ? find_held_lock+0x2b/0x80
[  256.756653][ T8120]  ? __fget_files+0x215/0x3d0
[  256.756663][ T8120]  ? hook_file_ioctl_common+0x146/0x410
[  256.756683][ T8120]  ? __fget_files+0x21f/0x3d0
[  256.756696][ T8120]  security_file_ioctl+0xd3/0x230
[  256.756714][ T8120]  __x64_sys_ioctl+0xb7/0x210
[  256.756732][ T8120]  do_syscall_64+0x106/0xf80
[  256.756744][ T8120]  ? clear_bhb_loop+0x40/0x90
[  256.756759][ T8120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.756771][ T8120] RIP: 0033:0x7f0f4959c629
[  256.756782][ T8120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.756793][ T8120] RSP: 002b:00007f0f4a385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  256.756805][ T8120] RAX: ffffffffffffffda RBX: 00007f0f49816180 RCX: 00007f0f4959c629
[  256.756812][ T8120] RDX: 000000000000000a RSI: 0000000000005607 RDI: 0000000000000005
[  256.756819][ T8120] RBP: 00007f0f4a385090 R08: 0000000000000000 R09: 0000000000000000
[  256.756826][ T8120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.756833][ T8120] R13: 00007f0f49816218 R14: 00007f0f49816180 R15: 00007ffe438ea268
[  256.756848][ T8120]  </TASK>
[  256.756854][ T8120] ERROR: Out of memory at tomoyo_realpath_from_path.
[  257.591230][ T8131] fuse: Bad value for 'fd'
[  258.464541][   T29] audit: type=1400 audit(1771595904.303:687): avc:  denied  { accept } for  pid=8142 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  258.904720][ T1115] wlan1: Creating new IBSS network, BSSID ee:b9:0f:6f:21:55
[  259.092411][ T8162] 9p: Bad value for 'wfdno'
[  260.403213][   T29] audit: type=1400 audit(1771595906.243:688): avc:  denied  { write } for  pid=8167 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  261.494062][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'.
[  261.663530][ T8180] kthread_run failed with err -4
[  261.872752][   T50] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  262.113405][   T50] usb 5-1: Using ep0 maxpacket: 8
[  262.955738][   T50] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  263.012952][   T50] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  263.082336][   T50] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  263.130399][   T50] usb 5-1: config 250 has no interface number 0
[  263.163143][   T50] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  263.229277][   T50] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  263.285977][   T50] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  263.343930][   T50] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  263.415606][   T50] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  263.436456][   T50] usb 5-1: config 250 interface 228 has no altsetting 0
[  263.447988][   T50] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  263.459946][   T50] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  263.472731][   T50] usb 5-1: Product: syz
[  263.484401][   T50] usb 5-1: SerialNumber: syz
[  263.572883][   T50] hub 5-1:250.228: bad descriptor, ignoring hub
[  263.579620][   T50] hub 5-1:250.228: probe with driver hub failed with error -5
[  263.764895][   T50] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  264.000647][   T29] audit: type=1400 audit(1771595909.833:689): avc:  denied  { read write } for  pid=8175 comm="syz.4.600" name="lp0" dev="devtmpfs" ino=2886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  264.076893][   T29] audit: type=1400 audit(1771595909.833:690): avc:  denied  { open } for  pid=8175 comm="syz.4.600" path="/dev/usb/lp0" dev="devtmpfs" ino=2886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  264.148256][   T29] audit: type=1400 audit(1771595909.943:691): avc:  denied  { setopt } for  pid=8175 comm="syz.4.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  264.170292][   T50] usb 5-1: USB disconnect, device number 13
[  264.187849][   T50] usblp0: removed
[  264.421975][ T8215] fuse: Bad value for 'fd'
[  267.662752][ T5883] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  268.097774][ T8272] ptrace attach of "./syz-executor exec"[5803] was attempted by ""[8272]
[  268.464313][ T5883] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  268.531637][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  268.622694][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  268.692744][ T5883] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  268.751087][ T5883] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  268.790798][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  268.892733][ T5883] usb 5-1: Product: syz
[  268.896924][ T5883] usb 5-1: Manufacturer: syz
[  268.982781][ T5883] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  269.266679][ T5883] usb 5-1: USB disconnect, device number 14
[  269.488723][ T8283] kAFS: unable to lookup cell '�'
[  269.538740][ T8283] kAFS: unable to lookup cell '(,c��'
[  269.662033][ T8290] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.623'.
[  270.522919][ T8291] batadv_slave_0: entered promiscuous mode
[  270.551475][ T8291] batadv_slave_0: left promiscuous mode
[  270.685378][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.929788][ T8305] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.628'.
[  271.340092][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.359252][   T29] audit: type=1326 audit(1771595917.173:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  271.483531][   T29] audit: type=1326 audit(1771595917.173:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  271.578713][   T29] audit: type=1326 audit(1771595917.173:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  271.678131][   T29] audit: type=1326 audit(1771595917.173:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  271.779416][   T29] audit: type=1326 audit(1771595917.173:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  271.876730][   T29] audit: type=1326 audit(1771595917.173:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  272.028555][   T29] audit: type=1326 audit(1771595917.173:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  272.110227][   T29] audit: type=1326 audit(1771595917.173:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  272.213552][   T29] audit: type=1326 audit(1771595917.173:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  272.304371][   T29] audit: type=1326 audit(1771595917.173:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  272.614300][ T8310] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.630'.
[  274.494660][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'.
[  274.853564][ T8340] batman_adv: batadv0: Adding interface: gretap1
[  274.867632][ T8340] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.978699][ T8340] batman_adv: batadv0: Interface activated: gretap1
[  275.340598][ T8353] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.641'.
[  275.350123][ T8353] netlink: Unknown conntrack attr (0)
[  275.511217][ T8355] 9p: Bad value for 'wfdno'
[  276.392635][   T29] kauditd_printk_skb: 70 callbacks suppressed
[  276.420160][   T29] audit: type=1400 audit(1771595922.223:772): avc:  denied  { bind } for  pid=8363 comm="syz.3.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  276.592779][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'.
[  276.681663][   T29] audit: type=1400 audit(1771595922.253:773): avc:  denied  { setopt } for  pid=8363 comm="syz.3.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  277.177078][ T8383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.372331][ T8394] delete_channel: no stack
[  278.378015][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'.
[  278.378913][   T29] audit: type=1400 audit(1771595924.203:774): avc:  denied  { bind } for  pid=8394 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  278.490064][   T29] audit: type=1400 audit(1771595924.323:775): avc:  denied  { bind } for  pid=8375 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  278.832927][   T29] audit: type=1400 audit(1771595924.663:776): avc:  denied  { connect } for  pid=8399 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  279.260413][   T29] audit: type=1400 audit(1771595924.673:777): avc:  denied  { read } for  pid=8399 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  280.078724][ T8428] sctp: [Deprecated]: syz.1.657 (pid 8428) Use of int in maxseg socket option.
[  280.078724][ T8428] Use struct sctp_assoc_value instead
[  280.331753][ T8430] netlink: 60 bytes leftover after parsing attributes in process `syz.4.659'.
[  281.219746][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'.
[  281.908096][   T29] audit: type=1400 audit(1771595927.733:778): avc:  denied  { write } for  pid=8438 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  282.190452][ T8444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8444 comm=syz.4.662
[  282.335001][ T8447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.393451][ T8447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.223210][   T29] audit: type=1400 audit(1771595929.063:779): avc:  denied  { write } for  pid=8466 comm="syz.4.668" lport=50918 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  283.776823][ T8482] fuse: Bad value for 'fd'
[  283.855467][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'.
[  284.023734][ T8493] netlink: 'syz.3.677': attribute type 21 has an invalid length.
[  284.049394][ T8493] netlink: 128 bytes leftover after parsing attributes in process `syz.3.677'.
[  284.087808][ T8496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8496 comm=syz.3.677
[  284.100395][ T8493] netlink: 'syz.3.677': attribute type 4 has an invalid length.
[  284.124047][ T8493] netlink: 'syz.3.677': attribute type 5 has an invalid length.
[  284.154952][ T8493] netlink: 3 bytes leftover after parsing attributes in process `syz.3.677'.
[  284.538701][ T8505] fuse: Bad value for 'fd'
[  284.722787][   T29] audit: type=1400 audit(1771595930.543:780): avc:  denied  { getopt } for  pid=8506 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  285.754346][ T8520] fuse: Bad value for 'fd'
[  285.860620][ T8521] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.685'.
[  286.660743][ T5884] libceph: connect (1)[c::]:6789 error -101
[  286.667036][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  286.762550][ T8526] ceph: No mds server is up or the cluster is laggy
[  287.170847][ T8557] 9p: Bad value for 'wfdno'
[  287.351849][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'.
[  288.432123][   T29] audit: type=1326 audit(1771595934.263:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.2.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7fc00000
[  288.552896][   T29] audit: type=1326 audit(1771595934.363:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  288.749528][   T29] audit: type=1326 audit(1771595934.363:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  288.835654][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'.
[  289.216762][ T1115] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  289.286292][   T29] audit: type=1326 audit(1771595934.363:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  289.461897][   T29] audit: type=1326 audit(1771595934.363:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  289.521177][   T29] audit: type=1326 audit(1771595934.363:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  289.570873][   T29] audit: type=1326 audit(1771595934.363:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  289.639790][   T29] audit: type=1326 audit(1771595934.403:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  289.670304][   T29] audit: type=1326 audit(1771595934.403:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  289.706763][   T29] audit: type=1326 audit(1771595934.413:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8574 comm="syz.3.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcafd9c629 code=0x7ffc0000
[  290.788363][ T8630] 9p: Bad value for 'wfdno'
[  291.624768][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.723'.
[  291.729534][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'.
[  292.534013][ T8667] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  292.662797][ T1025] wlan1: Trigger new scan to find an IBSS to join
[  293.754710][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  293.754722][   T29] audit: type=1400 audit(1771595939.593:804): avc:  denied  { ioctl } for  pid=8683 comm="syz.0.733" path="socket:[22167]" dev="sockfs" ino=22167 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  294.125709][ T8707] netlink: 80 bytes leftover after parsing attributes in process `syz.0.738'.
[  294.134628][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'.
[  294.144269][ T8707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.738'.
[  294.162370][ T8707] openvswitch: netlink: Message has 592 unknown bytes.
[  294.172517][ T8707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.182334][ T8707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=8707 comm=syz.0.738
[  294.258946][ T8711] fuse: Bad value for 'fd'
[  297.017829][ T1163] wlan1: Trigger new scan to find an IBSS to join
[  297.418529][   T24] libceph: connect (1)[c::]:6789 error -101
[  297.424714][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  297.694885][   T24] libceph: connect (1)[c::]:6789 error -101
[  297.704844][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  297.991560][ T8737] ceph: No mds server is up or the cluster is laggy
[  298.155341][ T1025] wlan1: Creating new IBSS network, BSSID 1a:ab:aa:48:f5:0a
[  298.519156][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'.
[  299.906505][   T29] audit: type=1400 audit(1771595945.743:805): avc:  denied  { ioctl } for  pid=8785 comm="syz.3.760" path="socket:[21504]" dev="sockfs" ino=21504 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  299.993348][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'.
[  300.323429][ T8808] netlink: 64 bytes leftover after parsing attributes in process `syz.3.765'.
[  300.600831][   T29] audit: type=1400 audit(1771595946.433:806): avc:  denied  { write } for  pid=8814 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  300.601862][ T8816] sock: sock_set_timeout: `syz.0.767' (pid 8816) tries to set negative timeout
[  301.437191][ T8818] ceph: No mds server is up or the cluster is laggy
[  302.037797][ T8843] netlink: 'syz.0.772': attribute type 83 has an invalid length.
[  302.147976][ T8850] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  302.854931][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'.
[  304.913852][   T29] audit: type=1326 audit(1771595950.583:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  304.962764][   T29] audit: type=1326 audit(1771595950.583:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  305.017676][   T29] audit: type=1326 audit(1771595950.583:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  305.213959][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'.
[  305.632743][   T29] audit: type=1326 audit(1771595950.593:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  305.743293][   T29] audit: type=1326 audit(1771595950.593:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  305.832945][   T29] audit: type=1326 audit(1771595950.593:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  305.893420][   T29] audit: type=1326 audit(1771595950.653:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  305.971836][   T29] audit: type=1326 audit(1771595950.653:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  306.052545][   T29] audit: type=1326 audit(1771595950.663:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  306.100377][ T8906] 9p: Bad value for 'wfdno'
[  306.137749][ T8907] openvswitch: netlink: Flow actions attr not present in new flow.
[  306.186873][   T29] audit: type=1326 audit(1771595950.663:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.0.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  306.277265][ T8903] netlink: 92 bytes leftover after parsing attributes in process `syz.2.783'.
[  306.416149][ T8912] overlayfs: failed to clone upperpath
[  308.084401][ T8945] overlayfs: failed to clone upperpath
[  308.846355][ T8965] IPVS: Unknown mcast interface: bri�ge_slave_
[  309.314149][ T5807] Bluetooth: hci4: unexpected event for opcode 0x0c38
[  309.668838][ T8987] netlink: 80 bytes leftover after parsing attributes in process `syz.0.812'.
[  310.370105][ T8998] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  310.379905][ T8999] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  310.733471][ T1025] wlan1: Trigger new scan to find an IBSS to join
[  310.846131][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  310.846148][   T29] audit: type=1400 audit(1771595956.683:828): avc:  denied  { accept } for  pid=9015 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  311.323181][ T9029] overlayfs: failed to clone upperpath
[  312.120169][   T29] audit: type=1400 audit(1771595957.953:829): avc:  denied  { execute } for  pid=9048 comm="syz.4.831" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  312.403712][ T9050] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  312.410721][ T9050] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  312.863398][ T9042] mmap: syz.2.825 (9042) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  313.056291][ T9063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  313.147501][ T9066] fuse: Bad value for 'fd'
[  313.306647][   T29] audit: type=1400 audit(1771595959.143:830): avc:  denied  { watch_mount } for  pid=9071 comm="syz.4.836" path="/149" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  313.458783][   T29] audit: type=1400 audit(1771595959.293:831): avc:  denied  { map } for  pid=9077 comm="syz.4.837" path="socket:[23693]" dev="sockfs" ino=23693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  313.583086][   T29] audit: type=1400 audit(1771595959.293:832): avc:  denied  { read accept } for  pid=9077 comm="syz.4.837" path="socket:[23693]" dev="sockfs" ino=23693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  315.692848][   T35] wlan1: Trigger new scan to find an IBSS to join
[  315.733677][ T9107] overlayfs: failed to clone upperpath
[  316.036112][ T9112] 9p: Bad value for 'wfdno'
[  316.985745][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  316.994286][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  317.631798][ T9121] fuse: Bad value for 'fd'
[  318.727523][ T1115] wlan1: Creating new IBSS network, BSSID 3a:87:75:3d:18:f5
[  319.200444][ T9141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.218051][ T9138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.631851][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.863'.
[  323.695607][ T9184] overlayfs: failed to clone upperpath
[  323.715313][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'.
[  323.758249][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.863'.
[  323.802224][   T29] audit: type=1400 audit(1771595969.633:833): avc:  denied  { read } for  pid=9183 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  323.979730][   T29] audit: type=1400 audit(1771595969.633:834): avc:  denied  { ioctl } for  pid=9182 comm="syz.4.863" path="socket:[23811]" dev="sockfs" ino=23811 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  325.549519][ T9210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.034574][   T29] audit: type=1326 audit(1771595971.873:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  326.225927][   T29] audit: type=1326 audit(1771595971.873:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  326.249639][   T29] audit: type=1326 audit(1771595971.893:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  326.311914][   T29] audit: type=1326 audit(1771595971.893:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  326.435243][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'.
[  326.447831][   T29] audit: type=1326 audit(1771595971.893:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  326.551390][   T29] audit: type=1326 audit(1771595971.893:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  326.660950][   T29] audit: type=1326 audit(1771595971.933:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  326.779460][   T29] audit: type=1326 audit(1771595971.933:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ee19c629 code=0x7ffc0000
[  328.296339][ T1163] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  329.140841][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'.
[  329.171765][ T9244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.879'.
[  329.788653][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  329.788670][   T29] audit: type=1400 audit(1771595975.623:856): avc:  denied  { setopt } for  pid=9255 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  329.850599][   T29] audit: type=1400 audit(1771595975.663:857): avc:  denied  { getopt } for  pid=9255 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  330.445382][ T9266] netlink: 'syz.4.882': attribute type 11 has an invalid length.
[  330.759059][ T9271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.889779][ T9272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.291361][ T9276] 9p: Bad value for 'wfdno'
[  332.241192][ T9286] overlayfs: failed to clone lowerpath
[  332.256532][   T29] audit: type=1400 audit(1771595978.073:858): avc:  denied  { mount } for  pid=9285 comm="syz.0.887" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  332.452197][ T9289] netlink: zone id is out of range
[  332.472019][ T9289] netlink: zone id is out of range
[  332.492282][ T9289] netlink: zone id is out of range
[  332.498588][ T9289] netlink: zone id is out of range
[  332.504761][ T9289] netlink: zone id is out of range
[  332.509990][ T9289] netlink: zone id is out of range
[  332.526206][ T9289] netlink: zone id is out of range
[  332.532374][ T9289] netlink: zone id is out of range
[  332.539637][ T9289] netlink: zone id is out of range
[  332.546928][ T9289] netlink: zone id is out of range
[  332.560714][ T9286] batman_adv: batadv0: Adding interface: macvtap1
[  332.596355][ T9286] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  332.629015][ T9286] batman_adv: batadv0: Interface activated: macvtap1
[  333.202875][   T29] audit: type=1326 audit(1771595979.043:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9301 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  333.302454][ T9299] "syz.3.891" (9299) uses obsolete ecb(arc4) skcipher
[  333.325874][   T29] audit: type=1326 audit(1771595979.043:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9301 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  333.370283][   T29] audit: type=1326 audit(1771595979.063:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9301 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  333.544069][   T29] audit: type=1326 audit(1771595979.073:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9301 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  333.624849][   T29] audit: type=1326 audit(1771595979.073:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9301 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  333.699608][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'.
[  333.771058][   T29] audit: type=1326 audit(1771595979.073:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9301 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  333.832748][   T29] audit: type=1326 audit(1771595979.103:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9301 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ebf9c629 code=0x7ffc0000
[  333.891916][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  333.902590][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  333.918888][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  333.955914][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  333.992997][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  334.562463][ T9322] ==================================================================
[  334.570599][ T9322] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x105/0x130
[  334.579280][ T9322] Read of size 8 at addr ffff888022285240 by task syz.4.897/9322
[  334.586990][ T9322] 
[  334.589311][ T9322] CPU: 0 UID: 0 PID: 9322 Comm: syz.4.897 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  334.589345][ T9322] Tainted: [L]=SOFTLOCKUP
[  334.589353][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  334.589368][ T9322] Call Trace:
[  334.589377][ T9322]  <TASK>
[  334.589387][ T9322]  dump_stack_lvl+0x100/0x190
[  334.589426][ T9322]  print_report+0x156/0x4c9
[  334.589459][ T9322]  ? __virt_addr_valid+0x81/0x620
[  334.589490][ T9322]  ? __phys_addr+0xe8/0x180
[  334.589523][ T9322]  ? __list_add_valid_or_report+0x105/0x130
[  334.589549][ T9322]  kasan_report+0xdf/0x1e0
[  334.589585][ T9322]  ? __list_add_valid_or_report+0x105/0x130
[  334.589615][ T9322]  __list_add_valid_or_report+0x105/0x130
[  334.589641][ T9322]  clone_mnt+0x633/0x930
[  334.589676][ T9322]  copy_tree+0xfc/0xbf0
[  334.589698][ T9322]  ? __pfx_down_write+0x10/0x10
[  334.589729][ T9322]  copy_mnt_ns+0x2bd/0xc30
[  334.589755][ T9322]  ? create_new_namespaces+0x30/0xac0
[  334.589786][ T9322]  ? rcu_is_watching+0x12/0xc0
[  334.589815][ T9322]  create_new_namespaces+0xd3/0xac0
[  334.589844][ T9322]  ? bpf_lsm_capable+0x9/0x10
[  334.589865][ T9322]  ? security_capable+0x80/0x260
[  334.589906][ T9322]  copy_namespaces+0x468/0x5e0
[  334.589937][ T9322]  copy_process+0x3226/0x7a10
[  334.589978][ T9322]  ? __pfx_copy_process+0x10/0x10
[  334.590009][ T9322]  ? find_held_lock+0x2b/0x80
[  334.590044][ T9322]  kernel_clone+0xfc/0x9a0
[  334.590072][ T9322]  ? __pfx_futex_wait+0x10/0x10
[  334.590100][ T9322]  ? __pfx_kernel_clone+0x10/0x10
[  334.590138][ T9322]  ? 0xffffffffff600000
[  334.590155][ T9322]  __do_sys_clone+0xd9/0x120
[  334.590186][ T9322]  ? __pfx___do_sys_clone+0x10/0x10
[  334.590219][ T9322]  ? 0xffffffffff600000
[  334.590244][ T9322]  do_syscall_64+0x106/0xf80
[  334.590267][ T9322]  ? clear_bhb_loop+0x40/0x90
[  334.590293][ T9322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.590317][ T9322] RIP: 0033:0x7f0f4959c629
[  334.590334][ T9322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.590357][ T9322] RSP: 002b:00007f0f4a3a5fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[  334.590379][ T9322] RAX: ffffffffffffffda RBX: 00007f0f49816090 RCX: 00007f0f4959c629
[  334.590395][ T9322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c9a4080
[  334.590409][ T9322] RBP: 00007f0f49632b39 R08: ffffffffff600000 R09: ffffffffff600000
[  334.590425][ T9322] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  334.590440][ T9322] R13: 00007f0f49816128 R14: 00007f0f49816090 R15: 00007ffe438ea268
[  334.590458][ T9322]  ? 0xffffffffff600000
[  334.590474][ T9322]  ? 0xffffffffff600000
[  334.590493][ T9322]  </TASK>
[  334.590501][ T9322] 
[  334.856298][ T9322] Allocated by task 9233:
[  334.860619][ T9322]  kasan_save_stack+0x30/0x50
[  334.865300][ T9322]  kasan_save_track+0x14/0x30
[  334.869978][ T9322]  __kasan_slab_alloc+0x89/0x90
[  334.874830][ T9322]  kmem_cache_alloc_noprof+0x241/0x6e0
[  334.880292][ T9322]  alloc_vfsmnt+0x23/0x6a0
[  334.884705][ T9322]  clone_mnt+0x4b/0x930
[  334.888861][ T9322]  vfs_open_tree+0xb02/0x1500
[  334.893532][ T9322]  __x64_sys_open_tree+0xa3/0x150
[  334.898553][ T9322]  do_syscall_64+0x106/0xf80
[  334.903133][ T9322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.909020][ T9322] 
[  334.911327][ T9322] Freed by task 9234:
[  334.915294][ T9322]  kasan_save_stack+0x30/0x50
[  334.919980][ T9322]  kasan_save_track+0x14/0x30
[  334.924657][ T9322]  kasan_save_free_info+0x3b/0x70
[  334.929676][ T9322]  __kasan_slab_free+0x5f/0x80
[  334.934440][ T9322]  kmem_cache_free+0x124/0x6a0
[  334.939197][ T9322]  rcu_core+0x5a2/0x10d0
[  334.943427][ T9322]  handle_softirqs+0x1eb/0x9e0
[  334.948184][ T9322]  __irq_exit_rcu+0xef/0x150
[  334.952771][ T9322]  irq_exit_rcu+0x9/0x30
[  334.957009][ T9322]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  334.962658][ T9322]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  334.968626][ T9322] 
[  334.970947][ T9322] Last potentially related work creation:
[  334.976645][ T9322]  kasan_save_stack+0x30/0x50
[  334.981321][ T9322]  kasan_record_aux_stack+0xa7/0xc0
[  334.986511][ T9322]  __call_rcu_common.constprop.0+0xa5/0x9b0
[  334.992409][ T9322]  task_work_run+0x150/0x240
[  334.996991][ T9322]  exit_to_user_mode_loop+0x100/0x4a0
[  335.002370][ T9322]  do_syscall_64+0x67c/0xf80
[  335.006951][ T9322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.012840][ T9322] 
[  335.015155][ T9322] Second to last potentially related work creation:
[  335.021718][ T9322]  kasan_save_stack+0x30/0x50
[  335.026401][ T9322]  kasan_record_aux_stack+0xa7/0xc0
[  335.031594][ T9322]  task_work_add+0x28b/0x3b0
[  335.036173][ T9322]  mntput_no_expire_slowpath+0x3da/0xb00
[  335.041809][ T9322]  mntput_no_expire+0x1fd/0x220
[  335.046667][ T9322]  mntput+0x6b/0xa0
[  335.050476][ T9322]  vfs_open_tree+0x1235/0x1500
[  335.055232][ T9322]  __x64_sys_open_tree+0xa3/0x150
[  335.060262][ T9322]  do_syscall_64+0x106/0xf80
[  335.064848][ T9322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.070737][ T9322] 
[  335.073054][ T9322] The buggy address belongs to the object at ffff888022285180
[  335.073054][ T9322]  which belongs to the cache mnt_cache of size 352
[  335.086930][ T9322] The buggy address is located 192 bytes inside of
[  335.086930][ T9322]  freed 352-byte region [ffff888022285180, ffff8880222852e0)
[  335.100726][ T9322] 
[  335.103036][ T9322] The buggy address belongs to the physical page:
[  335.109444][ T9322] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022284fc0 pfn:0x22284
[  335.119508][ T9322] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  335.127997][ T9322] memcg:ffff8880794c3901
[  335.132223][ T9322] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  335.140726][ T9322] page_type: f5(slab)
[  335.144701][ T9322] raw: 00fff00000000240 ffff888140416140 ffffea000072a090 ffffea000086db10
[  335.153284][ T9322] raw: ffff888022284fc0 000000080012000c 00000000f5000000 ffff8880794c3901
[  335.161868][ T9322] head: 00fff00000000240 ffff888140416140 ffffea000072a090 ffffea000086db10
[  335.170536][ T9322] head: ffff888022284fc0 000000080012000c 00000000f5000000 ffff8880794c3901
[  335.179208][ T9322] head: 00fff00000000001 ffffea000088a101 00000000ffffffff 00000000ffffffff
[  335.187873][ T9322] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  335.196525][ T9322] page dumped because: kasan: bad access detected
[  335.202930][ T9322] page_owner tracks the page as allocated
[  335.208624][ T9322] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5811, tgid 5811 (syz-executor), ts 69475253831, free_ts 69467526785
[  335.229984][ T9322]  post_alloc_hook+0x153/0x170
[  335.234753][ T9322]  get_page_from_freelist+0x111d/0x3140
[  335.240296][ T9322]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[  335.246187][ T9322]  new_slab+0xa6/0x6d0
[  335.250240][ T9322]  refill_objects+0x26b/0x400
[  335.254906][ T9322]  __pcs_replace_empty_main+0x19f/0x600
[  335.260446][ T9322]  kmem_cache_alloc_noprof+0x480/0x6e0
[  335.265901][ T9322]  alloc_vfsmnt+0x23/0x6a0
[  335.270309][ T9322]  clone_mnt+0x4b/0x930
[  335.274458][ T9322]  copy_tree+0x329/0xbf0
[  335.278687][ T9322]  __do_loopback+0x2fc/0x520
[  335.283262][ T9322]  path_mount+0x1967/0x23d0
[  335.287752][ T9322]  __x64_sys_mount+0x293/0x310
[  335.292504][ T9322]  do_syscall_64+0x106/0xf80
[  335.297105][ T9322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.302984][ T9322] page last free pid 5811 tgid 5811 stack trace:
[  335.309289][ T9322]  __free_frozen_pages+0x7e1/0x10d0
[  335.314475][ T9322]  qlist_free_all+0x47/0xe0
[  335.318968][ T9322]  kasan_quarantine_reduce+0x1a0/0x1f0
[  335.324424][ T9322]  __kasan_slab_alloc+0x69/0x90
[  335.329272][ T9322]  __kmalloc_noprof+0x2b9/0x850
[  335.334114][ T9322]  tomoyo_supervisor+0x65d/0x1340
[  335.339133][ T9322]  tomoyo_path_number_perm+0x445/0x580
[  335.344593][ T9322]  tomoyo_path_mkdir+0x9b/0xe0
[  335.349348][ T9322]  security_path_mkdir+0x154/0x2e0
[  335.354449][ T9322]  filename_mkdirat+0x168/0x5e0
[  335.359287][ T9322]  __x64_sys_mkdirat+0x89/0xc0
[  335.364039][ T9322]  do_syscall_64+0x106/0xf80
[  335.368619][ T9322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.374498][ T9322] 
[  335.376803][ T9322] Memory state around the buggy address:
[  335.382415][ T9322]  ffff888022285100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  335.390460][ T9322]  ffff888022285180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  335.398504][ T9322] >ffff888022285200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  335.406544][ T9322]                                            ^
[  335.412676][ T9322]  ffff888022285280: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  335.420734][ T9322]  ffff888022285300: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  335.428777][ T9322] ==================================================================
[  335.532710][ T9322] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  335.539935][ T9322] CPU: 0 UID: 0 PID: 9322 Comm: syz.4.897 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  335.550700][ T9322] Tainted: [L]=SOFTLOCKUP
[  335.555011][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  335.565059][ T9322] Call Trace:
[  335.568330][ T9322]  <TASK>
[  335.571251][ T9322]  dump_stack_lvl+0x100/0x190
[  335.575938][ T9322]  vpanic+0x552/0x970
[  335.579915][ T9322]  ? __pfx_vpanic+0x10/0x10
[  335.584417][ T9322]  ? __list_add_valid_or_report+0x105/0x130
[  335.590306][ T9322]  panic+0xd1/0xe0
[  335.594023][ T9322]  ? __pfx_panic+0x10/0x10
[  335.598437][ T9322]  ? __list_add_valid_or_report+0x105/0x130
[  335.604334][ T9322]  ? preempt_schedule_common+0x42/0xc0
[  335.609807][ T9322]  check_panic_on_warn.cold+0x19/0x34
[  335.615180][ T9322]  end_report.part.0+0x3a/0x90
[  335.619948][ T9322]  kasan_report.cold+0xe/0x18
[  335.624633][ T9322]  ? __list_add_valid_or_report+0x105/0x130
[  335.630533][ T9322]  __list_add_valid_or_report+0x105/0x130
[  335.636254][ T9322]  clone_mnt+0x633/0x930
[  335.640504][ T9322]  copy_tree+0xfc/0xbf0
[  335.644654][ T9322]  ? __pfx_down_write+0x10/0x10
[  335.649510][ T9322]  copy_mnt_ns+0x2bd/0xc30
[  335.653926][ T9322]  ? create_new_namespaces+0x30/0xac0
[  335.659299][ T9322]  ? rcu_is_watching+0x12/0xc0
[  335.664065][ T9322]  create_new_namespaces+0xd3/0xac0
[  335.669268][ T9322]  ? bpf_lsm_capable+0x9/0x10
[  335.673937][ T9322]  ? security_capable+0x80/0x260
[  335.678887][ T9322]  copy_namespaces+0x468/0x5e0
[  335.683660][ T9322]  copy_process+0x3226/0x7a10
[  335.688348][ T9322]  ? __pfx_copy_process+0x10/0x10
[  335.693377][ T9322]  ? find_held_lock+0x2b/0x80
[  335.698066][ T9322]  kernel_clone+0xfc/0x9a0
[  335.702488][ T9322]  ? __pfx_futex_wait+0x10/0x10
[  335.707345][ T9322]  ? __pfx_kernel_clone+0x10/0x10
[  335.712382][ T9322]  ? 0xffffffffff600000
[  335.716525][ T9322]  __do_sys_clone+0xd9/0x120
[  335.721121][ T9322]  ? __pfx___do_sys_clone+0x10/0x10
[  335.726324][ T9322]  ? 0xffffffffff600000
[  335.730478][ T9322]  do_syscall_64+0x106/0xf80
[  335.735071][ T9322]  ? clear_bhb_loop+0x40/0x90
[  335.739749][ T9322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.745641][ T9322] RIP: 0033:0x7f0f4959c629
[  335.750048][ T9322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.769661][ T9322] RSP: 002b:00007f0f4a3a5fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[  335.778076][ T9322] RAX: ffffffffffffffda RBX: 00007f0f49816090 RCX: 00007f0f4959c629
[  335.786044][ T9322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c9a4080
[  335.794015][ T9322] RBP: 00007f0f49632b39 R08: ffffffffff600000 R09: ffffffffff600000
[  335.801983][ T9322] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  335.809948][ T9322] R13: 00007f0f49816128 R14: 00007f0f49816090 R15: 00007ffe438ea268
[  335.817917][ T9322]  ? 0xffffffffff600000
[  335.822065][ T9322]  ? 0xffffffffff600000
[  335.826221][ T9322]  </TASK>
[  335.829527][ T9322] Kernel Offset: disabled
[  335.833834][ T9322] Rebooting in 86400 seconds..