last executing test programs:

11.742799781s ago: executing program 4 (id=2016):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11.607142967s ago: executing program 2 (id=2017):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup3(r0, r1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0b0200000023e88c4a683609870008000100000000000c00990001"], 0x33}}, 0x0)

10.66774434s ago: executing program 2 (id=2020):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2a, 0x4, @tid=r0}, &(0x7f0000bbdffc))
futex_waitv(&(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x1000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x3c, &(0x7f0000000200))
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
rseq(&(0x7f0000000480), 0x20, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000022000000000000000000000f01"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0)
r6 = dup(r4)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f0000000000)=0x3)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r7, 0xae9a)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

9.726092674s ago: executing program 1 (id=2024):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet(0x2b, 0x801, 0x0)
listen(r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x8ec0, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_eeprom})
socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_proto_private(r2, 0x8b0b, &(0x7f0000000080))
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x67f)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r7)
ioctl$EVIOCRMFF(r7, 0x4004550a, 0x0)

6.23501496s ago: executing program 2 (id=2029):
socket(0x10, 0x80002, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0xdc30)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000f00)=""/175)
sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x30, r6, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x2a6, 0x9}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1)
bpf$OBJ_GET_MAP(0x11, &(0x7f0000010f00)=@generic={&(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:De', 0x0)

6.232602637s ago: executing program 4 (id=2030):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@i}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$netlink(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

6.184223995s ago: executing program 1 (id=2031):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0)

5.437048555s ago: executing program 4 (id=2033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006806b677e7b423f66e1c7de468aec4e7217685104f2ef915dd1628cf2d5b6e9e53f6c49dc9a1cf5ccd6026c52d85d64a0a785c0ca7481"], 0x70}}, 0x0)

5.404439717s ago: executing program 1 (id=2034):
symlinkat(&(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
shutdown(r1, 0x0)
r3 = socket(0x840000000002, 0x3, 0x100)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)
connect$inet(r3, 0x0, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x30df5ae70c2bc9e7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

5.261631116s ago: executing program 0 (id=2035):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xfffffffd, 0x44000)
ioctl$SNDRV_PCM_IOCTL_RESUME(r2, 0x4147, 0x0)
r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedreceive(r3, &(0x7f0000000340)=""/221, 0xdd, 0x0, 0x0)
r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2)
r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0xfdef)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r7, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}]}, 0x34}}, 0x0)
mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0xd4)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000200)={[{@dyn}, {@flock_local}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

5.226541984s ago: executing program 4 (id=2036):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000c80)}, 0x8)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x3, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
ioctl$LOOP_SET_CAPACITY(r4, 0x4c07)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
socket$packet(0x11, 0x2, 0x300)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000f, 0x4008031, 0xffffffffffffffff, 0xffffd000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
flock(0xffffffffffffffff, 0x1f)

4.3445912s ago: executing program 0 (id=2037):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000080000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000024000103000001000000000001000000"], 0x14}}, 0x0)

4.260221008s ago: executing program 3 (id=2038):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe88, 0x30, 0x25, 0x0, 0x0, {}, [{0xe74, 0x1, [@m_pedit={0xe70, 0x1, 0x0, 0x0, {{0xa}, {0xe44, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x20, 0x5, 0x0, 0x1, [{0x4}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x0, 0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe88}}, 0x0)

3.869471606s ago: executing program 0 (id=2039):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="1c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)="a6", 0x1}], 0x1}}], 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8)

3.848493875s ago: executing program 1 (id=2040):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2a, 0x4, @tid=r0}, &(0x7f0000bbdffc))
futex_waitv(&(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x1000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x3c, &(0x7f0000000200))
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
rseq(&(0x7f0000000480), 0x20, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000022000000000000000000000f01"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0)
r6 = dup(r4)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f0000000000)=0x3)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r7, 0xae9a)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

3.17756881s ago: executing program 3 (id=2041):
r0 = syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x0, 0x4}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000800)=<r2=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

3.143581913s ago: executing program 0 (id=2042):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1010b3, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/101, 0x65}, {&(0x7f0000000380)=""/64, 0x40}, {&(0x7f0000000500)=""/49, 0x31}, {&(0x7f0000000540)=""/25, 0x19}, {0x0}, {&(0x7f0000000640)=""/31, 0x1f}, {0x0}, {&(0x7f0000000700)=""/78, 0x4e}, {&(0x7f0000000780)=""/36, 0x24}], 0x9, &(0x7f0000000840)=""/97, 0x61}, 0x14021)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8004)
setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f0000000000), 0x4)
sendmmsg$inet6(r3, &(0x7f0000005580)=[{{&(0x7f0000000080)={0xa, 0x4e03, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001180)=[{0x0}, {&(0x7f0000000c40)="ec7af6", 0x3}, {&(0x7f0000000ec0)}, {0x0}], 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="5cf0ff102900000004000000"], 0x1c}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4004880)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r5 = syz_open_pts(r4, 0x141201)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x3)
ioctl$TCFLSH(r4, 0x540b, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0x0, 0x88f7}, @void, @ipv4=@icmp={{0x5, 0x4, 0x1, 0xf, 0x30, 0x64, 0x0, 0x49, 0x1, 0x0, @broadcast, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x8, 0x7, 0x0, {0x5, 0x4, 0x2, 0x4, 0x8000, 0x65, 0x7071, 0x7, 0x16, 0x2e, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}}}}}, 0x34)

2.837370348s ago: executing program 2 (id=2043):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x400000000}}, 0x18)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0)
getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0)

2.076823521s ago: executing program 3 (id=2044):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000440), 0x1, 0x0)
write$binfmt_register(r0, 0x0, 0x0)

1.48785678s ago: executing program 2 (id=2045):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe000bb00, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'lo\x00'})
r4 = socket(0x10, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0)

1.41525877s ago: executing program 1 (id=2046):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00')
read(r1, &(0x7f0000001a00)=""/177, 0xb1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r1], 0x86)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRESDEC, @ANYRES32, @ANYBLOB="00000000000000000000000000003c69e7b2877c07ec8d00000000005b64ca9d0b8641593a1226743773ec1499fac5670e1b22c0e8722ed631f8fcdc661db31a6b79c1a4b0995a9a93a238ac9c8aca7e0386a4558f716d8311d9cc4923df6c6ce3be8de906d66b55062467e379994eb5ea1a49144513b920e44d6f9a5b5d447bfa456da04c385132453454ac97feb281523eaa197a899c3bc8a46ca3bd"], 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x1e4, 0x0, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x34}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x4}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x176, 0x7f, [@fast_bss_trans={0x37, 0x8f, {0x3, 0x2, "3463304cb4d6a88fad6a7ecde684d607", "055033203c65226dbb46754416dc2323e6ffa9edeff758275b077f7ae38d13ea", "5d2d06d8a8425c570969ae1915b31b478bf5dc329a8c88a3f06a3241fac67687", [{0x1, 0x14, "bd9094e83a0d7574de0fa3c32b9104a12c7b28ed"}, {0x2, 0x25, "c655177a7e9aa1d639ffcdf884c980eef8820ad38f3985e008f53338a42f50dc2198c636f5"}]}}, @tim={0x5, 0xac, {0xd, 0xff, 0x55, "b67c6284908f4662fc634ab37104015dc5e928412fa78b13a7ee3ad218fd8ef1f1c73bfd67f16dc53dc8d0f3926103008b4a208809fa43aabce2e3db23bf84b439fd463804ed7bfd2fc9451c2cf169a695f5a051d18cdada02af41b4aa73e6875f81f8d3d4cda91b81bda648b39f3aa6ee49c81e65fb91d6d96ee2067e7e39edc77aeab785eba01462ecc8664540e4e674c0c7f70ef345c5f49bbee97d082c47276497a168555d409f"}}, @preq={0x82, 0x25, {{0x1, 0x1}, 0x7f, 0x7, 0x10000, @broadcast, 0x83, @void, 0x3, 0x7fff, 0x1, [{{0x1}, @device_a, 0x400}]}}, @random_vendor={0xdd, 0xa, "7b01cdf539443a699f39"}]}]]}, 0x1e4}, 0x1, 0x0, 0x0, 0x90}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000002400)={0x8, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
socket$nl_route(0x10, 0x3, 0x0)

1.370227815s ago: executing program 3 (id=2047):
r0 = socket$inet(0x2b, 0x801, 0x0)
listen(r0, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec0, 0x0)

1.368832111s ago: executing program 0 (id=2048):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
read(r0, 0x0, 0x0)

1.164102436s ago: executing program 3 (id=2049):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10)
remap_file_pages(&(0x7f0000c77000/0x2000)=nil, 0x2000, 0x0, 0x4, 0x40000)

1.126498967s ago: executing program 4 (id=2050):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x3, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000280)=0x20, 0x4)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc, r2})
ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"])

1.084336232s ago: executing program 2 (id=2051):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000780)='<', 0x1, 0x40000, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="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", 0xc00}], 0x1}}], 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000b9a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000200)=0x40)

352.018677ms ago: executing program 4 (id=2052):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x7}, 0x0, [0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00')
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000200000000000000950000000000000059ebae0eb7f4c8803605e4b2f7dd3874131b74a180007dd8767d588c23cdb963042468289a8a1fbcd229fe662dfd71d03c1c797aba20c0f9fa155100437f8c1c41daa62210704ac661c1cf7ee90f2b8216ce954d702b"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
removexattr(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="89878347638e"])

252.155629ms ago: executing program 0 (id=2053):
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
dup(0xffffffffffffffff)
r4 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$inet(r4, 0x0, 0x240400c5)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
pipe2(&(0x7f0000000040), 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r5, 0x3)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
accept4(r5, 0x0, 0x0, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)

239.17831ms ago: executing program 1 (id=2054):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x4000000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0xf, 0x4)

0s ago: executing program 3 (id=2055):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xaf, 0x0, r2}, &(0x7f0000000100)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x6ed3, 0x0, 0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/49, 0x31}], 0x35)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000640)=0x4e8)
ioctl$TCSETS2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "c72d2d0ba88d9c7adb20ba414aa9f05e61705d"})

kernel console output (not intermixed with test programs):

71][ T5272] usb 4-1: Using ep0 maxpacket: 32
[  440.521752][ T5272] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.532871][ T5272] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.651004][ T5272] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  440.667836][ T5272] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  440.763516][ T5272] usb 4-1: Product: syz
[  440.767833][ T5272] usb 4-1: Manufacturer: syz
[  440.780792][ T5272] hub 4-1:4.0: USB hub found
[  440.782225][   T51] usb 1-1: device descriptor read/64, error -71
[  440.900604][   T51] usb usb1-port1: attempt power cycle
[  441.056147][ T5272] hub 4-1:4.0: 2 ports detected
[  441.061747][ T5272] hub 4-1:4.0: insufficient power available to use all downstream ports
[  441.250534][   T51] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  441.356503][   T51] usb 1-1: device descriptor read/8, error -71
[  442.183946][   T51] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  442.914939][ T5272] hub 4-1:4.0: activate --> -90
[  443.100209][   T51] usb 1-1: device not accepting address 21, error -71
[  443.108580][   T51] usb usb1-port1: unable to enumerate USB device
[  443.124909][ T5274] usb 4-1: USB disconnect, device number 23
[  444.590426][ T9433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1167'.
[  450.279836][ T9475] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1179'.
[  450.700112][ T9478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1182'.
[  450.770217][ T5272] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  450.940277][ T5272] usb 1-1: Using ep0 maxpacket: 8
[  450.966521][ T9478] overlayfs: failed to resolve './file1': -2
[  450.984877][ T5272] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  451.029957][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.058398][ T5272] usb 1-1: Product: syz
[  451.100173][ T5272] usb 1-1: Manufacturer: syz
[  451.104846][ T5272] usb 1-1: SerialNumber: syz
[  451.112145][ T5272] usb 1-1: config 0 descriptor??
[  451.126983][   T29] audit: type=1400 audit(1729280149.689:460): avc:  denied  { getopt } for  pid=9476 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  451.367254][ T5272] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  451.730267][ T5231] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  452.682040][ T5231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  452.693199][ T5231] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  452.707918][ T5231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.734087][ T5231] usb 3-1: config 0 descriptor??
[  452.887005][   T29] audit: type=1400 audit(1729280151.439:461): avc:  denied  { ioctl } for  pid=9500 comm="syz.4.1190" path="/dev/sg0" dev="devtmpfs" ino=694 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  453.292447][ T5231] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[  453.303499][ T5231] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input12
[  453.398978][ T5235] Bluetooth: hci5: unexpected event for opcode 0x2031
[  453.576398][ T5231] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  453.690293][ T5274] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  453.714806][ T5295] usb 3-1: USB disconnect, device number 28
[  453.860281][ T5274] usb 5-1: Using ep0 maxpacket: 8
[  453.905718][ T5274] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  453.916123][ T5274] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  453.926981][ T5274] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  453.940272][ T5274] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  453.968333][ T5274] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  454.018485][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.035272][ T5272] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  454.254538][ T5274] usb 5-1: usb_control_msg returned -32
[  454.405250][ T5274] usbtmc 5-1:16.0: can't read capabilities
[  454.528286][   T29] audit: type=1400 audit(1729280153.089:462): avc:  denied  { mount } for  pid=9511 comm="syz.4.1193" name="/" dev="ramfs" ino=28060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  454.550531][    C0] vkms_vblank_simulate: vblank timer overrun
[  454.631845][   T29] audit: type=1400 audit(1729280153.089:463): avc:  denied  { remount } for  pid=9511 comm="syz.4.1193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  456.415826][ T5272] usb 1-1: USB disconnect, device number 22
[  457.174998][ T5347] usb 5-1: USB disconnect, device number 20
[  457.348476][   T29] audit: type=1400 audit(1729280155.909:464): avc:  denied  { unmount } for  pid=7395 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  457.440278][ T5235] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  457.449865][ T5235] Bluetooth: hci5: Injecting HCI hardware error event
[  457.458748][ T5235] Bluetooth: hci5: hardware error 0x00
[  459.042569][ T9559] netlink: 'syz.2.1206': attribute type 1 has an invalid length.
[  459.050496][ T9559] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1206'.
[  459.256790][   T29] audit: type=1400 audit(1729280157.819:465): avc:  denied  { read } for  pid=9563 comm="syz.0.1208" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  459.304504][   T29] audit: type=1400 audit(1729280157.819:466): avc:  denied  { open } for  pid=9563 comm="syz.0.1208" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  459.375112][ T5225] Bluetooth: hci5: unexpected cc 0x042d length: 1 < 7
[  459.382201][ T5225] Bluetooth: hci5: unexpected event for opcode 0x042d
[  459.600672][ T5235] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  460.219923][   T29] audit: type=1400 audit(1729280158.769:467): avc:  denied  { getopt } for  pid=9585 comm="syz.4.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  460.693889][ T9597] Cannot find set identified by id 0 to match
[  461.154022][ T9604] tipc: Started in network mode
[  461.158961][ T9604] tipc: Node identity ac1414aa, cluster identity 4711
[  461.172366][ T9604] tipc: Enabled bearer <udp:s>, priority 10
[  461.613403][   T29] audit: type=1400 audit(1729280160.179:468): avc:  denied  { read write } for  pid=9625 comm="syz.1.1225" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  461.712634][   T29] audit: type=1400 audit(1729280160.209:469): avc:  denied  { open } for  pid=9625 comm="syz.1.1225" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  461.737025][    C0] vkms_vblank_simulate: vblank timer overrun
[  462.028632][ T9634] misc userio: No port type given on /dev/userio
[  462.310970][    T9] tipc: Node number set to 2886997162
[  462.861545][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'.
[  462.892969][ T9654] ip_vti0: entered promiscuous mode
[  462.906550][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'.
[  462.979650][ T5236] Bluetooth: hci2: command 0x0406 tx timeout
[  462.985753][ T5232] Bluetooth: hci0: command 0x0406 tx timeout
[  463.000582][ T9654] vlan2: entered promiscuous mode
[  463.022414][ T9654] ip_vti0: left promiscuous mode
[  464.326729][   T29] audit: type=1400 audit(1729280162.219:470): avc:  denied  { bind } for  pid=9657 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  464.365096][   T29] audit: type=1400 audit(1729280162.299:471): avc:  denied  { mount } for  pid=9657 comm="syz.3.1234" name="/" dev="overlay" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  465.045549][   T29] audit: type=1400 audit(1729280163.609:472): avc:  denied  { map } for  pid=9680 comm="syz.3.1242" path="socket:[29214]" dev="sockfs" ino=29214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  465.792330][ T9679] misc userio: No port type given on /dev/userio
[  465.967941][   T29] audit: type=1400 audit(1729280164.529:473): avc:  denied  { append } for  pid=9688 comm="syz.4.1246" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  467.014946][   T29] audit: type=1400 audit(1729280165.559:474): avc:  denied  { connect } for  pid=9699 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  467.040250][   T29] audit: type=1400 audit(1729280165.559:475): avc:  denied  { write } for  pid=9699 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  467.170905][ T9695] hub 9-0:1.0: USB hub found
[  467.199146][ T9695] hub 9-0:1.0: 8 ports detected
[  467.647064][ T9705] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0
[  469.560653][ T9722] misc userio: No port type given on /dev/userio
[  471.167349][ T9743] hugetlbfs: Bad value 'p' for mount option 'size'
[  471.167349][ T9743] 
[  471.847442][   T29] audit: type=1400 audit(1729280169.729:476): avc:  denied  { remount } for  pid=9729 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  471.910817][   T29] audit: type=1400 audit(1729280169.849:477): avc:  denied  { mount } for  pid=9746 comm="syz.4.1263" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[  471.980762][   T29] audit: type=1400 audit(1729280170.509:478): avc:  denied  { unmount } for  pid=8074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  474.128991][   T29] audit: type=1400 audit(1729280172.689:479): avc:  denied  { bind } for  pid=9774 comm="syz.2.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  474.269024][   T29] audit: type=1400 audit(1729280172.719:480): avc:  denied  { setopt } for  pid=9774 comm="syz.2.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  474.299777][ T9778] lo speed is unknown, defaulting to 1000
[  474.904107][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  474.928915][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  474.937332][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  474.945875][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  474.953883][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  474.964596][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  476.317348][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.346277][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  476.432929][ T9808] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1284'.
[  476.486966][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.503560][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  476.563476][ T9784] lo speed is unknown, defaulting to 1000
[  476.793301][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.810286][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  477.054102][ T5225] Bluetooth: hci1: command tx timeout
[  477.186233][ T9818] usb usb3: usbfs: process 9818 (syz.3.1287) did not claim interface 0 before use
[  477.223358][ T9818] siw: device registration error -23
[  477.242996][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.293412][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  478.754826][ T9841] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1294'.
[  478.803932][ T9784] chnl_net:caif_netlink_parms(): no params data found
[  478.983843][   T52] bridge_slave_1: left allmulticast mode
[  479.007062][   T52] bridge_slave_1: left promiscuous mode
[  479.036343][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.160033][ T5235] Bluetooth: hci1: command tx timeout
[  479.226143][   T52] bridge_slave_0: left allmulticast mode
[  479.232293][   T52] bridge_slave_0: left promiscuous mode
[  479.239312][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.316276][ T9860] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  481.200901][ T5235] Bluetooth: hci1: command tx timeout
[  481.223074][ T9865] 9pnet_fd: Insufficient options for proto=fd
[  483.280484][ T5235] Bluetooth: hci1: command tx timeout
[  484.262960][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  484.298593][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  484.318792][   T52] bond0 (unregistering): Released all slaves
[  484.390417][ T9897] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1305'.
[  484.716157][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.776297][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.834191][ T9784] bridge_slave_0: entered allmulticast mode
[  485.514675][ T9784] bridge_slave_0: entered promiscuous mode
[  487.535117][   T29] audit: type=1400 audit(1729280186.069:481): avc:  denied  { ioctl } for  pid=9945 comm="syz.0.1318" path="socket:[30887]" dev="sockfs" ino=30887 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  487.559836][    C1] vkms_vblank_simulate: vblank timer overrun
[  487.756299][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.787066][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.813919][ T9784] bridge_slave_1: entered allmulticast mode
[  487.821540][ T9784] bridge_slave_1: entered promiscuous mode
[  488.043879][   T29] audit: type=1400 audit(1729280186.609:482): avc:  denied  { mount } for  pid=9949 comm="syz.4.1322" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  488.370476][   T51] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  488.590295][   T51] usb 1-1: Using ep0 maxpacket: 8
[  488.596333][   T51] usb 1-1: no configurations
[  488.610590][   T51] usb 1-1: can't read configurations, error -22
[  488.650668][ T9959] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1324'.
[  488.875173][   T51] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  488.958100][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.983081][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  489.062178][   T51] usb 1-1: Using ep0 maxpacket: 8
[  489.082429][   T51] usb 1-1: no configurations
[  489.090391][   T51] usb 1-1: can't read configurations, error -22
[  489.105111][   T51] usb usb1-port1: attempt power cycle
[  489.375096][   T52] hsr_slave_0: left promiscuous mode
[  489.411589][   T52] hsr_slave_1: left promiscuous mode
[  489.422418][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  489.462113][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.487290][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.500179][   T51] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  489.520673][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.530992][   T51] usb 1-1: Using ep0 maxpacket: 8
[  489.540782][   T51] usb 1-1: no configurations
[  489.545460][   T51] usb 1-1: can't read configurations, error -22
[  489.615456][   T52] veth1_macvtap: left promiscuous mode
[  489.633668][   T52] veth0_macvtap: left promiscuous mode
[  489.720250][   T51] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  489.740731][   T52] veth1_vlan: left promiscuous mode
[  489.746117][   T52] veth0_vlan: left promiscuous mode
[  490.575427][   T51] usb 1-1: Using ep0 maxpacket: 8
[  490.720562][   T51] usb 1-1: no configurations
[  490.725470][   T51] usb 1-1: can't read configurations, error -22
[  490.920222][   T51] usb usb1-port1: unable to enumerate USB device
[  491.111842][   T29] audit: type=1400 audit(1729280189.679:483): avc:  denied  { unmount } for  pid=7395 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  491.903352][   T29] audit: type=1400 audit(1729280190.469:484): avc:  denied  { watch watch_reads } for  pid=10004 comm="syz.4.1332" path="/178" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  491.926673][    C1] vkms_vblank_simulate: vblank timer overrun
[  491.975466][T10000] ebtables: ebtables: counters copy to user failed while replacing table
[  496.691706][   T52] team0 (unregistering): Port device team_slave_1 removed
[  496.758435][   T52] team0 (unregistering): Port device team_slave_0 removed
[  496.844720][ T5272] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  497.018233][ T5272] usb 5-1: Using ep0 maxpacket: 8
[  497.031006][ T5272] usb 5-1: no configurations
[  497.035848][ T5272] usb 5-1: can't read configurations, error -22
[  497.170350][ T5272] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  497.330487][ T5272] usb 5-1: Using ep0 maxpacket: 8
[  497.336678][ T5272] usb 5-1: no configurations
[  497.351531][ T5272] usb 5-1: can't read configurations, error -22
[  497.369750][ T5272] usb usb5-port1: attempt power cycle
[  497.464163][ T9784] team0: Port device team_slave_0 added
[  497.481213][ T9784] team0: Port device team_slave_1 added
[  497.730495][ T5272] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  497.771117][ T5272] usb 5-1: Using ep0 maxpacket: 8
[  497.777115][ T5272] usb 5-1: no configurations
[  497.782270][ T5272] usb 5-1: can't read configurations, error -22
[  497.822183][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.830356][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.949457][ T5272] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  497.960814][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.980656][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.989975][ T5272] usb 5-1: Using ep0 maxpacket: 8
[  497.992108][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.995722][ T5272] usb 5-1: no configurations
[  498.065915][ T5272] usb 5-1: can't read configurations, error -22
[  498.076650][ T5272] usb usb5-port1: unable to enumerate USB device
[  498.092589][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  498.225400][   T29] audit: type=1400 audit(1729280196.779:485): avc:  denied  { bind } for  pid=10051 comm="syz.3.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  498.246059][   T29] audit: type=1400 audit(1729280196.789:486): avc:  denied  { write } for  pid=10051 comm="syz.3.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  498.312912][ T9784] hsr_slave_0: entered promiscuous mode
[  498.366844][ T9784] hsr_slave_1: entered promiscuous mode
[  498.400509][ T9784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  498.408498][ T9784] Cannot create hsr debugfs directory
[  498.601575][T10045] syz.2.1343: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  498.691360][T10045] CPU: 0 UID: 0 PID: 10045 Comm: syz.2.1343 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[  498.702199][T10045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  498.712295][T10045] Call Trace:
[  498.715578][T10045]  <TASK>
[  498.718512][T10045]  dump_stack_lvl+0x16c/0x1f0
[  498.723217][T10045]  warn_alloc+0x24d/0x3a0
[  498.727560][T10045]  ? __pfx_warn_alloc+0x10/0x10
[  498.732447][T10045]  ? lockdep_hardirqs_on+0x7c/0x110
[  498.737664][T10045]  ? kasan_save_track+0x14/0x30
[  498.742616][T10045]  __vmalloc_node_range_noprof+0x114a/0x15a0
[  498.748616][T10045]  ? vb2_vmalloc_alloc+0x11e/0x3d0
[  498.753746][T10045]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  498.760104][T10045]  ? vb2_vmalloc_alloc+0x11e/0x3d0
[  498.765236][T10045]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  498.770705][T10045]  vmalloc_user_noprof+0x6b/0x90
[  498.775654][T10045]  ? vb2_vmalloc_alloc+0x11e/0x3d0
[  498.780829][T10045]  vb2_vmalloc_alloc+0x11e/0x3d0
[  498.785778][T10045]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  498.791245][T10045]  __vb2_queue_alloc+0x896/0x1230
[  498.796294][T10045]  vb2_core_reqbufs+0xa73/0xfb0
[  498.801170][T10045]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  498.806559][T10045]  ? __pfx___mutex_trylock_common+0x10/0x10
[  498.812463][T10045]  ? rcu_is_watching+0x12/0xc0
[  498.817322][T10045]  ? trace_contention_end+0xea/0x140
[  498.822613][T10045]  vb2_reqbufs+0x1a5/0x1f0
[  498.827032][T10045]  ? __video_do_ioctl+0x4a2/0xf00
[  498.832068][T10045]  ? __pfx_vb2_reqbufs+0x10/0x10
[  498.837010][T10045]  ? __pfx___mutex_lock+0x10/0x10
[  498.842054][T10045]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  498.847974][T10045]  v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0
[  498.853271][T10045]  v4l_reqbufs+0x14c/0x1e0
[  498.857704][T10045]  __video_do_ioctl+0xaf0/0xf00
[  498.862578][T10045]  ? __pfx___video_do_ioctl+0x10/0x10
[  498.868017][T10045]  video_usercopy+0x4ce/0x1600
[  498.872822][T10045]  ? __pfx___video_do_ioctl+0x10/0x10
[  498.878219][T10045]  ? __pfx_video_usercopy+0x10/0x10
[  498.883450][T10045]  v4l2_ioctl+0x1ba/0x250
[  498.887791][T10045]  ? __pfx_v4l2_ioctl+0x10/0x10
[  498.892662][T10045]  __x64_sys_ioctl+0x18f/0x220
[  498.897442][T10045]  do_syscall_64+0xcd/0x250
[  498.901960][T10045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.907864][T10045] RIP: 0033:0x7fdc2d37dff9
[  498.912330][T10045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  498.931947][T10045] RSP: 002b:00007fdc2cdff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  498.940369][T10045] RAX: ffffffffffffffda RBX: 00007fdc2d535f80 RCX: 00007fdc2d37dff9
[  498.948359][T10045] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000003
[  498.956333][T10045] RBP: 00007fdc2d3f0296 R08: 0000000000000000 R09: 0000000000000000
[  498.964310][T10045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  498.972287][T10045] R13: 0000000000000000 R14: 00007fdc2d535f80 R15: 00007ffd6fd01e78
[  498.980278][T10045]  </TASK>
[  499.060223][T10045] Mem-Info:
[  499.063388][T10045] active_anon:6386 inactive_anon:0 isolated_anon:0
[  499.063388][T10045]  active_file:16384 inactive_file:41284 isolated_file:0
[  499.063388][T10045]  unevictable:768 dirty:184 writeback:0
[  499.063388][T10045]  slab_reclaimable:10446 slab_unreclaimable:104953
[  499.063388][T10045]  mapped:26708 shmem:2481 pagetables:839
[  499.063388][T10045]  sec_pagetables:0 bounce:0
[  499.063388][T10045]  kernel_misc_reclaimable:0
[  499.063388][T10045]  free:1307385 free_pcp:1629 free_cma:0
[  499.108624][    C1] vkms_vblank_simulate: vblank timer overrun
[  499.496359][   T29] audit: type=1400 audit(1729280197.889:487): avc:  denied  { listen } for  pid=10067 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  499.708035][ T5235] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  499.718717][ T5235] CPU: 0 UID: 0 PID: 5235 Comm: kworker/u9:5 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[  499.729614][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  499.739704][ T5235] Workqueue: hci2 hci_rx_work
[  499.744430][ T5235] Call Trace:
[  499.747732][ T5235]  <TASK>
[  499.750688][ T5235]  dump_stack_lvl+0x16c/0x1f0
[  499.755416][ T5235]  sysfs_warn_dup+0x7f/0xa0
[  499.759959][ T5235]  sysfs_create_dir_ns+0x24d/0x2b0
[  499.765103][ T5235]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  499.770821][ T5235]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  499.776256][ T5235]  ? kobject_add_internal+0x12d/0x990
[  499.781673][ T5235]  ? do_raw_spin_unlock+0x172/0x230
[  499.786911][ T5235]  kobject_add_internal+0x2c8/0x990
[  499.792158][ T5235]  kobject_add+0x16f/0x240
[  499.796606][ T5235]  ? __pfx_kobject_add+0x10/0x10
[  499.801576][ T5235]  ? class_to_subsys+0x3e/0x160
[  499.806481][ T5235]  ? do_raw_spin_unlock+0x172/0x230
[  499.811717][ T5235]  ? kobject_put+0xab/0x5a0
[  499.816271][ T5235]  device_add+0x289/0x1a70
[  499.820735][ T5235]  ? __pfx_dev_set_name+0x10/0x10
[  499.825898][ T5235]  ? __pfx_device_add+0x10/0x10
[  499.830794][ T5235]  ? mgmt_send_event_skb+0x2f2/0x460
[  499.836159][ T5235]  hci_conn_add_sysfs+0x17e/0x230
[  499.841230][ T5235]  le_conn_complete_evt+0x1078/0x1d80
[  499.846655][ T5235]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  499.852421][ T5235]  ? trace_contention_end+0xea/0x140
[  499.857768][ T5235]  hci_le_conn_complete_evt+0x23c/0x370
[  499.863374][ T5235]  hci_le_meta_evt+0x2e2/0x5d0
[  499.868182][ T5235]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  499.874298][ T5235]  hci_event_packet+0x666/0x1180
[  499.879282][ T5235]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  499.884616][ T5235]  ? __pfx_hci_event_packet+0x10/0x10
[  499.890024][ T5235]  ? mark_held_locks+0x9f/0xe0
[  499.894828][ T5235]  ? kcov_remote_start+0x3cf/0x6e0
[  499.900503][ T5235]  ? lockdep_hardirqs_on+0x7c/0x110
[  499.905852][ T5235]  hci_rx_work+0x2c6/0x16c0
[  499.910407][ T5235]  ? lock_acquire+0x2f/0xb0
[  499.914944][ T5235]  ? process_one_work+0x921/0x1ba0
[  499.920093][ T5235]  process_one_work+0x9c5/0x1ba0
[  499.925076][ T5235]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  499.930743][ T5235]  ? __pfx_process_one_work+0x10/0x10
[  499.936144][ T5235]  ? assign_work+0x1a0/0x250
[  499.940771][ T5235]  worker_thread+0x6c8/0xf00
[  499.945402][ T5235]  ? __pfx_worker_thread+0x10/0x10
[  499.950525][ T5235]  kthread+0x2c1/0x3a0
[  499.954609][ T5235]  ? _raw_spin_unlock_irq+0x23/0x50
[  499.959834][ T5235]  ? __pfx_kthread+0x10/0x10
[  499.964448][ T5235]  ret_from_fork+0x45/0x80
[  499.968874][ T5235]  ? __pfx_kthread+0x10/0x10
[  499.973483][ T5235]  ret_from_fork_asm+0x1a/0x30
[  499.978294][ T5235]  </TASK>
[  499.982422][ T5235] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  499.985401][   T29] audit: type=1400 audit(1729280197.899:488): avc:  denied  { accept } for  pid=10067 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  499.997111][ T5235] Bluetooth: hci2: failed to register connection device
[  500.080197][T10045] Node 0 active_anon:20588kB inactive_anon:0kB active_file:65536kB inactive_file:165064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102076kB dirty:944kB writeback:0kB shmem:3592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10640kB pagetables:3212kB sec_pagetables:0kB all_unreclaimable? no
[  500.180473][T10045] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  500.210544][    C1] vkms_vblank_simulate: vblank timer overrun
[  500.398194][T10045] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.425357][    C1] vkms_vblank_simulate: vblank timer overrun
[  500.431663][T10045] lowmem_reserve[]: 0 2461 2461 0 0
[  500.436968][T10045] Node 0 DMA32 free:1290488kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:32068kB inactive_anon:0kB active_file:65536kB inactive_file:164756kB unevictable:1536kB writepending:960kB present:3129332kB managed:2549172kB mlocked:0kB bounce:0kB free_pcp:1436kB local_pcp:1000kB free_cma:0kB
[  500.467642][    C1] vkms_vblank_simulate: vblank timer overrun
[  500.474033][T10045] lowmem_reserve[]: 0 0 0 0 0
[  500.478923][T10045] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB
[  500.505872][    C1] vkms_vblank_simulate: vblank timer overrun
[  500.627948][T10045] lowmem_reserve[]: 0 0 0 0 0
[  500.648255][T10045] Node 1 Normal free:3929500kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.700499][T10045] lowmem_reserve[]: 0 0 0 0 0
[  500.705829][T10045] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  500.719019][T10045] Node 0 DMA32: 478*4kB (UME) 166*8kB (UME) 423*16kB (UME) 821*32kB (UME) 224*64kB (UME) 56*128kB (UME) 81*256kB (UME) 84*512kB (UME) 39*1024kB (UME) 17*2048kB (UME) 266*4096kB (UM) = 1285816kB
[  500.764929][T10045] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  500.794099][T10045] Node 1 Normal: 167*4kB (UM) 30*8kB (UME) 27*16kB (UME) 179*32kB (UME) 86*64kB (UME) 31*128kB (UME) 15*256kB (UME) 7*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 951*4096kB (M) = 3929500kB
[  500.815354][T10045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  500.831427][T10045] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  500.859158][T10045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  500.879949][T10045] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  500.889763][T10045] 61779 total pagecache pages
[  500.910533][T10045] 0 pages in swap cache
[  500.914746][T10045] Free swap  = 124336kB
[  500.918930][T10045] Total swap = 124996kB
[  500.965072][T10045] 2097051 pages RAM
[  500.969005][T10045] 0 pages HighMem/MovableOnly
[  500.975296][T10045] 428036 pages reserved
[  500.979567][T10045] 0 pages cma reserved
[  501.140171][ T5347] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  501.741935][ T5347] usb 5-1: config 0 has an invalid interface number: 230 but max is 0
[  501.751104][ T5347] usb 5-1: config 0 has an invalid interface number: 48 but max is 0
[  501.759230][ T5347] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  501.775594][ T5347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  501.864255][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  501.873905][   T29] audit: type=1400 audit(1729280200.409:489): avc:  denied  { read } for  pid=10090 comm="syz.0.1353" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  502.375242][ T5347] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  502.465977][   T29] audit: type=1400 audit(1729280200.409:490): avc:  denied  { open } for  pid=10090 comm="syz.0.1353" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  502.485688][ T5347] usb 5-1: config 0 has no interface number 0
[  502.530649][ T5347] usb 5-1: config 0 has no interface number 1
[  502.563664][   T29] audit: type=1400 audit(1729280200.409:491): avc:  denied  { ioctl } for  pid=10090 comm="syz.0.1353" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  502.599941][ T5347] usb 5-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  502.650300][ T5347] usb 5-1: config 0 interface 230 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14
[  502.722682][ T5347] usb 5-1: too many endpoints for config 0 interface 48 altsetting 31: 64, using maximum allowed: 30
[  502.800454][ T5347] usb 5-1: config 0 interface 48 altsetting 31 bulk endpoint 0xB has invalid maxpacket 1024
[  502.851574][ T5347] usb 5-1: config 0 interface 48 altsetting 31 has a duplicate endpoint with address 0x4, skipping
[  502.873993][ T5347] usb 5-1: config 0 interface 48 altsetting 31 has an invalid descriptor for endpoint zero, skipping
[  502.914326][ T5347] usb 5-1: config 0 interface 48 altsetting 31 has a duplicate endpoint with address 0x6, skipping
[  502.939153][ T5347] usb 5-1: config 0 interface 48 altsetting 31 has 8 endpoint descriptors, different from the interface descriptor's value: 64
[  502.994866][ T5347] usb 5-1: config 0 interface 48 has no altsetting 0
[  503.009547][ T5347] usb 5-1: New USB device found, idVendor=0c52, idProduct=2832, bcdDevice=fb.70
[  503.020761][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.050444][ T5347] usb 5-1: Product: syz
[  503.061921][ T5347] usb 5-1: Manufacturer: syz
[  503.088097][ T5347] usb 5-1: SerialNumber: syz
[  503.111723][ T5347] usb 5-1: config 0 descriptor??
[  503.138986][ T5347] ftdi_sio 5-1:0.230: FTDI USB Serial Device converter detected
[  503.156267][ T5347] ftdi_sio ttyUSB0: unknown device type: 0xfb70
[  503.231736][ T9784] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  503.291490][ T9784] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  503.325431][ T9784] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  503.341125][ T5347] ftdi_sio 5-1:0.48: FTDI USB Serial Device converter detected
[  503.373120][ T5347] ftdi_sio ttyUSB1: unknown device type: 0xfb70
[  503.380808][ T9784] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  503.402989][ T5347] usb 5-1: USB disconnect, device number 25
[  503.423077][ T5347] ftdi_sio 5-1:0.230: device disconnected
[  503.447903][ T5347] ftdi_sio 5-1:0.48: device disconnected
[  504.138005][ T9784] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.207637][ T9784] 8021q: adding VLAN 0 to HW filter on device team0
[  504.258609][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.265775][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  504.340692][ T5272] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  504.350763][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.358089][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.491624][ T5272] usb 1-1: Using ep0 maxpacket: 8
[  504.512016][ T5272] usb 1-1: no configurations
[  504.516684][ T5272] usb 1-1: can't read configurations, error -22
[  504.700386][ T5272] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  504.879758][ T9784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.031822][T10149] misc userio: No port type given on /dev/userio
[  505.040228][ T5272] usb 1-1: Using ep0 maxpacket: 8
[  505.050212][ T5272] usb 1-1: no configurations
[  505.061845][ T5272] usb 1-1: can't read configurations, error -22
[  505.083759][ T5272] usb usb1-port1: attempt power cycle
[  505.146062][ T9784] veth0_vlan: entered promiscuous mode
[  505.192587][ T9784] veth1_vlan: entered promiscuous mode
[  505.306512][ T9784] veth0_macvtap: entered promiscuous mode
[  505.417861][ T9784] veth1_macvtap: entered promiscuous mode
[  505.440309][ T5272] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  505.504014][ T5272] usb 1-1: Using ep0 maxpacket: 8
[  505.530944][ T5272] usb 1-1: no configurations
[  505.566201][ T5272] usb 1-1: can't read configurations, error -22
[  505.589554][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.634096][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.656824][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.682271][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.710351][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.735867][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.750580][ T5272] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  505.768695][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.792718][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.803629][ T5272] usb 1-1: Using ep0 maxpacket: 8
[  505.817750][ T5272] usb 1-1: no configurations
[  505.830168][ T5272] usb 1-1: can't read configurations, error -22
[  505.838645][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.849800][ T5272] usb usb1-port1: unable to enumerate USB device
[  505.876728][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.887530][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.898444][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.908979][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.929795][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.970788][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  506.038192][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.098896][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.134701][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.210497][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.236212][ T5225] Bluetooth: hci0: unexpected cc 0x042d length: 1 < 7
[  506.243614][ T5225] Bluetooth: hci0: unexpected event for opcode 0x042d
[  506.257888][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.304179][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.439191][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.459952][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.488380][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.630215][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  506.642079][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  506.657641][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.169525][T10187] orangefs_mount: mount request failed with -4
[  507.230301][ T9784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.426728][ T9784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.493964][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  508.253908][   T29] audit: type=1400 audit(1729280206.589:492): avc:  denied  { map } for  pid=10190 comm="syz.3.1372" path="socket:[30383]" dev="sockfs" ino=30383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  508.598070][ T9784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.607060][ T9784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.640161][ T9784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.642751][   T29] audit: type=1400 audit(1729280206.589:493): avc:  denied  { read } for  pid=10190 comm="syz.3.1372" path="socket:[30383]" dev="sockfs" ino=30383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  508.648896][ T9784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.823365][T10196] lo speed is unknown, defaulting to 1000
[  509.275935][T10205] netlink: 'syz.0.1375': attribute type 1 has an invalid length.
[  509.284012][T10205] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1375'.
[  509.303644][ T2558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.311636][ T2558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.319198][ T2558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.590007][ T2558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.370658][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'.
[  517.398035][T10313] 9pnet_virtio: no channels available for device syz
[  518.691582][T10319] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  519.741613][ T5347] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  520.564401][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.604321][T10340] nvme_fabrics: missing parameter 'transport=%s'
[  520.611359][T10340] nvme_fabrics: missing parameter 'nqn=%s'
[  521.340386][ T5347] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  521.349518][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.284039][ T5347] usb 4-1: config 0 descriptor??
[  523.051368][ T5347] usb 4-1: can't set config #0, error -71
[  523.291609][ T5347] usb 4-1: USB disconnect, device number 24
[  524.273988][ T7460] bridge_slave_1: left allmulticast mode
[  524.279858][ T7460] bridge_slave_1: left promiscuous mode
[  524.940301][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.971803][ T7460] bridge_slave_0: left allmulticast mode
[  524.977514][ T7460] bridge_slave_0: left promiscuous mode
[  525.000728][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.812425][T10423] usb usb3: usbfs: process 10423 (syz.3.1426) did not claim interface 0 before use
[  526.823930][T10423] siw: device registration error -23
[  528.239904][ T7460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  528.332348][ T7460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  528.372096][ T7460] bond0 (unregistering): Released all slaves
[  530.244053][T10453] bond0: entered promiscuous mode
[  530.250388][T10453] bond_slave_0: entered promiscuous mode
[  530.256276][T10453] bond_slave_1: entered promiscuous mode
[  530.269865][T10453] team0: entered promiscuous mode
[  530.275031][T10453] team_slave_0: entered promiscuous mode
[  530.278983][T10456] usb usb3: usbfs: process 10456 (syz.0.1438) did not claim interface 0 before use
[  530.281608][T10453] team_slave_1: entered promiscuous mode
[  530.381857][T10456] siw: device registration error -23
[  530.587998][ T7460] hsr_slave_0: left promiscuous mode
[  530.630294][ T5347] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  530.701711][ T7460] hsr_slave_1: left promiscuous mode
[  530.800458][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.820914][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_0
[  531.356216][ T5347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.367574][ T5347] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  531.376856][ T5347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.546408][ T5347] usb 2-1: config 0 descriptor??
[  531.558746][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  531.721738][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_1
[  532.053500][ T7460] veth1_macvtap: left promiscuous mode
[  532.064258][ T7460] veth0_macvtap: left promiscuous mode
[  532.065322][ T7460] veth1_vlan: left promiscuous mode
[  532.066226][ T7460] veth0_vlan: left promiscuous mode
[  532.234335][ T5347] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[  532.284684][ T5347] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input13
[  532.330482][ T5235] Bluetooth: hci1: command 0x0405 tx timeout
[  532.402749][ T5347] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  532.665335][    T9] usb 2-1: USB disconnect, device number 22
[  533.901058][T10497] usb usb3: usbfs: process 10497 (syz.1.1451) did not claim interface 0 before use
[  534.021806][T10497] siw: device registration error -23
[  535.450208][ T5235] Bluetooth: hci1: command 0x0405 tx timeout
[  535.845830][ T7460] team0 (unregistering): Port device team_slave_1 removed
[  535.905778][ T7460] team0 (unregistering): Port device team_slave_0 removed
[  536.885340][ T5347] lo speed is unknown, defaulting to 1000
[  536.890510][T10506] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1454'.
[  537.060921][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'.
[  538.990330][T10551] Cannot find set identified by id 0 to match
[  539.835660][   T29] audit: type=1400 audit(1729280238.399:494): avc:  denied  { module_request } for  pid=10546 comm="syz.4.1466" kmod="net-pf-14" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  540.787222][   T29] audit: type=1400 audit(1729280238.659:495): avc:  denied  { setopt } for  pid=10546 comm="syz.4.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  540.795054][T10557] loop0: detected capacity change from 0 to 128
[  540.930582][T10557]  loop0: [CUMANA/ADFS] p1 [ADFS] p1
[  540.936001][T10557] loop0: partition table partially beyond EOD, truncated
[  540.946516][T10557] loop0: p1 size 348879409 extends beyond EOD, truncated
[  540.971294][T10571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1474'.
[  541.220854][T10526] udevd[10526]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  542.808295][T10588] Cannot find set identified by id 0 to match
[  543.536936][ T5235] Bluetooth: hci1: link tx timeout
[  543.593816][ T5235] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  544.087599][T10609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1486'.
[  544.619084][ T5235] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  544.629792][T10621] Cannot find set identified by id 0 to match
[  545.680612][ T5235] Bluetooth: hci1: command 0x0405 tx timeout
[  545.732000][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1496'.
[  545.968786][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'.
[  546.790379][T10658] Cannot find set identified by id 0 to match
[  548.083180][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'.
[  548.161384][T10675] netlink: 'syz.4.1511': attribute type 1 has an invalid length.
[  548.349510][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1513'.
[  548.443202][T10675] 8021q: adding VLAN 0 to HW filter on device batadv1
[  549.153888][T10675] bond1: (slave batadv1): Enslaving as a backup interface with an up link
[  549.621216][T10681] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  549.725467][T10681] bond1 (unregistering): Released all slaves
[  549.740271][T10699] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  554.294586][T10739] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  555.130534][  T936] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  555.631895][T10767] sctp: [Deprecated]: syz.1.1537 (pid 10767) Use of int in maxseg socket option.
[  555.631895][T10767] Use struct sctp_assoc_value instead
[  555.850689][  T936] usb 1-1: Using ep0 maxpacket: 32
[  555.941874][  T936] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.953455][  T936] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  555.966552][  T936] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  555.976022][  T936] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  555.985481][  T936] usb 1-1: Product: syz
[  555.989981][  T936] usb 1-1: Manufacturer: syz
[  556.038620][  T936] hub 1-1:4.0: USB hub found
[  556.043487][   T51] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  557.102735][   T29] audit: type=1400 audit(1729280255.669:496): avc:  denied  { write } for  pid=10780 comm="syz.4.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  557.186504][   T51] usb 2-1: config 0 has an invalid interface number: 230 but max is 0
[  557.464814][   T51] usb 2-1: config 0 has an invalid interface number: 48 but max is 0
[  557.473058][   T51] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  557.481947][  T936] hub 1-1:4.0: 2 ports detected
[  557.486982][   T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  557.497217][   T51] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  557.506362][   T51] usb 2-1: config 0 has no interface number 0
[  557.513073][   T51] usb 2-1: config 0 has no interface number 1
[  557.519209][   T51] usb 2-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  557.531306][   T51] usb 2-1: config 0 interface 230 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14
[  557.545636][   T51] usb 2-1: too many endpoints for config 0 interface 48 altsetting 31: 64, using maximum allowed: 30
[  557.556815][   T51] usb 2-1: config 0 interface 48 altsetting 31 bulk endpoint 0xB has invalid maxpacket 1024
[  557.567057][   T51] usb 2-1: config 0 interface 48 altsetting 31 has a duplicate endpoint with address 0x4, skipping
[  557.577838][   T51] usb 2-1: config 0 interface 48 altsetting 31 has an invalid descriptor for endpoint zero, skipping
[  557.588798][   T51] usb 2-1: config 0 interface 48 altsetting 31 has a duplicate endpoint with address 0x6, skipping
[  557.599613][   T51] usb 2-1: config 0 interface 48 altsetting 31 has 8 endpoint descriptors, different from the interface descriptor's value: 64
[  557.613497][   T51] usb 2-1: config 0 interface 48 has no altsetting 0
[  557.642551][T10790] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  557.699577][  T936] hub 1-1:4.0: insufficient power available to use all downstream ports
[  557.761908][   T51] usb 2-1: New USB device found, idVendor=0c52, idProduct=2832, bcdDevice=fb.70
[  557.780264][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.820166][   T51] usb 2-1: Product: syz
[  557.843512][   T51] usb 2-1: config 0 descriptor??
[  557.904538][   T51] usb 2-1: can't set config #0, error -71
[  557.919115][T10794] hugetlbfs: Bad value for 'size'
[  557.936660][   T51] usb 2-1: USB disconnect, device number 23
[  559.437753][  T936] usb 1-1: USB disconnect, device number 31
[  559.654435][T10816] 9pnet_virtio: no channels available for device syz
[  559.982751][T10826] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  560.779435][T10828] binder_alloc: 10827: binder_alloc_buf, no vma
[  560.785816][   T29] audit: type=1400 audit(1729280259.319:497): avc:  denied  { transfer } for  pid=10827 comm="syz.3.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  560.834775][T10832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1560'.
[  560.896000][T10834] hugetlbfs: Bad value for 'size'
[  561.206097][   T29] audit: type=1400 audit(1729280259.769:498): avc:  denied  { bind } for  pid=10835 comm="syz.4.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  562.826761][T10864] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  563.648704][T10875] hugetlbfs: Bad value for 'size'
[  563.925565][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  564.461087][T10884] QAT: Invalid ioctl 5
[  564.676996][   T29] audit: type=1400 audit(1729280263.209:499): avc:  denied  { connect } for  pid=10891 comm="syz.0.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  566.991721][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1586'.
[  568.271164][T10919] capability: warning: `syz.1.1588' uses deprecated v2 capabilities in a way that may be insecure
[  571.623802][   T29] audit: type=1400 audit(1729280270.189:500): avc:  denied  { ioctl } for  pid=10940 comm="syz.4.1596" path="socket:[33513]" dev="sockfs" ino=33513 ioctlcmd=0x8b24 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  573.445987][T10961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1601'.
[  574.239443][T10991] 9pnet_virtio: no channels available for device syz
[  575.294949][T10996] orangefs_mount: mount request failed with -4
[  579.065745][T11035] orangefs_mount: mount request failed with -4
[  579.500697][ T5225] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  582.129774][T11063] orangefs_mount: mount request failed with -4
[  582.367794][T11071] usb usb3: usbfs: process 11071 (syz.3.1640) did not claim interface 0 before use
[  582.387128][T11071] lo speed is unknown, defaulting to 1000
[  582.393577][T11071] lo speed is unknown, defaulting to 1000
[  582.399807][T11071] lo speed is unknown, defaulting to 1000
[  582.417082][T11071] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  582.446563][T11071] lo speed is unknown, defaulting to 1000
[  582.468028][T11071] lo speed is unknown, defaulting to 1000
[  582.477020][T11071] lo speed is unknown, defaulting to 1000
[  582.488754][T11071] lo speed is unknown, defaulting to 1000
[  582.498470][T11071] lo speed is unknown, defaulting to 1000
[  582.509677][T11071] lo speed is unknown, defaulting to 1000
[  582.518490][T11071] lo speed is unknown, defaulting to 1000
[  583.805903][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'.
[  583.842186][T11086] syzkaller1: entered promiscuous mode
[  583.849188][T11086] syzkaller1: entered allmulticast mode
[  584.336495][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  584.353488][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  584.368461][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  584.397241][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  584.405192][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  584.413129][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  584.484667][T11091] lo speed is unknown, defaulting to 1000
[  584.990142][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  585.114967][ T5225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  585.131422][ T5225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  585.139892][ T5225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  585.148475][ T5225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  585.156884][ T5225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  585.164487][ T5225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  585.191458][    T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  585.193053][T10975] bridge0: port 3(syz_tun) entered disabled state
[  585.221844][    T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8239, setting to 1024
[  585.240922][    T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  585.266606][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  585.276586][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.319807][T11098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  585.338122][T10975] syz_tun (unregistering): left allmulticast mode
[  585.340350][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  585.356424][T10975] syz_tun (unregistering): left promiscuous mode
[  585.363424][T10975] bridge0: port 3(syz_tun) entered disabled state
[  585.556888][    T9] usb 2-1: USB disconnect, device number 24
[  585.717846][T11099] lo speed is unknown, defaulting to 1000
[  585.988756][   T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.030932][   T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  586.192716][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  586.204571][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  586.213568][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  586.222400][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  586.230350][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  586.249462][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  586.358144][   T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.381172][   T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  586.390654][ T5272] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  586.484107][ T5225] Bluetooth: hci3: command tx timeout
[  586.516118][T11008] bridge0: port 3(syz_tun) entered disabled state
[  586.549154][T11008] syz_tun (unregistering): left allmulticast mode
[  586.556012][T11008] syz_tun (unregistering): left promiscuous mode
[  586.563612][T11008] bridge0: port 3(syz_tun) entered disabled state
[  586.573211][ T5272] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  586.584316][ T5272] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  586.604098][ T5272] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  586.614665][ T5272] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  586.631715][ T5272] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  586.641420][ T5272] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  586.645833][T11121] lo speed is unknown, defaulting to 1000
[  586.649434][ T5272] usb 2-1: Product: syz
[  586.659612][ T5272] usb 2-1: Manufacturer: syz
[  586.669979][ T5272] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  586.702850][   T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.714314][   T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  586.733284][T11091] chnl_net:caif_netlink_parms(): no params data found
[  586.833426][   T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.844447][   T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  586.887965][T11099] chnl_net:caif_netlink_parms(): no params data found
[  586.912310][T11119] netlink: 'syz.1.1653': attribute type 9 has an invalid length.
[  586.928891][T11119] bond_slave_0: entered promiscuous mode
[  586.935221][T11119] bond_slave_1: entered promiscuous mode
[  586.947047][T11119] macvlan2: entered promiscuous mode
[  586.953039][T11119] bond0: entered promiscuous mode
[  586.981553][T11119] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  587.091446][  T936] usb 2-1: USB disconnect, device number 25
[  587.132509][T11091] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.145171][T11091] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.153033][T11091] bridge_slave_0: entered allmulticast mode
[  587.163234][T11091] bridge_slave_0: entered promiscuous mode
[  587.183393][T11091] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.199296][T11091] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.210550][T11091] bridge_slave_1: entered allmulticast mode
[  587.217664][T11091] bridge_slave_1: entered promiscuous mode
[  587.262143][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1655'.
[  587.280456][ T5225] Bluetooth: hci4: command tx timeout
[  587.411325][T11091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  587.528348][T11099] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.542002][T11099] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.568854][T11099] bridge_slave_0: entered allmulticast mode
[  587.587099][T11099] bridge_slave_0: entered promiscuous mode
[  587.622499][T11091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  587.748166][T11099] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.780869][T11099] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.788361][T11099] bridge_slave_1: entered allmulticast mode
[  587.801569][T11099] bridge_slave_1: entered promiscuous mode
[  587.889986][T11091] team0: Port device team_slave_0 added
[  587.955670][T11121] chnl_net:caif_netlink_parms(): no params data found
[  587.992381][   T61] bridge_slave_1: left allmulticast mode
[  588.000448][   T61] bridge_slave_1: left promiscuous mode
[  588.026691][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.064528][   T61] bridge_slave_0: left allmulticast mode
[  588.088326][   T61] bridge_slave_0: left promiscuous mode
[  588.100411][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.320263][ T5225] Bluetooth: hci5: command tx timeout
[  588.390564][ T5272] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  588.566784][ T5225] Bluetooth: hci3: command tx timeout
[  588.709109][ T5225] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  588.721404][ T5225] CPU: 0 UID: 0 PID: 5225 Comm: kworker/u9:2 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[  588.732323][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  588.742497][ T5225] Workqueue: hci0 hci_rx_work
[  588.747221][ T5225] Call Trace:
[  588.750524][ T5225]  <TASK>
[  588.753477][ T5225]  dump_stack_lvl+0x16c/0x1f0
[  588.758205][ T5225]  sysfs_warn_dup+0x7f/0xa0
[  588.762755][ T5225]  sysfs_create_dir_ns+0x24d/0x2b0
[  588.767927][ T5225]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  588.773620][ T5225]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  588.779045][ T5225]  ? kobject_add_internal+0x12d/0x990
[  588.784454][ T5225]  ? do_raw_spin_unlock+0x172/0x230
[  588.789694][ T5225]  kobject_add_internal+0x2c8/0x990
[  588.794935][ T5225]  kobject_add+0x16f/0x240
[  588.799396][ T5225]  ? __pfx_kobject_add+0x10/0x10
[  588.804441][ T5225]  ? kobject_put+0xab/0x5a0
[  588.808998][ T5225]  device_add+0x289/0x1a70
[  588.813460][ T5225]  ? __pfx_dev_set_name+0x10/0x10
[  588.818610][ T5225]  ? __pfx_device_add+0x10/0x10
[  588.823519][ T5225]  ? mgmt_send_event_skb+0x2f2/0x460
[  588.828863][ T5225]  hci_conn_add_sysfs+0x17e/0x230
[  588.833927][ T5225]  le_conn_complete_evt+0x1078/0x1d80
[  588.839358][ T5225]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  588.845209][ T5225]  ? irqentry_exit+0x3b/0x90
[  588.849838][ T5225]  ? lockdep_hardirqs_on+0x7c/0x110
[  588.855099][ T5225]  hci_le_conn_complete_evt+0x23c/0x370
[  588.860692][ T5225]  hci_le_meta_evt+0x2e2/0x5d0
[  588.865502][ T5225]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  588.871631][ T5225]  hci_event_packet+0x666/0x1180
[  588.876611][ T5225]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  588.881934][ T5225]  ? __pfx_hci_event_packet+0x10/0x10
[  588.887368][ T5225]  ? kcov_remote_start+0x3df/0x6e0
[  588.892517][ T5225]  hci_rx_work+0x2c6/0x16c0
[  588.897237][ T5225]  ? lock_acquire+0x2f/0xb0
[  588.901772][ T5225]  ? process_one_work+0x921/0x1ba0
[  588.906919][ T5225]  process_one_work+0x9c5/0x1ba0
[  588.911915][ T5225]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  588.917600][ T5225]  ? __pfx_process_one_work+0x10/0x10
[  588.923203][ T5225]  ? assign_work+0x1a0/0x250
[  588.928026][ T5225]  worker_thread+0x6c8/0xf00
[  588.932666][ T5225]  ? __pfx_worker_thread+0x10/0x10
[  588.937812][ T5225]  kthread+0x2c1/0x3a0
[  588.941912][ T5225]  ? _raw_spin_unlock_irq+0x23/0x50
[  588.947150][ T5225]  ? __pfx_kthread+0x10/0x10
[  588.951865][ T5225]  ret_from_fork+0x45/0x80
[  588.956310][ T5225]  ? __pfx_kthread+0x10/0x10
[  588.960935][ T5225]  ret_from_fork_asm+0x1a/0x30
[  588.965769][ T5225]  </TASK>
[  588.968920][    C0] vkms_vblank_simulate: vblank timer overrun
[  589.002324][ T5225] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  589.016655][ T5225] Bluetooth: hci0: failed to register connection device
[  589.063179][ T5272] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  589.111446][ T5272] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8239, setting to 1024
[  589.153608][ T5272] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  589.199167][ T5272] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  589.225651][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.262013][T11166] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  589.370694][ T5225] Bluetooth: hci4: command tx timeout
[  589.374002][ T5272] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  589.630223][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  589.736592][ T5272] usb 2-1: USB disconnect, device number 26
[  589.850378][    T9] usb 4-1: Using ep0 maxpacket: 8
[  589.857831][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  589.868446][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  589.885583][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  589.907057][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  589.920577][   T29] audit: type=1400 audit(1729280288.469:501): avc:  denied  { append } for  pid=11178 comm="syz.1.1663" name="rtc0" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  589.946303][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  589.955536][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.202731][    T9] usb 4-1: usb_control_msg returned -32
[  590.208382][    T9] usbtmc 4-1:16.0: can't read capabilities
[  591.348008][ T5225] Bluetooth: hci5: command tx timeout
[  591.357690][ T5225] Bluetooth: hci3: command tx timeout
[  591.438563][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  591.450549][ T5236] Bluetooth: hci4: command tx timeout
[  591.459154][T11180] rtc_cmos 00:00: Alarms can be up to one day in the future
[  591.488622][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  591.546299][   T61] bond0 (unregistering): Released all slaves
[  591.684283][T11091] team0: Port device team_slave_1 added
[  591.772620][T11099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  591.844510][   T61] tipc: Disabling bearer <udp:s>
[  591.875165][   T61] tipc: Left network mode
[  591.882611][T11099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  591.925013][T11091] batman_adv: batadv0: Adding interface: batadv_slave_0
[  591.932387][T11091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  591.958337][    C0] vkms_vblank_simulate: vblank timer overrun
[  591.966862][T11091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  591.981738][T11091] batman_adv: batadv0: Adding interface: batadv_slave_1
[  591.989015][T11091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.017135][T11091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.106395][  T936] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  592.178219][T11099] team0: Port device team_slave_0 added
[  592.189151][T11099] team0: Port device team_slave_1 added
[  592.280098][  T936] usb 2-1: Using ep0 maxpacket: 8
[  592.291158][  T936] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  592.302310][  T936] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  592.314517][T11099] batman_adv: batadv0: Adding interface: batadv_slave_0
[  592.334245][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.334384][  T936] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  592.360246][    C0] vkms_vblank_simulate: vblank timer overrun
[  592.395063][T11099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.425548][T11099] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.430663][  T936] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  592.445712][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.471678][    C0] vkms_vblank_simulate: vblank timer overrun
[  592.478852][  T936] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  592.496960][T11099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.533247][  T936] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  592.540789][  T936] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  592.574154][  T936] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  592.614468][  T936] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  592.640683][  T936] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  592.647178][T11121] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.676930][T11121] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.681407][  T936] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  592.692331][T11121] bridge_slave_0: entered allmulticast mode
[  592.710301][  T936] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  592.711426][T11121] bridge_slave_0: entered promiscuous mode
[  592.740136][  T936] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  592.760069][  T936] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  592.768930][T11091] hsr_slave_0: entered promiscuous mode
[  592.780134][  T936] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  592.804250][  T936] usb 2-1: string descriptor 0 read error: -22
[  592.813975][T11091] hsr_slave_1: entered promiscuous mode
[  592.830100][T11091] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  592.837765][T11091] Cannot create hsr debugfs directory
[  592.843582][  T936] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  592.853178][  T936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.925208][  T936] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  592.955604][   T61] hsr_slave_0: left promiscuous mode
[  592.986761][   T61] hsr_slave_1: left promiscuous mode
[  593.040373][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  593.047972][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  593.066356][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  593.080543][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  593.126844][  T936] usb 4-1: USB disconnect, device number 25
[  593.165523][   T61] veth1_macvtap: left promiscuous mode
[  593.187383][   T61] veth0_macvtap: left promiscuous mode
[  593.202919][   T61] veth1_vlan: left promiscuous mode
[  593.231810][   T61] veth0_vlan: left promiscuous mode
[  593.261111][ T5295] usb 2-1: USB disconnect, device number 27
[  593.424875][ T5236] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  593.440257][ T5236] Bluetooth: hci3: command tx timeout
[  593.440349][ T5225] Bluetooth: hci5: command tx timeout
[  593.497532][   T29] audit: type=1400 audit(1729280292.059:502): avc:  denied  { mount } for  pid=11185 comm="syz.1.1664" name="/" dev="autofs" ino=35857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  593.533163][ T5225] Bluetooth: hci4: command tx timeout
[  594.089526][   T29] audit: type=1400 audit(1729280292.649:503): avc:  denied  { unmount } for  pid=9784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  594.189261][   T61] team0 (unregistering): Port device team_slave_1 removed
[  594.397035][   T61] team0 (unregistering): Port device team_slave_0 removed
[  595.533658][ T5225] Bluetooth: hci5: command tx timeout
[  595.681874][T11211] kvm: emulating exchange as write
[  596.176047][T11121] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.192596][T11121] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.225861][T11121] bridge_slave_1: entered allmulticast mode
[  596.255979][T11121] bridge_slave_1: entered promiscuous mode
[  596.485840][T11099] hsr_slave_0: entered promiscuous mode
[  596.507391][T11099] hsr_slave_1: entered promiscuous mode
[  596.534341][T11099] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  596.676608][T11099] Cannot create hsr debugfs directory
[  596.709900][T11121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  596.811311][T11121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  596.935072][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  597.013915][T11121] team0: Port device team_slave_0 added
[  597.105524][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  597.145992][T11121] team0: Port device team_slave_1 added
[  597.178184][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8239, setting to 1024
[  597.263120][    T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  597.323874][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  597.373883][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.450859][T11228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  597.483856][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  597.558963][T11121] batman_adv: batadv0: Adding interface: batadv_slave_0
[  597.600816][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  597.664132][T11121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  597.746442][T11121] batman_adv: batadv0: Adding interface: batadv_slave_1
[  597.766670][T11231] overlayfs: missing 'workdir'
[  597.802024][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  597.855253][ T8918] usb 4-1: USB disconnect, device number 26
[  597.949414][T11121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  598.414770][ T5236] Bluetooth: hci5: command 0x0405 tx timeout
[  598.492885][T11121] hsr_slave_0: entered promiscuous mode
[  598.512583][T11121] hsr_slave_1: entered promiscuous mode
[  598.553524][   T29] audit: type=1400 audit(1729280297.119:504): avc:  denied  { create } for  pid=11250 comm="syz.1.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  598.574454][T11121] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  598.596914][T11121] Cannot create hsr debugfs directory
[  598.661346][   T29] audit: type=1400 audit(1729280297.119:505): avc:  denied  { write } for  pid=11250 comm="syz.1.1675" path="socket:[35100]" dev="sockfs" ino=35100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  598.691292][   T29] audit: type=1400 audit(1729280297.119:506): avc:  denied  { nlmsg_read } for  pid=11250 comm="syz.1.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  598.747714][ T5225] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  598.759766][   T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.771922][   T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  599.337323][   T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.347891][   T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  599.417668][ T5225] Bluetooth: hci1: link tx timeout
[  599.423729][ T5225] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  599.588885][   T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.599347][   T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  599.710303][T11258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  599.816633][   T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.831847][   T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  600.113025][T11099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.136084][T11091] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  600.192182][T11091] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  600.293843][T11099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.349402][T11268] overlayfs: missing 'workdir'
[  600.378794][T11091] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  600.498619][T11099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.523715][T11091] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  600.922474][T11099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  600.944542][T11274] usb usb3: usbfs: process 11274 (syz.1.1683) did not claim interface 0 before use
[  600.966673][T11274] siw: device registration error -23
[  601.217506][   T61] bridge_slave_1: left allmulticast mode
[  601.250143][   T61] bridge_slave_1: left promiscuous mode
[  601.270283][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.289095][   T61] bridge_slave_0: left allmulticast mode
[  601.306812][   T61] bridge_slave_0: left promiscuous mode
[  601.313208][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  601.470268][ T5236] Bluetooth: hci1: command 0x0405 tx timeout
[  601.495848][   T61] bridge_slave_1: left allmulticast mode
[  601.520886][   T61] bridge_slave_1: left promiscuous mode
[  602.225226][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.289739][   T61] bridge_slave_0: left allmulticast mode
[  602.329451][   T61] bridge_slave_0: left promiscuous mode
[  602.370271][ T5272] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  602.381312][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.574108][ T5272] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  602.600245][ T5272] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8239, setting to 1024
[  602.611594][ T5272] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  602.626401][ T5272] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  602.635714][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.677470][T11288] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  602.723258][ T5272] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  602.923615][T11312] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  603.186578][ T8918] usb 4-1: USB disconnect, device number 27
[  604.733463][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  604.746531][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  604.772960][   T61] bond0 (unregistering): Released all slaves
[  604.798244][T11091] 8021q: adding VLAN 0 to HW filter on device bond0
[  604.870185][T11323] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  604.878491][T11323] batadv_slave_0: entered promiscuous mode
[  604.959442][T11091] 8021q: adding VLAN 0 to HW filter on device team0
[  605.053395][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.060583][ T6596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  605.148215][T11367] usb usb3: usbfs: process 11367 (syz.1.1692) did not claim interface 0 before use
[  605.197679][T11367] siw: device registration error -23
[  605.243625][T11099] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  605.281218][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.288355][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  605.387825][T11099] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  605.436164][T11099] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  605.505853][T11372] netlink: 'syz.1.1694': attribute type 10 has an invalid length.
[  605.524580][T11372] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1694'.
[  605.537756][T11372] team0: entered promiscuous mode
[  605.543586][T11372] team_slave_0: entered promiscuous mode
[  605.565942][T11372] team_slave_1: entered promiscuous mode
[  605.576473][T11372] team0: entered allmulticast mode
[  605.583240][T11372] team_slave_0: entered allmulticast mode
[  605.590655][T11372] team_slave_1: entered allmulticast mode
[  605.609397][T11372] bridge0: port 3(team0) entered blocking state
[  605.619284][T11372] bridge0: port 3(team0) entered disabled state
[  605.629138][T11372] bridge0: port 3(team0) entered blocking state
[  605.635546][T11372] bridge0: port 3(team0) entered forwarding state
[  605.680483][T11099] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  606.340908][   T61] hsr_slave_0: left promiscuous mode
[  606.353592][   T61] hsr_slave_1: left promiscuous mode
[  606.369344][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  606.387547][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  606.397181][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  606.412885][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  606.485824][   T61] hsr_slave_0: left promiscuous mode
[  606.556479][   T61] hsr_slave_1: left promiscuous mode
[  606.687956][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  606.700216][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  606.753116][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  606.760505][ T5272] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  606.770135][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  606.854961][   T61] veth1_macvtap: left promiscuous mode
[  606.872389][   T29] audit: type=1400 audit(1729280305.429:507): avc:  denied  { execute } for  pid=11405 comm="syz.3.1700" name="file0" dev="ramfs" ino=36561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  606.895738][   T61] veth0_macvtap: left promiscuous mode
[  606.911992][   T61] veth1_vlan: left promiscuous mode
[  606.917355][   T61] veth0_vlan: left promiscuous mode
[  606.925372][ T5272] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  606.938570][ T5272] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8239, setting to 1024
[  606.950247][ T5272] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  606.960891][ T5272] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  606.970301][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.993844][   T29] audit: type=1400 audit(1729280305.439:508): avc:  denied  { execute_no_trans } for  pid=11405 comm="syz.3.1700" path="/file0" dev="ramfs" ino=36561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  607.019432][T11407] 9pnet_virtio: no channels available for device syz
[  607.027013][T11403] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  607.034898][   T61] veth1_macvtap: left promiscuous mode
[  607.037867][ T5272] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  607.067228][   T61] veth0_macvtap: left promiscuous mode
[  607.101977][   T61] veth1_vlan: left promiscuous mode
[  607.130612][   T61] veth0_vlan: left promiscuous mode
[  607.212816][T11411] usb usb3: usbfs: process 11411 (syz.3.1701) did not claim interface 0 before use
[  607.374083][  T936] usb 2-1: USB disconnect, device number 28
[  608.124910][   T61] team0 (unregistering): Port device team_slave_1 removed
[  608.195159][   T61] team0 (unregistering): Port device team_slave_0 removed
[  609.406625][   T61] team0 (unregistering): Port device team_slave_1 removed
[  609.467845][   T61] team0 (unregistering): Port device team_slave_0 removed
[  610.142590][T11121] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  610.203165][T11121] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  610.231028][T11121] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  610.269982][T11121] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  610.313186][T11099] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.342900][T11091] 8021q: adding VLAN 0 to HW filter on device batadv0
[  610.462589][T11099] 8021q: adding VLAN 0 to HW filter on device team0
[  610.486399][T11421] netlink: 'syz.1.1705': attribute type 3 has an invalid length.
[  610.521225][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.528385][ T9829] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.587504][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.594709][ T6596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.231788][T11121] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.375419][T11121] 8021q: adding VLAN 0 to HW filter on device team0
[  611.396636][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.403792][ T6596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  611.485848][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.493100][ T6596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  612.291125][T11091] veth0_vlan: entered promiscuous mode
[  612.348306][T11091] veth1_vlan: entered promiscuous mode
[  612.982015][T11091] veth0_macvtap: entered promiscuous mode
[  613.027986][T11091] veth1_macvtap: entered promiscuous mode
[  613.092163][T11099] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.115306][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.140448][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.182847][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.194030][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.218836][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.242458][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.262772][T11091] batman_adv: batadv0: Interface activated: batadv_slave_0
[  613.297426][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.309626][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.320929][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.332569][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.368831][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.388619][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.398865][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  613.411253][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.422733][T11091] batman_adv: batadv0: Interface activated: batadv_slave_1
[  613.441795][T11121] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.482348][T11091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  613.500411][T11091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  613.509177][T11091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  613.535668][T11091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.617702][T11099] veth0_vlan: entered promiscuous mode
[  613.629031][T11099] veth1_vlan: entered promiscuous mode
[  613.760222][ T5236] Bluetooth: hci5: command 0x0405 tx timeout
[  613.838353][T11099] veth0_macvtap: entered promiscuous mode
[  613.888447][T11099] veth1_macvtap: entered promiscuous mode
[  613.911787][T11121] veth0_vlan: entered promiscuous mode
[  613.963847][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.976583][ T9829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.978458][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.995050][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.005705][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.015849][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.033336][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.040394][ T9829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.048513][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.062313][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.074473][T11099] batman_adv: batadv0: Interface activated: batadv_slave_0
[  614.118366][T11121] veth1_vlan: entered promiscuous mode
[  614.128253][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.139703][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.157529][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.180791][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.201525][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.230651][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.261072][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.292421][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.313432][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.350111][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.384007][T11099] batman_adv: batadv0: Interface activated: batadv_slave_1
[  614.423602][T11099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  614.462873][T11099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  614.492227][T11099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  614.515569][T11099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  614.632642][T11121] veth0_macvtap: entered promiscuous mode
[  614.647174][T11121] veth1_macvtap: entered promiscuous mode
[  614.655773][ T9829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.672814][ T9829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.825897][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.855626][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.876106][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.901903][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.912570][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.924323][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.934603][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.946011][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.962546][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.973688][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.989199][T11121] batman_adv: batadv0: Interface activated: batadv_slave_0
[  615.161111][ T6596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  615.168693][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.184433][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.194862][ T6596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  615.253821][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.291518][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.323942][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.340529][   T29] audit: type=1400 audit(1729280313.909:509): avc:  denied  { accept } for  pid=11494 comm="syz.4.1718" lport=56204 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  615.363485][    C1] vkms_vblank_simulate: vblank timer overrun
[  615.540210][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.550692][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.561603][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.205608][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  616.330504][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.374717][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  616.426110][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.457430][T11121] batman_adv: batadv0: Interface activated: batadv_slave_1
[  616.518265][T11121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  616.537557][T11121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  616.568578][T11121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  616.577985][T11121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  616.741303][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.753522][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.995481][ T9396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.017395][ T5272] kernel write not supported for file /12/attr/keycreate (pid: 5272 comm: kworker/0:5)
[  617.083236][ T9396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.097974][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.194369][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.890522][ T8918] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  620.130722][ T8918] usb 5-1: Using ep0 maxpacket: 8
[  620.260768][ T8918] usb 5-1: config 1 interface 0 has no altsetting 0
[  620.277285][ T8918] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40
[  620.304567][ T8918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.330054][ T8918] usb 5-1: Product: 䀁
[  620.334934][ T8918] usb 5-1: Manufacturer: ᠁
[  620.339582][ T8918] usb 5-1: SerialNumber: И
[  620.427582][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1736'.
[  621.077773][ T8918] usbhid 5-1:1.0: can't add hid device: -71
[  621.120579][ T8918] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  621.137983][ T8918] usb 5-1: USB disconnect, device number 26
[  621.253493][T11566] erspan1: entered promiscuous mode
[  621.290434][T11566] erspan1: entered allmulticast mode
[  621.918108][T11584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1749'.
[  622.477560][T11592] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  624.724700][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  626.272341][T11633] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  626.657281][T11638] netlink: 'syz.0.1767': attribute type 10 has an invalid length.
[  626.740695][T11638] team0: Port device netdevsim0 added
[  628.145138][T11651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1773'.
[  628.192883][T11651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1773'.
[  629.494292][T11671] misc userio: No port type given on /dev/userio
[  630.408188][T11684] orangefs_mount: mount request failed with -4
[  632.870136][T11710] vivid-000: kernel_thread() failed
[  634.164965][   T29] audit: type=1400 audit(1729280332.719:510): avc:  denied  { getopt } for  pid=11721 comm="syz.2.1794" lport=47552 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  634.950311][ T5225] Bluetooth: hci3: link tx timeout
[  634.955748][ T5225] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  635.865757][   T29] audit: type=1400 audit(1729280334.429:511): avc:  denied  { connect } for  pid=11743 comm="syz.2.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  635.885514][   T29] audit: type=1400 audit(1729280334.449:512): avc:  denied  { write } for  pid=11743 comm="syz.2.1804" laddr=172.20.20.14 lport=1 faddr=172.20.20.14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  635.908888][    C1] vkms_vblank_simulate: vblank timer overrun
[  637.073041][ T5236] Bluetooth: hci3: command 0x0406 tx timeout
[  638.083316][T11764] orangefs_mount: mount request failed with -4
[  639.983853][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1813'.
[  640.450254][ T5272] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  640.605610][ T5272] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  640.625498][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  640.637250][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  640.665155][ T5272] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  640.713668][ T5272] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  640.749139][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.849710][ T5272] usb 5-1: config 0 descriptor??
[  641.269795][ T5272] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  641.295707][ T5272] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  641.346772][ T5272] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  641.596881][ T5272] usb 5-1: USB disconnect, device number 27
[  642.237774][T11797] 9p: Unknown access argument 18446744073709551615: -34
[  643.880578][ T5295] libceph: connect (1)[c::]:6789 error -101
[  643.886771][ T5295] libceph: mon0 (1)[c::]:6789 connect error
[  643.897935][T11814] ceph: No mds server is up or the cluster is laggy
[  644.002223][   T29] audit: type=1400 audit(1729280342.559:513): avc:  denied  { append } for  pid=11820 comm="syz.1.1826" name="vsock" dev="devtmpfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  644.025282][    C1] vkms_vblank_simulate: vblank timer overrun
[  644.169968][ T5295] libceph: connect (1)[c::]:6789 error -101
[  644.497076][ T5295] libceph: mon0 (1)[c::]:6789 connect error
[  645.398072][T11840] netlink: 'syz.2.1834': attribute type 10 has an invalid length.
[  645.413527][T11840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1834'.
[  645.469892][T11840] team0: entered promiscuous mode
[  645.475492][T11840] team_slave_0: entered promiscuous mode
[  645.492566][T11840] team_slave_1: entered promiscuous mode
[  645.513705][T11840] team0: entered allmulticast mode
[  645.519014][T11840] team_slave_0: entered allmulticast mode
[  645.530435][T11840] team_slave_1: entered allmulticast mode
[  645.554206][T11840] bridge0: port 3(team0) entered blocking state
[  645.585167][T11840] bridge0: port 3(team0) entered disabled state
[  645.603624][ T5274] libceph: connect (1)[c::]:6789 error -101
[  645.610285][ T5274] libceph: mon0 (1)[c::]:6789 connect error
[  645.768454][T11847] ceph: No mds server is up or the cluster is laggy
[  645.772388][T11840] bridge0: port 3(team0) entered blocking state
[  645.781678][T11840] bridge0: port 3(team0) entered forwarding state
[  646.559100][ T5225] Bluetooth: hci3: link tx timeout
[  647.030097][  T936] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  647.190138][  T936] usb 2-1: device descriptor read/64, error -71
[  648.130349][  T936] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  648.284296][  T936] usb 2-1: device descriptor read/64, error -71
[  648.445125][  T936] usb usb2-port1: attempt power cycle
[  648.617012][ T5272] libceph: connect (1)[c::]:6789 error -101
[  648.623506][ T5272] libceph: mon0 (1)[c::]:6789 connect error
[  648.756883][T11895] syz.4.1852: attempt to access beyond end of device
[  648.756883][T11895] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0
[  648.840289][  T936] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  648.882288][  T936] usb 2-1: device descriptor read/8, error -71
[  648.894483][T11891] ceph: No mds server is up or the cluster is laggy
[  648.902399][ T5272] libceph: connect (1)[c::]:6789 error -101
[  648.908704][ T5272] libceph: mon0 (1)[c::]:6789 connect error
[  649.190127][  T936] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  649.368657][  T936] usb 2-1: device descriptor read/8, error -71
[  649.542166][  T936] usb usb2-port1: unable to enumerate USB device
[  649.745092][ T5236] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  650.567832][ T5225] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  651.890209][ T5272] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  651.946771][ T5274] libceph: connect (1)[c::]:6789 error -101
[  651.955885][ T5274] libceph: mon0 (1)[c::]:6789 connect error
[  652.040153][ T5272] usb 2-1: device descriptor read/64, error -71
[  652.087030][T11952] ceph: No mds server is up or the cluster is laggy
[  652.402577][ T5272] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  652.590413][ T5272] usb 2-1: device descriptor read/64, error -71
[  652.700485][ T5272] usb usb2-port1: attempt power cycle
[  652.960679][ T5236] Bluetooth: hci3: command 0x0406 tx timeout
[  653.040438][ T5272] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  653.963553][ T5236] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  653.973615][ T5236] CPU: 0 UID: 0 PID: 5236 Comm: kworker/u9:6 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[  653.984602][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  653.994699][ T5236] Workqueue: hci4 hci_rx_work
[  653.999437][ T5236] Call Trace:
[  654.002739][ T5236]  <TASK>
[  654.005701][ T5236]  dump_stack_lvl+0x16c/0x1f0
[  654.010437][ T5236]  sysfs_warn_dup+0x7f/0xa0
[  654.014986][ T5236]  sysfs_create_dir_ns+0x24d/0x2b0
[  654.020140][ T5236]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  654.025817][ T5236]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  654.031239][ T5236]  ? kobject_add_internal+0x12d/0x990
[  654.036655][ T5236]  ? do_raw_spin_unlock+0x172/0x230
[  654.041902][ T5236]  kobject_add_internal+0x2c8/0x990
[  654.047168][ T5236]  kobject_add+0x16f/0x240
[  654.051619][ T5236]  ? __pfx_kobject_add+0x10/0x10
[  654.056590][ T5236]  ? class_to_subsys+0x3e/0x160
[  654.061489][ T5236]  ? do_raw_spin_unlock+0x172/0x230
[  654.066731][ T5236]  ? kobject_put+0xab/0x5a0
[  654.071370][ T5236]  device_add+0x289/0x1a70
[  654.075838][ T5236]  ? __pfx_dev_set_name+0x10/0x10
[  654.080903][ T5236]  ? __pfx_device_add+0x10/0x10
[  654.085909][ T5236]  ? mgmt_send_event_skb+0x2f2/0x460
[  654.091261][ T5236]  hci_conn_add_sysfs+0x17e/0x230
[  654.096332][ T5236]  le_conn_complete_evt+0x1078/0x1d80
[  654.101824][ T5236]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  654.107559][ T5236]  ? trace_contention_end+0xea/0x140
[  654.112874][ T5236]  hci_le_conn_complete_evt+0x23c/0x370
[  654.118542][ T5236]  hci_le_meta_evt+0x2e2/0x5d0
[  654.123329][ T5236]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  654.129418][ T5236]  hci_event_packet+0x666/0x1180
[  654.134410][ T5236]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  654.139721][ T5236]  ? __pfx_hci_event_packet+0x10/0x10
[  654.145217][ T5236]  ? mark_held_locks+0x9f/0xe0
[  654.150000][ T5236]  ? kcov_remote_start+0x3cf/0x6e0
[  654.155146][ T5236]  ? lockdep_hardirqs_on+0x7c/0x110
[  654.160376][ T5236]  hci_rx_work+0x2c6/0x16c0
[  654.164901][ T5236]  ? lock_acquire+0x2f/0xb0
[  654.169424][ T5236]  ? process_one_work+0x921/0x1ba0
[  654.174552][ T5236]  process_one_work+0x9c5/0x1ba0
[  654.179514][ T5236]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  654.185169][ T5236]  ? __pfx_process_one_work+0x10/0x10
[  654.190609][ T5236]  ? assign_work+0x1a0/0x250
[  654.195227][ T5236]  worker_thread+0x6c8/0xf00
[  654.199843][ T5236]  ? __pfx_worker_thread+0x10/0x10
[  654.205080][ T5236]  kthread+0x2c1/0x3a0
[  654.209172][ T5236]  ? _raw_spin_unlock_irq+0x23/0x50
[  654.214394][ T5236]  ? __pfx_kthread+0x10/0x10
[  654.219016][ T5236]  ret_from_fork+0x45/0x80
[  654.223467][ T5236]  ? __pfx_kthread+0x10/0x10
[  654.228072][ T5236]  ret_from_fork_asm+0x1a/0x30
[  654.232876][ T5236]  </TASK>
[  654.260098][ T5236] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  654.274380][ T5236] Bluetooth: hci4: failed to register connection device
[  654.348444][ T5272] usb 2-1: device descriptor read/8, error -71
[  654.888482][T11981] 9pnet_fd: Insufficient options for proto=fd
[  655.027699][ T5272] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  655.073062][   T29] audit: type=1400 audit(1729280353.639:514): avc:  denied  { listen } for  pid=11983 comm="syz.1.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  655.104594][   T29] audit: type=1400 audit(1729280353.649:515): avc:  denied  { read } for  pid=11983 comm="syz.1.1879" path="socket:[39373]" dev="sockfs" ino=39373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  655.240701][ T5272] usb 2-1: device not accepting address 36, error -71
[  655.248226][ T5272] usb usb2-port1: unable to enumerate USB device
[  655.833784][   T29] audit: type=1400 audit(1729280354.359:516): avc:  denied  { getopt } for  pid=11983 comm="syz.1.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  656.499848][ T5225] Bluetooth: min 0 < 6
[  657.053667][ T5225] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  658.560323][ T5235] Bluetooth: hci4: command tx timeout
[  659.264441][T12029] 9p: Unknown access argument 18446744073709551615: -34
[  659.622841][T12036] usb usb3: usbfs: process 12036 (syz.2.1895) did not claim interface 0 before use
[  659.679710][T12036] siw: device registration error -23
[  659.764725][ T5235] Bluetooth: min 0 < 6
[  661.240238][ T5231] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  661.290344][   T29] audit: type=1400 audit(1729280359.859:517): avc:  denied  { append } for  pid=12060 comm="syz.4.1904" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  661.417000][   T29] audit: type=1400 audit(1729280359.879:518): avc:  denied  { map } for  pid=12060 comm="syz.4.1904" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  661.479405][ T5231] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  661.548341][   T29] audit: type=1400 audit(1729280359.879:519): avc:  denied  { execute } for  pid=12060 comm="syz.4.1904" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  661.572828][ T5231] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8239, setting to 1024
[  661.671681][ T5231] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  661.761503][ T5231] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  661.792684][ T5231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.840595][ T5235] Bluetooth: hci0: command 0x0406 tx timeout
[  661.859536][T12062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  661.915648][ T5231] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  662.419866][  T936] usb 2-1: USB disconnect, device number 37
[  663.316297][T12076] usb usb3: usbfs: process 12076 (syz.4.1908) did not claim interface 0 before use
[  663.338896][T12076] siw: device registration error -23
[  666.850192][ T5274] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  667.114392][ T5274] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  667.130206][ T5274] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8239, setting to 1024
[  667.330254][ T5274] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  667.340786][ T5274] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  667.350476][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.056077][T12111] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  668.167674][ T5274] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  668.306831][T12141] fuse: Bad value for 'group_id'
[  668.311941][T12141] fuse: Bad value for 'group_id'
[  672.434619][ T8918] usb 1-1: USB disconnect, device number 32
[  674.341106][T12166] orangefs_mount: mount request failed with -4
[  674.506038][ T5235] Bluetooth: hci5: command 0x0405 tx timeout
[  674.756939][   T29] audit: type=1400 audit(1729280373.319:520): avc:  denied  { unmount } for  pid=11099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  675.086911][ T5274] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  675.510259][    T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  675.553299][ T5274] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  675.569806][ T5274] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8239, setting to 1024
[  675.581638][ T5274] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  675.592207][ T5274] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  675.604709][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.620416][T12178] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  675.636968][ T5274] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  675.709893][    T9] usb 5-1: Using ep0 maxpacket: 8
[  675.752115][    T9] usb 5-1: no configurations
[  675.757128][    T9] usb 5-1: can't read configurations, error -22
[  675.910175][    T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  675.919901][ T5274] usb 1-1: USB disconnect, device number 33
[  676.240252][    T9] usb 5-1: Using ep0 maxpacket: 8
[  676.254972][    T9] usb 5-1: no configurations
[  676.259594][    T9] usb 5-1: can't read configurations, error -22
[  676.276870][    T9] usb usb5-port1: attempt power cycle
[  677.104851][T12213] orangefs_mount: mount request failed with -4
[  677.237722][    T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  677.266801][    T9] usb 5-1: Using ep0 maxpacket: 8
[  677.338433][    T9] usb 5-1: no configurations
[  677.384765][    T9] usb 5-1: can't read configurations, error -22
[  677.610632][    T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  677.747704][    T9] usb 5-1: Using ep0 maxpacket: 8
[  677.760611][    T9] usb 5-1: no configurations
[  677.765309][    T9] usb 5-1: can't read configurations, error -22
[  677.816768][    T9] usb usb5-port1: unable to enumerate USB device
[  677.897363][T12221] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1957'.
[  677.962055][T12228] sctp: [Deprecated]: syz.1.1955 (pid 12228) Use of int in maxseg socket option.
[  677.962055][T12228] Use struct sctp_assoc_value instead
[  678.230170][ T5272] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  678.397135][ T5272] usb 2-1: config 0 has an invalid interface number: 230 but max is 0
[  678.433034][ T5272] usb 2-1: config 0 has an invalid interface number: 48 but max is 0
[  678.506049][ T5272] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  678.510160][   T51] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  678.604380][ T5272] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  678.676104][   T51] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  678.687480][ T5272] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  678.715565][   T51] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8239, setting to 1024
[  678.730250][   T51] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  678.740753][   T51] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  678.750141][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.763467][T12235] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  678.785692][ T5225] Bluetooth: hci5: link tx timeout
[  678.792223][ T5225] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  678.816410][ T5272] usb 2-1: config 0 has no interface number 0
[  678.821112][   T51] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  678.870234][ T5272] usb 2-1: config 0 has no interface number 1
[  678.880203][ T5272] usb 2-1: config 0 interface 230 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  678.891385][ T5272] usb 2-1: config 0 interface 230 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14
[  678.904875][ T5272] usb 2-1: too many endpoints for config 0 interface 48 altsetting 31: 64, using maximum allowed: 30
[  678.916068][ T5272] usb 2-1: config 0 interface 48 altsetting 31 bulk endpoint 0xB has invalid maxpacket 1024
[  678.926438][ T5272] usb 2-1: config 0 interface 48 altsetting 31 has a duplicate endpoint with address 0x4, skipping
[  678.937247][ T5272] usb 2-1: config 0 interface 48 altsetting 31 has an invalid descriptor for endpoint zero, skipping
[  678.948250][ T5272] usb 2-1: config 0 interface 48 altsetting 31 has a duplicate endpoint with address 0x6, skipping
[  678.959074][ T5272] usb 2-1: config 0 interface 48 altsetting 31 has 8 endpoint descriptors, different from the interface descriptor's value: 64
[  678.972543][ T5272] usb 2-1: config 0 interface 48 has no altsetting 0
[  679.110666][ T5272] usb 2-1: New USB device found, idVendor=0c52, idProduct=2832, bcdDevice=fb.70
[  679.119783][ T5272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.220944][ T5272] usb 2-1: Product: syz
[  679.225174][ T5272] usb 2-1: Manufacturer: syz
[  679.328530][ T5272] usb 2-1: SerialNumber: syz
[  679.361318][ T5272] usb 2-1: config 0 descriptor??
[  679.592811][ T5272] ftdi_sio 2-1:0.230: FTDI USB Serial Device converter detected
[  679.601174][ T5272] ftdi_sio ttyUSB0: unknown device type: 0xfb70
[  679.772599][    T9] usb 4-1: USB disconnect, device number 28
[  680.880458][ T5225] Bluetooth: hci5: command 0x0405 tx timeout
[  680.982990][ T5272] ftdi_sio 2-1:0.48: FTDI USB Serial Device converter detected
[  680.998409][ T5272] ftdi_sio ttyUSB1: unknown device type: 0xfb70
[  681.030383][ T5272] usb 2-1: USB disconnect, device number 38
[  681.079355][ T5272] ftdi_sio 2-1:0.230: device disconnected
[  681.090751][T12267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1970'.
[  681.106848][ T5272] ftdi_sio 2-1:0.48: device disconnected
[  683.484566][T12298] binder_alloc: 12297: binder_alloc_buf, no vma
[  683.764319][ T5225] Bluetooth: hci5: command 0x0405 tx timeout
[  684.087417][T12314] Cannot find set identified by id 0 to match
[  686.000169][  T939] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  686.302310][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  686.310145][  T939] usb 2-1: Using ep0 maxpacket: 8
[  686.316772][  T939] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  686.330922][  T939] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  686.342005][  T939] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  686.355921][  T939] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  686.365810][  T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.412477][T12339] 9pnet_fd: Insufficient options for proto=fd
[  687.041753][  T939] usb 2-1: can't set config #1, error -71
[  687.049403][  T939] usb 2-1: USB disconnect, device number 39
[  689.202251][ T5225] Bluetooth: hci5: command 0x0405 tx timeout
[  689.829678][   T29] audit: type=1400 audit(1729280388.389:521): avc:  denied  { connect } for  pid=12372 comm="syz.1.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  690.446947][  T939] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  690.913899][  T939] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  691.038997][  T939] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8239, setting to 1024
[  691.064548][  T939] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  691.200636][  T939] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  691.212676][  T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.371488][T12383] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  691.636038][  T939] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  691.736754][  T939] usb 4-1: USB disconnect, device number 29
[  691.902946][T11066] udevd[11066]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  693.142190][T12400] kvm: kvm [12398]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111
[  693.479904][   T29] audit: type=1400 audit(1729280392.039:522): avc:  denied  { create } for  pid=12423 comm="syz.0.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  693.539323][   T29] audit: type=1400 audit(1729280392.039:523): avc:  denied  { write } for  pid=12423 comm="syz.0.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  694.503667][ T5225] Bluetooth: hci5: command 0x0405 tx timeout
[  696.020774][   T29] audit: type=1804 audit(1729280392.439:524): pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2025" name="/newroot/252/file0/bus" dev="ramfs" ino=40665 res=1 errno=0
[  697.301928][T12450] binder_alloc: 12444: binder_alloc_buf, no vma
[  697.774033][T12465] misc userio: No port type given on /dev/userio
[  698.602014][   T51] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  698.761434][   T51] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  698.786673][   T51] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8239, setting to 1024
[  698.819282][   T51] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  698.840978][   T51] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  698.860141][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.885557][T12452] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  698.913997][   T51] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  699.122031][  T939] usb 3-1: USB disconnect, device number 29
[  699.820220][ T5225] Bluetooth: hci5: command 0x0405 tx timeout
[  701.520668][T12499] netlink: 'syz.2.2045': attribute type 4 has an invalid length.
[  702.193954][T12509] mmap: syz.3.2049 (12509) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  704.405075][ T5235] ==================================================================
[  704.413213][ T5235] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x22a/0x240
[  704.422198][ T5235] Read of size 8 at addr ffff888051b0d580 by task kworker/u9:5/5235
[  704.430541][ T5235] 
[  704.432959][ T5235] CPU: 1 UID: 0 PID: 5235 Comm: kworker/u9:5 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[  704.443831][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  704.453915][ T5235] Workqueue: hci5 hci_rx_work
[  704.458634][ T5235] Call Trace:
[  704.461925][ T5235]  <TASK>
[  704.464871][ T5235]  dump_stack_lvl+0x116/0x1f0
[  704.469605][ T5235]  print_report+0xc3/0x620
[  704.474085][ T5235]  ? __virt_addr_valid+0x5e/0x590
[  704.479147][ T5235]  ? __phys_addr+0xc6/0x150
[  704.483678][ T5235]  kasan_report+0xd9/0x110
[  704.488131][ T5235]  ? l2cap_sock_new_connection_cb+0x22a/0x240
[  704.494236][ T5235]  ? l2cap_sock_new_connection_cb+0x22a/0x240
[  704.500487][ T5235]  l2cap_sock_new_connection_cb+0x22a/0x240
[  704.506430][ T5235]  l2cap_connect_cfm+0x4c9/0xf80
[  704.511399][ T5235]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  704.516906][ T5235]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  704.522392][ T5235]  le_conn_complete_evt+0x1662/0x1d80
[  704.527797][ T5235]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  704.533830][ T5235]  ? trace_contention_end+0xea/0x140
[  704.539170][ T5235]  hci_le_conn_complete_evt+0x23c/0x370
[  704.544758][ T5235]  hci_le_meta_evt+0x2e2/0x5d0
[  704.549559][ T5235]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  704.555660][ T5235]  hci_event_packet+0x666/0x1180
[  704.560628][ T5235]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  704.566124][ T5235]  ? __pfx_hci_event_packet+0x10/0x10
[  704.571574][ T5235]  ? mark_held_locks+0x9f/0xe0
[  704.576370][ T5235]  ? kcov_remote_start+0x3cf/0x6e0
[  704.581512][ T5235]  ? lockdep_hardirqs_on+0x7c/0x110
[  704.586756][ T5235]  hci_rx_work+0x2c6/0x16c0
[  704.591742][ T5235]  ? lock_acquire+0x2f/0xb0
[  704.596275][ T5235]  ? process_one_work+0x921/0x1ba0
[  704.601422][ T5235]  process_one_work+0x9c5/0x1ba0
[  704.606393][ T5235]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  704.612313][ T5235]  ? __pfx_process_one_work+0x10/0x10
[  704.617890][ T5235]  ? assign_work+0x1a0/0x250
[  704.622519][ T5235]  worker_thread+0x6c8/0xf00
[  704.627142][ T5235]  ? __pfx_worker_thread+0x10/0x10
[  704.632277][ T5235]  kthread+0x2c1/0x3a0
[  704.636383][ T5235]  ? _raw_spin_unlock_irq+0x23/0x50
[  704.641613][ T5235]  ? __pfx_kthread+0x10/0x10
[  704.646238][ T5235]  ret_from_fork+0x45/0x80
[  704.650684][ T5235]  ? __pfx_kthread+0x10/0x10
[  704.655323][ T5235]  ret_from_fork_asm+0x1a/0x30
[  704.660159][ T5235]  </TASK>
[  704.663200][ T5235] 
[  704.665542][ T5235] Allocated by task 5235:
[  704.669894][ T5235]  kasan_save_stack+0x33/0x60
[  704.674600][ T5235]  kasan_save_track+0x14/0x30
[  704.679304][ T5235]  __kasan_kmalloc+0xaa/0xb0
[  704.683927][ T5235]  __kmalloc_noprof+0x1e8/0x400
[  704.688816][ T5235]  sk_prot_alloc+0x1a8/0x2a0
[  704.693474][ T5235]  sk_alloc+0x36/0xb90
[  704.697675][ T5235]  bt_sock_alloc+0x3b/0x3a0
[  704.702228][ T5235]  l2cap_sock_alloc.constprop.0+0x35/0x180
[  704.708083][ T5235]  l2cap_sock_new_connection_cb+0x101/0x240
[  704.714020][ T5235]  l2cap_connect_cfm+0x4c9/0xf80
[  704.718992][ T5235]  le_conn_complete_evt+0x1662/0x1d80
[  704.724422][ T5235]  hci_le_conn_complete_evt+0x23c/0x370
[  704.729995][ T5235]  hci_le_meta_evt+0x2e2/0x5d0
[  704.734793][ T5235]  hci_event_packet+0x666/0x1180
[  704.739756][ T5235]  hci_rx_work+0x2c6/0x16c0
[  704.744294][ T5235]  process_one_work+0x9c5/0x1ba0
[  704.749260][ T5235]  worker_thread+0x6c8/0xf00
[  704.753882][ T5235]  kthread+0x2c1/0x3a0
[  704.757989][ T5235]  ret_from_fork+0x45/0x80
[  704.762443][ T5235]  ret_from_fork_asm+0x1a/0x30
[  704.767255][ T5235] 
[  704.769597][ T5235] Freed by task 12523:
[  704.773701][ T5235]  kasan_save_stack+0x33/0x60
[  704.778403][ T5235]  kasan_save_track+0x14/0x30
[  704.783119][ T5235]  kasan_save_free_info+0x3b/0x60
[  704.788192][ T5235]  __kasan_slab_free+0x51/0x70
[  704.792999][ T5235]  kfree+0x14f/0x4b0
[  704.796935][ T5235]  __sk_destruct+0x5eb/0x720
[  704.801577][ T5235]  sk_destruct+0xc2/0xf0
[  704.805901][ T5235]  __sk_free+0xf4/0x3e0
[  704.810105][ T5235]  sk_free+0x6a/0x90
[  704.814043][ T5235]  l2cap_sock_kill+0x171/0x2d0
[  704.818868][ T5235]  l2cap_sock_cleanup_listen+0x3d/0x2a0
[  704.824458][ T5235]  l2cap_sock_release+0x5c/0x210
[  704.829438][ T5235]  __sock_release+0xb0/0x270
[  704.834065][ T5235]  sock_close+0x1c/0x30
[  704.838250][ T5235]  __fput+0x3f6/0xb60
[  704.840855][T12531] binder_alloc: 12530: binder_alloc_buf, no vma
[  704.842240][ T5235]  task_work_run+0x14e/0x250
[  704.842268][ T5235]  get_signal+0x1ca/0x2770
[  704.857539][ T5235]  arch_do_signal_or_restart+0x90/0x7e0
[  704.863124][ T5235]  syscall_exit_to_user_mode+0x150/0x2a0
[  704.868896][ T5235]  do_syscall_64+0xda/0x250
[  704.873618][ T5235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.879570][ T5235] 
[  704.881948][ T5235] The buggy address belongs to the object at ffff888051b0d000
[  704.881948][ T5235]  which belongs to the cache kmalloc-2k of size 2048
[  704.896124][ T5235] The buggy address is located 1408 bytes inside of
[  704.896124][ T5235]  freed 2048-byte region [ffff888051b0d000, ffff888051b0d800)
[  704.910132][ T5235] 
[  704.912475][ T5235] The buggy address belongs to the physical page:
[  704.919000][ T5235] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51b08
[  704.927785][ T5235] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  704.936313][ T5235] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  704.943888][ T5235] page_type: f5(slab)
[  704.947903][ T5235] raw: 00fff00000000040 ffff88801b042000 ffffea0001e8d600 dead000000000002
[  704.956546][ T5235] raw: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000
[  704.965337][ T5235] head: 00fff00000000040 ffff88801b042000 ffffea0001e8d600 dead000000000002
[  704.974041][ T5235] head: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000
[  704.983180][ T5235] head: 00fff00000000003 ffffea000146c201 ffffffffffffffff 0000000000000000
[  704.991976][ T5235] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  705.000670][ T5235] page dumped because: kasan: bad access detected
[  705.007124][ T5235] page_owner tracks the page as allocated
[  705.013249][ T5235] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8071, tgid 8071 (syz-executor), ts 364335009732, free_ts 364003293789
[  705.036226][ T5235]  post_alloc_hook+0x2d1/0x350
[  705.041025][ T5235]  get_page_from_freelist+0x101e/0x3070
[  705.046628][ T5235]  __alloc_pages_noprof+0x223/0x25a0
[  705.051957][ T5235]  alloc_pages_mpol_noprof+0x2c9/0x610
[  705.057468][ T5235]  new_slab+0x2ba/0x3f0
[  705.061650][ T5235]  ___slab_alloc+0xdac/0x1880
[  705.066346][ T5235]  __slab_alloc.constprop.0+0x56/0xb0
[  705.071745][ T5235]  __kmalloc_cache_noprof+0x2b4/0x300
[  705.077151][ T5235]  rtnl_newlink+0x49/0xa0
[  705.081504][ T5235]  rtnetlink_rcv_msg+0x3c7/0xea0
[  705.086558][ T5235]  netlink_rcv_skb+0x16b/0x440
[  705.091350][ T5235]  netlink_unicast+0x53c/0x7f0
[  705.096149][ T5235]  netlink_sendmsg+0x8b8/0xd70
[  705.100949][ T5235]  __sys_sendto+0x479/0x4d0
[  705.105493][ T5235]  __x64_sys_sendto+0xe0/0x1c0
[  705.110297][ T5235]  do_syscall_64+0xcd/0x250
[  705.114836][ T5235] page last free pid 8 tgid 8 stack trace:
[  705.120655][ T5235]  free_unref_page+0x5f4/0xdc0
[  705.125471][ T5235]  qlist_free_all+0x4e/0x120
[  705.130104][ T5235]  kasan_quarantine_reduce+0x192/0x1e0
[  705.135561][ T5235]  __kasan_slab_alloc+0x69/0x90
[  705.140432][ T5235]  kmem_cache_alloc_node_noprof+0x153/0x310
[  705.146329][ T5235]  __alloc_skb+0x2b1/0x380
[  705.150775][ T5235]  alloc_skb_with_frags+0xe4/0x850
[  705.155920][ T5235]  sock_alloc_send_pskb+0x7f1/0x980
[  705.161133][ T5235]  mld_newpack.isra.0+0x1ed/0x790
[  705.166188][ T5235]  add_grhead+0x299/0x340
[  705.170534][ T5235]  add_grec+0x111e/0x1670
[  705.174875][ T5235]  mld_ifc_work+0x41f/0xca0
[  705.179501][ T5235]  process_one_work+0x9c5/0x1ba0
[  705.184996][ T5235]  worker_thread+0x6c8/0xf00
[  705.189623][ T5235]  kthread+0x2c1/0x3a0
[  705.193731][ T5235]  ret_from_fork+0x45/0x80
[  705.198172][ T5235] 
[  705.200510][ T5235] Memory state around the buggy address:
[  705.206154][ T5235]  ffff888051b0d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  705.214329][ T5235]  ffff888051b0d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  705.222432][ T5235] >ffff888051b0d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  705.230518][ T5235]                    ^
[  705.234608][ T5235]  ffff888051b0d600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  705.242698][ T5235]  ffff888051b0d680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  705.250778][ T5235] ==================================================================
[  705.274332][ T5235] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  705.281684][ T5235] CPU: 1 UID: 0 PID: 5235 Comm: kworker/u9:5 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[  705.292565][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  705.302661][ T5235] Workqueue: hci5 hci_rx_work
[  705.307377][ T5235] Call Trace:
[  705.310667][ T5235]  <TASK>
[  705.313626][ T5235]  dump_stack_lvl+0x3d/0x1f0
[  705.318265][ T5235]  panic+0x71d/0x800
[  705.322470][ T5235]  ? __pfx_panic+0x10/0x10
[  705.326936][ T5235]  ? preempt_schedule_thunk+0x1a/0x30
[  705.332341][ T5235]  ? preempt_schedule_common+0x44/0xc0
[  705.337836][ T5235]  check_panic_on_warn+0xab/0xb0
[  705.342821][ T5235]  end_report+0x117/0x180
[  705.347183][ T5235]  kasan_report+0xe9/0x110
[  705.351626][ T5235]  ? l2cap_sock_new_connection_cb+0x22a/0x240
[  705.357735][ T5235]  ? l2cap_sock_new_connection_cb+0x22a/0x240
[  705.363836][ T5235]  l2cap_sock_new_connection_cb+0x22a/0x240
[  705.369777][ T5235]  l2cap_connect_cfm+0x4c9/0xf80
[  705.374747][ T5235]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  705.380250][ T5235]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  705.385730][ T5235]  le_conn_complete_evt+0x1662/0x1d80
[  705.391659][ T5235]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  705.397597][ T5235]  ? trace_contention_end+0xea/0x140
[  705.403001][ T5235]  hci_le_conn_complete_evt+0x23c/0x370
[  705.408578][ T5235]  hci_le_meta_evt+0x2e2/0x5d0
[  705.413371][ T5235]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  705.419472][ T5235]  hci_event_packet+0x666/0x1180
[  705.424435][ T5235]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  705.432277][ T5235]  ? __pfx_hci_event_packet+0x10/0x10
[  705.437687][ T5235]  ? mark_held_locks+0x9f/0xe0
[  705.442471][ T5235]  ? kcov_remote_start+0x3cf/0x6e0
[  705.447604][ T5235]  ? lockdep_hardirqs_on+0x7c/0x110
[  705.452832][ T5235]  hci_rx_work+0x2c6/0x16c0
[  705.457365][ T5235]  ? lock_acquire+0x2f/0xb0
[  705.461893][ T5235]  ? process_one_work+0x921/0x1ba0
[  705.467035][ T5235]  process_one_work+0x9c5/0x1ba0
[  705.472003][ T5235]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  705.477651][ T5235]  ? __pfx_process_one_work+0x10/0x10
[  705.483209][ T5235]  ? assign_work+0x1a0/0x250
[  705.487839][ T5235]  worker_thread+0x6c8/0xf00
[  705.492560][ T5235]  ? __pfx_worker_thread+0x10/0x10
[  705.497693][ T5235]  kthread+0x2c1/0x3a0
[  705.501979][ T5235]  ? _raw_spin_unlock_irq+0x23/0x50
[  705.507191][ T5235]  ? __pfx_kthread+0x10/0x10
[  705.511820][ T5235]  ret_from_fork+0x45/0x80
[  705.516328][ T5235]  ? __pfx_kthread+0x10/0x10
[  705.521017][ T5235]  ret_from_fork_asm+0x1a/0x30
[  705.526057][ T5235]  </TASK>
[  705.529213][ T5235] Kernel Offset: disabled
[  705.533616][ T5235] Rebooting in 86400 seconds..