last executing test programs:

2.885508241s ago: executing program 2 (id=2828):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @mss={0x2, 0x4367}], 0x3)
r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', <r2=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, <r3=>0x0}, &(0x7f0000000180)=0xc)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="8cae89ae6b0c67f9134d969097279bd267f3a58d0671c407566c10b223b8c10b5f58097d2a5f9c30ef3631e3d1d0fcdc8b1814f6509389bc5f40955a3c594c391c24a89184a0d98daba753942016a5d82b53320a09a8829a2b7cd01a0a36ba90593096eabf8d33c582f786fa01f68fe75597593ffe489d5bd1514fdeff2ab6711b7040bae5ad712806691c56993ab77c165e2c02c0ebadb085d75dfd4715a9f2645175d2ade5a0e21e3f4228d0ea4d6fc0329be158e569eb9555a56b79d098", 0xbf}, {&(0x7f00000002c0)="0428e701c4fb443247cf250109f08ff7ab4dfc539d7fe46667ac6da19ee37020be30c556cdf5cc125713b8b1cb0034fa6b6ce934c2858790d68784d86eac519dd48a9193642f602264b700beb9616cffe3abeb19ac479e479b2fdee3318a94f1ee3d37d3c2482b3ba65f06625d80117e0c299eb99d6f7004", 0x78}], 0x2, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xc}, @loopback}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@cipso={0x86, 0x53, 0x0, [{0x0, 0x9, "59b4f55b6450da"}, {0x6, 0x8, "8c071beef24a"}, {0x2, 0xd, "5b4e1ad2b4c64cc932f434"}, {0x6, 0x12, "20da4899b817622ad0c84681fbdb5fbc"}, {0x2, 0x6, "a7d5bd8d"}, {0x7, 0xc, "514d4d43adbb7fb2073f"}, {0x6, 0x5, "3c8139"}, {0x1, 0x6, "d063ce38"}]}, @lsrr={0x83, 0x7, 0xcd, [@empty]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0xd8}}, {{&(0x7f0000000480)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000004c0)="7774b29b87489ccca5f1b579e04679a7280b6626afde297e54263193ff8bc8aa54", 0x21}, {&(0x7f0000000500)="dccb32c25a6a335ea3c5feb2b977390ce934301b8432ca4cc739efc62b29f7e64af2d77d115c921ede96a72a51bffc35ba977c4bf947952b91481bd6104dab131e8cad91c89e5e9cf5875d4f0adde142495686385e3db0bfdcf952a23fa3c86f3ebbda1dd4df150d572ba6eac9bc9d5dbcb0943449856b0ee1ff3dfff12b3cb73bb87c709a161cf105953248f21dcbc7664200395e91027faec17224e8370dd0e08002aa8e3abc1e2c70ddf5567c7f825fcf9b6dcc1844fa194053fb417c2ae5", 0xc0}, {&(0x7f00000005c0)="c31dbf841a75890963bfd23a486f942218b09026412659272f918579", 0x1c}, {&(0x7f0000000600)="73fb02403fa78c165942bd59cc980473def172116b8511f537f1ac50f367eaab225bc5234c339def1bbf56a282415d5cb0982a06d8d5fc86361f70ea3d8fdadf01427297eb7c17c76ee93297132ba8cf7a685499e06b8c8ae745ffdb51909ae9f79fb0b04854e4f3b41ab9bb38c4bf662af52cf77d41ce7f1b4e3e4714b5059182c2dfbe44121d5c0ad0af", 0x8b}], 0x4, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000}}], 0x68}}], 0x2, 0x4)
r4 = open(&(0x7f0000000800)='./file0\x00', 0x2000, 0x4)
sendto$packet(r4, &(0x7f0000000840)="73b75383c69b81ad0a1bf389ecb359de55b6210f9ebff91f41216a491c25dfb6e21e2c229911f983565a1aab747dd5333455c292b3b62adec72fea1395c3f71b406220f0183642743abe9df7f936e438937d44ac8b47a5e15826a283ea39b36466de9eaf437856833f98daa2e9ea615ae6e4969f1ab12fd5921527e9e55ee5329a73449c205a0a13c0b106320f506502016fc3674bc5e14447dfad9e09a0a67b1590f228855f60552007cc31d5c6", 0xae, 0x20000004, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r4)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7b}, @void, @val={0xc, 0x99, {0x1000, 0x21}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0x800)
sendto(r4, &(0x7f0000000a40)="c9915b9a08ca4bccbf56e2300643bc73fcd4fb00b760d39e97a999bf09346e63376a715892a15bf0d662a86e69a73f2a7d370e52360f31c58f25b5e9f8de6043cdedac921f2d6f1115e136fb6df4ac22e7d971418b538c373552a73deba2bf0306", 0x61, 0x40, &(0x7f0000000ac0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40))
ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000b80)={'veth1_to_batadv\x00', {0x2, 0x4e20, @local}})
recvfrom(r4, &(0x7f0000000bc0)=""/116, 0x74, 0x40000020, &(0x7f0000000c40)=@ax25={{0x3, @bcast, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r4)
sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040008}, 0x4000080)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000f40)={0x1, &(0x7f0000000f00)=[{0x8, 0x1, 0x4a, 0x949c}]})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), r4)
fstat(r0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
mount$fuse(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0xa0009, &(0x7f00000010c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x100}}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'nl80211\x00'}}]}})
setresuid(r7, r7, r3)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x6, 0x7, 0xc, 0x80000001}, {0xa9c, 0x8, 0x0, 0x2}]})
syz_clone(0x96002000, &(0x7f0000001280), 0x0, &(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)="27a7e98048e3988bd4546f1d31b7085c6ccf518eb74997161adeed90475ff79dc3e66771a87294cc4ba4afdc63e944566394445fbf2703d9c4c25b2ab61379c2c94862a354e8578e36dc6d77a92523ac940f456c5f0556822a5147e24510e41f9c6a65f66def1692a446edc422826f49ab68bd12b01cbf5c2bfb061ee6a6f111fc0508bd6f0dcc114e8016b70c4a67612468de30")
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, 0x4, 0x8, 0x203, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x28}, 0x1, 0x0, 0x0, 0x4884}, 0x4008010)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r5, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x4004)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000001600)={0x2000})
close(r4)

1.970021317s ago: executing program 2 (id=2839):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[])
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd(0x40048c67)
lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0xfffffdfffffffffc, 0x0, 0x1, r4, 0x1})
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x27800000000, 0x0, 0x4, r4})
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close_range(r4, r0, 0x0)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000040))

1.840345378s ago: executing program 2 (id=2843):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
gettid() (async)
r1 = gettid()
capget(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000140)={0x1, 0x8, 0xf5, 0x1, 0x4})
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
socket(0x5, 0x5, 0x0)
socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f0000000b80)="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", 0x314)
r2 = open(&(0x7f0000000700)='./bus\x00', 0x8001121ac2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, 0xffffffffffffffff) (async)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, 0xffffffffffffffff)
r4 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRES16=r4, @ANYRES64=r4], 0x0) (async)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRES16=r4, @ANYRES64=r4], 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
poll(&(0x7f00000001c0)=[{r5, 0x4105}], 0x1, 0x1)

1.139987392s ago: executing program 3 (id=2849):
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000000, 0x482802)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000001c0)={'veth0_vlan\x00', @random="010000201000"})
readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000040)={0x9})
ioctl$BLKRRPART(r2, 0x125f, 0x0)

1.134659352s ago: executing program 3 (id=2850):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
getpeername$packet(r3, 0x0, 0x0)
sendto$packet(r0, &(0x7f0000000340)="0a432e1170e52d29dae2b475", 0xc, 0x8840, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef)

1.063944742s ago: executing program 3 (id=2851):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x8004)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x2a, [0x6, 0x1, 0x5, 0xb, 0x8, 0x155b, 0x6, 0x6, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0x200000e4, 0x6, 0xfc000000, 0x3, 0xbbc, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x1, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8e, 0x79, 0x2, 0x4, 0x20000, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x3, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0x100, 0xffffffff, 0x2, 0xfff, 0x9, 0x101, 0x1, 0x7ff, 0x3, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc67, 0xa8a9, 0x20000073, 0x80008e, 0xd50, 0x7, 0x5, 0x2, 0xfffffff6, 0x4, 0x400a, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x200, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffffff8, 0x401, 0x44a, 0xf1, 0x4, 0xab0003e, 0x5, 0x106, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x8, 0x1cb, 0x1, 0x4, 0x4, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0xc, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000005, 0xb, 0xd0, 0x491, 0x8d3, 0x6, 0x8, 0x10400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x9, 0xfffffffb, 0xb, 0x0, 0x3, 0x9, 0x2, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x4, 0xd3, 0x8, 0x3437, 0x3, 0xfb2, 0xfd, 0x401, 0x101, 0x1dd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x0, 0x2, 0x6, 0x8000, 0xf45, 0x40003, 0xd500, 0x8, 0x67, 0x9, 0x4, 0x10000, 0x9, 0x8, 0x1], [0xa772, 0x1, 0x200005, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x6, 0x7fffffff, 0x17, 0xe, 0x9, 0x81, 0x3, 0x9986, 0xd, 0x807b, 0x8, 0x40f1, 0x2, 0x3, 0xa, 0x80000003, 0x7777, 0x1, 0x6, 0x100, 0x6, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x32, 0x1ff, 0x2000003, 0xfffffffd, 0x10000, 0x0, 0x8001, 0x7ffc, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x7, 0x0, 0xfffffff9, 0xc, 0x6fe, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0xbe24]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x21ac02, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00))
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x2, 0x78, 0x0, 0x0, 0x192, 0x4}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r10, 0x540b, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r11, 0xc040aed5, &(0x7f0000000180)={0x100000})

923.588293ms ago: executing program 0 (id=2852):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0xc080)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x148, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0xffc0}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xd5d}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xf9af}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x10}, 0x20004801)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000540)=<r4=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000580)={"32302e6dad527f0f6b337712e1b108aa", r4, 0x0, {0x0, 0xd}, {0x1, 0x81}, 0x6, [0x3, 0xfffffffffffffffc, 0x6, 0x4942, 0x40, 0x3, 0x3, 0x4, 0xd5c, 0x7, 0x5, 0x1, 0x6, 0xffffffffffff8001, 0x6, 0x8]}) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0) (async)
r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x13c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x98, 0xa8, @random="cf38e552f27513607f1ba9096aa035035ceb1d2b53bca8fa6b2837aba08f3dff13870f9cbbcedccf0e6d5153a2cd753e97fd3508560199dcc119589627a9d2ee932a13b69d03eb38d9f9e29a1afc1827791635563f9e3cef2627d52a6bc697b300871396a77342731387a84f9ed51bb38c78a1551162596c63a3519f3a4cead7741fc9c80614e11c20fe838ece60ed530afb7429"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000cc0)={r6, 0x10001, 0x8, 0x1})
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001100), r5)
sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000001380)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001140)={0x1d0, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x161}, @TIPC_NLA_NODE_ID={0xec, 0x3, "cf191f4286185066e1a543b615fdf1552a1ebfefb437c36b03bd5287bbc2dd6e3cad57411db24824a1258bad14422114912c67f0444bab2a9f27681928578965380418de5167966cd11aed0f2d2e50dc889d82d368939d80a42d5fc13a8e6ea33ea7ed6527e589a6770fcdb1150671f3c8f72bdf9cd33e723bcc18b0ae737007a1ed261526a0e005f60660df2d63beee6fa1ae8ce0a6f5c3f637281747288211c1a70ee6f83f00377c6b481431ce10f68c82f72822b7a5a84ac40110391d68ef9f548b04c08622276770d06737874b5051d0ad4d0096dc5f98e8e69293f7fda2068fcef9933faf10"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "1cf0afdc0139ea1a43ad8e8780ae74f2e6d78a6a3d0d0adf6dfc5628bc"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80010000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010)
write$P9_RLOCK(r5, &(0x7f00000013c0)={0x8, 0x35, 0x1, 0x3}, 0x8)
read$FUSE(r5, &(0x7f0000001400)={0x2020}, 0x2020) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000003540)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003500)={&(0x7f0000003480)={0x54, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xeb}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x69}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x810)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000003600)={{r0}, r4, 0x0, @inherit={0x58, &(0x7f0000003580)={0x1, 0x2, 0x7, 0xb, {0x1, 0x7, 0x82a, 0x8}, [0x3, 0x6]}}, @subvolid=0x4}) (async)
bind$bt_sco(r5, &(0x7f0000004600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000004700)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "a0fc7bcf2b5d1aead47f22a5fc5f6083"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8001)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000004780), r5)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000004940)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004900)={&(0x7f00000047c0)={0x124, r9, 0x22, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x59cf}, {0x6, 0x11, 0x5f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x27f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x400}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async)
r10 = accept4$unix(r5, 0x0, &(0x7f0000004980), 0x0)
close_range(r10, r5, 0x2) (async)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004a00), r5)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000004ac0)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a40)={0x2c, r11, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7f}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xa44c}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7ee6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xed42de54ef82c5f8) (async)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000004b00)={[0xfff, 0x8, 0x7fffffff, 0x5, 0x4, 0x0, 0x0, 0x2, 0xff, 0x5, 0x5, 0x8d, 0xd, 0x3, 0x9, 0x4], 0xeeee0000, 0x2})

859.746774ms ago: executing program 3 (id=2853):
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x2, 0x4e21, 0xfffc, 0xa, 0x20, 0x0, 0x88}, {0x0, 0xfffffffffffffffd, 0x8000000, 0x0, 0xf, 0x0, 0x1000, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x3, 0x3}}, 0xe8)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @rand_addr, 0x2000}, 0x1c)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0)
r2 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x42, 0x80, 0x10}, 0x18)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f00000000c0)=0x4)
ftruncate(r2, 0x3)
write(r1, &(0x7f0000000400)="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", 0xc01)

808.662434ms ago: executing program 3 (id=2854):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0xfffffe6d, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x35}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x40}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"})

711.864395ms ago: executing program 1 (id=2855):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "f95f497d32c4be3a5543070190b24d6938a0a35b2d913a9e644c6936a660db5fbc9b6273be683d60a987deef0dd9462257d8f8df67f381d90ca17e50073a4de6", 0x2f}, 0x48, 0xffffffffffffffff)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8, 0x8000, 0x3, 0x9, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x66, 0xfffe, 0x3, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}})
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x6, 0x1, 0x0, 0x5, 0x81, 0xfff9}, 0x20)
r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$KEYCTL_MOVE(0x1e, r0, r5, r2, 0x1)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2043, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$uinput_user_dev(r7, &(0x7f0000000cc0)={'syz0\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7e2d, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x100000, 0xffffffff, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x8000, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x2007f, 0x0, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x400, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x2000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x9, 0x0, 0x0, 0x0, 0xa6e1, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x6, 0x0, 0x3ff, 0x0, 0x9b0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c)
fcntl$getownex(r3, 0x10, &(0x7f0000000240))
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'pimreg\x00', &(0x7f0000000280)=@ethtool_rxfh={0x47, 0x8, 0x1, 0x101, 0x1, "b2cba8", 0x8000, [0x3]}})
write(r6, &(0x7f0000000000)="e5f6634d7095a8bdd3a5eeb29c7265a833f805a3ae9d4a5f1375bd", 0x1b)
ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)

711.506405ms ago: executing program 0 (id=2856):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000)
pwritev2(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="566bc24be14be4672a05aeb9f4da788aa37adf80b4705a55e343402f715178c216ca50d4366ed14433fe577b27c7235cdb04829695522096322ff21f04d767b2df3e7e0885329c5ad9d54d6ad7f24972651a848d1faa47e4ac3c6b414ef04c6092524427c94a96d349f0edd67063507c4a130415014847c7821596fbe1912ab8ba38ec84caa209674f7e8e77a69ae72832eaf5c4541bf65d3a3bd08e0dbe227f5fbba2b3c69fc60ec8478cc44071fe9359f792d7b394b19f22ae7d6175bf43dadefc488dc6f76ae99a544d03bd0d9e08e69254d3c99e743ec3d801c2e2c9f1b4973c383387", 0xe5}, {&(0x7f0000000000)="5d3c07016cc84e25961c574ad8b9cf328dffafe65e7cf138264de7c8cb48b5ccbac59cefeb6a68216803e1c781cdf8336006bd638e3b2c3cd788e22597a17c0a6fe7e36aaf75f845f23912ce19746bd4cb6cf12e47e2efa311a78651382a5a0ffdbca34344371db09a8af98d5b6af9b49997e94122bf565fda", 0x79}, {&(0x7f00000001c0)="d540389c28a65f0ca99e2275588a5823ea91adac288422261a6f2bbf7239d7880bbd8f439f50c3abd32e84a2c54cd3fb6db1231a2d658ca539e6d04447ab3e5487d8389f2b82985a48efd9fdaf33eff50fabd596898064f69ad8d311162a61351f1ba9de17d01110f26a54b6d93beee4795d88dda3f4", 0x76}, {&(0x7f0000000240)='F', 0x1}, {&(0x7f0000000280)="2b69b0bd5d28439482d5b26426b958f27cdcc12c6173294c6ac31327f6a40ef99c617091ccbb377c4a4064cda9c7999b046b2b71b524f913e3954134773189586f64d5b0fffabeaba431a33fcbb613dbb5c339c2ac88c77b21d7e6a7a15469d11b8c68b5f9d4509f625388f72a828f26c3f8157039b0e9ed6190c0382a1d731b5cd6dad93fd224b9", 0x88}], 0x5, 0x9, 0x3, 0x2)

710.650175ms ago: executing program 3 (id=2857):
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0xfffffffe, 0x930}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001600010000000000040000000a40"], 0x20}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
fchdir(0xffffffffffffffff)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000), 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, &(0x7f00000000c0)=""/19, &(0x7f0000000040)=0x13)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000040))
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})

620.600195ms ago: executing program 0 (id=2858):
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
move_mount(r0, 0x0, r0, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r2, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
ppoll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
write$tcp_mem(r3, 0x0, 0x0)
write$input_event(r3, 0x0, 0x0)
readv(r1, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3)
ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f00000000c0)="b0fe74dd7f2493e04ee9b2837bc6afd38986b2dd606421869c05b33a15cfd76a339745863bfdd10d1ca17f3eccda0c593fd9769d85d77da61cd099d953dfcc772249543b074b20789b0fe9087b3fce1863fdbba478c0c880d002169917dc2b3ae17d3c791152f221ba0b4cab2fef34b8d6e2e710821fad9972d56b0234987bd9d0d2409a8de9b73447106d6c2a18e2ac3af3b0717e49dcf381fd57e3e50100a4b081370edba8f3f1cb721aab871d2b10c3")
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x41, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0})
open_tree(0xffffffffffffff9c, 0x0, 0x89901) (async)
move_mount(r0, 0x0, r0, 0x0, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async)
sendto$inet(r2, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async)
ppoll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x0, 0x0, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') (async)
write$tcp_mem(r3, 0x0, 0x0) (async)
write$input_event(r3, 0x0, 0x0) (async)
readv(r1, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) (async)
ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f00000000c0)="b0fe74dd7f2493e04ee9b2837bc6afd38986b2dd606421869c05b33a15cfd76a339745863bfdd10d1ca17f3eccda0c593fd9769d85d77da61cd099d953dfcc772249543b074b20789b0fe9087b3fce1863fdbba478c0c880d002169917dc2b3ae17d3c791152f221ba0b4cab2fef34b8d6e2e710821fad9972d56b0234987bd9d0d2409a8de9b73447106d6c2a18e2ac3af3b0717e49dcf381fd57e3e50100a4b081370edba8f3f1cb721aab871d2b10c3") (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x41, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) (async)

538.632116ms ago: executing program 1 (id=2859):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
getpeername$packet(r3, 0x0, 0x0)
sendto$packet(r0, &(0x7f0000000340)="0a432e1170e52d29dae2b475", 0xc, 0x8840, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef)

451.548017ms ago: executing program 0 (id=2860):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_targets\x00')
preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffe)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0x6, 0x10, 0x2, 0x9, 0x6})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100))

442.275766ms ago: executing program 0 (id=2861):
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x8108551b, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x51)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

441.334037ms ago: executing program 2 (id=2862):
syz_usb_connect(0x0, 0x5c, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010102ab62584080c80e76fc350102030109024a00010e0ea032090415fb0101030600017c1f05030000020d240f01f8ffffff020009000006241a060000092107005a0122460d09050a022000011000072501011e14f800000000"], &(0x7f0000001b00)={0x0, 0x0, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="050f080001031002d71b47f4c7875655acdea881ab7a99a2edd32fa0996c1e268466392dac0d0fc3a87bb798184b85168339f67b8f04b46d8ab354acfc76d63c795ddc596af4ad73e36b96bb9c43ec2899f3a3814e"], 0x1, [{0x0, 0x0}]}) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0xc00, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async)
mmap$binder(&(0x7f0000a66000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80046) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async)
r2 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a14000000e9033890fa440000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) (async)
r3 = eventfd(0x8) (async)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xffff) (async)
r4 = syz_io_uring_setup(0x50c2, &(0x7f0000000140)={0x0, 0x5e9f, 0x1, 0x3, 0x216}, &(0x7f0000000040), &(0x7f0000000200)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
ppoll(&(0x7f00000001c0)=[{r4, 0x20}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/47, 0x0, 0xeeee0000}) (async)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) (async)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x20}) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r6, &(0x7f0000000080)={@val={0x0, 0x1b}, @val={0x0, 0x1, 0x0, 0x0, 0x3ff, 0x7fff}, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x16, 0x68, 0x0, 0x9, 0x6, 0x0, @private=0xa010101, @multicast1}, "3515"}}}}}, 0x3a)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) (async)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000300)=0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)

417.305387ms ago: executing program 1 (id=2863):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x14, 0x10, 0x1, 0x70bd26, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000080000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600065a2d41be00060005"], 0xe4}}, 0x4000005)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0xfffffffffffffffb, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x9}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

351.920297ms ago: executing program 0 (id=2864):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xfffff000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x2c, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e20, 0x2, 'rr\x00', 0x4, 0x80000001, 0x30}, 0x2c)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238"], 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x200000000, 0x0, 0x5, 0x0, 0x6b, 0x7ff], 0xeeee8000, 0x2019c0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x0, 0x0, 0x0})

350.930887ms ago: executing program 2 (id=2865):
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x6, 0x4) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x802, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x13, 0xa01, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x1, 0x169, @loopback, 0x2}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) (async)
sendto$inet6(r2, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) (async)
write$binfmt_aout(r2, 0x0, 0xfdef)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) (async)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) (async)
sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) (async)
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x800)
getdents(r3, &(0x7f0000000040)=""/212, 0xd4)

252.737558ms ago: executing program 2 (id=2866):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/90, 0x5a, 0x3, 0x8, 0xf, 0x0, 0x7}}, 0x120)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/70], 0x119)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x648c43, 0x0)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2)

195.977448ms ago: executing program 1 (id=2867):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f00000002c0)={0xfffffff7, 0x9, 0xa1a0, 0x9, 0x17, "907a552d4199b85eadc5bf1903e7b4d7d84e61"})
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
close_range(r0, r2, 0x0)

66.634919ms ago: executing program 1 (id=2868):
socket$inet6_udplite(0xa, 0x2, 0x88)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0x5, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x0, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0x5, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000440)='./bus\x00')
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x40000, 0x130)
umount2(&(0x7f0000000100)='./file1\x00', 0x1)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=2869):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c)
setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @flat=@handle={0x73682a85, 0x100, 0x2}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0xc, 0x7, 0x7, 0xfffffffffffff800, 0x7fffffff, 0x81, 0x2, 0x2, 0x6, 0x7, 0x89c2, 0x8, 0xf, 0x7, 0x0, 0x8], 0x1, 0x196901})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

kernel console output (not intermixed with test programs):

 190.668316][ T6972] RIP: 0033:0x7f7b97d8f6c9
[  190.668349][ T6972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.668369][ T6972] RSP: 002b:00007f7b98ca3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  190.668399][ T6972] RAX: ffffffffffffffda RBX: 00007f7b97fe5fa0 RCX: 00007f7b97d8f6c9
[  190.668413][ T6972] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006
[  190.668424][ T6972] RBP: 00007f7b97e11f91 R08: 0000000000000000 R09: 0000000000000000
[  190.668435][ T6972] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  190.668445][ T6972] R13: 00007f7b97fe6038 R14: 00007f7b97fe5fa0 R15: 00007ffe6cd46a28
[  190.668463][ T6972]  </TASK>
[  191.002651][ T6972] rust_binder: Error while translating object.
[  191.002728][ T6972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  191.006262][ T6975] binder: Bad value for 'stats'
[  191.027802][ T6972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55
[  191.045267][ T1068] buffer_io_error: 2 callbacks suppressed
[  191.045288][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  191.121069][ T6977] rust_binder: 44: no such ref 0
[  191.128213][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  191.129635][ T6977] rust_binder: 44: no such ref 6
[  191.151389][ T6977] rust_binder: 44: no such ref 3
[  191.156557][ T6977] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  191.196754][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  191.255025][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.266600][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.272113][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.279054][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.292938][ T6985] rust_binder: Error in use_page_slow: ESRCH
[  191.292963][ T6985] rust_binder: use_range failure ESRCH
[  191.299632][ T6985] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  191.314269][ T6985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  191.329638][ T6985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1418
[  191.418547][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  191.574667][ T6991] binder: Unknown parameter 'context����[7�'
[  191.991565][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  192.001401][ T6997] netlink: 'syz.2.2171': attribute type 4 has an invalid length.
[  192.163246][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  192.313902][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  192.339546][ T7002] rust_binder: 1428: no such ref 3
[  192.353116][ T7002] rust_binder: 1428: no such ref 1
[  192.362902][ T7002] rust_binder: 1428: no such ref 3
[  192.368197][ T7002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1428
[  192.368810][ T7002] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  192.381618][ T7002] rust_binder: Read failure Err(EFAULT) in pid:1428
[  192.457858][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  192.602485][ T7005] rust_binder: Write failure EINVAL in pid:1430
[  192.758103][  T556] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  192.826274][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  192.849818][ T7012] netlink: 'syz.2.2176': attribute type 28 has an invalid length.
[  192.896053][ T7012] netlink: 'syz.2.2176': attribute type 32 has an invalid length.
[  193.093512][ T7023] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  193.094358][ T7023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  193.107360][ T7023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1394
[  193.441535][  T571] cdc_ncm 1-1:1.0: bind() failure
[  193.471690][  T571] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  193.480540][  T571] cdc_ncm 1-1:1.1: bind() failure
[  193.553744][   T36] kauditd_printk_skb: 524 callbacks suppressed
[  193.553765][   T36] audit: type=1400 audit(1762552193.104:8745): avc:  denied  { read write } for  pid=6675 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  193.635877][   T36] audit: type=1400 audit(1762552193.141:8746): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  193.690552][   T36] audit: type=1400 audit(1762552193.141:8747): avc:  denied  { read write open } for  pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  193.731116][ T7040] binder: Binderfs stats mode cannot be changed during a remount
[  193.739358][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  193.780711][   T36] audit: type=1400 audit(1762552193.141:8748): avc:  denied  { ioctl } for  pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  193.849931][   T36] audit: type=1400 audit(1762552193.150:8749): avc:  denied  { read write open } for  pid=6675 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  193.913142][   T36] audit: type=1400 audit(1762552193.150:8750): avc:  denied  { ioctl } for  pid=6675 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  193.966633][   T36] audit: type=1400 audit(1762552193.160:8751): avc:  denied  { read write } for  pid=7035 comm="syz.2.2185" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  194.014116][   T36] audit: type=1400 audit(1762552193.160:8752): avc:  denied  { read write open } for  pid=7035 comm="syz.2.2185" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  194.063906][   T36] audit: type=1400 audit(1762552193.169:8753): avc:  denied  { mounton } for  pid=7036 comm="syz.3.2184" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  194.113719][   T36] audit: type=1400 audit(1762552193.169:8754): avc:  denied  { ioctl } for  pid=7035 comm="syz.2.2185" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  195.028690][  T331] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  195.168548][ T7078] rust_binder: Read failure Err(EAGAIN) in pid:1449
[  195.218257][  T331] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  195.234742][  T331] usb 4-1: config 0 has no interface number 0
[  195.240908][  T331] usb 4-1: config 0 interface 41 has no altsetting 0
[  195.268876][  T331] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  195.305291][  T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.326647][  T331] usb 4-1: Product: syz
[  195.327574][ T7091] binder: Bad value for 'defcontext'
[  195.336201][  T331] usb 4-1: Manufacturer: syz
[  195.345043][  T331] usb 4-1: SerialNumber: syz
[  195.364500][  T331] usb 4-1: config 0 descriptor??
[  195.480919][ T7101] rust_binder: 7095 RLIMIT_NICE not set
[  195.480959][ T7101] rust_binder: 1457: no such ref 0
[  195.490611][ T7100] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 142)
[  195.491736][ T7100] rust_binder: Error while translating object.
[  195.502798][ T7100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  195.515353][ T7100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69
[  195.528141][ T7100] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  195.544659][ T7100] rust_binder: 69: no such ref 1
[  195.582090][ T7106] loop7: detected capacity change from 0 to 7
[  195.588663][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.598046][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.607364][ T7106]  loop7: unable to read partition table
[  195.616076][ T7106] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  195.631823][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.643834][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.654198][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.664470][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.674575][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.684522][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.696952][ T7111] binder: Bad value for 'max'
[  195.766280][ T7113] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  195.777916][ T7113] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true
[  195.784506][ T7113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  195.795366][ T7113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1417
[  195.998663][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.036439][ T7124] SELinux: security_context_str_to_sid () failed with errno=-22
[  196.055064][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.222203][ T7128] /dev/rnullb0: Can't open blockdev
[  196.249391][  T331] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  196.458922][ T7141] /dev/rnullb0: Can't open blockdev
[  196.477489][ T7062] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[  196.488320][  T331] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  196.502183][  T331] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  196.520168][  T331] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  196.530741][  T331] usb 4-1: USB disconnect, device number 40
[  196.593694][ T7151] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  196.720739][ T7154] netlink: 'syz.1.2225': attribute type 1 has an invalid length.
[  196.752315][ T7154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  196.759601][ T7154] IPv6: NLM_F_CREATE should be set when creating new route
[  196.766859][ T7154] IPv6: NLM_F_CREATE should be set when creating new route
[  196.820588][  T342] buffer_io_error: 16 callbacks suppressed
[  196.820608][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  196.851844][ T7163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.877191][ T7163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.936448][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  196.938167][ T7171] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[  196.944909][ T7171] rust_binder: Error while translating object.
[  196.957878][ T7171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  196.964216][ T7171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105
[  197.007308][ T7178] /dev/rnullb0: Can't open blockdev
[  197.030374][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  197.086041][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.094179][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  197.114067][ T7182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.142307][ T7182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.145068][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.237238][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  197.257694][ T7193] loop7: detected capacity change from 0 to 7
[  197.271194][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  197.280440][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  197.290889][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  197.300142][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  197.308221][ T7193]  loop7: unable to read partition table
[  197.321347][ T7193] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  197.335683][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  197.344433][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  197.354116][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  197.612405][ T7203] binder: Bad value for 'max'
[  197.672029][   T10] usb 3-1: new full-speed USB device number 65 using dummy_hcd
[  197.843958][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  197.855010][   T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  197.864105][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.873627][   T10] usb 3-1: config 0 descriptor??
[  197.888094][ T7196] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22
[  197.949164][  T331] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  198.110590][  T331] usb 4-1: config 1 has an invalid descriptor of length 27, skipping remainder of the config
[  198.121036][  T331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  198.132602][  T331] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  198.141833][  T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  198.150038][  T331] usb 4-1: SerialNumber: syz
[  198.240675][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.265013][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.351580][   T10] hid-generic 0003:04F3:0755.001D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  198.394309][  T331] usb 4-1: 0:2 : does not exist
[  198.407555][  T331] usb 4-1: unit 5: unexpected type 0x0a
[  198.427290][  T331] usb 4-1: USB disconnect, device number 41
[  198.564719][  T332] usb 3-1: USB disconnect, device number 65
[  198.582700][ T1068] udevd[1068]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  198.886658][ T7226] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  198.887093][   T36] kauditd_printk_skb: 876 callbacks suppressed
[  198.887111][   T36] audit: type=1400 audit(1762556550.099:9631): avc:  denied  { ioctl } for  pid=7225 comm="syz.1.2249" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  198.888347][ T7226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  198.900502][   T36] audit: type=1400 audit(1762556550.108:9632): avc:  denied  { call } for  pid=7225 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  198.940076][ T7226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1438
[  198.953845][   T36] audit: type=1400 audit(1762556550.146:9633): avc:  denied  { ioctl } for  pid=7221 comm="syz.3.2247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  198.988585][   T10] usb 4-1: new low-speed USB device number 42 using dummy_hcd
[  198.997075][   T36] audit: type=1400 audit(1762556550.212:9634): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  199.047044][   T36] audit: type=1400 audit(1762556550.212:9635): avc:  denied  { ioctl } for  pid=7221 comm="syz.3.2247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  199.081284][   T36] audit: type=1400 audit(1762556550.212:9636): avc:  denied  { read write open } for  pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  199.106686][   T36] audit: type=1400 audit(1762556550.212:9637): avc:  denied  { ioctl } for  pid=7221 comm="syz.3.2247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  199.132198][   T36] audit: type=1400 audit(1762556550.212:9638): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  199.164884][   T36] audit: type=1400 audit(1762556550.212:9639): avc:  denied  { ioctl } for  pid=7221 comm="syz.3.2247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  199.213537][   T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  199.228207][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.238870][   T36] audit: type=1400 audit(1762556550.221:9640): avc:  denied  { create } for  pid=7227 comm="syz.1.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  199.269845][   T10] usb 4-1: config 0 descriptor??
[  199.357164][ T7242] /dev/rnullb0: Can't open blockdev
[  199.429137][ T7246] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  199.568351][ T7257] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true
[  199.574956][ T7257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  199.583958][ T7257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1460
[  199.722799][  T571] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  199.791175][ T7281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.799797][ T7281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.809925][ T7281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1469
[  199.900842][  T571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.921164][  T571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.930933][  T571] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  199.940006][  T571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.949610][  T571] usb 3-1: config 0 descriptor??
[  200.332241][ T7286] 9pnet_fd: Insufficient options for proto=fd
[  200.389265][  T571] lenovo 0003:17EF:6047.001E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0
[  200.433485][ T7291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.442099][ T7291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.520825][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.529958][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.605604][  T331] usb 3-1: USB disconnect, device number 66
[  200.965758][   T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  200.975848][   T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  200.986149][   T10] asix 4-1:0.0: probe with driver asix failed with error -71
[  200.994465][   T10] usb 4-1: USB disconnect, device number 42
[  201.214417][ T7322] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  201.215122][ T7318] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true
[  201.233922][ T7318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  201.242817][ T7318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1505
[  201.291161][ T7328] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  201.306196][ T7327] rust_binder: Write failure EINVAL in pid:134
[  201.449170][ T7331] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  201.466052][ T7331] rust_binder: 1510: no such ref 1
[  201.490700][ T7331] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  201.497865][ T7331] rust_binder: 1510: no such ref 2
[  201.505975][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.517286][ T7339] rust_binder: Error while translating object.
[  201.517317][ T7339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  201.541313][ T7339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:139
[  201.561574][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.615868][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.684262][ T7351] rust_binder: Write failure EFAULT in pid:1516
[  201.719072][ T7353] loop7: detected capacity change from 0 to 7
[  201.731860][    C1] blk_print_req_error: 6 callbacks suppressed
[  201.731878][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  201.750475][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  201.759708][ T7353]  loop7: unable to read partition table
[  201.768225][ T7353] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  201.785169][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  201.795123][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  201.805672][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  201.815631][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  201.825518][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  201.836162][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  201.903573][  T331] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  201.946249][ T7360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7360 comm=syz.2.2284
[  201.948358][ T7361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7361 comm=syz.2.2284
[  202.076495][  T331] usb 4-1: Using ep0 maxpacket: 16
[  202.084086][  T331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  202.099537][  T331] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  202.115696][  T331] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40
[  202.124850][  T331] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  202.133270][  T331] usb 4-1: Product: syz
[  202.137456][  T331] usb 4-1: Manufacturer: syz
[  202.144790][  T331] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  202.216443][ T1068] buffer_io_error: 20 callbacks suppressed
[  202.216463][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  202.237290][ T7367] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2287'.
[  202.305964][ T7370] rust_binder: 132: no such ref 2
[  202.486051][  T332] usb 4-1: USB disconnect, device number 43
[  202.725174][ T7388] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  202.725201][ T7388] rust_binder: Read failure Err(EFAULT) in pid:149
[  202.726386][ T7389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  202.739937][ T7389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149
[  202.913470][ T7404] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  202.964315][ T7406] rust_binder: Got transaction with invalid offset.
[  202.964355][ T7406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  202.971078][ T7406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167
[  202.982128][ T7407] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  203.040541][ T7411] rust_binder: Write failure EFAULT in pid:172
[  203.060130][ T7413] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  203.152742][ T7418] sit0: left allmulticast mode
[  203.172015][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  203.190544][ T7418] netlink: 'syz.1.2302': attribute type 1 has an invalid length.
[  203.218994][ T7418] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2302'.
[  203.233428][ T7426] cgroup: subsys name conflicts with all
[  203.332472][ T7431] fuse: Bad value for 'fd'
[  203.461907][  T571] usb 3-1: new full-speed USB device number 67 using dummy_hcd
[  203.482826][ T7442] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  203.483516][ T7442] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true
[  203.490142][ T7442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  203.508306][ T7442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1488
[  203.644314][  T571] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.681065][  T571] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  203.697093][  T571] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  203.706547][  T571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  203.716772][  T571] usb 3-1: SerialNumber: syz
[  203.727997][  T571] usb 3-1: 0:2 : does not exist
[  203.840441][ T7463] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  203.866159][ T7465] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  203.960598][  T571] usb 3-1: USB disconnect, device number 67
[  204.040255][ T7476] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  204.044796][ T7476] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true
[  204.056592][ T7476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  204.071283][  T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  204.097181][ T7476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1540
[  204.121782][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  204.209391][ T7481] SELinux: security_context_str_to_sid () failed with errno=-22
[  204.237680][   T36] kauditd_printk_skb: 978 callbacks suppressed
[  204.237698][   T36] audit: type=1400 audit(1762556555.118:10619): avc:  denied  { create } for  pid=7472 comm="syz.1.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  204.287956][   T36] audit: type=1400 audit(1762556555.156:10620): avc:  denied  { read write } for  pid=7480 comm="syz.2.2319" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  204.327357][   T36] audit: type=1400 audit(1762556555.156:10621): avc:  denied  { open } for  pid=7480 comm="syz.2.2319" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  204.355572][   T36] audit: type=1400 audit(1762556555.156:10622): avc:  denied  { read write } for  pid=7480 comm="syz.2.2319" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  204.380121][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  204.385744][ T7483] audit: audit_backlog=65 > audit_backlog_limit=64
[  204.392519][ T7488] audit: audit_backlog=65 > audit_backlog_limit=64
[  204.401730][ T7483] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  204.401749][ T7483] audit: backlog limit exceeded
[  204.401930][ T7483] audit: audit_backlog=65 > audit_backlog_limit=64
[  204.422145][ T7488] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  204.449209][ T7491] /dev/rnullb0: Can't open blockdev
[  204.511761][ T7492] ./cgroup: Can't lookup blockdev
[  204.596092][ T7499] binder: Bad value for 'stats'
[  204.620838][ T7504] loop7: detected capacity change from 0 to 7
[  204.631755][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.640969][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.653060][ T7504]  loop7: unable to read partition table
[  204.653106][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.668053][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.669063][ T7504] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  204.682779][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.699198][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.707782][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.716564][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.718547][ T7509] binder: Binderfs stats mode cannot be changed during a remount
[  204.968140][ T7523] netlink: 'syz.3.2333': attribute type 1 has an invalid length.
[  205.051480][ T7528] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2335'.
[  205.060663][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2335'.
[  205.175069][ T7536] fuse: Unknown parameter '�����'
[  205.245192][ T7538] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  205.246009][ T7538] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  205.253125][ T7538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  205.261662][ T7538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1550
[  205.279794][ T7538] kernel read not supported for file /policy (pid: 7538 comm: syz.2.2339)
[  205.642974][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.652926][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.438255][ T7575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.447141][ T7575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.977160][ T7588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  206.981395][ T7588] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  206.987953][ T7588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  206.996066][ T7588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1568
[  207.040907][ T7589] input: syz1 as /devices/virtual/input/input31
[  207.086314][ T7593] rust_binder: 1570: no such ref 0
[  207.091568][ T7593] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  207.091586][ T7593] rust_binder: Read failure Err(EFAULT) in pid:1570
[  207.325315][ T7606] rust_binder: 219: no such ref 1
[  207.566858][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.575759][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.629998][ T7620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229
[  208.236743][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2368'.
[  208.259611][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.269535][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.347339][ T7633] binder: Bad value for 'defcontext'
[  208.476031][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.494411][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.510932][ T7661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.533807][ T7661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.776031][   T36] kauditd_printk_skb: 765 callbacks suppressed
[  209.776050][   T36] audit: type=1400 audit(1762556560.325:11376): avc:  denied  { create } for  pid=7664 comm="syz.0.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  209.780174][ T7665] veth0_to_batadv: entered allmulticast mode
[  209.783197][   T36] audit: type=1400 audit(1762556560.325:11377): avc:  denied  { write } for  pid=7664 comm="syz.0.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  209.829651][   T36] audit: type=1400 audit(1762556560.325:11378): avc:  denied  { read } for  pid=7664 comm="syz.0.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  209.850162][   T36] audit: type=1400 audit(1762556560.325:11379): avc:  denied  { create } for  pid=7664 comm="syz.0.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  209.869943][   T36] audit: type=1400 audit(1762556560.325:11380): avc:  denied  { ioctl } for  pid=7664 comm="syz.0.2379" path="socket:[43443]" dev="sockfs" ino=43443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  209.884059][ T7669] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2381'.
[  209.895412][   T36] audit: type=1400 audit(1762556560.325:11381): avc:  denied  { setopt } for  pid=7664 comm="syz.0.2379" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  209.910884][ T7669] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2381'.
[  209.926565][   T36] audit: type=1400 audit(1762556560.354:11382): avc:  denied  { write } for  pid=7664 comm="syz.0.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  209.954713][   T36] audit: type=1400 audit(1762556560.354:11383): avc:  denied  { read } for  pid=7664 comm="syz.0.2379" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  209.978619][   T36] audit: type=1400 audit(1762556560.354:11384): avc:  denied  { open } for  pid=7664 comm="syz.0.2379" path="/dev/binderfs/binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  210.003422][   T36] audit: type=1400 audit(1762556560.354:11385): avc:  denied  { ioctl } for  pid=7664 comm="syz.0.2379" path="/dev/binderfs/binder0" dev="binder" ino=25 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  210.780309][ T1068] buffer_io_error: 10 callbacks suppressed
[  210.780329][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  210.840211][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2384'.
[  210.933308][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  210.933714][ T7685] rust_binder: 251: no such ref 2
[  210.977379][ T7687] /dev/nullb0: Can't lookup blockdev
[  210.982600][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  211.048206][ T7693] __vm_enough_memory: pid: 7693, comm: syz.2.2389, bytes: 18014402804453376 not enough memory for the allocation
[  211.063760][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  211.117999][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  211.234840][ T7703] usb usb7: usbfs: process 7703 (syz.3.2392) did not claim interface 0 before use
[  211.253310][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  211.349922][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.358575][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.409950][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  211.494833][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  211.520693][ T7723] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[  211.998455][ T7733] rust_binder: Failed to allocate buffer. len:224, is_oneway:false
[  212.152480][ T7742] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  212.168650][ T7742] rust_binder: Error while translating object.
[  212.168691][ T7742] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  212.174879][ T7742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:178
[  212.195259][ T7744] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  212.394879][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  212.457466][ T7758] rust_binder: Error while translating object.
[  212.457510][ T7758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  212.463895][ T7758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:291
[  212.476989][  T571] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  212.498514][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.507019][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.551454][ T7762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2414'.
[  212.551875][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  212.562104][ T7762] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2414'.
[  212.647500][  T571] usb 4-1: Using ep0 maxpacket: 32
[  212.654117][  T571] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  212.662848][  T571] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  212.673652][  T571] usb 4-1: config 0 has no interface number 0
[  212.684509][  T571] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  212.708034][  T571] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  212.717178][  T571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.725248][  T571] usb 4-1: Product: syz
[  212.729482][  T571] usb 4-1: Manufacturer: syz
[  212.734762][  T571] usb 4-1: SerialNumber: syz
[  212.741254][  T571] usb 4-1: config 0 descriptor??
[  212.892671][ T1076] usb 3-1: new full-speed USB device number 69 using dummy_hcd
[  212.967903][ T7747] mmap: syz.3.2407 (7747): VmData 29208576 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data.
[  212.981257][   T45] usb 4-1: USB disconnect, device number 44
[  213.069675][ T1076] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  213.081112][ T1076] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  213.096234][ T1076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.107738][ T1076] usb 3-1: config 0 descriptor??
[  213.114877][ T7764] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  213.189501][ T7778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  213.189541][ T7778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295
[  213.361862][ T1076] hid-generic 0003:04F3:0755.001F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  213.563454][ T1536] usb 3-1: USB disconnect, device number 69
[  213.647096][ T7786] rust_binder: Write failure EFAULT in pid:186
[  213.974524][ T7793] netlink: 'syz.1.2423': attribute type 4 has an invalid length.
[  213.988590][ T7793] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2423'.
[  213.997667][   T45] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  214.006556][ T7793] netlink: 'syz.1.2423': attribute type 1 has an invalid length.
[  214.020437][ T7793] netlink: 'syz.1.2423': attribute type 2 has an invalid length.
[  214.195862][   T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.206032][   T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  214.216257][   T45] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  214.225510][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  214.234003][   T45] usb 4-1: SerialNumber: syz
[  214.295384][ T7807] rust_binder: Write failure EINVAL in pid:304
[  214.295418][ T7807] rust_binder: Write failure EINVAL in pid:304
[  214.327517][ T7810] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  214.371264][ T7813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.389663][ T7813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.480869][   T45] usb 4-1: 0:2 : does not exist
[  214.506798][   T45] usb 4-1: USB disconnect, device number 45
[  214.577524][  T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  214.748544][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2434'.
[  214.808259][ T7824] overlayfs: failed to resolve './file1': -2
[  215.042310][ T7832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7832 comm=syz.0.2438
[  215.058985][ T7833] rust_binder: validate_parent_fixup: new_min_offset=38, sg_entry.length=0
[  215.059013][ T7833] rust_binder: Error while translating object.
[  215.068873][ T7833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  215.075097][ T7833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190
[  215.099566][ T7830] rust_binder: Error while translating object.
[  215.109809][   T36] kauditd_printk_skb: 651 callbacks suppressed
[  215.109829][   T36] audit: type=1400 audit(1762556565.326:12037): avc:  denied  { read write open } for  pid=7834 comm="syz.2.2440" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  215.112922][ T7835] binder: Unknown parameter 'defcontext
'
[  215.116022][   T36] audit: type=1400 audit(1762556565.326:12038): avc:  denied  { ioctl } for  pid=7834 comm="syz.2.2440" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  215.163028][ T7830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  215.238090][ T7830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:313
[  215.258768][   T36] audit: type=1400 audit(1762556565.335:12039): avc:  denied  { mounton } for  pid=7834 comm="syz.2.2440" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  215.305557][   T36] audit: type=1400 audit(1762556565.391:12040): avc:  denied  { read write } for  pid=6675 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.333558][ T7844] rust_binder: Error in use_page_slow: ESRCH
[  215.333577][ T7844] rust_binder: use_range failure ESRCH
[  215.356283][   T36] audit: type=1400 audit(1762556565.391:12041): avc:  denied  { read write open } for  pid=6675 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.389515][   T36] audit: type=1400 audit(1762556565.391:12042): avc:  denied  { ioctl } for  pid=6675 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.425635][ T7844] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  215.425659][ T7844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  215.432830][   T36] audit: type=1400 audit(1762556565.429:12043): avc:  denied  { read write } for  pid=6675 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.438394][ T7846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:316
[  215.444341][   T36] audit: type=1400 audit(1762556565.429:12044): avc:  denied  { read write open } for  pid=6675 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.482717][ T7844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:194
[  215.502360][   T36] audit: type=1400 audit(1762556565.429:12045): avc:  denied  { ioctl } for  pid=6675 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.538092][   T36] audit: type=1400 audit(1762556565.438:12046): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.569140][ T7846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  215.569178][ T7846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:316
[  215.666466][ T7851] binder: Unknown parameter 'fscontext?}'
[  215.769175][ T7860] rust_binder: Error while translating object.
[  215.769219][ T7860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  215.787492][ T7860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:198
[  215.920883][ T7868] IPv6: NLM_F_CREATE should be specified when creating new route
[  216.241097][  T342] buffer_io_error: 9 callbacks suppressed
[  216.241115][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  216.291116][ T7875] kvm: pic: non byte write
[  216.406756][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  216.465506][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  216.571495][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2458'.
[  216.587561][ T7894] rust_binder: Got transaction with invalid offset.
[  216.587617][ T7894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  216.601064][ T7894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:332
[  216.742643][ T7900] rust_binder: Write failure EFAULT in pid:336
[  216.753326][ T7901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204
[  216.765676][ T7900] rust_binder: Write failure EFAULT in pid:336
[  216.791319][ T7905] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  216.893538][ T7909] rust_binder: Write failure EINVAL in pid:208
[  216.904799][ T7917] /dev/rnullb0: Can't open blockdev
[  216.918689][ T7917] /dev/rnullb0: Can't open blockdev
[  216.926188][ T7917] /dev/rnullb0: Can't open blockdev
[  216.937785][ T7917] /dev/rnullb0: Can't open blockdev
[  216.954870][ T7920] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2468'.
[  216.963868][ T7920] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2468'.
[  216.976494][ T7920] netlink: 'syz.3.2468': attribute type 6 has an invalid length.
[  216.984313][ T7920] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2468'.
[  217.081986][ T7926] rust_binder: 353: no such ref 1
[  217.091298][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  217.316081][  T435] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  217.427882][ T1383] Bluetooth: hci0: Frame reassembly failed (-84)
[  217.466039][  T435] usb 3-1: device descriptor read/64, error -71
[  217.721054][  T435] usb 3-1: device descriptor read/64, error -71
[  217.806337][ T1076] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  217.967299][ T1076] usb 4-1: config 0 has an invalid interface number: 182 but max is 1
[  217.975583][ T1076] usb 4-1: config 0 has no interface number 1
[  217.976888][  T435] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  217.982414][ T1076] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  217.998388][ T1076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.007635][ T1076] usb 4-1: config 0 descriptor??
[  218.126142][  T435] usb 3-1: device descriptor read/64, error -71
[  218.237881][ T7946] 9pnet_fd: Insufficient options for proto=fd
[  218.381917][  T435] usb 3-1: device descriptor read/64, error -71
[  218.498777][ T1076] usb 4-1: USB disconnect, device number 46
[  218.510727][  T435] usb usb3-port1: attempt power cycle
[  218.882885][  T435] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  218.905607][  T435] usb 3-1: device descriptor read/8, error -71
[  219.043801][  T435] usb 3-1: device descriptor read/8, error -71
[  219.064085][ T1076] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  219.238669][ T1076] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  219.266574][ T1076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.285882][ T1076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.295829][ T1076] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  219.309200][  T435] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  219.343613][ T1076] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  219.354053][  T435] usb 3-1: device descriptor read/8, error -71
[  219.358218][ T1076] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  219.368772][ T1076] usb 4-1: Manufacturer: syz
[  219.375831][ T1076] usb 4-1: config 0 descriptor??
[  219.502432][  T435] usb 3-1: device descriptor read/8, error -71
[  219.566487][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.575020][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.583938][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.592442][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.601752][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.610339][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.618326][  T556] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  219.618520][  T523] Bluetooth: hci0: command 0x1003 tx timeout
[  219.625416][  T435] usb usb3-port1: unable to enumerate USB device
[  219.634566][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.645929][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.654533][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.663061][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.672119][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.680745][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.689564][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.698065][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.707056][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.715549][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.724069][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.733178][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.741778][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.750843][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.759294][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.768125][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.776610][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.785326][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.794082][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.802988][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.811693][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.820584][ T1076] appleir 0003:05AC:8243.0020: unknown main item tag 0x0
[  219.823311][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.827937][ T1076] appleir 0003:05AC:8243.0020: No inputs registered, leaving
[  219.837408][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.846076][ T1076] appleir 0003:05AC:8243.0020: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  219.854487][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.871018][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.880558][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  219.890808][ T7960] binder: Unknown parameter 'defcontext01777777777777777777777'
[  220.049365][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.058130][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.195337][ T1536] usb 4-1: USB disconnect, device number 47
[  220.355408][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  220.355577][ T7981] netlink: 4432 bytes leftover after parsing attributes in process `syz.2.2487'.
[  220.457520][   T36] kauditd_printk_skb: 727 callbacks suppressed
[  220.457544][   T36] audit: type=1400 audit(1762556570.345:12774): avc:  denied  { read write } for  pid=7980 comm="syz.2.2487" name="binder1" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  220.519146][   T36] audit: type=1400 audit(1762556570.345:12775): avc:  denied  { ioctl } for  pid=7982 comm="syz.3.2488" path="/dev/binderfs/binder1" dev="binder" ino=38 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  220.568514][   T36] audit: type=1400 audit(1762556570.345:12776): avc:  denied  { set_context_mgr } for  pid=7982 comm="syz.3.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  220.590280][   T36] audit: type=1400 audit(1762556570.354:12777): avc:  denied  { create } for  pid=7982 comm="syz.3.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  220.614227][   T36] audit: type=1400 audit(1762556570.354:12778): avc:  denied  { write } for  pid=7982 comm="syz.3.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  220.673534][   T36] audit: type=1400 audit(1762556570.354:12779): avc:  denied  { create } for  pid=7982 comm="syz.3.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  220.726823][   T36] audit: type=1400 audit(1762556570.354:12780): avc:  denied  { write } for  pid=7982 comm="syz.3.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  220.748170][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  220.778180][ T8008] /dev/rnullb0: Can't open blockdev
[  220.791331][   T36] audit: type=1400 audit(1762556570.354:12781): avc:  denied  { ioctl } for  pid=7982 comm="syz.3.2488" path="/dev/binderfs/binder1" dev="binder" ino=38 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  220.819574][   T36] audit: type=1400 audit(1762556570.373:12782): avc:  denied  { create } for  pid=7986 comm="syz.0.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  220.859423][   T36] audit: type=1400 audit(1762556570.373:12783): avc:  denied  { write } for  pid=7986 comm="syz.0.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  220.938806][ T8012] netlink: 'syz.0.2498': attribute type 13 has an invalid length.
[  220.956723][ T8014] rust_binder: Error while translating object.
[  220.956756][ T8014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  220.970105][ T8014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:244
[  221.046979][ T8021] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  221.063560][ T8021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:382
[  221.413779][ T8029] rust_binder: Write failure EFAULT in pid:249
[  221.639614][ T8036] rust_binder: Error while translating object.
[  221.656873][ T8036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  221.701675][ T8036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:256
[  221.736645][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.767630][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.854116][ T8042] 9pnet_fd: Insufficient options for proto=fd
[  221.888215][ T8042] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  221.917497][ T8042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:258
[  221.945129][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  222.071360][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  222.121831][ T8059] rust_binder: 1661: no such ref 2
[  222.148975][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.162548][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.254099][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  222.271014][ T8070] binder: Unknown parameter '0x00000000360fa338Lw'
[  222.332232][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  222.341933][ T8075] rust_binder: Write failure EINVAL in pid:1671
[  222.347886][ T8075] rust_binder: Write failure EINVAL in pid:1671
[  222.497387][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  222.514961][ T8089] __vm_enough_memory: pid: 8089, comm: syz.3.2524, bytes: 18014402804453376 not enough memory for the allocation
[  222.583766][ T8092] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.584367][ T8092] rust_binder: Error while translating object.
[  222.590866][ T8092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  222.605745][ T8092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1679
[  222.815000][ T8105] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  222.855765][ T8107] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2531'.
[  222.924129][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.933793][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.943985][ T1536] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  222.951005][ T8120] /dev/rnullb0: Can't open blockdev
[  223.103708][ T1536] usb 4-1: Using ep0 maxpacket: 32
[  223.110163][ T1536] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  223.119049][ T1536] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  223.127751][ T1536] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  223.136761][ T1536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  223.146435][ T1536] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  223.156089][ T1536] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  223.169165][ T1536] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  223.178296][ T1536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.188441][ T1536] usb 4-1: config 0 descriptor??
[  223.446357][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  223.474294][ T1536] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  223.486613][ T1536] usb 4-1: USB disconnect, device number 48
[  223.496199][ T1536] usblp0: removed
[  223.566420][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  223.573659][ T8131] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  223.741636][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  223.786352][ T8138] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  223.817309][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.832496][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.860067][ T8143] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  223.860115][ T8143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  223.871013][ T8143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1688
[  224.009722][ T1536] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  224.077200][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  224.116627][ T8153] kernel read not supported for file /policy (pid: 8153 comm: syz.0.2546)
[  224.119317][ T8156] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  224.130445][ T8153] netlink: 'syz.0.2546': attribute type 1 has an invalid length.
[  224.149832][ T8153] rust_binder: Write failure EFAULT in pid:426
[  224.178111][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  224.202060][ T1536] usb 4-1: Using ep0 maxpacket: 32
[  224.236306][ T1536] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  224.261265][ T1536] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  224.270383][ T1536] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  224.279872][ T1536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  224.290004][ T1536] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  224.302589][ T1536] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  224.315746][ T1536] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  224.324845][ T1536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.335630][ T1536] usb 4-1: config 0 descriptor??
[  224.351628][ T8177] netlink: 'syz.0.2552': attribute type 1 has an invalid length.
[  224.359550][ T8177] netlink: 'syz.0.2552': attribute type 2 has an invalid length.
[  224.369639][ T8177] netlink: 'syz.0.2552': attribute type 1 has an invalid length.
[  224.377451][ T8177] netlink: 'syz.0.2552': attribute type 2 has an invalid length.
[  224.515528][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.532158][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.566445][ T1536] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  224.598148][ T8187] batadv_slave_1: entered promiscuous mode
[  224.615665][ T8187] batadv_slave_1: left promiscuous mode
[  224.731045][ T8183] random: crng reseeded on system resumption
[  224.756258][ T8190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.770671][ T8190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.780858][ T8190] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2557'.
[  224.883063][ T8193] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  224.883745][ T8194] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  224.912714][ T8193] rust_binder: Error while translating object.
[  224.912842][ T8193] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  224.914499][ T8194] rust_binder: Error while translating object.
[  224.926472][ T8193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1702
[  224.930113][ T8194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  224.944786][ T8194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1702
[  225.074191][ T8202] x_tables: unsorted underflow at hook 3
[  225.276730][ T8220] /dev/nullb0: Can't lookup blockdev
[  225.424041][ T8223] rust_binder: Error while translating object.
[  225.424098][ T8223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  225.441319][ T8223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:452
[  225.467987][ T8225] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  225.775637][ T8234] binder: Unknown parameter 'context����[7�'
[  225.819282][   T36] kauditd_printk_skb: 879 callbacks suppressed
[  225.819303][   T36] audit: type=1400 audit(1762556575.374:13663): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  225.855312][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.877314][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.898819][ T8237] SELinux:  Context system_u:object_r:system_dbusd_var_lib_t:s0 is not valid (left unmapped).
[  225.900820][   T36] audit: type=1400 audit(1762556575.374:13664): avc:  denied  { open } for  pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  225.970639][   T36] audit: type=1400 audit(1762556575.374:13665): avc:  denied  { ioctl } for  pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  225.997060][ T8238] netlink: 'syz.0.2570': attribute type 7 has an invalid length.
[  226.005021][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'.
[  226.018279][   T36] audit: type=1400 audit(1762556575.411:13666): avc:  denied  { create } for  pid=8230 comm="syz.0.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  226.057996][   T36] audit: type=1400 audit(1762556575.411:13667): avc:  denied  { getopt } for  pid=8230 comm="syz.0.2570" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  226.083450][ T8240] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  226.092094][   T36] audit: type=1400 audit(1762556575.411:13668): avc:  denied  { read write } for  pid=8230 comm="syz.0.2570" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  226.138806][   T36] audit: type=1400 audit(1762556575.411:13669): avc:  denied  { read write open } for  pid=8230 comm="syz.0.2570" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  226.165505][ T1076] usb 4-1: USB disconnect, device number 49
[  226.169394][   T36] audit: type=1400 audit(1762556575.411:13670): avc:  denied  { ioctl } for  pid=8230 comm="syz.0.2570" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  226.178609][ T1076] usblp0: removed
[  226.234969][   T36] audit: type=1400 audit(1762556575.411:13671): avc:  denied  { ioctl } for  pid=8230 comm="syz.0.2570" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  226.272972][   T36] audit: type=1400 audit(1762556575.439:13672): avc:  denied  { read write } for  pid=8235 comm="syz.2.2572" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  226.610436][  T435] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  226.770316][ T1536] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  226.778020][  T435] usb 3-1: Using ep0 maxpacket: 8
[  226.784592][  T435] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  226.793788][  T435] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  226.804836][  T435] usb 3-1: config 179 has no interface number 0
[  226.811205][  T435] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  226.825358][  T435] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  226.835017][  T435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.942706][ T1536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.953891][ T1536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.964340][ T1536] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  226.978083][ T1536] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  226.987836][ T1536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.005836][ T1536] usb 4-1: config 0 descriptor??
[  227.462446][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.500172][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.753872][ T1536] usbhid 4-1:0.0: can't add hid device: -71
[  227.788824][ T1536] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  227.815788][ T1536] usb 4-1: USB disconnect, device number 50
[  228.247332][ T8251] rust_binder: Read failure Err(EAGAIN) in pid:284
[  228.507822][ T8257] rust_binder: Write failure EFAULT in pid:290
[  228.934091][ T1536] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  229.139598][ T1536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.164514][ T1536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.180580][ T1536] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  229.198622][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.217655][ T1536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.228760][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.254034][ T1536] usb 4-1: config 0 descriptor??
[  229.464419][ T8280] 9pnet_fd: Insufficient options for proto=fd
[  229.506373][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.523355][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.535064][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.542467][  T571] usb 3-1: USB disconnect, device number 74
[  229.544452][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.573164][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.581815][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.635780][  T342] buffer_io_error: 10 callbacks suppressed
[  229.635824][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  229.654512][ T8287] 9pnet_fd: Insufficient options for proto=fd
[  229.704114][ T1536] wacom 0003:056A:0000.0021: unknown main item tag 0x0
[  229.711066][ T1536] wacom 0003:056A:0000.0021: unknown main item tag 0x0
[  229.718624][ T1536] wacom 0003:056A:0000.0021: unknown main item tag 0x0
[  229.725933][ T1536] wacom 0003:056A:0000.0021: unknown main item tag 0x0
[  229.732819][ T1536] wacom 0003:056A:0000.0021: unknown main item tag 0x0
[  229.739839][ T1536] wacom 0003:056A:0000.0021: unknown main item tag 0x0
[  229.746774][ T1536] wacom 0003:056A:0000.0021: unknown main item tag 0x0
[  229.753857][ T1536] wacom 0003:056A:0000.0021: Unknown device_type for 'HID 056a:0000'. Assuming pen.
[  229.764676][ T1536] wacom 0003:056A:0000.0021: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0
[  229.776726][ T1536] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.0021/input/input34
[  229.918371][ T8296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.938463][ T8296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.955401][  T293] Bluetooth: hci0: Frame reassembly failed (-84)
[  230.010562][  T571] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  230.170436][  T571] usb 3-1: Using ep0 maxpacket: 16
[  230.177207][  T571] usb 3-1: config 254 has an invalid interface number: 215 but max is 0
[  230.187412][  T571] usb 3-1: config 254 has no interface number 0
[  230.193810][  T571] usb 3-1: config 254 interface 215 has no altsetting 0
[  230.204412][  T571] usb 3-1: New USB device found, idVendor=045e, idProduct=0478, bcdDevice=a8.dd
[  230.213593][  T571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.222545][  T571] usb 3-1: Product: syz
[  230.227344][  T571] usb 3-1: Manufacturer: syz
[  230.231975][  T571] usb 3-1: SerialNumber: syz
[  230.239105][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.247681][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.263192][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.272306][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.282721][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.293851][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.453358][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.462599][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.471827][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.483110][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.494838][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.504182][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.522178][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.538438][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.548614][ T8289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.569819][ T8289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.604842][  T571] usb 3-1: unknown interface protocol 0x2, assuming v1
[  230.611841][  T571] usb 3-1: cannot find UAC_HEADER
[  230.625016][  T571] snd-usb-audio 3-1:254.215: probe with driver snd-usb-audio failed with error -22
[  230.637495][  T571] usb 3-1: USB disconnect, device number 75
[  230.668907][  T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:254.215/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  230.804695][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.813349][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.860644][ T8320] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  230.868319][ T8320] SELinux: failed to load policy
[  231.172127][   T36] kauditd_printk_skb: 479 callbacks suppressed
[  231.172150][   T36] audit: type=1400 audit(1762556580.393:14152): avc:  denied  { read write } for  pid=8322 comm="syz.2.2605" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  231.194767][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  231.203303][   T36] audit: type=1400 audit(1762556580.393:14153): avc:  denied  { read write open } for  pid=8322 comm="syz.2.2605" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  231.234658][   T36] audit: type=1400 audit(1762556580.393:14154): avc:  denied  { map } for  pid=8322 comm="syz.2.2605" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  231.240258][ T8328] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  231.258382][   T36] audit: type=1400 audit(1762556580.393:14155): avc:  denied  { read } for  pid=8322 comm="syz.2.2605" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  231.261949][ T8328] raw_sendmsg: syz.2.2606 forgot to set AF_INET. Fix it!
[  231.264867][   T36] audit: type=1400 audit(1762556580.412:14156): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  231.264907][   T36] audit: type=1400 audit(1762556580.412:14157): avc:  denied  { read write open } for  pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  231.264936][   T36] audit: type=1400 audit(1762556580.412:14158): avc:  denied  { ioctl } for  pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  231.290012][ T8328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  231.296686][   T36] audit: type=1400 audit(1762556580.459:14159): avc:  denied  { read } for  pid=8327 comm="syz.2.2606" name="binder1" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  231.319356][ T8328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1743
[  231.345152][   T36] audit: type=1400 audit(1762556580.459:14160): avc:  denied  { open } for  pid=8327 comm="syz.2.2606" path="/dev/binderfs/binder1" dev="binder" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  231.436009][   T36] audit: type=1400 audit(1762556580.459:14161): avc:  denied  { ioctl } for  pid=8327 comm="syz.2.2606" path="/dev/binderfs/binder1" dev="binder" ino=33 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  231.462645][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  231.463512][ T8334] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  231.472721][ T8334] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  231.520918][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  231.540140][ T8338] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false
[  231.540173][ T8338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  231.549701][ T8338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:487
[  231.573058][ T8340] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  231.582752][ T8340] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true
[  231.589228][ T8340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  231.597165][ T8340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1752
[  231.634058][ T8340] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  231.643853][ T8342] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true
[  231.650662][ T8342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  231.659381][ T8342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1752
[  231.699927][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  231.769320][ T8350] syzkaller0: left promiscuous mode
[  231.774579][ T8350] syzkaller0: left allmulticast mode
[  232.003580][ T8363] binder: Bad value for 'max'
[  232.152939][  T523] Bluetooth: hci0: command 0x1003 tx timeout
[  232.152958][  T556] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  232.174430][   T45] usb 4-1: USB disconnect, device number 51
[  232.207610][ T8381] /dev/rnullb0: Can't open blockdev
[  232.411792][ T8399] /dev/rnullb0: Can't open blockdev
[  232.433642][ T8400] /dev/rnullb0: Can't open blockdev
[  232.448968][ T8400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.486522][ T8400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.656845][ T8414] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  232.669746][ T8417] rust_binder: Error while translating object.
[  232.685994][ T8417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  232.694237][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  232.698767][ T8417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1762
[  232.762185][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  232.887089][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  232.904698][ T8396] input: syz1 as /devices/virtual/input/input37
[  232.916704][ T8396] input: failed to attach handler leds to device input37, error: -6
[  232.926179][ T8434] rust_binder: 320: no such ref 0
[  233.060671][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  233.094269][ T8443] overlayfs: statfs failed on './file0'
[  233.228584][  T293] Bluetooth: hci0: Frame reassembly failed (-84)
[  233.312739][  T495] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  233.506604][ T1076] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  233.672952][ T1076] usb 4-1: unable to read config index 0 descriptor/start: -71
[  233.689641][ T1076] usb 4-1: can't read configurations, error -71
[  233.823422][ T8478] rust_binder: 496: no such ref 0
[  233.829069][ T8478] rust_binder: 496: no such ref 16384
[  233.834623][ T8478] rust_binder: 496: no such ref 6
[  233.839721][ T8478] rust_binder: 496: no such ref 3
[  233.844770][ T8478] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  233.881555][ T8481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.894992][ T8481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.905154][ T8481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:498
[  234.034533][ T8486] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2652'.
[  234.053916][ T8486] __vm_enough_memory: pid: 8486, comm: syz.1.2652, bytes: 18014402804453376 not enough memory for the allocation
[  234.255592][ T8497] tipc: Started in network mode
[  234.260501][ T8497] tipc: Node identity 4, cluster identity 4711
[  234.267051][ T8497] tipc: Node number set to 4
[  234.478275][ T8508] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  234.525088][ T8512] netlink: 'syz.3.2661': attribute type 1 has an invalid length.
[  234.538734][ T8514] rust_binder: Write failure EFAULT in pid:504
[  234.566397][ T8512] rust_binder: Got transaction with invalid offset.
[  234.572028][ T8516] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  234.572719][ T8512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  234.579435][ T8516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:506
[  234.586543][ T8512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337
[  234.642209][ T8522] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  234.656415][ T8522] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  234.663016][ T8522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  234.671197][ T8522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:512
[  234.730114][ T8525] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  234.740132][ T8525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  234.746609][ T8525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:514
[  234.788031][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2667'.
[  234.915753][ T8530] rust_binder: Write failure EFAULT in pid:518
[  235.129254][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.146419][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.393195][  T556] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  235.393195][  T523] Bluetooth: hci0: command 0x1003 tx timeout
[  235.712954][ T1536] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  235.839935][ T8547] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2674'.
[  235.850467][ T8547] netlink: 'syz.0.2674': attribute type 4 has an invalid length.
[  235.889133][ T1536] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.899361][ T1536] usb 4-1: config 0 interface 0 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  235.915696][ T1536] usb 4-1: config 0 interface 0 has no altsetting 0
[  235.944714][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.953606][ T1536] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00
[  235.984079][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.997030][ T1536] usb 4-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0
[  236.019387][ T1536] usb 4-1: Manufacturer: syz
[  236.032678][ T1536] usb 4-1: config 0 descriptor??
[  236.220530][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.227724][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.234838][ T8553] bridge_slave_0: entered allmulticast mode
[  236.241365][ T8553] bridge_slave_0: entered promiscuous mode
[  236.252941][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.260081][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.267286][ T8553] bridge_slave_1: entered allmulticast mode
[  236.273654][ T8553] bridge_slave_1: entered promiscuous mode
[  236.625697][   T36] kauditd_printk_skb: 898 callbacks suppressed
[  236.625718][   T36] audit: type=1400 audit(1762556586.514:15060): avc:  denied  { read } for  pid=8560 comm="syz.0.2677" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  236.657891][ T8561] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  236.660351][  T293] bridge_slave_1: left allmulticast mode
[  236.675961][   T36] audit: type=1400 audit(1762556586.542:15061): avc:  denied  { read open } for  pid=8560 comm="syz.0.2677" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  236.682935][  T293] bridge_slave_1: left promiscuous mode
[  236.707593][ T1536] usb 4-1: USB disconnect, device number 54
[  236.719849][ T8562] rust_binder: got new transaction with bad transaction stack
[  236.719875][ T8562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534
[  236.728996][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.735522][   T36] audit: type=1400 audit(1762556586.542:15062): avc:  denied  { ioctl } for  pid=8560 comm="syz.0.2677" path="/dev/binderfs/binder1" dev="binder" ino=26 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  236.772068][   T36] audit: type=1400 audit(1762556586.542:15063): avc:  denied  { map } for  pid=8560 comm="syz.0.2677" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  236.773176][  T293] bridge_slave_0: left allmulticast mode
[  236.797088][   T36] audit: type=1400 audit(1762556586.542:15064): avc:  denied  { read } for  pid=8560 comm="syz.0.2677" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  236.826568][   T36] audit: type=1400 audit(1762556586.542:15065): avc:  denied  { ioctl } for  pid=8560 comm="syz.0.2677" path="/dev/binderfs/binder1" dev="binder" ino=26 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  236.828493][  T293] bridge_slave_0: left promiscuous mode
[  236.853651][   T36] audit: type=1400 audit(1762556586.561:15066): avc:  denied  { sys_module } for  pid=8553 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  236.874828][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.880413][   T36] audit: type=1400 audit(1762556586.598:15067): avc:  denied  { ioctl } for  pid=8560 comm="syz.0.2677" path="/dev/binderfs/binder1" dev="binder" ino=26 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  236.911539][   T36] audit: type=1400 audit(1762556586.598:15068): avc:  denied  { call } for  pid=8560 comm="syz.0.2677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  236.930574][   T36] audit: type=1400 audit(1762556586.598:15069): avc:  denied  { read } for  pid=8560 comm="syz.0.2677" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  237.041216][  T293] tipc: Disabling bearer <udp:syz2>
[  237.050012][  T293] tipc: Left network mode
[  237.080671][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.087770][ T8553] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.095202][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.102274][ T8553] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.195855][ T8570] rust_binder: 346: no such ref 3
[  237.201060][ T8570] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  237.209063][ T8570] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  237.216290][  T293] veth1_macvtap: left promiscuous mode
[  237.217388][ T8570] rust_binder: Write failure EFAULT in pid:346
[  237.222032][  T293] veth0_vlan: left promiscuous mode
[  237.286752][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.295113][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.317065][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.324167][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.336404][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.343501][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.499937][ T8553] veth0_vlan: entered promiscuous mode
[  237.560261][ T8577] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  237.576973][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.601536][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.607795][ T8553] veth1_macvtap: entered promiscuous mode
[  237.674182][ T1076] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  237.866497][ T1076] usb 4-1: unable to get BOS descriptor or descriptor too short
[  237.894661][ T1076] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  237.915701][ T1076] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  237.936714][ T1076] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  237.978652][ T1076] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  237.985951][  T342] buffer_io_error: 3 callbacks suppressed
[  237.985975][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  237.998057][ T1076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.024693][ T1076] usb 4-1: Product: syz
[  238.031066][ T1076] usb 4-1: Manufacturer: syz
[  238.036024][ T1076] usb 4-1: SerialNumber: syz
[  238.047953][ T8633] fuse: Bad value for 'rootmode'
[  238.067121][ T8633] fuse: Bad value for 'user_id'
[  238.082228][ T8633] fuse: Bad value for 'user_id'
[  238.479369][ T1076] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  238.491422][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  238.518142][ T1076] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  238.525761][ T1076] usb 4-1: 2:1 : sample bitwidth 74 in over sample bytes 3
[  238.565308][ T1076] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  238.616735][ T8659] rust_binder: Error in use_page_slow: ESRCH
[  238.616759][ T8659] rust_binder: use_range failure ESRCH
[  238.622828][ T1076] usb 4-1: USB disconnect, device number 55
[  238.624323][ T8659] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  238.635134][ T8659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  238.644026][ T8659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:9
[  238.669226][ T8659] rust_binder: Write failure EINVAL in pid:9
[  238.791908][  T495] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  238.806147][ T8669] rust_binder: 355: no such ref 1
[  238.811514][ T8669] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  238.811537][ T8669] rust_binder: Read failure Err(EFAULT) in pid:355
[  238.856880][  T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  239.027809][ T1536] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  239.198404][ T1536] usb 3-1: Using ep0 maxpacket: 16
[  239.211016][ T1536] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.222454][ T1536] usb 3-1: config 0 interface 0 has no altsetting 0
[  239.229091][ T1536] usb 3-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  239.238412][ T1536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.251893][ T1536] usb 3-1: config 0 descriptor??
[  239.283683][ T1076] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  239.441973][ T8681] rust_binder: 544: no such ref 3
[  239.447188][ T8681] rust_binder: 544: no such ref 1
[  239.452253][ T8681] rust_binder: Write failure EFAULT in pid:544
[  239.483060][ T1536] thrustmaster 0003:044F:B304.0022: item fetching failed at offset 5/7
[  239.518334][ T1536] thrustmaster 0003:044F:B304.0022: parse failed
[  239.520032][ T1076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.536403][ T8685] fuse: Bad value for 'user_id'
[  239.537484][ T1536] thrustmaster 0003:044F:B304.0022: probe with driver thrustmaster failed with error -22
[  239.546433][ T8685] fuse: Bad value for 'user_id'
[  239.558136][ T1076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.568000][ T1076] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  239.582793][ T1076] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  239.615141][ T1076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.644045][ T1076] usb 4-1: config 0 descriptor??
[  239.934030][  T331] usb 2-1: USB disconnect, device number 19
[  240.112419][ T8699] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  240.115599][ T1076] usbhid 4-1:0.0: can't add hid device: -71
[  240.129487][ T8700] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.139682][ T1076] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  240.151912][ T1076] usb 4-1: USB disconnect, device number 56
[  240.160497][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.167663][ T8700] bridge_slave_0: entered allmulticast mode
[  240.174461][ T8700] bridge_slave_0: entered promiscuous mode
[  240.183697][ T8700] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.190823][ T8700] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.198284][ T8700] bridge_slave_1: entered allmulticast mode
[  240.204850][ T8700] bridge_slave_1: entered promiscuous mode
[  240.304010][ T8700] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.311086][ T8700] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.318403][ T8700] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.325457][ T8700] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.378220][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.385537][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.399787][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.406893][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.418143][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.425230][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.506677][ T8700] veth0_vlan: entered promiscuous mode
[  240.543385][ T8700] veth1_macvtap: entered promiscuous mode
[  241.150437][ T8742] rust_binder: Write failure EFAULT in pid:15
[  241.184992][ T8744] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2720'.
[  241.974518][ T1536] usb 3-1: USB disconnect, device number 76
[  242.001563][   T36] kauditd_printk_skb: 1016 callbacks suppressed
[  242.001584][   T36] audit: type=1400 audit(1762556591.552:16086): avc:  denied  { read write } for  pid=8553 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  242.034137][   T36] audit: type=1400 audit(1762556591.552:16087): avc:  denied  { read write open } for  pid=8553 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  242.061546][   T36] audit: type=1400 audit(1762556591.552:16088): avc:  denied  { ioctl } for  pid=8553 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  242.088517][   T36] audit: type=1400 audit(1762556591.589:16089): avc:  denied  { read } for  pid=8756 comm="syz.2.2724" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  242.144027][   T36] audit: type=1400 audit(1762556591.589:16090): avc:  denied  { read open } for  pid=8756 comm="syz.2.2724" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  242.177713][   T36] audit: type=1400 audit(1762556591.589:16091): avc:  denied  { write } for  pid=8756 comm="syz.2.2724" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  242.209211][   T36] audit: type=1400 audit(1762556591.589:16092): avc:  denied  { write } for  pid=8756 comm="syz.2.2724" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  242.209859][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  242.234707][   T36] audit: type=1400 audit(1762556591.589:16093): avc:  denied  { map } for  pid=8756 comm="syz.2.2724" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  242.278168][   T36] audit: type=1400 audit(1762556591.617:16094): avc:  denied  { create } for  pid=8756 comm="syz.2.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  242.300212][   T36] audit: type=1400 audit(1762556591.617:16095): avc:  denied  { write } for  pid=8756 comm="syz.2.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  242.308773][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  242.427980][   T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  242.534561][ T1536] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  242.587827][   T31] usb 2-1: Using ep0 maxpacket: 32
[  242.595012][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.605996][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.615899][   T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  242.624979][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.634915][   T31] usb 2-1: config 0 descriptor??
[  242.663568][   T31] hub 2-1:0.0: USB hub found
[  242.694391][ T1536] usb 3-1: Using ep0 maxpacket: 32
[  242.721729][ T1536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.735427][ T1536] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  242.747203][ T1536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.758689][ T1536] usb 3-1: config 0 descriptor??
[  242.883529][   T31] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  242.920761][   T31] usbhid 2-1:0.0: can't add hid device: -71
[  242.928117][   T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  242.949604][ T8772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:392
[  242.962019][   T31] usb 2-1: USB disconnect, device number 20
[  243.202029][ T1536] saitek 0003:06A3:0CCD.0023: item fetching failed at offset 0/2
[  243.226586][ T1536] saitek 0003:06A3:0CCD.0023: parse failed
[  243.239561][ T1536] saitek 0003:06A3:0CCD.0023: probe with driver saitek failed with error -22
[  243.431175][ T8760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17
[  243.444679][  T331] usb 3-1: USB disconnect, device number 77
[  243.485271][   T31] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  243.552460][ T1068] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  243.682127][  T342] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  243.690556][   T31] usb 4-1: Using ep0 maxpacket: 32
[  243.699872][   T31] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 157, changing to 11
[  243.711814][   T31] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.722765][   T31] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  243.735124][   T31] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  243.748403][   T31] usb 4-1: config 0 interface 0 has no altsetting 0
[  243.756327][   T31] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  243.765502][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.775823][   T31] usb 4-1: config 0 descriptor??
[  243.969921][ T8820] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35
[  243.969950][ T8820] rust_binder: Error while translating object.
[  243.979539][ T8820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  243.987693][ T8820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31
[  243.999387][ T8820] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  244.015756][ T8820] rust_binder: Got transaction with invalid offset.
[  244.023056][ T8820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  244.029911][ T8820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31
[  244.110612][ T8828] fuse: Unknown parameter '0000000000000000000000000000000000000000003'
[  244.228990][   T31] kye 0003:0458:501A.0024: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  244.253097][   T31] kye 0003:0458:501A.0024: unknown main item tag 0x0
[  244.264052][   T31] kye 0003:0458:501A.0024: unknown main item tag 0x0
[  244.271723][   T31] kye 0003:0458:501A.0024: unknown main item tag 0x0
[  244.288449][ T8839] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  244.291397][ T8839] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  244.294304][   T31] kye 0003:0458:501A.0024: unknown main item tag 0x0
[  244.297899][ T8839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:587
[  244.322497][   T31] kye 0003:0458:501A.0024: unknown main item tag 0x0
[  244.354171][   T31] kye 0003:0458:501A.0024: hidraw0: USB HID v0.03 Device [HID 0458:501a] on usb-dummy_hcd.3-1/input0
[  244.368803][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2753'.
[  244.380188][   T31] kye 0003:0458:501A.0024: tablet-enabling feature report not found
[  244.397667][   T31] kye 0003:0458:501A.0024: tablet enabling failed
[  244.458120][ T8785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.485728][ T8785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.562669][  T571] usb 4-1: USB disconnect, device number 57
[  244.584683][ T8845] rust_binder: Write failure EFAULT in pid:44
[  244.624434][ T8854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.650401][ T8854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.668138][ T8855] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  244.762519][  T495] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  244.954058][   T31] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  245.124649][   T31] usb 3-1: Using ep0 maxpacket: 32
[  245.154212][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.171051][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.199452][   T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  245.216111][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.241641][   T31] usb 3-1: config 0 descriptor??
[  245.262619][   T31] hub 3-1:0.0: USB hub found
[  245.429836][ T8890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.444578][ T8890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.493185][   T31] hub 3-1:0.0: 1 port detected
[  245.539958][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.551819][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.701555][ T8899] tipc: Started in network mode
[  245.723382][ T8899] tipc: Node identity 4, cluster identity 4711
[  245.729615][ T8899] tipc: Node number set to 4
[  246.153342][   T45] hub 3-1:0.0: activate --> -90
[  246.305481][ T8902] overlay: Unknown parameter 'audit'
[  246.422694][ T8906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  246.423204][ T8906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  246.431831][ T8906] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false
[  246.439038][ T8906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  246.448452][ T8906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:625
[  246.497903][ T8909] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  246.564308][ T8910] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  246.571137][ T8910] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  246.579575][ T8910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:627
[  246.645976][ T8912] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2776'.
[  246.707932][ T8624] bridge_slave_1: left allmulticast mode
[  246.712884][ T1076] usb 3-1: USB disconnect, device number 78
[  246.715525][ T8624] bridge_slave_1: left promiscuous mode
[  246.726842][ T8624] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.736772][ T8624] bridge_slave_0: left allmulticast mode
[  246.743948][ T8624] bridge_slave_0: left promiscuous mode
[  246.752454][ T8624] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.883577][ T8624] tipc: Left network mode
[  246.886304][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.895417][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.902639][ T8907] bridge_slave_0: entered allmulticast mode
[  246.909566][ T8907] bridge_slave_0: entered promiscuous mode
[  246.917899][ T8624] veth1_macvtap: left promiscuous mode
[  246.958150][ T8907] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.965296][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.972476][ T8907] bridge_slave_1: entered allmulticast mode
[  246.978982][ T8907] bridge_slave_1: entered promiscuous mode
[  247.090009][ T8907] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.097134][ T8907] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.102809][ T8934] rust_binder: 67: no such ref 0
[  247.104452][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.109421][ T8934] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  247.116376][ T8907] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.123524][ T8934] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  247.140030][ T8934] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  247.147332][ T8934] rust_binder: 67: no such ref 0
[  247.197967][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.205555][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.223005][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.230128][ T8618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.249984][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.257090][ T8618] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.343170][   T36] kauditd_printk_skb: 832 callbacks suppressed
[  247.343204][   T36] audit: type=1400 audit(1762556596.571:16928): avc:  denied  { sys_module } for  pid=8907 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  247.413852][   T36] audit: type=1400 audit(1762556596.571:16929): avc:  denied  { sys_module } for  pid=8907 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  247.419209][ T8907] veth0_vlan: entered promiscuous mode
[  247.441470][   T36] audit: type=1400 audit(1762556596.571:16930): avc:  denied  { sys_module } for  pid=8907 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  247.462939][   T36] audit: type=1400 audit(1762556596.571:16931): avc:  denied  { sys_module } for  pid=8907 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  247.512157][   T36] audit: type=1400 audit(1762556596.571:16932): avc:  denied  { sys_module } for  pid=8907 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  247.544360][  T571] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  247.554748][   T36] audit: type=1400 audit(1762556596.571:16933): avc:  denied  { sys_module } for  pid=8907 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  247.558758][ T8907] veth1_macvtap: entered promiscuous mode
[  247.578689][   T36] audit: type=1400 audit(1762556596.571:16934): avc:  denied  { sys_module } for  pid=8907 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  247.604764][   T36] audit: type=1400 audit(1762556596.571:16935): avc:  denied  { sys_module } for  pid=8907 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  247.627914][   T36] audit: type=1400 audit(1762556596.599:16936): avc:  denied  { sys_module } for  pid=8907 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  247.653403][   T36] audit: type=1400 audit(1762556596.599:16937): avc:  denied  { read write } for  pid=8939 comm="syz.2.2783" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  247.704209][ T8948] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2
[  247.711906][ T8948] rust_binder: Write failure EINVAL in pid:36
[  247.736617][  T571] usb 2-1: Using ep0 maxpacket: 32
[  247.750948][  T571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.761911][  T571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.771927][  T571] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  247.781675][  T571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.800142][  T571] usb 2-1: config 0 descriptor??
[  247.813061][  T571] hub 2-1:0.0: USB hub found
[  247.861363][ T8953] /dev/loop0: Can't lookup blockdev
[  248.019504][ T8961] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  248.020272][ T8960] rust_binder: validate_parent_fixup: new_min_offset=39, sg_entry.length=0
[  248.027722][ T8960] rust_binder: Error while translating object.
[  248.030471][  T571] hub 2-1:0.0: 1 port detected
[  248.037987][ T8960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  248.047383][ T8960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8
[  248.568167][ T8971] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  248.581833][ T8972] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  248.810962][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.819717][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.124737][  T571] hub 2-1:0.0: hub_hub_status failed (err = -32)
[  249.140119][  T571] hub 2-1:0.0: config failed, can't get hub status (err -32)
[  249.150943][  T571] usbhid 2-1:0.0: can't add hid device: -32
[  249.157697][  T571] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  249.430845][   T31] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  249.594068][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  249.605582][   T31] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  249.615772][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.626527][   T31] usb 4-1: config 0 descriptor??
[  249.641767][ T8994] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  249.866022][ T9005] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  250.097483][   T31] usbhid 4-1:0.0: can't add hid device: -71
[  250.109993][   T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  250.121080][   T31] usb 4-1: USB disconnect, device number 58
[  250.581908][ T1536] usb 2-1: USB disconnect, device number 21
[  250.705955][ T9013] rust_binder: Write failure EFAULT in pid:660
[  250.923031][   T31] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  250.951482][ T9018] fuseblk: Unknown parameter '��25�g�d'
[  251.095454][   T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  251.107316][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  251.118262][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  251.128075][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  251.141675][   T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  251.151566][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.168906][   T31] usb 4-1: config 0 descriptor??
[  251.433285][ T9035] fuse: Unknown parameter '�r'
[  251.623890][   T31] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving
[  251.670518][   T31] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  251.906728][ T9012] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2805'.
[  251.958499][ T9060] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  251.990575][ T9064] random: crng reseeded on system resumption
[  252.016792][   T31] usb 4-1: USB disconnect, device number 59
[  252.162665][ T9071] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  252.178995][ T9071] rust_binder: 671: no such ref 130
[  252.289637][ T9073] binder: Bad value for 'max'
[  252.410324][ T9084] __vm_enough_memory: pid: 9084, comm: syz.1.2832, bytes: 18014402804453376 not enough memory for the allocation
[  252.508563][ T9082] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  252.704638][   T36] kauditd_printk_skb: 775 callbacks suppressed
[  252.704667][   T36] audit: type=1400 audit(1762556601.600:17713): avc:  denied  { map } for  pid=9105 comm="syz.3.2837" path="socket:[53641]" dev="sockfs" ino=53641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  252.739392][ T9106] rust_binder: Got transaction with invalid offset.
[  252.741607][ T9106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  252.743074][   T36] audit: type=1400 audit(1762556601.600:17714): avc:  denied  { read } for  pid=9105 comm="syz.3.2837" path="socket:[53641]" dev="sockfs" ino=53641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  252.748411][ T9106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28
[  252.758819][   T36] audit: type=1400 audit(1762556601.619:17715): avc:  denied  { read } for  pid=9105 comm="syz.3.2837" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  252.813101][   T36] audit: type=1400 audit(1762556601.619:17716): avc:  denied  { read open } for  pid=9105 comm="syz.3.2837" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  252.837931][   T36] audit: type=1400 audit(1762556601.619:17717): avc:  denied  { ioctl } for  pid=9105 comm="syz.3.2837" path="/dev/binderfs/binder1" dev="binder" ino=20 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  252.863611][   T36] audit: type=1400 audit(1762556601.619:17718): avc:  denied  { set_context_mgr } for  pid=9105 comm="syz.3.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  252.885480][   T36] audit: type=1400 audit(1762556601.619:17719): avc:  denied  { map } for  pid=9105 comm="syz.3.2837" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  252.909484][   T36] audit: type=1400 audit(1762556601.619:17720): avc:  denied  { read } for  pid=9105 comm="syz.3.2837" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  252.933570][   T36] audit: type=1400 audit(1762556601.619:17721): avc:  denied  { ioctl } for  pid=9105 comm="syz.3.2837" path="/dev/binderfs/binder1" dev="binder" ino=20 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  252.959143][   T36] audit: type=1400 audit(1762556601.619:17722): avc:  denied  { call } for  pid=9105 comm="syz.3.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  253.417820][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.459475][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.593416][ T9138] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2845'.
[  253.602453][ T9138] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2845'.
[  253.611424][ T9138] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2845'.
[  253.672875][  T332] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  253.855857][  T332] usb 3-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config
[  253.868456][  T332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  253.879512][  T332] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  253.896131][  T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  253.910658][  T332] usb 3-1: SerialNumber: syz
[  254.136675][  T332] usb 3-1: 0:2 : does not exist
[  254.173297][  T332] usb 3-1: USB disconnect, device number 79
[  254.288143][  T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  254.409892][ T9168] rust_binder: Failed to allocate buffer. len:4294967072, is_oneway:false
[  254.477878][ T9174] __vm_enough_memory: pid: 9174, comm: syz.0.2856, bytes: 18014402804453376 not enough memory for the allocation
[  254.542728][ T9170] input: syz0 as /devices/virtual/input/input40
[  254.584989][ T9175] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  254.617134][ T9177] rust_binder: Write failure EINVAL in pid:690
[  254.677087][ T9175] kvm: pic: non byte write
[  254.808373][ T9197] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2863'.
[  254.817132][ T9196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.834963][ T9196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.837346][ T9197] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2863'.
[  254.868814][ T9197] netlink: 'syz.1.2863': attribute type 5 has an invalid length.
[  254.876663][ T9197] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2863'.
[  254.973991][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  254.992237][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.005883][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.023959][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.033434][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.041652][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.049743][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.057137][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.065131][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.073090][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.081437][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.089359][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.098385][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.106575][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.115441][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.123599][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.131072][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.140318][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.145650][ T8700] ------------[ cut here ]------------
[  255.148630][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.153199][ T8700] WARNING: CPU: 0 PID: 8700 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[  255.160660][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.169930][ T8700] Modules linked in:
[  255.169954][ T8700] CPU: 0 UID: 0 PID: 8700 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  255.192976][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  255.203106][ T8700] RIP: 0010:ovl_dir_modified+0x15a/0x190
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  255.208799][ T8700] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  255.222777][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.228446][ T8700] RSP: 0018:ffffc9000107fb68 EFLAGS: 00010293
[  255.235959][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.241944][ T8700] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff88810ab49300
[  255.249411][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.257289][ T8700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  255.257307][ T8700] RBP: ffffc9000107fb90 R08: ffff88812b4a289f R09: 1ffff11025694513
[  255.281201][ T8700] R10: dffffc0000000000 R11: ffffed1025694514 R12: 0000000000000000
[  255.289250][ T8700] R13: dffffc0000000000 R14: ffff88812b4a2800 R15: ffff888137ab5440
[  255.297314][ T8700] FS:  0000555561811500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  255.297331][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.297360][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.306284][ T8700] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  255.313669][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.321021][ T8700] CR2: 00005555618344e8 CR3: 000000013e5c2000 CR4: 00000000003526b0
[  255.327631][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.327656][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.327680][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.327704][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.327727][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.327753][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.335115][ T8700] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  255.343118][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.350472][ T8700] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  255.350491][ T8700] Call Trace:
[  255.350498][ T8700]  <TASK>
[  255.350508][ T8700]  ovl_do_remove+0x7b8/0xcf0
[  255.402332][ T1076] usb 1-1: USB disconnect, device number 48
[  255.403074][ T8700]  ? ovl_set_redirect+0x780/0x780
[  255.416008][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.417305][ T8700]  ? down_write+0xe9/0x2a0
[  255.423313][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.427843][ T8700]  ? __cfi_down_write+0x10/0x10
[  255.434576][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.440258][ T8700]  ovl_rmdir+0x1e/0x30
[  255.446023][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.452088][ T8700]  vfs_rmdir+0x3dd/0x560
[  255.480061][ T8700]  incfs_kill_sb+0x109/0x230
[  255.484754][ T8700]  deactivate_locked_super+0xd5/0x2a0
[  255.490232][ T8700]  deactivate_super+0xb8/0xe0
[  255.492095][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.495030][ T8700]  cleanup_mnt+0x3f1/0x480
[  255.504361][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.506859][ T8700]  __cleanup_mnt+0x1d/0x40
[  255.514797][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.518671][ T8700]  task_work_run+0x1e0/0x250
[  255.526128][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.530618][ T8700]  ? __cfi_task_work_run+0x10/0x10
[  255.540449][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.543140][ T8700]  ? __x64_sys_umount+0x126/0x170
[  255.555537][ T8700]  ? __cfi___x64_sys_umount+0x10/0x10
[  255.560973][ T8700]  resume_user_mode_work+0x36/0x50
[  255.566125][ T8700]  syscall_exit_to_user_mode+0x64/0xb0
[  255.571654][ T8700]  do_syscall_64+0x64/0xf0
[  255.576106][ T8700]  ? clear_bhb_loop+0x50/0xa0
[  255.580864][ T8700]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  255.586785][ T8700] RIP: 0033:0x7f21aaf909f7
[  255.591241][ T8700] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  255.605850][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.610930][ T8700] RSP: 002b:00007ffcc124d048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  255.619676][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.626741][ T8700] RAX: 0000000000000000 RBX: 00007f21ab011d7d RCX: 00007f21aaf909f7
[  255.635535][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.642097][ T8700] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc124d100
[  255.650917][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.657496][ T8700] RBP: 00007ffcc124d100 R08: 0000000000000000 R09: 0000000000000000
[  255.665508][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.672870][ T8700] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc124e1f0
[  255.682124][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.688289][ T8700] R13: 00007f21ab011d7d R14: 000000000003c3ce R15: 00007ffcc124f2c0
[  255.696264][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.703677][ T8700]  </TASK>
[  255.713186][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.714083][ T8700] ---[ end trace 0000000000000000 ]---
[  255.722031][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.732538][ T8700] ------------[ cut here ]------------
[  255.739780][ T8700] WARNING: CPU: 0 PID: 8700 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[  255.749276][ T8700] Modules linked in:
[  255.753231][ T8700] CPU: 0 UID: 0 PID: 8700 Comm: syz-executor Tainted: G        W          syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  255.766491][ T8700] Tainted: [W]=WARN
[  255.767851][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.770309][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  255.779320][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.788195][ T8700] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  255.796729][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.801091][ T8700] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  255.828133][ T8700] RSP: 0018:ffffc9000107fb68 EFLAGS: 00010293
[  255.834230][ T8700] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff88810ab49300
[  255.836608][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.842272][ T8700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  255.857606][ T8700] RBP: ffffc9000107fb90 R08: ffff88812b4a289f R09: 1ffff11025694513
[  255.865647][ T8700] R10: dffffc0000000000 R11: ffffed1025694514 R12: 0000000000000000
[  255.865663][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.873703][ T8700] R13: dffffc0000000000 R14: ffff88812b4a2800 R15: ffff888137ab5440
[  255.889054][ T8700] FS:  0000555561811500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  255.898051][ T8700] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  255.898069][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.904671][ T8700] CR2: 00005555618344e8 CR3: 000000013e5c2000 CR4: 00000000003526b0
[  255.904694][ T8700] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  255.921861][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.928039][ T8700] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  255.943430][ T8700] Call Trace:
[  255.946730][ T8700]  <TASK>
[  255.949704][ T8700]  ovl_do_remove+0x7b8/0xcf0
[  255.953835][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.954359][ T8700]  ? ovl_set_redirect+0x780/0x780
[  255.961716][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  255.966729][ T8700]  ? down_write+0xe9/0x2a0
[  255.966755][ T8700]  ? __cfi_down_write+0x10/0x10
[  255.983400][ T8700]  ovl_rmdir+0x1e/0x30
[  255.987533][ T8700]  vfs_rmdir+0x3dd/0x560
[  255.991811][ T8700]  incfs_kill_sb+0x1a0/0x230
[  255.996452][ T8700]  deactivate_locked_super+0xd5/0x2a0
[  255.998269][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.001848][ T8700]  deactivate_super+0xb8/0xe0
[  256.013918][ T8700]  cleanup_mnt+0x3f1/0x480
[  256.018382][ T8700]  __cleanup_mnt+0x1d/0x40
[  256.020430][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.022819][ T8700]  task_work_run+0x1e0/0x250
[  256.034822][ T8700]  ? __cfi_task_work_run+0x10/0x10
[  256.039977][ T8700]  ? __x64_sys_umount+0x126/0x170
[  256.045040][ T8700]  ? __cfi___x64_sys_umount+0x10/0x10
[  256.049778][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.050475][ T8700]  resume_user_mode_work+0x36/0x50
[  256.057827][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.062930][ T8700]  syscall_exit_to_user_mode+0x64/0xb0
[  256.075775][ T8700]  do_syscall_64+0x64/0xf0
[  256.080222][ T8700]  ? clear_bhb_loop+0x50/0xa0
[  256.084959][ T8700]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  256.090876][ T8700] RIP: 0033:0x7f21aaf909f7
[  256.092412][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.095341][ T8700] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  256.103190][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.122356][ T8700] RSP: 002b:00007ffcc124d048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  256.138171][ T8700] RAX: 0000000000000000 RBX: 00007f21ab011d7d RCX: 00007f21aaf909f7
[  256.146189][ T8700] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc124d100
[  256.154183][ T8700] RBP: 00007ffcc124d100 R08: 0000000000000000 R09: 0000000000000000
[  256.162213][ T8700] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc124e1f0
[  256.163757][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.170218][ T8700] R13: 00007f21ab011d7d R14: 000000000003c3ce R15: 00007ffcc124f2c0
[  256.185600][ T8700]  </TASK>
[  256.188667][ T8700] ---[ end trace 0000000000000000 ]---
[  256.190484][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.204923][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.213187][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.227950][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.236256][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.244708][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.253393][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.260832][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.279040][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.294908][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.302422][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.319183][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.326632][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.334376][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.341823][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.349629][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.357075][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.365369][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.372912][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.380402][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.387819][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.395287][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.402766][   T31] hid-generic 0003:0008:000F.0026: unknown main item tag 0x0
[  256.422859][   T31] hid-generic 0003:0008:000F.0026: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  256.484587][ T9211] fido_id[9211]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  256.617083][ T8618] bridge_slave_1: left allmulticast mode
[  256.622748][ T8618] bridge_slave_1: left promiscuous mode
[  256.628513][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.636241][ T8618] bridge_slave_0: left allmulticast mode
[  256.641897][ T8618] bridge_slave_0: left promiscuous mode
[  256.647560][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.806768][ T8618] tipc: Left network mode
[  256.871447][ T8618] veth1_macvtap: left promiscuous mode
[  256.876993][ T8618] veth0_vlan: left promiscuous mode
[  258.054521][ T8618] bridge_slave_1: left allmulticast mode
[  258.060188][ T8618] bridge_slave_1: left promiscuous mode
[  258.065866][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.073326][ T8618] bridge_slave_0: left allmulticast mode
[  258.079075][ T8618] bridge_slave_0: left promiscuous mode
[  258.084687][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.092635][ T8618] bridge_slave_1: left allmulticast mode
[  258.098381][ T8618] bridge_slave_1: left promiscuous mode
[  258.103996][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.111631][ T8618] bridge_slave_0: left allmulticast mode
[  258.117300][ T8618] bridge_slave_0: left promiscuous mode
[  258.123011][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.130760][ T8618] bridge_slave_1: left allmulticast mode
[  258.136411][ T8618] bridge_slave_1: left promiscuous mode
[  258.142090][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.149711][ T8618] bridge_slave_0: left allmulticast mode
[  258.155354][ T8618] bridge_slave_0: left promiscuous mode
[  258.161035][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.843955][ T8618] veth1_macvtap: left promiscuous mode
[  258.849510][ T8618] veth0_vlan: left promiscuous mode
[  258.855018][ T8618] veth1_macvtap: left promiscuous mode
[  258.860524][ T8618] veth0_vlan: left promiscuous mode
[  258.866160][ T8618] veth1_macvtap: left promiscuous mode
[  258.871661][ T8618] veth0_vlan: left promiscuous mode
[  258.970753][ T8618] veth0_to_batadv (unregistering): left allmulticast mode