last executing test programs:

1m38.240555852s ago: executing program 1 (id=49):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x88881)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
write$binfmt_elf32(r2, &(0x7f00000020c0)=ANY=[@ANYBLOB="7f454c46040c02050f0000000000000002003e00f7267d0e65"], 0x58)
getpriority(0x2, r3)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2043, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000cc0)={'syz0\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7e2d, 0x0, 0x5, 0x0, 0x40, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x100000, 0xffffffff, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x8000, 0x6], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x2007f, 0x0, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x400, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x2000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x10000, 0x0, 0xfffffffc], [0x0, 0x9, 0x0, 0x0, 0x0, 0xa6e1, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x6, 0x0, 0x3ff, 0x0, 0x9b0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

1m38.171487499s ago: executing program 1 (id=50):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) (async)
socket$key(0xf, 0x3, 0x2) (async)
r1 = socket$inet6(0xa, 0x2, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setreuid(r3, r3)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0xed}})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00"}) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r6 = syz_open_pts(r5, 0x0)
ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000280)={0x800, 0x5, 0xc, 0x80, 0x12, "72512ea630ebbf7abbc24f86d0d8b15c39c403"}) (async)
ioctl$TCXONC(r6, 0x540a, 0x3) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00005a9000/0x3000)=nil, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0xd, 0x59}) (async)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1d, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)
close(r0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) (async)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r8, 0xffffa000)

1m38.077386578s ago: executing program 1 (id=52):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
setresuid(0xee00, 0xee00, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000407e05092040000000000109022d00a9c652010000d000090400fe0503000300092100003301220300090581030000100807090502031000fd0007"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\vU'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = epoll_create(0x800)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000480)={0x2})
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x5, @local, 0x80000}, 0x1c, 0x0, 0x0, &(0x7f0000002ec0)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x26, 0x0, '\x00', [@padn]}}}, @tclass={{0x14, 0x29, 0x43, 0x31c9400}}], 0x38}}], 0x2, 0x0)
r4 = socket$inet6(0xa, 0xa, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x9, 0x6, 0xf, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x7ff, 0x6, 0x5, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0x4, 0xa}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000540)={'syztnl2\x00', <r5=>0x0, 0x10, 0x40, 0x35f9528f, 0x400, {{0x30, 0x4, 0x3, 0x0, 0xc0, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0xb, 0xb9, [@remote, @empty]}, @lsrr={0x83, 0xb, 0xb3, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x110, 0x10, "bd138b95e4a1cce14fe3b6899da4"}, @cipso={0x86, 0x46, 0x3, [{0x0, 0x7, "4dff7f4fed"}, {0x7, 0xd, "436d1b510e88779855b453"}, {0x2, 0xe, "6838cd83df1b5d5e5ae0edbd"}, {0x1, 0xd, "f35b38a2600e90d5f810fa"}, {0x5, 0x11, "1178edb129ce0756c9185c5601a810"}]}, @noop, @generic={0x83, 0xb, "35493da0df8520be0b"}, @timestamp_prespec={0x44, 0x34, 0xf4, 0x3, 0x9, [{@rand_addr=0x64010104, 0x6}, {@broadcast, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@loopback, 0x2}, {@broadcast, 0xffff}, {@remote, 0x5}]}]}}}}})
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in6=@remote, 0x4e23, 0x0, 0x4e23, 0x3, 0x2, 0x20, 0x20, 0x32, r5, 0xee00}, {0x0, 0x0, 0x6, 0x2, 0x10001, 0x8, 0x9, 0x8000000000000000}, {0x1, 0x1, 0x401, 0xfffffffffffeffff}, 0x7, 0x6e6bbc, 0x6da06aa245a5545c, 0x0, 0x2}, {{@in=@empty, 0x4d3, 0x33}, 0x2, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x5, 0x2, 0x10000, 0x9}}, 0xe8)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x6, @remote, 0x2}, 0x1c)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x9, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0xb, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x7, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x2, 0x53cf697b, 0xfffffff9, 0x6, 0xb89, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x543, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x80c8, 0xee1, 0xdb31, 0xffff, 0x3, 0x7f, 0x0, 0x9600, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c17, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0)
read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$INCFS_IOC_PERMIT_FILL(r9, 0x40046721, &(0x7f0000000200)={r7})
r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f00000001c0)={0x0, r8})

1m37.598763183s ago: executing program 1 (id=53):
r0 = socket(0x10, 0x803, 0x0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/54, 0x36}, 0x142)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x82}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x40902, 0x0)
mmap(&(0x7f0000a21000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0xfe221000)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
write$binfmt_misc(r4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./file0\x00')
openat$dir(0xffffffffffffff9c, 0x0, 0x458002, 0xd2)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000357000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000000000/0x2000)=nil)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r5, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet(0x2, 0x1, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r7], 0x1c}}, 0x804)
mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_blocks=E'])
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x21200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x1250, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x41, 0x45, "58c8a51b068a829020bf35397acf76d3ef3d6df47e2d5aae868b0a6641f43ac38462da9fc2faea473f19adbd62550446bed6eb4d3df90126ee68384cc6"}, @NL80211_ATTR_TESTDATA={0x2f, 0x45, "458f5904f4dbc1f290f51d9a2e064eebf72e4bf576a76a6af62fcec6f8d78b2728df75f5750d2008abd7a3"}, @NL80211_ATTR_TESTDATA={0xca, 0x45, "60c1dd75178c9e6622eaa2b3e057e9e10eab49fd7ccaa47ae2741a9973bc5b9ee71a2ef2bb48b083258100189cb488f6f0d22f9222ee10b0ed361324aae8c41f441030b14ee7ff20b132d54c70eab1c42a387ec5c26f2d4fa54eb73f0a6abf2af2566e73ea1266c87cc6388b275fcbc053170cb9e055440e86bd81c6c2c199e694402c1e4766e3c39bf9862ecf62c7f775b468d773c451b8857b65281c18e0504f379fb940da1921552daccf1888173ed9611e90f9652d2b9a490581620e4ba4a792e47173c8"}, @NL80211_ATTR_TESTDATA={0x6, 0x45, "5a16"}, @NL80211_ATTR_TESTDATA={0x5f, 0x45, "36fcdfebdd14e04bbe3e76e73fae36357a2d70c336593f2016c98bbba867adee985be64e816b51a8810cf3622b57660da99ca5846b769cc77f41b5ec854f9baa4703d6f107a36fb01b99555fc492335d229543ef2769170bfb38f3"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "c7556f571a41218ab67f66dd03974ffdb52568fce4ae1a2faeed415877b09e7dc476370c4e78cf3ff7f0c35b4377fb7edd5c00a4e39d8f7bc0b57ac6f22db5d91be73ccd02693f3eadb6f774b55f778a99e8b41b9b4436ac3b78251a12b09be8440636f1f327b3"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x15, 0x45, "95643ba193ad1360bdb9db26978c6f23a4"}]}, 0x1250}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

1m37.551078867s ago: executing program 1 (id=54):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
write$binfmt_register(0xffffffffffffffff, &(0x7f00000002c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4000000000000c2, 0x3a, '', 0x3a, '\xa4\t\x03\xa3\xa6\x1d\xfb\x0e\x9fi_\x83\xd4\xadT{\x97v\x96\x8e\xeb=\xda~\xbc\xd0\xceE\xd4q\x91\xdd(o\x94\xc9\xa5\x9d\xfe\xfd\xd2\a\x15I&[\x8b\xd5\x9c\xab\xcb+\xa1dmG\xa0l\xb3\x8e\xbc\xaf\\\xe92\x98cro~\xbe\\s\xab6\x9b\x8f\x8a\xa0`<\xb3\xf6\x1bCv\x03\xef\xb9\x8e\xb2', 0x3a, './file0'}, 0x82)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0xee00)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2b, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x0, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r6, 0x4018aee2, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f00000015c0)})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0xc, 0x8, 0x9, 0x0, 0x7f, 0x5, 0x1, 0x4e, 0x7, 0xffff, 0x96, 0xc7, 0x0, 0xfa9, 0x33d, 0x2], 0x0, 0x8041})
mmap$binder(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
socket$netlink(0x10, 0x3, 0x0)

1m37.457656886s ago: executing program 1 (id=55):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x5, 0x3, 0x10000})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r2, &(0x7f0000000000)=""/78, 0x4e)
getdents(r2, &(0x7f0000000200)=""/251, 0xfb)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000400)="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", 0x1f000)

1m37.456872606s ago: executing program 32 (id=55):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x5, 0x3, 0x10000})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r2, &(0x7f0000000000)=""/78, 0x4e)
getdents(r2, &(0x7f0000000200)=""/251, 0xfb)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000400)="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", 0x1f000)

1m29.269307161s ago: executing program 0 (id=129):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) (async)
close(r1) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x4b, 0x0, 0x86, 0x8, 0xf001, 0x100}, 0x20)
mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) (async)
write(r0, &(0x7f0000000400)="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", 0x1f000)

1m29.141727263s ago: executing program 0 (id=130):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0)
r1 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0)
ftruncate(r1, 0x3)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x8, 0xd, 0x6, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x800)
write(r0, &(0x7f0000000400)="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", 0xc01)

1m29.141300843s ago: executing program 0 (id=131):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x4}, 0xe)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000d2c610a808e0797d2174b8010000000100"])
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000004840))
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x7e, @none}, 0xe)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendto$packet(r2, &(0x7f0000000240)="44971dc50f40330672157bed9597824ede7efe0071cc32c613457b220377845db7a8753a325fc0ebce75d23753c8032decf80f3f75218ef19587e1e2e31c9fdc311570086751dd0586745e930abaf40adadf2f17ed8d499feb80d7aa6aa523b6dc1d0c9bd5036d0cf9c7292df9f1944530173870723802af1a973c159f994c2ca9fb5cca154ceca48e2637b4fef19dc2ccf1b7e6675089031ed8a41932dd3e6d82f9914170c33ff15a09d6830749f654a743a839b7ae3cf2918ed9ce1e4d1bd277bdd4e79fd9d72e1e050057074aa6", 0xcf, 0xc44, &(0x7f0000000340)={0x11, 0x10, 0x0, 0x1, 0xe4, 0x6, @local}, 0x14)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x4}, 0x2)
r4 = socket(0x10, 0x803, 0x0)
sendto$packet(r4, &(0x7f0000000040)="0bff2e", 0x3, 0x8080, &(0x7f0000000140)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @local}, 0x14)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r6, &(0x7f0000000100)='-1\x00', 0x3)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x6}, 0x8)
close(r6)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfdfdffff, 0x0, 0xfffffff8})
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000380)=ANY=[@ANYRES64=r4])

1m29.127358015s ago: executing program 0 (id=133):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$key(0xf, 0x3, 0x2)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0) (async)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000140))
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0)
mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') (async)
mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00')
readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) (async)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

1m29.084843378s ago: executing program 0 (id=134):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000001600), 0x42fffffe)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110a, 0xfffffbfffffffffc})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @release={0x40046306, 0x2}], 0x50, 0x0, &(0x7f0000000200)="8b5071c6cd864231b996623c8df2e03839b8dfb0d7865c6fefe39ea389c7aa220de978dcab534586578e40fae0a3789b088ab8b56d769cd2cadefaee2a968ca46b3383b56ef623398a2938a4cff98b31"})
r1 = userfaultfd(0x80000)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@private1, 0x56})
ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0})

1m28.997654837s ago: executing program 0 (id=136):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='e\x00+\x88\xfe\xf7\x01')
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

1m28.953254901s ago: executing program 33 (id=136):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='e\x00+\x88\xfe\xf7\x01')
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

2.326069441s ago: executing program 5 (id=1287):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40282, 0x0)
lseek(r0, 0x4, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000002030102000000000000000001000000080001000100001f0900020080000000010015da05dc0000"], 0x28}, 0x1, 0x0, 0x0, 0x400c010}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
pipe(&(0x7f0000000d00)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = socket(0x1e, 0x4, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
r10 = socket(0x80000000000000a, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000040)={@private2, 0x60})
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
splice(r3, 0x0, r5, 0x0, 0x714f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00')
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x3f5f41, 0x84)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x14, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10"})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)

1.47843697s ago: executing program 5 (id=1297):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000002c0)={'syz0\x00', {0x5b, 0x0, 0x5, 0x100}, 0x2, [0x1, 0x101, 0x137, 0x7fffffff, 0x3, 0x7, 0x3, 0xbd5e, 0x2, 0x8, 0xfff, 0x9f83, 0x1, 0x527, 0x4, 0x3, 0x3, 0x2701, 0xb0, 0x8, 0x5, 0x6, 0xffffffff, 0x8, 0xff, 0x2, 0x5, 0x7, 0x80000001, 0x7fffffff, 0x1ff, 0x6, 0x88000000, 0x0, 0x1000, 0x2, 0x3, 0x3, 0x0, 0x82c, 0x7fffffff, 0x8, 0x2, 0x4, 0x3ff, 0x4, 0x315, 0xfffff241, 0x7f, 0x6, 0x100, 0x2, 0x6, 0xa2, 0x5, 0x4, 0x8, 0x1000, 0x9, 0x9, 0x874, 0x3, 0x7fff, 0x1], [0x9, 0x489, 0xfffffffb, 0x1, 0x9, 0x4, 0xa, 0x9, 0x8, 0x76, 0x7f, 0x3000000, 0x6, 0x3, 0x4, 0xffffffff, 0x5, 0xd, 0x3, 0x4, 0x5, 0xffffffff, 0x69, 0xdd3f, 0xcb, 0x8, 0xbad, 0x8, 0x7, 0x1, 0x85b, 0x5, 0x464, 0xc67f, 0x30, 0xa1b4, 0x2, 0x7b, 0x9a4, 0x6, 0x7a, 0x2, 0x2e98df1f, 0x2, 0x275, 0x3, 0xfa, 0xa46, 0x8, 0xd4, 0x5, 0x0, 0x9, 0xf, 0x100, 0x8, 0x200, 0x9, 0x3, 0x7f, 0x3, 0x8, 0x400, 0x80], [0x2, 0x80000000, 0x78, 0x3, 0x8, 0x6, 0xa0fa, 0x3, 0xfffffff8, 0x2ec5, 0x2, 0x8, 0x4, 0x5, 0x0, 0x4, 0x8001, 0x10, 0x7, 0x7fffffff, 0x3, 0xfffffff9, 0xf, 0x9, 0x0, 0x274a, 0x0, 0x7, 0x7, 0x7ff, 0x79374c7a, 0x7, 0x3, 0x80000000, 0x4ef5, 0x6, 0x10, 0x7, 0x6, 0x20000, 0x40100000, 0x8000, 0x10000, 0x0, 0x7, 0x7fff, 0x1, 0x3, 0xfff, 0x2, 0x4, 0x7, 0x9, 0x0, 0x8, 0x3ff, 0x2, 0x6, 0x1, 0x0, 0x6, 0xb, 0x4, 0xeac3], [0x80, 0x6, 0x5, 0x3, 0x10, 0x5, 0xab, 0x5, 0x7, 0xffffffff, 0x60c4, 0x8, 0xc837, 0x4, 0x0, 0xe, 0xbeb, 0x0, 0x7, 0x5a, 0x3, 0x7, 0x20, 0xa5d7, 0x9, 0x83f, 0x100, 0xa5f6, 0x246, 0x80000001, 0x81, 0x1, 0xfffffff7, 0x4b15, 0x1, 0x8, 0x9, 0x1, 0x7cb2, 0x4, 0xffff, 0xf, 0x8, 0x0, 0x2, 0x0, 0x9, 0x7f, 0xffff27e7, 0x3, 0x0, 0x3ff, 0x7f, 0x2, 0x659, 0x8, 0x8, 0xa3, 0x8001, 0x3, 0x7fff, 0x166, 0x4, 0x3]}, 0x45c) (async)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
close(r1) (async)
inotify_init1(0x80000) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) (async)
io_setup(0x1, &(0x7f00000016c0)=<r4=>0x0)
io_submit(r4, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}])

1.045635752s ago: executing program 3 (id=1302):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000304b5000002000000080001800c00028005000100010000000c001980080001000808000000000000000000"], 0x30}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.044927831s ago: executing program 3 (id=1303):
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x25) (async)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109db96040000010300010009210101000122050009058103ff030c0000"], 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async)
write(r2, &(0x7f00000000c0)="842a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200a3c8833f3510900"/21], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_opts(r5, 0x29, 0x3b, 0x0, &(0x7f00000000c0)) (async)
ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000380)={0x9a5, "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"}) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x23640, 0x0)
read$ptp(r6, 0x0, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000))

1.044660081s ago: executing program 3 (id=1304):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0x5})
r4 = eventfd2(0x180, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4})
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"])
write$eventfd(r4, &(0x7f00000000c0)=0x33482a89, 0x8)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

570.876906ms ago: executing program 5 (id=1308):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"])

568.429797ms ago: executing program 5 (id=1310):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
fsetxattr$security_capability(r0, &(0x7f0000010000), &(0x7f0000010040)=@v2={0x2000000, [{0x7, 0x5}, {0x20b1ea30, 0x7}]}, 0x14, 0x0)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

567.820367ms ago: executing program 2 (id=1311):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/4096, 0x1000)
mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2, &(0x7f0000000140)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0x3}}, {@rlog_pages={'rlog_pages', 0x3d, 0x100000000}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x3}}, {@rlog_pages={'rlog_pages', 0x3d, 0x400}}, {@no_bf_cache}], [{@pcr={'pcr', 0x3d, 0x13}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/rnullb0\x00'}}, {@obj_type={'obj_type', 0x3d, '/#'}}]})

567.406546ms ago: executing program 5 (id=1312):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x59, &(0x7f0000000300)=[{&(0x7f0000003580)=""/4094, 0xfffffe5e}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f0000001040)=""/4078, 0xfee}, {&(0x7f0000000380)=""/109, 0x6d}], 0x100000000000005a}, 0xd}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdac}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40012002, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0)
r1 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0)
ftruncate(r1, 0x3)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x8000, r3, 0x0, 0x0, 0x80000004}]) (async)
io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x8000, r3, 0x0, 0x0, 0x80000004}])
io_getevents(r4, 0x0, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) (async)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r9, &(0x7f0000000080)=""/129, 0x81) (async)
read(r9, &(0x7f0000000080)=""/129, 0x81)
close(0x3)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="49198516813dec4bb597ec6737c1b829740e59a50a1053cc16b7b868009f40222dad71c5bc959411ce6aa76e7c6a349127a0ce2b664406d8d0020c3054e7a47d75f3b6561773adb3af50dea2129713b005b42b8e1590df4bc5b97692785b10095a9492df9b4a3c12dc5a5877b2217b3bb4d4551876ae4774632ba6cc9a865563cd6182068c00"/154])

509.832602ms ago: executing program 3 (id=1313):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)

508.317142ms ago: executing program 3 (id=1314):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0xfc, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x0, 0x45}})
r2 = memfd_secret(0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESDEC=r0, @ANYRESDEC=r2], 0x18}, 0x1, 0xf000000}, 0x4040001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x20010, r3, 0x14b3c000)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)=ANY=[@ANYBLOB='(\x00\x00\x00C\x00'], 0x28}], 0x1}, 0x0)
r6 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000240))
r7 = syz_open_dev$usbfs(&(0x7f0000000280), 0x2, 0x7a8600)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000002c0)={0x0, 0x12, 0xa, 0x1, 0x1000, 0x8, &(0x7f0000001e40)="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"})
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001600)={<r8=>0x0, 0x97b9, 0x0, [0x9, 0x3, 0x7, 0x2, 0x4], [0x6, 0x6, 0xbd4, 0x10000, 0x1, 0x29da00, 0xffffffffffffff01, 0xa6, 0x7, 0x4, 0xa81, 0x7, 0x7a, 0x1, 0x101, 0x5, 0x1, 0x6, 0xec8e, 0xffffffffffffffff, 0x6, 0x4000000000000000, 0x80, 0x9, 0x9, 0x9, 0x80, 0x3, 0x3, 0x5, 0x0, 0x200, 0x7, 0x8, 0x9, 0x100000001, 0x4, 0x0, 0x0, 0x395, 0x2, 0xd4e, 0x4, 0x7, 0xd0a, 0x4, 0x7, 0x100, 0x9, 0x1, 0x5, 0x1, 0x0, 0x3, 0x6, 0x7, 0x5, 0x10000, 0x970, 0x2, 0x2, 0x6, 0x100000001, 0x8, 0x8001, 0x9af6, 0x1, 0x5, 0x100000000, 0x9d3548f, 0x664, 0x79, 0xffffffffffffcfd0, 0x3, 0x6, 0x9f4a, 0x5, 0x4, 0x40, 0x1, 0x6ee, 0xfffffffffffff725, 0x4a6482ce, 0xffff, 0x200006, 0xc9, 0x48b8, 0x0, 0x8, 0x87, 0x0, 0x233, 0xd165, 0x3, 0x7, 0x101, 0x1, 0x5, 0x5, 0x1000, 0x79c7, 0x5, 0x2, 0xffffffffffffff41, 0x8000000000000000, 0xfffffffffffffffb, 0x9, 0x5e6f, 0xff31, 0x9, 0xb2, 0x5, 0x400000000, 0x9, 0x2, 0x9, 0x5, 0x5, 0xf, 0xffffffffffff8dc3, 0x2]})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000001a40)={r8, 0x4, 0x0, 0x1})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1010, r2, 0x0)
ftruncate(r2, 0x3)
write(r0, &(0x7f0000000400)="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", 0xc01)
copy_file_range(r2, &(0x7f0000000000)=0x8, r2, &(0x7f0000000080)=0x2, 0x9, 0x0)

486.925944ms ago: executing program 2 (id=1316):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r1, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"})

475.271975ms ago: executing program 5 (id=1317):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="120110015efc3d105e042709684b010203010902616501090690e9"], 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0)
r3 = socket(0x8000000010, 0x2, 0x0)
write(r3, &(0x7f00000002c0)="1c0000001c000704ab5b2509b868030002ab087a0100000001481093", 0x1c)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x100401, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6)
close_range(r0, 0xffffffffffffffff, 0x0)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f00000009c0)={0x7, 'vlan1\x00'})
ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000040)='}.\x00')

425.57159ms ago: executing program 2 (id=1318):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x2, 0xc040)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040)=0x10000002, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
socket$inet6(0xa, 0x3, 0x5) (async)
sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x2, 0xc040) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040)=0x10000002, 0x4) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) (async)

402.398463ms ago: executing program 2 (id=1319):
r0 = socket(0x10, 0x3, 0x0)
modify_ldt$write2(0x11, &(0x7f00000000c0)={0x1008, 0x20000800, 0x4000, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10)
r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1) (async)
ptrace$setregs(0xd, r1, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") (async)
ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55", 0x38}) (async)
write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) (async)
recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0x1f}, 0x8}], 0x32, 0x10122, 0x0)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext'])

311.932561ms ago: executing program 2 (id=1320):
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) (async)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x600000000000000)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) (async)
r4 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7) (async)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000080)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
dup3(r6, r7, 0x0) (async)
dup3(r6, r7, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
bind$unix(r8, &(0x7f0000000c40)=@abs={0x1}, 0x6e)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
recvmsg(r9, &(0x7f0000000400)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, 0x80, 0x0}, 0x142)
sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/64, 0xd}, {&(0x7f0000000200)=""/77, 0x9c}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/64, 0xd}, {&(0x7f0000000200)=""/77, 0x9c}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/6, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40103e05, 0x0)
r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x44100, 0x0)
ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x7)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r11=>0x0, 0x4, 0x25, 0x5, 0xbddf, 0x6, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x1, 0x75, 0xffffffff}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000001fc0)={0x4e0, 0x0, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xf8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_bond\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x933}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/udmabuf\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x27c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x278, 0x3, 0x0, 0x1, [{0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/ashmem\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\'`-$/&@^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x36, 0x2, '\x04\v-\v\x00\x00\x00\x00\x00\x00$\x1d\x0f\xfe~\x17\xe7\xa3h\xf8?V\xf7\v\xf9\xcf\x06\xca\x00hbNQ\xb9~=+=\xd9\xa1\xd8\x1d\r\xe20\xc4\x8a\x11\xe1='}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1f0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1ea, 0x2, 'y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x70, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/ashmem\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f84}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x4e0}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

233.702058ms ago: executing program 2 (id=1322):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010000000904000001020d0000052406000105240000000d240f0103180000feff00000006241a000000052401000808241c060040040008241c0700010c00052415070007240a600609100905810300020000000904010000020d0000090401010202"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
pipe2(&(0x7f00000009c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
flistxattr(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0xc, 0x10, 0x10, 0x11, 0x10, 0x10, 0xe64, 0x10, 0x10, 0x10, 0x111}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r2, &(0x7f0000000400)="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", 0x1f000)

181.936113ms ago: executing program 3 (id=1323):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0xf, @private0, 0x3}}}, 0x3a) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00')
sendto(r2, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6) (async)
r4 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
close(r3) (async)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x163342, 0x0)
read(r3, &(0x7f0000001400)=""/255, 0xff) (async)
write(r5, &(0x7f0000001500)="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", 0x1000) (async, rerun: 64)
syz_usb_connect$cdc_ncm(0x6, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x9, 0x20, 0xaf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "175017d60c"}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xfada, 0xa, 0x3}, {0x6, 0x24, 0x1a, 0x1ff, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x8, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x80, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x10, 0x16}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7, 0x50, 0xa, 0xff}, 0xb, &(0x7f0000000140)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x9e, &(0x7f0000000180)=@string={0x9e, 0x3, "7d16b72d8fb7b32a5a994705da2487bf3412943ed7a1b08bc326385107fe7db33bd6b1bb0fcafe27136022a658a2b434f6ed7d07e711c33d200945d68b0f34cbfa143d37fe34b8e964723c0273e2fcc0442281a1a659a3feb19f40abc341c24aff885c2886c01b9d07b87392f4afb795367719a1ec4c17e5db5fee62820ccfbe9b5845397eee7c7de1a1ffa95a935ea5c13c7413231ae6a726df0f47"}}]}) (rerun: 64)

89.266142ms ago: executing program 4 (id=1326):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
pipe2$9p(&(0x7f0000000000), 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async)
pipe2$9p(&(0x7f0000000000), 0x0) (async)
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async)

87.095612ms ago: executing program 4 (id=1327):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async)
setuid(0xee00) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000029c0)={<r2=>0x0, 0xf1})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{r0}, {@val={r2}, @max}}) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2074) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="c74f8a20a4c5a32b926632b1cbc4bf8e641a9ed9491f9141073a2e3bbb337cc4330153b0f2c16dbecb4685d81981541fdc3404223e8a1e2ff53230b87db55a41fe3c92c54f187cf9ee7bc5411a76f290dd65b6ff52d8b918bac3dc3b00cdebb2626fc98bc37d61c80b817c39e8dd262e25efef58a2c57b744372df71427be5bf131e745af4e9e2039abca9fd913e519f1833de1c7705842dabc23475edec1093688a7ec4089773000000", @ANYRES16=r4, @ANYBLOB="00012cbd7000fedbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x2804004d}, 0x800)
openat2(r3, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x80c0, 0x10, 0x9}, 0x18) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0xfffffffffffffffe}], 0x0, 0x0, 0x0})
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000001c0)={0x4, 0x0, 0x2c})

82.259473ms ago: executing program 4 (id=1328):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000001000), &(0x7f0000001000)='.', 0x1, 0x0)
socket$inet(0x2, 0x3, 0x2) (async)
socket$inet(0x2, 0x3, 0x2)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

62.886834ms ago: executing program 4 (id=1329):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x4008000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r2 = syz_open_dev$hiddev(&(0x7f0000000040), 0x320, 0x8200)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000003c0)=0x1002, 0x12)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x7, 0x1, 0x35}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/155, 0x9b, 0x2, 0x3a}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

1.56892ms ago: executing program 4 (id=1330):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
fsetxattr$security_capability(r3, &(0x7f0000000200), 0x0, 0x0, 0x2)
link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00')
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000180))
open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x28)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8880)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r6, r5, 0x0, 0x3a)
read$eventfd(r5, &(0x7f0000000040), 0x8)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=1331):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000300)="9a15c76de041d725efdfc3f51e57bc6f9c596f89b629f890fe4d2c52103c95e519822b055e6096d0b59a085d6c8b365dae507221411d0bf95bf25c74e32be4471cf62d2a53050b51f97486cddc906ba62b319b8041c237709259eacf7e8263fbc5b297d3594f2872ae30728ceebe4d2580bdf95a9ad620146688369afb5e4cf1960a003f364e9da406eef4dd55a4", 0x8e, 0xfffffffffffffff9) (async)
r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0)
keyctl$link(0x8, r1, r2) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

ARNING: The mand mount option has been deprecated and
[   36.074730][  T634]          and is ignored by this kernel. Remove the mand
[   36.074730][  T634]          option from the mount to silence this warning.
[   36.074730][  T634] =======================================================
[   36.110784][  T634] binder: Unknown parameter 'context����[7�'
[   36.123174][   T45] usb usb4-port1: attempt power cycle
[   36.181332][  T638] kvm: pic: non byte write
[   36.366945][  T647] fuse: Unknown parameter 'func'
[   36.462512][  T331] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   36.470068][   T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   36.493679][   T45] usb 4-1: device descriptor read/8, error -71
[   36.622522][  T331] usb 5-1: Using ep0 maxpacket: 16
[   36.628849][   T45] usb 4-1: device descriptor read/8, error -71
[   36.635285][  T331] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   36.645425][  T331] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   36.655713][  T331] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   36.664847][  T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.672945][  T331] usb 5-1: Product: syz
[   36.677118][  T331] usb 5-1: Manufacturer: syz
[   36.681705][  T331] usb 5-1: SerialNumber: syz
[   36.872492][   T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   36.896267][   T45] usb 4-1: device descriptor read/8, error -71
[   37.033548][   T45] usb 4-1: device descriptor read/8, error -71
[   37.088997][  T644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=644 comm=syz.4.97
[   37.102816][  T331] usb 5-1: cannot find UAC_HEADER
[   37.112245][  T331] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[   37.125147][  T331] usb 5-1: USB disconnect, device number 3
[   37.132375][  T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   37.142645][   T45] usb usb4-port1: unable to enumerate USB device
[   37.312528][  T516] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   37.462538][  T516] usb 1-1: Using ep0 maxpacket: 16
[   37.469581][  T516] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   37.482696][  T516] usb 1-1: config 1 interface 0 has no altsetting 0
[   37.490810][  T516] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40
[   37.499910][  T516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.508019][  T516] usb 1-1: Product: syz
[   37.512187][  T516] usb 1-1: Manufacturer: syz
[   37.516883][  T516] usb 1-1: SerialNumber: syz
[   37.759865][  T666] netlink: 'syz.3.103': attribute type 11 has an invalid length.
[   37.779531][  T666] kvm: user requested TSC rate below hardware speed
[   37.821482][  T516] usbhid 1-1:1.0: can't add hid device: -71
[   37.827580][  T516] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[   37.836330][  T516] usb 1-1: USB disconnect, device number 8
[   37.984764][  T672] rust_binder: Error while translating object.
[   37.984808][  T672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   37.991066][  T672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71
[   38.031221][  T676] rust_binder: Write failure EFAULT in pid:75
[   38.162655][  T682] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.169259][  T682] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   38.175895][  T682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   38.183965][  T682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:81
[   38.452478][   T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   38.530103][   T36] kauditd_printk_skb: 24 callbacks suppressed
[   38.530122][   T36] audit: type=1326 audit(1762899969.804:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=662 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a818f6c9 code=0x7fc00000
[   38.610605][   T36] audit: type=1400 audit(1762899969.884:297): avc:  denied  { ioctl } for  pid=692 comm="syz.4.114" path="socket:[6942]" dev="sockfs" ino=6942 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   38.643710][   T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   38.655634][   T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   38.665643][   T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   38.674899][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   38.690467][   T45] usb 3-1: SerialNumber: syz
[   38.709387][   T36] audit: type=1400 audit(1762899969.984:298): avc:  denied  { mounton } for  pid=696 comm="syz.4.115" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   38.879902][   T36] audit: type=1400 audit(1762899970.154:299): avc:  denied  { map } for  pid=713 comm="syz.4.120" path="socket:[5708]" dev="sockfs" ino=5708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   38.923683][   T45] usb 3-1: 0:2 : does not exist
[   38.931248][  T714] rust_binder: 60: no such ref 3
[   38.933171][   T45] usb 3-1: USB disconnect, device number 7
[   38.937692][  T714] rust_binder: inc_ref_done called when no active inc_refs
[   38.942982][  T714] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   38.958246][  T714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:60
[   38.959392][  T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   39.020375][  T719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   39.020411][  T719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:77
[   39.044584][  T717] binder: Unknown parameter 'ma�'
[   39.071098][  T721] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613)
[   39.071125][  T721] rust_binder: Error while translating object.
[   39.089520][  T721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   39.103037][  T721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79
[   39.117224][  T723] netlink: 'syz.4.124': attribute type 30 has an invalid length.
[   39.142014][  T726] incfs: mount failed -22
[   39.146776][  T726] incfs: mount failed -22
[   39.151785][   T36] audit: type=1400 audit(1762899970.434:300): avc:  denied  { read } for  pid=724 comm="syz.3.125" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.175390][  T726] incfs: mount failed -22
[   39.179944][  T726] incfs: mount failed -22
[   39.212553][   T36] audit: type=1400 audit(1762899970.434:301): avc:  denied  { open } for  pid=724 comm="syz.3.125" path="/26/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.250989][   T36] audit: type=1400 audit(1762899970.464:302): avc:  denied  { ioctl } for  pid=724 comm="syz.3.125" path="/26/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.281392][   T36] audit: type=1400 audit(1762899970.524:303): avc:  denied  { unmount } for  pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   39.447553][   T36] audit: type=1400 audit(1762899970.714:304): avc:  denied  { write } for  pid=742 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   39.471247][  T745] binder: Unknown parameter ''
[   39.499311][   T36] audit: type=1400 audit(1762899970.774:305): avc:  denied  { mount } for  pid=746 comm="syz.0.133" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   39.552525][   T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   39.585435][  T757] syz.2.135 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   39.599583][   T13] bridge_slave_1: left allmulticast mode
[   39.605765][   T13] bridge_slave_1: left promiscuous mode
[   39.611863][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.619924][   T13] bridge_slave_0: left allmulticast mode
[   39.626263][   T13] bridge_slave_0: left promiscuous mode
[   39.632004][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.702874][   T45] usb 5-1: too many configurations: 72, using maximum allowed: 8
[   39.716470][   T45] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[   39.725967][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.742738][   T45] usb 5-1: config 0 descriptor??
[   39.770341][   T13] veth1_macvtap: left promiscuous mode
[   39.776177][   T13] veth0_vlan: left promiscuous mode
[   39.833958][  T763] binder: Bad value for 'defcontext'
[   39.852660][  T759] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.859714][  T759] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.866859][  T759] bridge_slave_0: entered allmulticast mode
[   39.873157][  T759] bridge_slave_0: entered promiscuous mode
[   39.879481][  T759] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.886654][  T759] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.893804][  T759] bridge_slave_1: entered allmulticast mode
[   39.900133][  T759] bridge_slave_1: entered promiscuous mode
[   39.951438][    T9] usb 5-1: USB disconnect, device number 4
[   39.953852][  T759] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.964356][  T759] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.971641][  T759] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.978711][  T759] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.998943][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.006895][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.018475][  T515] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.025583][  T515] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.037209][  T330] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.044329][  T330] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.069893][  T759] veth0_vlan: entered promiscuous mode
[   40.081656][  T759] veth1_macvtap: entered promiscuous mode
[   40.372543][    T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   40.472038][  T781] incfs: ino conflict with backing FS 1
[   40.478398][  T781] incfs: ino conflict with backing FS 4
[   40.484079][  T781] incfs: ino conflict with backing FS 2
[   40.524081][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[   40.532132][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[   40.542188][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   40.555723][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.558374][  T785] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.563856][    T9] usb 6-1: Product: syz
[   40.563879][    T9] usb 6-1: Manufacturer: syz
[   40.579781][    T9] usb 6-1: SerialNumber: syz
[   40.596891][  T787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101
[   40.712068][  T805] rust_binder: Got transaction with invalid offset.
[   40.721852][  T805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   40.728606][  T805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80
[   40.786769][  T779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   40.796247][  T779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4
[   40.802845][  T807] FAT-fs (rnullb0): bogus number of reserved sectors
[   40.821785][  T807] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   40.829222][    T9] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   40.846812][    T9] usb 6-1: USB disconnect, device number 2
[   40.860137][  T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   40.998730][  T825] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   41.006875][  T825] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   41.015052][  T825] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[   41.050498][  T828] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.066393][  T828] syzkaller0: create flow: hash 2538260961 index 1
[   41.080695][  T828] syzkaller0: delete flow: hash 2538260961 index 1
[   41.165063][  T516] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   41.176104][  T831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.157'.
[   41.231970][  T834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24
[   41.302493][  T516] usb 5-1: device descriptor read/64, error -71
[   41.362310][  T852] rust_binder: Write failure EFAULT in pid:42
[   41.386567][  T854] kthread_run failed with err -4
[   41.552531][  T516] usb 5-1: device descriptor read/64, error -71
[   41.703259][  T434] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   41.792566][  T516] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   41.852121][  T878] 9pnet_fd: Insufficient options for proto=fd
[   41.858541][  T434] usb 6-1: Using ep0 maxpacket: 32
[   41.865005][  T434] usb 6-1: config 11 has an invalid interface number: 170 but max is 1
[   41.873639][  T434] usb 6-1: config 11 has an invalid interface number: 11 but max is 1
[   41.881998][  T434] usb 6-1: config 11 has an invalid interface number: 175 but max is 1
[   41.890832][  T434] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping
[   41.900133][  T434] usb 6-1: config 11 has an invalid interface number: 155 but max is 1
[   41.908710][  T434] usb 6-1: config 11 has 4 interfaces, different from the descriptor's value: 2
[   41.918074][  T434] usb 6-1: config 11 has no interface number 0
[   41.924548][  T516] usb 5-1: device descriptor read/64, error -71
[   41.931009][  T434] usb 6-1: config 11 has no interface number 1
[   41.937595][  T434] usb 6-1: config 11 has no interface number 2
[   41.944094][  T434] usb 6-1: config 11 has no interface number 3
[   41.950368][  T434] usb 6-1: config 11 interface 170 altsetting 211 has an invalid descriptor for endpoint zero, skipping
[   41.962089][  T434] usb 6-1: config 11 interface 170 altsetting 211 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   41.973768][  T434] usb 6-1: config 11 interface 170 altsetting 211 has an invalid descriptor for endpoint zero, skipping
[   41.985289][  T434] usb 6-1: config 11 interface 170 altsetting 211 has an invalid descriptor for endpoint zero, skipping
[   41.996783][  T434] usb 6-1: config 11 interface 170 altsetting 211 has 9 endpoint descriptors, different from the interface descriptor's value: 16
[   42.010579][  T434] usb 6-1: too many endpoints for config 11 interface 11 altsetting 59: 94, using maximum allowed: 30
[   42.022149][  T434] usb 6-1: config 11 interface 11 altsetting 59 endpoint 0xC has an invalid bInterval 127, changing to 10
[   42.033928][  T434] usb 6-1: config 11 interface 11 altsetting 59 has a duplicate endpoint with address 0xC, skipping
[   42.045257][  T434] usb 6-1: config 11 interface 11 altsetting 59 has an invalid descriptor for endpoint zero, skipping
[   42.056808][  T434] usb 6-1: config 11 interface 11 altsetting 59 has a duplicate endpoint with address 0xF, skipping
[   42.068380][  T434] usb 6-1: config 11 interface 11 altsetting 59 endpoint 0xD has invalid maxpacket 1023, setting to 64
[   42.079780][  T434] usb 6-1: config 11 interface 11 altsetting 59 has an invalid descriptor for endpoint zero, skipping
[   42.091089][  T434] usb 6-1: config 11 interface 11 altsetting 59 has 7 endpoint descriptors, different from the interface descriptor's value: 94
[   42.104948][  T434] usb 6-1: config 11 interface 175 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[   42.116139][  T434] usb 6-1: config 11 interface 175 altsetting 1 has a duplicate endpoint with address 0x2, skipping
[   42.127031][  T434] usb 6-1: config 11 interface 175 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[   42.138047][  T434] usb 6-1: config 11 interface 175 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   42.149117][  T434] usb 6-1: config 11 interface 175 altsetting 1 has a duplicate endpoint with address 0x2, skipping
[   42.159937][  T434] usb 6-1: config 11 interface 175 altsetting 1 has a duplicate endpoint with address 0xD, skipping
[   42.170769][  T434] usb 6-1: config 11 interface 175 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[   42.181766][  T434] usb 6-1: config 11 interface 175 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 16
[   42.195131][  T516] usb 5-1: device descriptor read/64, error -71
[   42.201419][  T434] usb 6-1: too many endpoints for config 11 interface 155 altsetting 159: 243, using maximum allowed: 30
[   42.212921][  T434] usb 6-1: config 11 interface 155 altsetting 159 endpoint 0xB has invalid maxpacket 1024, setting to 64
[   42.224224][  T434] usb 6-1: config 11 interface 155 altsetting 159 has a duplicate endpoint with address 0xF, skipping
[   42.235204][  T434] usb 6-1: config 11 interface 155 altsetting 159 endpoint 0xA has invalid maxpacket 512, setting to 64
[   42.246403][  T434] usb 6-1: config 11 interface 155 altsetting 159 has an invalid descriptor for endpoint zero, skipping
[   42.257817][  T434] usb 6-1: config 11 interface 155 altsetting 159 has a duplicate endpoint with address 0xB, skipping
[   42.268822][  T434] usb 6-1: config 11 interface 155 altsetting 159 has an invalid descriptor for endpoint zero, skipping
[   42.280032][  T434] usb 6-1: config 11 interface 155 altsetting 159 has a duplicate endpoint with address 0x2, skipping
[   42.291251][  T434] usb 6-1: config 11 interface 155 altsetting 159 has a duplicate endpoint with address 0x6, skipping
[   42.302299][  T434] usb 6-1: config 11 interface 155 altsetting 159 has 8 endpoint descriptors, different from the interface descriptor's value: 243
[   42.316100][  T516] usb usb5-port1: attempt power cycle
[   42.321589][  T434] usb 6-1: config 11 interface 170 has no altsetting 0
[   42.328748][  T434] usb 6-1: config 11 interface 11 has no altsetting 0
[   42.335889][  T434] usb 6-1: config 11 interface 175 has no altsetting 0
[   42.342927][  T434] usb 6-1: config 11 interface 155 has no altsetting 0
[   42.351154][  T434] usb 6-1: New USB device found, idVendor=1bc7, idProduct=10b0, bcdDevice=3f.b3
[   42.360263][  T434] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.368290][  T434] usb 6-1: Product: җ鷨군쯃刘ﱉୂ輲頕ྈ㕲뮛⠏⓴褂ꯢ쪂㐼ሲ✉퉊龜着칒䗢ﳛ幻䧸益锇앚ꊒ볉ੵ壬ﯬⵏ㶼銍졊업⣛鯖
[   42.385148][  T434] usb 6-1: Manufacturer: 
[   42.389789][  T434] usb 6-1: SerialNumber: ̵㯤즱츖ꪺ尬┯﹖ᡔ图罇㑐᚟۝턚悒ᯯ챷ᵛꀥ쌦짹矔宣籤폾啙奫ꠎ맇耩갘灌麩
[   42.401292][  T880] netlink: 9 bytes leftover after parsing attributes in process `syz.3.170'.
[   42.413885][  T880] gretap0: entered promiscuous mode
[   42.414309][  T861] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   42.421833][  T880] netlink: 5 bytes leftover after parsing attributes in process `syz.3.170'.
[   42.435250][  T880] 0��{X��: renamed from gretap0
[   42.441018][  T880] 0��{X��: left promiscuous mode
[   42.446127][  T880] 0��{X��: entered allmulticast mode
[   42.452682][  T880] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   42.640322][  T434] usb 6-1: USB disconnect, device number 3
[   42.672484][  T516] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[   42.691501][  T884] binder: Binderfs stats mode cannot be changed during a remount
[   42.693835][  T516] usb 5-1: device descriptor read/8, error -71
[   42.722485][    T9] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[   42.730132][  T892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=892 comm=syz.2.174
[   42.834969][  T516] usb 5-1: device descriptor read/8, error -71
[   42.872467][    T9] usb 4-1: Invalid ep0 maxpacket: 64
[   43.002497][    T9] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[   43.072583][  T516] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[   43.093540][  T516] usb 5-1: device descriptor read/8, error -71
[   43.152476][    T9] usb 4-1: Invalid ep0 maxpacket: 64
[   43.158028][    T9] usb usb4-port1: attempt power cycle
[   43.223494][  T516] usb 5-1: device descriptor read/8, error -71
[   43.332598][  T516] usb usb5-port1: unable to enumerate USB device
[   43.512535][    T9] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[   43.532861][    T9] usb 4-1: Invalid ep0 maxpacket: 64
[   43.557244][  T943] Zero length message leads to an empty skb
[   43.576214][  T946] capability: warning: `syz.5.192' uses 32-bit capabilities (legacy support in use)
[   43.662515][    T9] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[   43.682936][    T9] usb 4-1: Invalid ep0 maxpacket: 64
[   43.689041][    T9] usb usb4-port1: unable to enumerate USB device
[   43.805434][  T949] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.816138][  T949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:145
[   43.823179][  T949] rust_binder: Error while translating object.
[   43.832398][  T949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   43.838767][  T949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:145
[   43.940608][  T955] syz.4.195 uses obsolete (PF_INET,SOCK_PACKET)
[   43.972713][  T959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   43.972747][  T959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95
[   44.068630][  T961] input: syz0 as /devices/virtual/input/input8
[   44.112928][  T963] /dev/rnullb0: Can't open blockdev
[   44.121280][  T961] pim6reg1: entered promiscuous mode
[   44.126921][  T961] pim6reg1: entered allmulticast mode
[   44.134637][   T36] kauditd_printk_skb: 26 callbacks suppressed
[   44.134662][   T36] audit: type=1326 audit(1762899975.414:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=965 comm="syz.2.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46fb38f6c9 code=0x0
[   44.235503][  T967] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.235527][  T968] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.479650][  T995] 9pnet_fd: Insufficient options for proto=fd
[   44.503266][   T36] audit: type=1400 audit(1762899975.784:333): avc:  denied  { read } for  pid=999 comm="syz.5.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   44.522731][    T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[   44.542537][  T516] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   44.554693][   T36] audit: type=1400 audit(1762899975.834:334): avc:  denied  { ioctl } for  pid=999 comm="syz.5.209" path="socket:[8446]" dev="sockfs" ino=8446 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   44.579103][   T36] audit: type=1400 audit(1762899975.834:335): avc:  denied  { read } for  pid=999 comm="syz.5.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   44.673697][    T9] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8
[   44.682230][    T9] usb 5-1: can't read configurations, error -22
[   44.694110][  T516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   44.705064][  T516] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[   44.714138][  T516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.722845][  T516] usb 3-1: config 0 descriptor??
[   44.728091][  T977] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   44.812503][    T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[   44.937190][  T977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.945933][  T977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.963561][    T9] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8
[   44.972135][    T9] usb 5-1: can't read configurations, error -22
[   44.978632][    T9] usb usb5-port1: attempt power cycle
[   45.146591][ T1004] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   45.158428][  T516] usbhid 3-1:0.0: can't add hid device: -71
[   45.164720][  T516] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   45.176009][  T516] usb 3-1: USB disconnect, device number 8
[   45.322506][    T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[   45.343992][    T9] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8
[   45.352556][    T9] usb 5-1: can't read configurations, error -22
[   45.482524][    T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[   45.505843][    T9] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8
[   45.514373][    T9] usb 5-1: can't read configurations, error -22
[   45.520829][    T9] usb usb5-port1: unable to enumerate USB device
[   45.536093][ T1022] rust_binder: Error while translating object.
[   45.536125][ T1022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   45.542315][ T1022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:98
[   45.595207][   T36] audit: type=1400 audit(1762899976.874:336): avc:  denied  { read } for  pid=1026 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   45.660789][ T1028] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   45.676706][   T36] audit: type=1400 audit(1762899976.954:337): avc:  denied  { getopt } for  pid=1026 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   45.782124][ T1037] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   45.798063][ T1037] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   45.812381][ T1037] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   45.840699][ T1043] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   45.861037][   T36] audit: type=1400 audit(1762899977.134:338): avc:  denied  { shutdown } for  pid=1047 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   45.906298][   T36] audit: type=1400 audit(1762899977.184:339): avc:  denied  { ioctl } for  pid=1053 comm="syz.5.226" path="socket:[7954]" dev="sockfs" ino=7954 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   46.092568][  T516] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   46.242527][  T516] usb 3-1: Using ep0 maxpacket: 32
[   46.248915][  T516] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   46.257486][  T516] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   46.266201][  T516] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   46.275216][  T516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   46.284894][  T516] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   46.294602][  T516] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   46.307606][  T516] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   46.316667][  T516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.325313][  T516] usb 3-1: config 0 descriptor??
[   46.457669][   T36] audit: type=1400 audit(1762899977.734:340): avc:  denied  { setopt } for  pid=1058 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   46.477187][   T36] audit: type=1400 audit(1762899977.744:341): avc:  denied  { connect } for  pid=1060 comm="syz.5.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   46.522251][ T1066] rust_binder: Got transaction with invalid offset.
[   46.522341][ T1066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   46.529206][ T1066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109
[   46.541809][  T516] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   46.569460][  T516] usb 3-1: USB disconnect, device number 9
[   46.576354][  T516] usblp0: removed
[   46.992515][  T331] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   47.142484][  T331] usb 3-1: Using ep0 maxpacket: 32
[   47.148870][  T331] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   47.157277][  T331] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   47.165922][  T331] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   47.174910][  T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   47.184594][  T331] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   47.194276][  T331] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   47.207293][  T331] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   47.212491][  T516] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[   47.216355][  T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.232511][  T331] usb 3-1: config 0 descriptor??
[   47.352496][  T516] usb 4-1: device descriptor read/64, error -71
[   47.438838][ T1048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'.
[   47.442598][  T331] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   47.576631][ T1103] bridge0: port 3(veth1_macvtap) entered blocking state
[   47.583808][ T1103] bridge0: port 3(veth1_macvtap) entered disabled state
[   47.590835][ T1103] veth1_macvtap: entered allmulticast mode
[   47.597728][ T1103] veth1_macvtap: left allmulticast mode
[   47.613156][  T516] usb 4-1: device descriptor read/64, error -71
[   47.674496][ T1114] rust_binder: Write failure EFAULT in pid:118
[   47.675178][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   47.800897][   T31] usb 3-1: USB disconnect, device number 10
[   47.807782][   T31] usblp0: removed
[   47.852519][  T516] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[   47.982529][  T516] usb 4-1: device descriptor read/64, error -71
[   48.222526][  T516] usb 4-1: device descriptor read/64, error -71
[   48.332718][  T516] usb usb4-port1: attempt power cycle
[   48.356629][ T1128] fuseblk: Bad value for 'source'
[   48.557364][ T1140] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   48.574713][ T1142] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   48.581401][ T1142] rust_binder: Error while translating object.
[   48.587894][ T1142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   48.594150][ T1142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:185
[   48.620217][ T1145] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   48.672530][  T516] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[   48.703594][  T516] usb 4-1: device descriptor read/8, error -71
[   48.747367][ T1149] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[   48.755688][ T1149] rust_binder: Write failure EINVAL in pid:192
[   48.833600][  T516] usb 4-1: device descriptor read/8, error -71
[   49.022502][   T63] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   49.082509][  T516] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[   49.103556][  T516] usb 4-1: device descriptor read/8, error -71
[   49.119595][ T1170] cgroup: fork rejected by pids controller in /syz5
[   49.182488][   T63] usb 3-1: Using ep0 maxpacket: 32
[   49.188962][   T63] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   49.197548][   T63] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   49.212238][   T63] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   49.222336][   T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   49.240526][   T63] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   49.251922][  T516] usb 4-1: device descriptor read/8, error -71
[   49.262497][   T63] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   49.277935][   T63] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   49.287264][   T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.296317][   T63] usb 3-1: config 0 descriptor??
[   49.362711][  T516] usb usb4-port1: unable to enumerate USB device
[   49.504885][ T1155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.513462][   T63] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   49.527624][ T1155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.542477][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   49.542495][   T36] audit: type=1400 audit(1762899980.814:352): avc:  denied  { ioctl } for  pid=1154 comm="syz.2.259" path="/dev/usb/lp0" dev="devtmpfs" ino=505 ioctlcmd=0x4b4c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   49.573812][   T36] audit: type=1400 audit(1762899980.814:353): avc:  denied  { ioctl } for  pid=1154 comm="syz.2.259" path="mnt:[4026532304]" dev="nsfs" ino=4026532304 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   49.692486][  T389] Bluetooth: hci0: command 0x1003 tx timeout
[   49.692486][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   49.719984][   T36] audit: type=1400 audit(1762899980.994:354): avc:  denied  { read } for  pid=1238 comm="syz.4.265" name="usbmon2" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   49.743278][   T36] audit: type=1400 audit(1762899980.994:355): avc:  denied  { open } for  pid=1238 comm="syz.4.265" path="/dev/usbmon2" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   50.124909][   T63] usb 3-1: USB disconnect, device number 11
[   50.132863][   T63] usblp0: removed
[   50.138242][ T1254] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   50.138378][ T1254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:200
[   50.210884][ T1257] netlink: 44 bytes leftover after parsing attributes in process `syz.2.270'.
[   50.229078][ T1257] netlink: 43 bytes leftover after parsing attributes in process `syz.2.270'.
[   50.237991][ T1257] netlink: 'syz.2.270': attribute type 5 has an invalid length.
[   50.245696][ T1257] netlink: 43 bytes leftover after parsing attributes in process `syz.2.270'.
[   50.257915][   T36] audit: type=1400 audit(1762899981.544:356): avc:  denied  { load_policy } for  pid=1255 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   50.258587][ T1257] SELinux:  policydb magic number 0x240 does not match expected magic number 0xf97cff8c
[   50.288175][ T1257] SELinux: failed to load policy
[   50.662793][   T36] audit: type=1400 audit(1762899981.944:357): avc:  denied  { getopt } for  pid=1267 comm="syz.5.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   50.683772][ T1269] rust_binder: 1264 RLIMIT_NICE not set
[   50.683811][ T1269] rust_binder: 130: no such ref 0
[   50.692113][   T36] audit: type=1400 audit(1762899981.964:358): avc:  denied  { connect } for  pid=1270 comm="syz.5.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   50.695305][ T1269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130
[   50.715899][   T36] audit: type=1400 audit(1762899982.004:359): avc:  denied  { bind } for  pid=1270 comm="syz.5.275" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   50.726601][ T1271] 9pnet_fd: Insufficient options for proto=fd
[   50.745087][   T36] audit: type=1400 audit(1762899982.004:360): avc:  denied  { name_bind } for  pid=1270 comm="syz.5.275" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   50.771544][   T36] audit: type=1400 audit(1762899982.004:361): avc:  denied  { node_bind } for  pid=1270 comm="syz.5.275" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   50.807656][ T1275] netlink: 140 bytes leftover after parsing attributes in process `syz.5.276'.
[   50.844415][ T1277] FAT-fs (rnullb0): bogus number of reserved sectors
[   50.851164][ T1277] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   50.884377][ T1284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:135
[   50.968892][ T1290] rust_binder: Write failure EFAULT in pid:137
[   51.062878][ T1300] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   51.078957][ T1302] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   51.085515][ T1302] rust_binder: Read failure Err(EFAULT) in pid:146
[   51.372514][  T516] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   51.422479][   T31] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[   51.533629][  T516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.544668][  T516] usb 3-1: New USB device found, idVendor=046e, idProduct=5577, bcdDevice= 0.00
[   51.553795][  T516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.562689][  T516] usb 3-1: config 0 descriptor??
[   51.573642][   T31] usb 5-1: config 16 has an invalid interface number: 19 but max is 0
[   51.581870][   T31] usb 5-1: config 16 has no interface number 0
[   51.589526][   T31] usb 5-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee
[   51.598669][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.606709][   T31] usb 5-1: Product: syz
[   51.610985][   T31] usb 5-1: Manufacturer: syz
[   51.615634][   T31] usb 5-1: SerialNumber: syz
[   51.759943][ T1320] netlink: 44 bytes leftover after parsing attributes in process `syz.3.292'.
[   51.768962][ T1320] netlink: 43 bytes leftover after parsing attributes in process `syz.3.292'.
[   51.778210][ T1320] netlink: 'syz.3.292': attribute type 5 has an invalid length.
[   51.785971][ T1320] netlink: 43 bytes leftover after parsing attributes in process `syz.3.292'.
[   51.924170][ T1326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:134
[   51.982180][  T516] topseed 0003:046E:5577.0005: unknown main item tag 0x5
[   52.014209][  T516] topseed 0003:046E:5577.0005: hidraw0: USB HID v0.3d Device [HID 046e:5577] on usb-dummy_hcd.2-1/input0
[   52.031734][   T31] usb 5-1: USB disconnect, device number 13
[   52.051657][  T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   52.139407][ T1346] netlink: 165 bytes leftover after parsing attributes in process `syz.5.302'.
[   52.166810][ T1352] SELinux: security_context_str_to_sid () failed with errno=-22
[   52.195532][ T1357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:152
[   52.195914][ T1357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   52.205200][ T1357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:152
[   52.290990][ T1361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154
[   52.650024][ T1379] rust_binder: Write failure EINVAL in pid:163
[   52.659949][ T1379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163
[   53.299696][ T1398] mmap: syz.5.319 (1398): VmData 29339648 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data.
[   53.470122][ T1406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   53.470155][ T1406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168
[   53.696659][ T1419] fuse: Bad value for 'fd'
[   53.952531][  T331] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[   54.017368][    T9] usb 3-1: USB disconnect, device number 12
[   54.096810][ T1446] loop2: detected capacity change from 0 to 8388607
[   54.103567][  T331] usb 4-1: Using ep0 maxpacket: 16
[   54.114405][  T331] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[   54.123931][  T331] usb 4-1: config 1 has no interface number 0
[   54.130251][  T331] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   54.140828][  T331] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   54.151445][  T331] usb 4-1: config 1 interface 105 has no altsetting 0
[   54.159534][ T1449] netlink: 'syz.2.337': attribute type 27 has an invalid length.
[   54.169197][  T331] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   54.178570][  T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.186617][  T331] usb 4-1: Product: syz
[   54.190806][  T331] usb 4-1: Manufacturer: syz
[   54.195452][  T331] usb 4-1: SerialNumber: syz
[   54.202144][ T1419] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   54.209458][ T1419] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   54.220529][ T1449] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   54.221179][ T1449] rust_binder: Got transaction with invalid offset.
[   54.227865][ T1449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   54.234599][ T1449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214
[   54.257702][ T1458] binder: Bad value for 'stats'
[   54.288824][ T1460] rust_binder: Write failure EFAULT in pid:219
[   54.552485][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   54.617756][ T1419] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   54.624981][ T1419] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   54.691120][ T1468] netlink: 44 bytes leftover after parsing attributes in process `syz.5.344'.
[   54.700087][ T1468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.344'.
[   54.709021][ T1468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.344'.
[   54.722468][    T9] usb 3-1: Using ep0 maxpacket: 8
[   54.728657][    T9] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.739831][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[   54.746487][    T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[   54.755617][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.764457][    T9] usb 3-1: config 0 descriptor??
[   55.033212][  T331] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[   55.044563][  T331] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[   55.058262][  T331] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 52:7c:57:29:7c:f5
[   55.078433][   T36] kauditd_printk_skb: 14 callbacks suppressed
[   55.078451][   T36] audit: type=1400 audit(1762899986.354:376): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   55.105636][   T36] audit: type=1400 audit(1762899986.364:377): avc:  denied  { search } for  pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   55.126905][   T36] audit: type=1400 audit(1762899986.364:378): avc:  denied  { read } for  pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   55.148659][   T36] audit: type=1400 audit(1762899986.364:379): avc:  denied  { open } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   55.171652][   T36] audit: type=1400 audit(1762899986.364:380): avc:  denied  { getattr } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   55.174073][    T9] uclogic 0003:5543:0004.0006: unknown main item tag 0x0
[   55.197568][   T36] audit: type=1400 audit(1762899986.404:381): avc:  denied  { read } for  pid=1479 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   55.206269][    T9] uclogic 0003:5543:0004.0006: item fetching failed at offset 4/7
[   55.228043][   T36] audit: type=1400 audit(1762899986.404:382): avc:  denied  { open } for  pid=1479 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   55.234768][    T9] uclogic 0003:5543:0004.0006: parse failed
[   55.265566][    T9] uclogic 0003:5543:0004.0006: probe with driver uclogic failed with error -22
[   55.272488][   T36] audit: type=1400 audit(1762899986.404:383): avc:  denied  { getattr } for  pid=1479 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   55.300205][   T36] audit: type=1400 audit(1762899986.554:384): avc:  denied  { write } for  pid=1418 comm="syz.3.327" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   55.326881][ T1491] futex_wake_op: syz.5.348 tries to shift op by 144; fix this program
[   55.342393][   T36] audit: type=1400 audit(1762899986.564:385): avc:  denied  { write } for  pid=1478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   55.381176][ T1466] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   55.381561][ T1466] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   55.388065][ T1466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   55.396110][ T1466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:225
[   55.406149][  T331] usb 3-1: USB disconnect, device number 13
[   55.772123][  T149] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71
[   55.772220][   T31] usb 4-1: USB disconnect, device number 16
[   55.780490][  T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19
[   55.787236][   T31] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[   55.806983][  T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19
[   55.813082][ T1508] __vm_enough_memory: pid: 1508, comm: syz.3.353, bytes: 18014402804453376 not enough memory for the allocation
[   55.815645][  T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19
[   55.835246][  T149] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19
[   55.843393][  T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19
[   55.851672][  T149] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19
[   55.860217][  T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19
[   55.868800][  T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19
[   55.877847][  T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19
[   55.886457][  T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19
[   55.895539][   T31] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19
[   55.910501][   T31] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19
[   55.943019][   T31] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19
[   55.953182][   T31] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19
[   55.997232][   T31] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   55.998612][ T1522] binder: Unknown parameter 'defcontext01777777777777777777777'
[   56.021041][   T31] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   56.034325][   T31] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[   56.091263][ T1542] /dev/rnullb0: Can't open blockdev
[   56.097902][ T1546] /dev/rnullb0: Can't open blockdev
[   56.175596][ T1558] rust_binder: Read failure Err(EAGAIN) in pid:183
[   56.252481][  T499] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[   56.306985][ T1572] rust_binder: 193: no such ref 0
[   56.312664][ T1572] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   56.319885][ T1572] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   56.383421][ T1584] fuse: Bad value for 'group_id'
[   56.388493][ T1584] fuse: Bad value for 'group_id'
[   56.417552][  T499] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   56.432456][  T499] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   56.451530][  T499] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   56.469763][  T499] usb 3-1: config 220 has no interface number 2
[   56.482486][  T499] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   56.512485][  T499] usb 3-1: config 220 interface 0 has no altsetting 0
[   56.525671][  T499] usb 3-1: config 220 interface 76 has no altsetting 0
[   56.533018][  T499] usb 3-1: config 220 interface 1 has no altsetting 0
[   56.542853][  T499] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   56.551990][  T499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.560290][  T499] usb 3-1: Product: syz
[   56.564658][  T499] usb 3-1: Manufacturer: syz
[   56.569275][  T499] usb 3-1: SerialNumber: syz
[   56.629021][ T1598] incfs_lookup_dentry err:-13
[   56.633900][ T1598] incfs: Can't find or create .index dir in ./bus
[   56.640418][ T1598] incfs: mount failed -13
[   56.670901][ T1598] incfs_lookup_dentry err:-13
[   56.675675][ T1598] incfs: Can't find or create .index dir in ./bus
[   56.682163][ T1598] incfs: mount failed -13
[   56.833018][  T499] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[   56.842507][  T499] usb 3-1: No valid video chain found.
[   56.849409][ T1609] binder: Unknown parameter '/dev/ptp0'
[   56.854482][  T499] usb 3-1: selecting invalid altsetting 0
[   56.873236][  T499] usb 3-1: USB disconnect, device number 14
[   56.876519][ T1608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=55 sclass=netlink_audit_socket pid=1608 comm=syz.5.384
[   56.895681][ T1614] rust_binder: Write failure EFAULT in pid:205
[   56.935228][ T1608] cgroup: Invalid name
[   56.959444][ T1620] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   56.969245][ T1608] bridge0: port 3(erspan0) entered blocking state
[   56.983839][ T1608] bridge0: port 3(erspan0) entered disabled state
[   56.990376][ T1608] erspan0: entered allmulticast mode
[   56.996646][ T1608] erspan0: entered promiscuous mode
[   57.002023][ T1608] bridge0: port 3(erspan0) entered blocking state
[   57.008483][ T1608] bridge0: port 3(erspan0) entered forwarding state
[   57.282498][   T31] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[   57.433581][ T1623] netlink: 92 bytes leftover after parsing attributes in process `syz.4.391'.
[   57.456098][   T31] usb 5-1: unable to get BOS descriptor or descriptor too short
[   57.464396][   T31] usb 5-1: unable to read config index 0 descriptor/start: -71
[   57.471956][   T31] usb 5-1: can't read configurations, error -71
[   57.692553][  T516] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[   57.843925][  T516] usb 3-1: unable to read config index 0 descriptor/start: -61
[   57.851574][  T516] usb 3-1: can't read configurations, error -61
[   57.895534][ T1649] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false
[   57.982478][  T516] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[   58.136982][ T1653] rust_binder: Write failure EFAULT in pid:187
[   58.142498][    T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[   58.157723][  T516] usb 3-1: unable to read config index 0 descriptor/start: -61
[   58.165375][  T516] usb 3-1: can't read configurations, error -61
[   58.171782][  T516] usb usb3-port1: attempt power cycle
[   58.303704][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   58.314737][    T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   58.323823][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.332505][    T9] usb 4-1: config 0 descriptor??
[   58.337752][ T1651] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   58.512568][   T31] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[   58.522500][  T516] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[   58.544230][  T516] usb 3-1: unable to read config index 0 descriptor/start: -61
[   58.551944][  T516] usb 3-1: can't read configurations, error -61
[   58.663915][   T31] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[   58.671892][   T31] usb 5-1: can't read configurations, error -22
[   58.678569][   T31] usb usb5-port1: attempt power cycle
[   58.692515][  T516] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[   58.714195][  T516] usb 3-1: unable to read config index 0 descriptor/start: -61
[   58.724112][  T516] usb 3-1: can't read configurations, error -61
[   58.730601][  T516] usb usb3-port1: unable to enumerate USB device
[   58.755974][    T9] hid-generic 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[   58.953711][    T9] usb 4-1: USB disconnect, device number 17
[   59.022549][   T31] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[   59.044232][   T31] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[   59.052218][   T31] usb 5-1: can't read configurations, error -22
[   59.182512][   T31] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[   59.204106][   T31] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[   59.212036][   T31] usb 5-1: can't read configurations, error -22
[   59.218590][   T31] usb usb5-port1: unable to enumerate USB device
[   59.270295][ T1683] netlink: 'syz.5.412': attribute type 11 has an invalid length.
[   59.474250][ T1694] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   59.524860][ T1695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228
[   60.466834][ T1708] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   60.494706][   T36] kauditd_printk_skb: 18 callbacks suppressed
[   60.494728][   T36] audit: type=1400 audit(1762899991.774:404): avc:  denied  { mount } for  pid=1712 comm="syz.2.422" name="/" dev="ramfs" ino=11019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   60.636296][ T1719] rust_binder: 242: no such ref 3
[   60.641440][ T1719] rust_binder: inc_ref_done called when no active inc_refs
[   60.641463][ T1719] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   60.655826][ T1719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:242
[   60.671108][ T1722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245
[   60.681438][   T36] audit: type=1400 audit(1762899991.964:405): avc:  denied  { ioctl } for  pid=1721 comm="syz.3.425" path="socket:[11170]" dev="sockfs" ino=11170 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   60.724626][ T1724] rust_binder: Write failure EINVAL in pid:247
[   61.257856][   T36] audit: type=1400 audit(1762899992.534:406): avc:  denied  { append } for  pid=1741 comm="syz.4.434" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   61.410567][ T1750] x_tables: unsorted underflow at hook 2
[   61.462479][   T31] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[   61.596360][ T1759] fuse: Bad value for 'fd'
[   61.601433][ T1759] 9pnet_fd: Insufficient options for proto=fd
[   61.632475][   T31] usb 3-1: Invalid ep0 maxpacket: 9
[   61.772475][   T31] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[   61.922467][   T31] usb 3-1: Invalid ep0 maxpacket: 9
[   61.930917][   T31] usb usb3-port1: attempt power cycle
[   62.149422][   T36] audit: type=1400 audit(1762899993.424:407): avc:  denied  { sqpoll } for  pid=1780 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   62.196678][ T1781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:260
[   62.282498][   T31] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[   62.313828][   T31] usb 3-1: Invalid ep0 maxpacket: 9
[   62.409047][   T36] audit: type=1400 audit(1762899993.684:408): avc:  denied  { associate } for  pid=1795 comm="syz.3.450" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   62.431136][   T36] audit: type=1400 audit(1762899993.704:409): avc:  denied  { mounton } for  pid=1795 comm="syz.3.450" path="/proc/267/task" dev="proc" ino=11817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   62.442549][   T31] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[   62.475844][   T36] audit: type=1400 audit(1762899993.754:410): avc:  denied  { search } for  pid=1801 comm="syz.3.451" name="/" dev="configfs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   62.498305][ T1802] rust_binder: Error while translating object.
[   62.498353][ T1802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   62.503038][   T31] usb 3-1: Invalid ep0 maxpacket: 9
[   62.505167][ T1802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:273
[   62.519302][   T36] audit: type=1400 audit(1762899993.754:411): avc:  denied  { write } for  pid=1801 comm="syz.3.451" name="/" dev="configfs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   62.533003][   T31] usb usb3-port1: unable to enumerate USB device
[   62.550863][   T36] audit: type=1400 audit(1762899993.754:412): avc:  denied  { add_name } for  pid=1801 comm="syz.3.451" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   62.566226][   T36] audit: type=1400 audit(1762899993.754:413): avc:  denied  { create } for  pid=1801 comm="syz.3.451" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   63.044854][ T1807] tipc: Started in network mode
[   63.144311][ T1812] incfs_lookup_dentry err:-2
[   63.147802][ T1807] tipc: Node identity , cluster identity 4711
[   63.155103][ T1807] tipc: Failed to set node id, please configure manually
[   63.157953][ T1812] incfs_lookup_dentry err:-2
[   63.162149][ T1807] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   63.192873][ T1815] rust_binder: Write failure EINVAL in pid:212
[   63.193174][ T1816] rust_binder: Write failure EINVAL in pid:212
[   63.212590][ T1817] rust_binder: Read failure Err(EAGAIN) in pid:282
[   63.255166][ T1826] rust_binder: Write failure EFAULT in pid:286
[   63.281549][ T1828] binder: Unknown parameter '/dev/ttyS3'
[   63.377944][ T1843] /dev/rnullb0: Can't open blockdev
[   63.642526][   T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[   63.650925][ T1854] /dev/rnullb0: Can't open blockdev
[   63.802475][   T31] usb 5-1: Using ep0 maxpacket: 32
[   63.808965][   T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   63.817891][   T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   63.826771][   T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   63.836156][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   63.846250][   T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   63.856333][   T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   63.869723][   T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   63.879069][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.888839][   T31] usb 5-1: config 0 descriptor??
[   64.099682][   T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   64.119673][   T31] usb 5-1: USB disconnect, device number 18
[   64.128003][   T31] usblp0: removed
[   64.204466][ T1856] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   64.206142][ T1856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   64.212683][ T1856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252
[   64.476619][ T1864] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   64.486481][ T1864] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   64.592568][   T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[   64.606640][  T457] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   64.688450][ T1872] tipc: Started in network mode
[   64.693394][ T1872] tipc: Node identity 4, cluster identity 4711
[   64.699575][ T1872] tipc: Node number set to 4
[   64.762580][   T31] usb 5-1: Using ep0 maxpacket: 32
[   64.771098][ T1875] netlink: 'syz.3.478': attribute type 4 has an invalid length.
[   64.773725][  T457] usb 3-1: config 0 has an invalid interface number: 63 but max is 0
[   64.795751][  T457] usb 3-1: config 0 has no interface number 0
[   64.802275][  T457] usb 3-1: New USB device found, idVendor=9846, idProduct=9041, bcdDevice=ab.7c
[   64.812102][   T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   64.820632][   T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   64.829531][   T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   64.838790][  T457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.847191][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   64.857726][  T457] usb 3-1: config 0 descriptor??
[   64.864449][   T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   64.874205][   T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   64.887245][   T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   64.902926][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.904299][ T1887] loop7: detected capacity change from 0 to 7
[   64.911922][   T31] usb 5-1: config 0 descriptor??
[   64.917950][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.931224][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   64.939237][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.948399][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   64.956264][ T1887]  loop7: unable to read partition table
[   64.964541][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   64.972537][ T1887] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   64.973748][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   65.001651][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.011143][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.020322][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   65.028454][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.037652][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   65.049452][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.058674][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   65.072585][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.081775][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   65.128475][   T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   65.199810][  T457] usb 3-1: string descriptor 0 read error: -71
[   65.212662][  T457] usb 3-1: USB disconnect, device number 23
[   65.368755][  T499] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[   65.486068][   T31] usb 5-1: USB disconnect, device number 19
[   65.493293][   T31] usblp0: removed
[   65.512503][  T499] usb 4-1: device descriptor read/64, error -71
[   65.527804][   T36] kauditd_printk_skb: 7 callbacks suppressed
[   65.527821][   T36] audit: type=1400 audit(1762899996.804:421): avc:  denied  { name_bind } for  pid=1908 comm="syz.5.488" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   65.617939][ T1939] netlink: 20 bytes leftover after parsing attributes in process `syz.5.495'.
[   65.762565][  T499] usb 4-1: device descriptor read/64, error -71
[   65.781000][ T1958] raw_sendmsg: syz.5.500 forgot to set AF_INET. Fix it!
[   65.793874][   T36] audit: type=1400 audit(1762899997.074:422): avc:  denied  { associate } for  pid=1959 comm="syz.5.500" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   65.902473][ T1961] netlink: 'syz.5.501': attribute type 11 has an invalid length.
[   66.002490][  T499] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[   66.009435][ T1968] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.125703][   T36] audit: type=1400 audit(1762899997.404:423): avc:  denied  { setopt } for  pid=1975 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   66.126235][ T1976] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.147418][ T1976] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.162499][  T499] usb 4-1: device descriptor read/64, error -71
[   66.195082][ T1984] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.197211][ T1985] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   66.412556][  T499] usb 4-1: device descriptor read/64, error -71
[   66.462505][   T63] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[   66.491050][ T1997] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   66.491087][ T1997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:258
[   66.534507][  T499] usb usb4-port1: attempt power cycle
[   66.613610][   T63] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   66.627374][   T63] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   66.636465][   T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   66.644514][   T63] usb 3-1: SerialNumber: syz
[   66.802490][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[   66.882519][  T499] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[   66.903502][  T499] usb 4-1: device descriptor read/8, error -71
[   66.953561][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   66.965214][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b
[   66.974377][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.982398][    T9] usb 5-1: Product: syz
[   66.986614][    T9] usb 5-1: Manufacturer: syz
[   66.991206][    T9] usb 5-1: SerialNumber: syz
[   66.996636][    T9] usb 5-1: config 0 descriptor??
[   67.033518][  T499] usb 4-1: device descriptor read/8, error -71
[   67.044481][ T2012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2012 comm=syz.5.517
[   67.067552][   T63] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[   67.079352][   T36] audit: type=1400 audit(1762899998.364:424): avc:  denied  { ioctl } for  pid=2018 comm="syz.5.518" path="socket:[13512]" dev="sockfs" ino=13512 ioctlcmd=0xf518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   67.084499][   T63] usb 3-1: USB disconnect, device number 24
[   67.213503][   T36] audit: type=1326 audit(1762899998.484:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2041 comm="syz.5.524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b2ed8f6c9 code=0x0
[   67.438447][    T9] usb 5-1: USB disconnect, device number 20
[   67.452974][   T63] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[   67.567341][  T414] udevd[414]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   67.634641][   T36] audit: type=1400 audit(1762899998.914:426): avc:  denied  { map } for  pid=2044 comm="syz.2.525" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   67.682489][  T499] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[   67.703537][  T499] usb 4-1: device descriptor read/8, error -71
[   67.833531][  T499] usb 4-1: device descriptor read/8, error -71
[   67.942548][  T499] usb usb4-port1: unable to enumerate USB device
[   68.007827][ T2054] rust_binder: Write failure EINVAL in pid:277
[   68.102475][   T63] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   68.262551][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[   68.272675][   T63] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[   68.281762][   T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.289803][   T63] usb 3-1: Product: syz
[   68.294005][   T63] usb 3-1: Manufacturer: syz
[   68.298612][   T63] usb 3-1: SerialNumber: syz
[   68.413504][    T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[   68.421830][    T9] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   68.430778][    T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   68.441081][    T9] usb 5-1: config 220 has no interface number 2
[   68.447389][    T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   68.460549][    T9] usb 5-1: config 220 interface 0 has no altsetting 0
[   68.467353][    T9] usb 5-1: config 220 interface 76 has no altsetting 0
[   68.474260][    T9] usb 5-1: config 220 interface 1 has no altsetting 0
[   68.482455][    T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   68.491528][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.499555][    T9] usb 5-1: Product: syz
[   68.503860][    T9] usb 5-1: Manufacturer: syz
[   68.508485][    T9] usb 5-1: SerialNumber: syz
[   68.515770][   T63] usb 3-1: USB disconnect, device number 26
[   68.725281][    T9] usb 5-1: selecting invalid altsetting 0
[   68.731198][    T9] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[   68.738002][    T9] usb 5-1: No valid video chain found.
[   68.746058][    T9] usb 5-1: USB disconnect, device number 21
[   68.974444][   T36] audit: type=1326 audit(1762900000.264:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2057 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e398f6c9 code=0x7fc00000
[   69.009075][ T2061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:333
[   69.009402][ T2061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   69.021751][ T2061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:333
[   69.037645][ T2061] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   69.054163][ T2065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:333
[   69.063134][ T2068] rust_binder: Write failure EFAULT in pid:306
[   69.279054][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   69.313751][   T36] audit: type=1400 audit(1762900000.594:428): avc:  denied  { append } for  pid=2094 comm="syz.2.541" name="file0" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   69.373052][ T2097] futex_wake_op: syz.4.542 tries to shift op by 144; fix this program
[   69.443840][ T2099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.543'.
[   69.457817][ T2100] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   69.540255][   T63] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[   69.605986][ T2119] rust_binder: Write failure EINVAL in pid:296
[   69.606651][ T2119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=2119 comm=syz.4.549
[   69.657067][ T2123] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   69.712468][   T63] usb 4-1: Using ep0 maxpacket: 8
[   69.725336][   T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.735614][   T36] audit: type=1400 audit(1762900001.014:429): avc:  denied  { getattr } for  pid=2120 comm="syz.4.550" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   69.760074][   T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 10
[   69.771300][   T63] usb 4-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00
[   69.780421][   T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.789258][   T63] usb 4-1: config 0 descriptor??
[   70.197254][   T63] wacom 0003:056A:00B0.0008: Unknown device_type for 'HID 056a:00b0'. Assuming pen.
[   70.207453][   T63] wacom 0003:056A:00B0.0008: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.3-1/input0
[   70.224494][   T63] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B0.0008/input/input9
[   70.408269][ T2093] netlink: 32 bytes leftover after parsing attributes in process `syz.3.540'.
[   70.423972][   T36] audit: type=1400 audit(1762900001.704:430): avc:  denied  { write } for  pid=2091 comm="syz.3.540" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   70.424109][ T2093] random: crng reseeded on system resumption
[   70.546755][ T2158] rust_binder: Write failure EFAULT in pid:338
[   70.562492][  T499] usb 4-1: USB disconnect, device number 22
[   70.638042][ T2167] rust_binder: 305: no such ref 1
[   70.650189][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   70.650206][   T36] audit: type=1400 audit(1762900001.924:433): avc:  denied  { bind } for  pid=2168 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   70.676965][   T36] audit: type=1400 audit(1762900001.924:434): avc:  denied  { setopt } for  pid=2168 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   71.042468][  T499] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   71.172486][  T499] usb 3-1: device descriptor read/64, error -71
[   71.206677][ T2196] rust_binder: 360: no such ref 0
[   71.211745][ T2196] rust_binder: 360: no such ref 2
[   71.344595][ T2208] rust_binder: Error while translating object.
[   71.344638][ T2208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   71.350926][ T2208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:372
[   71.372253][ T2212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:375
[   71.422530][  T499] usb 3-1: device descriptor read/64, error -71
[   71.672523][  T499] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[   71.752483][   T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[   71.802475][  T499] usb 3-1: device descriptor read/64, error -71
[   71.902478][   T31] usb 4-1: Using ep0 maxpacket: 32
[   71.908722][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.919819][   T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   71.928919][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.938175][   T31] usb 4-1: config 0 descriptor??
[   71.944243][   T31] hub 4-1:0.0: USB hub found
[   72.062484][  T499] usb 3-1: device descriptor read/64, error -71
[   72.147177][   T31] hub 4-1:0.0: 1 port detected
[   72.172571][  T499] usb usb3-port1: attempt power cycle
[   72.504862][ T2232] rust_binder: 321: no such ref 1
[   72.512955][  T499] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[   72.535311][  T499] usb 3-1: device descriptor read/8, error -71
[   72.555037][   T36] audit: type=1326 audit(1762900003.834:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2234 comm="syz.4.584" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1a818f6c9 code=0x0
[   72.663406][  T499] usb 3-1: device descriptor read/8, error -71
[   72.902489][  T499] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[   72.923455][  T499] usb 3-1: device descriptor read/8, error -71
[   73.010695][    T9] usb 4-1: USB disconnect, device number 23
[   73.012062][   T31] hub 4-1:0.0: activate --> -19
[   73.053456][  T499] usb 3-1: device descriptor read/8, error -71
[   73.162558][  T499] usb usb3-port1: unable to enumerate USB device
[   73.777115][ T2260] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.313570][ T2265] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   74.394672][ T2269] rust_binder: 336: no such ref 3
[   74.406237][ T2269] rust_binder: 336: no such ref 1
[   74.411307][ T2269] rust_binder: Write failure EFAULT in pid:336
[   74.446886][   T36] audit: type=1400 audit(1762900005.724:436): avc:  denied  { setattr } for  pid=2276 comm="syz.4.600" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[   74.468461][ T2283] fuse: Bad value for 'fd'
[   74.494536][   T36] audit: type=1400 audit(1762900005.774:437): avc:  denied  { accept } for  pid=2289 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   74.535644][   T36] audit: type=1400 audit(1762900005.784:438): avc:  denied  { create } for  pid=2291 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   74.662930][ T2304] tmpfs: Unknown parameter ':;2�SHDO��k����Q:ۘM�ck?3�\7o+Y�;W`��z��C�U\��v��"�I�]�:sU��Br?�I�S�Y�,8'
[   74.720584][ T2315] netlink: 'syz.5.614': attribute type 15 has an invalid length.
[   74.731561][ T2315] netlink: 24 bytes leftover after parsing attributes in process `syz.5.614'.
[   75.255760][ T2338] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   75.257636][ T2338] rust_binder: 362: no such ref 0
[   75.275102][ T2338] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   75.292365][ T2338] rust_binder: 362: no such ref 2
[   75.298237][ T2338] rust_binder: Error while translating object.
[   75.298299][ T2338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   75.305217][ T2338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362
[   75.378277][ T2347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.412708][ T2347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.612538][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[   75.752465][    T9] usb 3-1: device descriptor read/64, error -71
[   75.862481][   T63] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[   75.992539][    T9] usb 3-1: device descriptor read/64, error -71
[   76.012468][   T63] usb 5-1: Using ep0 maxpacket: 32
[   76.019164][   T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.030539][   T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.040918][   T63] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   76.050742][   T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.063741][   T63] usb 5-1: config 0 descriptor??
[   76.232489][    T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[   76.372471][    T9] usb 3-1: device descriptor read/64, error -71
[   76.479896][   T63] savu 0003:1E7D:2D5A.0009: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[   76.513668][   T63] usb 5-1: USB disconnect, device number 22
[   76.526269][ T2356] fido_id[2356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   76.632460][    T9] usb 3-1: device descriptor read/64, error -71
[   76.660394][ T2360] overlayfs: failed to resolve './file0': -2
[   76.667162][ T2360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:365
[   76.742595][    T9] usb usb3-port1: attempt power cycle
[   76.759231][ T2362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   76.759267][ T2362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367
[   77.092477][    T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[   77.123455][    T9] usb 3-1: device descriptor read/8, error -71
[   77.237536][ T2378] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.263423][    T9] usb 3-1: device descriptor read/8, error -71
[   77.321686][ T2380] rust_binder: 385: no such ref 2
[   77.327325][ T2381] rust_binder: 385: no such ref 2
[   77.334879][ T2380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=2380 comm=syz.4.634
[   77.522459][    T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[   77.553456][    T9] usb 3-1: device descriptor read/8, error -71
[   77.683509][    T9] usb 3-1: device descriptor read/8, error -71
[   77.792621][    T9] usb usb3-port1: unable to enumerate USB device
[   77.832475][  T457] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[   77.983635][  T457] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   77.995240][  T457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   78.006234][  T457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   78.016363][  T457] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   78.029836][  T457] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   78.039313][  T457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.047280][   T36] audit: type=1400 audit(1762900009.324:439): avc:  denied  { create } for  pid=2414 comm="syz.5.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1
[   78.052773][  T457] usb 5-1: config 0 descriptor??
[   78.479459][  T457] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max
[   78.500033][  T457] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[   78.522696][  T457] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   78.702476][    T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[   78.866091][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.892487][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.902303][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   78.915526][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   78.924782][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.939536][    T9] usb 3-1: config 0 descriptor??
[   79.350416][ T2559] sit0: entered promiscuous mode
[   79.357445][ T2559] netlink: 'syz.5.673': attribute type 1 has an invalid length.
[   79.365347][ T2559] netlink: 1 bytes leftover after parsing attributes in process `syz.5.673'.
[   79.389421][ T2561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.403510][ T2561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.457979][   T36] audit: type=1400 audit(1762900010.734:440): avc:  denied  { create } for  pid=2391 comm="syz.4.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   79.604420][   T36] audit: type=1400 audit(1762900010.884:441): avc:  denied  { mounton } for  pid=2571 comm="syz.5.678" path="pipe:[15185]" dev="pipefs" ino=15185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   80.012193][ T2594] fuse: Bad value for 'user_id'
[   80.017181][ T2594] fuse: Bad value for 'user_id'
[   80.244788][ T2632] netlink: 'syz.5.696': attribute type 4 has an invalid length.
[   80.250791][   T36] audit: type=1400 audit(1762900011.524:442): avc:  denied  { getopt } for  pid=2633 comm="syz.3.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   80.253064][ T2632] netlink: 'syz.5.696': attribute type 5 has an invalid length.
[   80.280787][ T2632] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.696'.
[   80.320028][ T2644] netlink: 120 bytes leftover after parsing attributes in process `syz.5.701'.
[   80.328929][ T2647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.702'.
[   80.329132][ T2644] netlink: 96 bytes leftover after parsing attributes in process `syz.5.701'.
[   80.527842][   T31] usb 5-1: USB disconnect, device number 23
[   80.590232][   T36] audit: type=1400 audit(1762900011.864:443): avc:  denied  { append } for  pid=2668 comm="syz.4.708" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   80.592557][ T2669] fuse: Unknown parameter '^d'
[   80.654158][ T2675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=2675 comm=syz.3.710
[   80.662633][ T2676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=2676 comm=syz.3.710
[   80.998271][   T31] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[   81.152490][   T31] usb 5-1: Using ep0 maxpacket: 32
[   81.158772][   T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   81.166986][   T31] usb 5-1: config 0 has no interface number 0
[   81.173187][   T31] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.184149][   T31] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.193937][   T31] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[   81.203158][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.211903][   T31] usb 5-1: config 0 descriptor??
[   81.459442][   T36] audit: type=1326 audit(1762900012.734:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2441 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46fb38f6c9 code=0x7fc00000
[   81.482826][   T36] audit: type=1326 audit(1762900012.734:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2441 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46fb38f6c9 code=0x7fc00000
[   81.510904][   T36] audit: type=1400 audit(1762900012.784:446): avc:  denied  { write } for  pid=2710 comm="syz.2.723" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   81.510991][    T9] usbhid 3-1:0.0: can't add hid device: -71
[   81.537032][ T2711] netlink: 'syz.2.723': attribute type 27 has an invalid length.
[   81.541054][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   81.561197][    T9] usb 3-1: USB disconnect, device number 35
[   81.574285][ T2711] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.581514][ T2711] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.608739][ T2713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2713 comm=syz.2.723
[   81.640201][ T2715] netlink: 1143 bytes leftover after parsing attributes in process `syz.5.724'.
[   81.735269][   T36] audit: type=1400 audit(1762900013.014:447): avc:  denied  { write } for  pid=2721 comm="syz.5.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   81.796776][ T2731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=2731 comm=syz.5.728
[   81.809261][ T2731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=2731 comm=syz.5.728
[   81.864823][   T36] audit: type=1400 audit(1762900013.144:448): avc:  denied  { mounton } for  pid=2737 comm="syz.5.731" path="/242/file0" dev="tmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   81.864918][ T2738] incfs: Options parsing error. -22
[   81.892857][ T2738] incfs: mount failed -22
[   82.010397][ T2750] 9pnet_fd: Insufficient options for proto=fd
[   82.523015][ T2755] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[   82.533757][ T2755] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[   82.544523][ T2755] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[   82.555230][ T2755] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[   82.565851][ T2755] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[   82.578040][ T2755] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[   82.648297][ T2758] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   83.523965][ T2796] overlayfs: failed to clone upperpath
[   83.565718][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   83.565737][   T36] audit: type=1400 audit(1762900014.844:454): avc:  denied  { mounton } for  pid=2802 comm="syz.5.754" path="/250/file0" dev="tmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   83.619929][   T31] usbhid 5-1:0.1: can't add hid device: -71
[   83.628530][   T31] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[   83.643181][   T31] usb 5-1: USB disconnect, device number 24
[   83.649264][   T36] audit: type=1400 audit(1762900014.894:455): avc:  denied  { setattr } for  pid=2802 comm="syz.5.754" name="file0" dev="tmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   83.684216][   T36] audit: type=1400 audit(1762900014.964:456): avc:  denied  { create } for  pid=2809 comm="syz.5.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   83.732471][   T36] audit: type=1400 audit(1762900015.004:457): avc:  denied  { setopt } for  pid=2817 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   83.760528][ T2808] fuse: Unknown parameter 'roo00000000060000'
[   84.065222][ T2829] rust_binder: Write failure EFAULT in pid:413
[   84.134569][ T2832] rust_binder: Error while translating object.
[   84.140790][ T2832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   84.147058][ T2832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416
[   84.169842][ T2834] binfmt_misc: register: failed to install interpreter file ./cgroup
[   84.195865][   T36] audit: type=1400 audit(1762900015.464:458): avc:  denied  { create } for  pid=2833 comm="syz.4.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   84.222728][ T2836] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   84.230036][ T2836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420
[   84.242454][   T36] audit: type=1400 audit(1762900015.514:459): avc:  denied  { create } for  pid=2837 comm="syz.5.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.277115][   T36] audit: type=1400 audit(1762900015.514:460): avc:  denied  { bind } for  pid=2837 comm="syz.5.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.303480][   T36] audit: type=1400 audit(1762900015.514:461): avc:  denied  { write } for  pid=2837 comm="syz.5.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.358024][ T2845] fuse: Unknown parameter 'd��q�#���Pw2��*�5Ƥ�.t±�^A%���x|P�&J�'�n�4X�9��p;Q�h�M�����HSF�����I]n�Q��H<y«�)"Y������K]5ԑV��k���>�ÐS�ω3�
[   84.358024][ T2845] H��}A$'
[   84.384542][   T36] audit: type=1400 audit(1762900015.514:462): avc:  denied  { nlmsg_write } for  pid=2837 comm="syz.5.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   84.565204][ T2860] netlink: 'syz.5.773': attribute type 4 has an invalid length.
[   84.582598][ T2860] netlink: 'syz.5.773': attribute type 4 has an invalid length.
[   84.624492][ T2860] netlink: 'syz.5.773': attribute type 1 has an invalid length.
[   85.090217][ T2889] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.090291][ T2889] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   85.190855][ T2897] overlayfs: failed to resolve './file2': -2
[   85.224611][ T2901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.790'.
[   85.254756][   T36] audit: type=1400 audit(1762900016.534:463): avc:  denied  { mount } for  pid=2905 comm="syz.2.792" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   85.288779][ T2910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'.
[   85.297936][ T2910] bridge_slave_1: left allmulticast mode
[   85.303863][ T2910] bridge_slave_1: left promiscuous mode
[   85.309494][ T2910] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.316928][ T2910] bridge_slave_0: left allmulticast mode
[   85.322598][ T2910] bridge_slave_0: left promiscuous mode
[   85.328209][ T2910] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.583585][ T2936] bridge0: entered allmulticast mode
[   85.638863][ T2954] overlayfs: failed to clone upperpath
[   85.744506][ T2983] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   85.857941][ T2994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.865202][ T2994] IPv6: NLM_F_CREATE should be set when creating new route
[   85.872458][ T2994] IPv6: NLM_F_CREATE should be set when creating new route
[   86.091965][ T3009] netlink: 'syz.5.826': attribute type 27 has an invalid length.
[   86.102213][ T3009] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   86.145207][ T3003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'.
[   86.258219][ T3018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'.
[   86.337381][ T3018] rust_binder: 444: no such ref 3
[   86.342540][ T3018] rust_binder: inc_ref_done called when no active inc_refs
[   86.342565][ T3018] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   86.356839][ T3018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:444
[   86.370553][ T3022] netlink: 'syz.4.829': attribute type 16 has an invalid length.
[   86.373195][ T3023] fuse: blksize only supported for fuseblk
[   86.379789][ T3022] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.829'.
[   86.418294][ T3029] overlayfs: invalid origin (0000)
[   86.461696][ T3038] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   86.469013][ T3038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:459
[   87.992466][   T63] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[   88.130733][ T3088] netlink: 'syz.3.851': attribute type 5 has an invalid length.
[   88.138485][ T3088] netlink: 'syz.3.851': attribute type 5 has an invalid length.
[   88.146359][ T3088] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.851'.
[   88.152489][   T63] usb 5-1: Using ep0 maxpacket: 32
[   88.160963][ T3088] netlink: 104 bytes leftover after parsing attributes in process `syz.3.851'.
[   88.161982][   T63] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[   88.170482][ T3089] netlink: 104 bytes leftover after parsing attributes in process `syz.3.851'.
[   88.178850][   T63] usb 5-1: config 0 has no interface number 0
[   88.194318][   T63] usb 5-1: config 0 interface 184 has no altsetting 0
[   88.202672][   T63] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   88.211791][   T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.220166][   T63] usb 5-1: Product: syz
[   88.224566][   T63] usb 5-1: Manufacturer: syz
[   88.229226][   T63] usb 5-1: SerialNumber: syz
[   88.234528][   T63] usb 5-1: config 0 descriptor??
[   88.240302][   T63] smsc75xx v1.0.0
[   88.841532][   T63] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   88.852485][   T63] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   88.994888][ T3098] overlayfs: failed to clone lowerpath
[   89.062828][   T63] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[   89.088035][   T63] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[   89.104362][   T63] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   89.114357][ T3112] netlink: 'syz.2.860': attribute type 2 has an invalid length.
[   89.122016][ T3112] netlink: 1 bytes leftover after parsing attributes in process `syz.2.860'.
[   89.133920][   T63] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[   89.146877][   T63] usb 5-1: USB disconnect, device number 25
[   89.175071][ T3111] netlink: 'syz.5.861': attribute type 1 has an invalid length.
[   89.278669][ T3126] overlayfs: missing 'workdir'
[   89.291112][ T3124] 9pnet_fd: Insufficient options for proto=fd
[   89.325408][ T3138] overlayfs: failed to resolve 'subj_role=/dev/bus/usb/00#/00#': -2
[   89.334506][ T3139] overlayfs: failed to resolve 'subj_role=/dev/bus/usb/00#/00#': -2
[   89.822501][  T499] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[   89.977407][  T499] usb 5-1: Using ep0 maxpacket: 16
[   89.984055][  T499] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[   89.992176][  T499] usb 5-1: config 0 has no interface number 0
[   89.999856][  T499] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=fe.d1
[   90.008983][  T499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.017056][  T499] usb 5-1: Product: syz
[   90.021246][  T499] usb 5-1: Manufacturer: syz
[   90.026053][  T499] usb 5-1: SerialNumber: syz
[   90.031497][  T499] usb 5-1: config 0 descriptor??
[   90.037775][  T499] usb_ehset_test 5-1:0.16: probe with driver usb_ehset_test failed with error -32
[   90.239490][ T3178] input: syz0 as /devices/virtual/input/input13
[   90.245846][   T36] kauditd_printk_skb: 7 callbacks suppressed
[   90.245862][   T36] audit: type=1326 audit(1762900021.524:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3164 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e398f6c9 code=0x7fc00000
[   90.262199][  T499] usb 5-1: USB disconnect, device number 26
[   90.519102][   T36] audit: type=1400 audit(1762900021.794:472): avc:  denied  { watch_reads } for  pid=3213 comm="syz.5.897" path="/281" dev="tmpfs" ino=1509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   90.561754][ T3219] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   90.869058][   T36] audit: type=1400 audit(1762900022.144:473): avc:  denied  { shutdown } for  pid=3247 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   91.000208][ T3255] rust_binder: 487: no such ref 3
[   91.006707][   T36] audit: type=1400 audit(1762900022.294:474): avc:  denied  { mount } for  pid=3259 comm="syz.5.912" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   91.009264][ T3255] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[   91.030649][ T3262] netlink: 'syz.2.913': attribute type 10 has an invalid length.
[   91.044586][ T3262] netlink: 17 bytes leftover after parsing attributes in process `syz.2.913'.
[   91.051769][ T3255] rust_binder: 487: no such ref 1
[   91.073020][ T3255] rust_binder: Error while translating object.
[   91.073088][ T3255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   91.089456][ T3255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:487
[   91.163763][ T3281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'.
[   91.192459][ T3280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'.
[   91.234771][   T36] audit: type=1326 audit(1762900022.514:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3269 comm="syz.5.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2ed8f6c9 code=0x7fc00000
[   91.434867][   T31] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[   91.465870][   T36] audit: type=1400 audit(1762900022.744:476): avc:  denied  { execute } for  pid=3318 comm="syz.3.930" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   91.572482][   T31] usb 5-1: device descriptor read/64, error -71
[   91.812505][   T31] usb 5-1: device descriptor read/64, error -71
[   92.052480][   T31] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[   92.201974][ T3366] futex_wake_op: syz.3.943 tries to shift op by -1; fix this program
[   92.202495][   T31] usb 5-1: device descriptor read/64, error -71
[   92.256260][   T36] audit: type=1400 audit(1762900023.534:477): avc:  denied  { setattr } for  pid=3377 comm="syz.3.950" name="KEY" dev="sockfs" ino=18069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   92.452840][   T31] usb 5-1: device descriptor read/64, error -71
[   92.486932][   T36] audit: type=1400 audit(1762900023.764:478): avc:  denied  { lock } for  pid=3409 comm="syz.5.961" path="socket:[18093]" dev="sockfs" ino=18093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   92.562566][   T31] usb usb5-port1: attempt power cycle
[   92.868300][ T3420] netlink: 'syz.2.964': attribute type 4 has an invalid length.
[   92.876009][ T3420] netlink: 992 bytes leftover after parsing attributes in process `syz.2.964'.
[   92.902504][   T31] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[   92.923532][   T31] usb 5-1: device descriptor read/8, error -71
[   93.053806][   T31] usb 5-1: device descriptor read/8, error -71
[   93.292491][   T31] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[   93.313487][   T31] usb 5-1: device descriptor read/8, error -71
[   93.443518][   T31] usb 5-1: device descriptor read/8, error -71
[   93.552549][   T31] usb usb5-port1: unable to enumerate USB device
[   94.224493][ T3467] kvm: emulating exchange as write
[   94.286379][ T3470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:498
[   94.310491][ T3477] netlink: 'syz.4.983': attribute type 1 has an invalid length.
[   94.410156][ T3486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3486 comm=syz.5.986
[   94.461250][ T3496] mmap: syz.5.989 (3496) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   94.473822][   T36] audit: type=1400 audit(1762900025.764:479): avc:  denied  { getopt } for  pid=3495 comm="syz.5.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   94.562505][   T63] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[   94.713578][   T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   94.724599][   T63] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   94.733711][   T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.742527][   T63] usb 5-1: config 0 descriptor??
[   94.747766][ T3477] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   95.159268][   T63] hid-generic 0003:04F3:0755.000B: item fetching failed at offset 3/5
[   95.167718][   T63] hid-generic 0003:04F3:0755.000B: probe with driver hid-generic failed with error -22
[   95.307619][   T36] audit: type=1400 audit(1762900026.584:480): avc:  denied  { create } for  pid=3514 comm="syz.5.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   95.357771][ T3477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.366333][ T3477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.378470][ T3477] netlink: 84 bytes leftover after parsing attributes in process `syz.4.983'.
[   95.388140][   T36] audit: type=1400 audit(1762900026.674:481): avc:  denied  { read } for  pid=3476 comm="syz.4.983" name="/" dev="configfs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   95.410047][   T36] audit: type=1400 audit(1762900026.674:482): avc:  denied  { open } for  pid=3476 comm="syz.4.983" path="/" dev="configfs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   95.862298][ T3522] netlink: 32 bytes leftover after parsing attributes in process `syz.5.999'.
[   95.947742][ T3530] overlayfs: failed to clone upperpath
[   95.954261][ T3530] tmpfs: Unknown parameter 'grpquota_�בN�O�rdlimit'
[   96.012668][   T36] audit: type=1400 audit(1762900027.294:483): avc:  denied  { nlmsg_read } for  pid=3539 comm="syz.5.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   96.030700][ T3544] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1006'.
[   96.071563][ T3552] overlayfs: failed to clone upperpath
[   96.094786][ T3562] syzkaller0: entered allmulticast mode
[   96.100744][ T3562] syzkaller0: entered promiscuous mode
[   96.107724][ T3562] syzkaller0 (unregistering): left promiscuous mode
[   96.114456][ T3562] syzkaller0 (unregistering): left allmulticast mode
[   96.269238][   T36] audit: type=1326 audit(1762900027.544:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.3.1021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70e398f6c9 code=0x0
[   96.344918][   T36] audit: type=1326 audit(1762900027.624:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e398f6c9 code=0x7ffc0000
[   96.368803][   T36] audit: type=1326 audit(1762900027.644:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e398f6c9 code=0x7ffc0000
[   96.392625][   T36] audit: type=1326 audit(1762900027.644:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70e398f6c9 code=0x7ffc0000
[   96.416184][   T36] audit: type=1326 audit(1762900027.644:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e398f6c9 code=0x7ffc0000
[   96.423036][ T3615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=3615 comm=syz.5.1024
[   96.440037][   T36] audit: type=1326 audit(1762900027.644:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e398f6c9 code=0x7ffc0000
[   96.454754][ T3615] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1024'.
[   97.320926][   T31] usb 5-1: USB disconnect, device number 31
[  115.744506][   T36] kauditd_printk_skb: 53 callbacks suppressed
[  115.744524][   T36] audit: type=1400 audit(1762900047.024:543): avc:  denied  { setattr } for  pid=3665 comm="syz.3.1042" name="NETLINK" dev="sockfs" ino=18813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  115.792479][    T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  115.922480][    T9] usb 5-1: device descriptor read/64, error -71
[  116.162500][    T9] usb 5-1: device descriptor read/64, error -71
[  116.297563][ T3687] fuse: Unknown parameter '�0x0000000000000007'
[  116.333904][ T3696] 9pnet: p9_errstr2errno: server reported unknown error 0000
[  116.402456][    T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  116.532463][    T9] usb 5-1: device descriptor read/64, error -71
[  116.772462][    T9] usb 5-1: device descriptor read/64, error -71
[  116.882590][    T9] usb usb5-port1: attempt power cycle
[  116.910861][   T36] audit: type=1400 audit(1762900048.184:544): avc:  denied  { create } for  pid=3716 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  117.222518][    T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  117.243529][    T9] usb 5-1: device descriptor read/8, error -71
[  117.322026][ T3750] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=3750 comm=syz.5.1077
[  117.373468][    T9] usb 5-1: device descriptor read/8, error -71
[  117.436327][ T3769] fuse: Bad value for 'group_id'
[  117.441304][ T3769] fuse: Bad value for 'group_id'
[  117.622465][    T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  117.643501][    T9] usb 5-1: device descriptor read/8, error -71
[  117.773572][    T9] usb 5-1: device descriptor read/8, error -71
[  117.882630][    T9] usb usb5-port1: unable to enumerate USB device
[  117.905631][ T3806] veth0_virt_wifi: entered allmulticast mode
[  117.914361][ T3806] veth0_virt_wifi: left allmulticast mode
[  117.989223][ T3833] netlink: 679 bytes leftover after parsing attributes in process `syz.2.1102'.
[  118.032657][ T3841] 9pnet_fd: Insufficient options for proto=fd
[  118.050061][   T36] audit: type=1400 audit(1762900049.324:545): avc:  denied  { bind } for  pid=3842 comm="syz.2.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  118.051869][ T3843] overlayfs: failed to clone upperpath
[  118.157587][ T3848] netlink: 'syz.2.1109': attribute type 1 has an invalid length.
[  118.165381][ T3848] netlink: 'syz.2.1109': attribute type 2 has an invalid length.
[  118.174945][ T3848] netlink: 'syz.2.1109': attribute type 1 has an invalid length.
[  118.182818][ T3848] netlink: 'syz.2.1109': attribute type 2 has an invalid length.
[  118.183955][   T36] audit: type=1400 audit(1762900049.474:546): avc:  denied  { write } for  pid=3847 comm="syz.2.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  118.233661][ T3858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27426 sclass=netlink_route_socket pid=3858 comm=syz.2.1113
[  118.412307][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'.
[  118.421285][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'.
[  119.196782][ T3880] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  119.205612][ T3880] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  119.282579][ T3895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'.
[  119.291579][ T3895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'.
[  119.410626][   T36] audit: type=1400 audit(1762900050.684:547): avc:  denied  { getopt } for  pid=3910 comm="syz.3.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  119.440922][   T36] audit: type=1400 audit(1762900050.714:548): avc:  denied  { unmount } for  pid=504 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  119.533677][ T3918] rust_binder: 521: no such ref 1
[  119.627091][ T3924] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.647539][ T3931] 9pnet_fd: Insufficient options for proto=fd
[  119.684464][   T36] audit: type=1400 audit(1762900050.964:549): avc:  denied  { create } for  pid=3938 comm="syz.5.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  119.714152][ T3949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1140'.
[  119.728568][   T36] audit: type=1400 audit(1762900051.004:550): avc:  denied  { read write } for  pid=3932 comm="syz.4.1134" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.752358][   T36] audit: type=1400 audit(1762900051.004:551): avc:  denied  { open } for  pid=3932 comm="syz.4.1134" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.775723][   T36] audit: type=1400 audit(1762900051.004:552): avc:  denied  { ioctl } for  pid=3932 comm="syz.4.1134" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.972492][   T31] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  120.122446][   T31] usb 5-1: Using ep0 maxpacket: 32
[  120.128660][   T31] usb 5-1: config 6 has an invalid interface number: 36 but max is 0
[  120.136783][   T31] usb 5-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config
[  120.146886][   T31] usb 5-1: config 6 has no interface number 0
[  120.153002][   T31] usb 5-1: config 6 interface 36 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  120.165979][   T31] usb 5-1: config 6 interface 36 has no altsetting 0
[  120.178846][   T31] usb 5-1: string descriptor 0 read error: -22
[  120.185419][   T31] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=42.51
[  120.194753][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.210607][   T31] usb 5-1: unknown interface protocol 0x92, assuming v1
[  120.220196][   T31] usb 5-1: 36:2 : does not exist
[  121.272457][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  121.272477][   T36] audit: type=1400 audit(1762900052.544:554): avc:  denied  { lock } for  pid=4020 comm="syz.2.1159" path="socket:[19442]" dev="sockfs" ino=19442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  121.305022][ T4023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1167'.
[  121.395664][ T4046] overlayfs: failed to clone upperpath
[  121.412687][ T4049] netlink: 'syz.5.1176': attribute type 4 has an invalid length.
[  121.420459][ T4049] netlink: 'syz.5.1176': attribute type 5 has an invalid length.
[  121.428238][ T4049] netlink: 'syz.5.1176': attribute type 1 has an invalid length.
[  121.436615][ T4049] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1176'.
[  121.445600][ T4049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1176'.
[  121.454574][ T4049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1176'.
[  122.175260][   T36] audit: type=1400 audit(1762900053.454:555): avc:  denied  { map } for  pid=4090 comm="syz.5.1191" path="socket:[20010]" dev="sockfs" ino=20010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  122.230313][   T36] audit: type=1400 audit(1762900053.504:556): avc:  denied  { create } for  pid=4099 comm="syz.5.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  122.401810][   T36] audit: type=1400 audit(1762900053.674:557): avc:  denied  { watch watch_reads } for  pid=4117 comm="syz.5.1202" path="/403/file0" dev="tmpfs" ino=2168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  122.675173][   T31] usb 5-1: USB disconnect, device number 36
[  123.071751][ T4172] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  123.072746][ T4172] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  123.087968][ T4172] rust_binder: Write failure EINVAL in pid:545
[  123.563331][ T4204] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  123.581276][ T4204] overlayfs: missing 'lowerdir'
[  123.611386][ T4210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4210 comm=syz.2.1229
[  123.624093][ T4210] __nla_validate_parse: 1 callbacks suppressed
[  123.624106][ T4210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'.
[  123.675939][ T4216] input: syz0 as /devices/virtual/input/input14
[  123.701942][   T36] audit: type=1400 audit(1762900054.974:558): avc:  denied  { create } for  pid=4217 comm="syz.2.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  123.717480][ T4219] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1232'.
[  123.748159][ T4229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  123.802868][ T4232] rust_binder: Write failure EFAULT in pid:568
[  123.965472][ T4237] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.1238' sets config #8
[  123.998409][   T36] audit: type=1400 audit(1762900055.274:559): avc:  denied  { setopt } for  pid=4239 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  124.053753][ T4246] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  124.054040][ T4246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:578
[  124.402439][  T499] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  124.602497][  T499] usb 5-1: Using ep0 maxpacket: 32
[  124.611029][  T499] usb 5-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config
[  124.622540][  T499] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  124.631664][  T499] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 4.00
[  124.641050][ T4303] netlink: 'syz.2.1260': attribute type 1 has an invalid length.
[  124.648960][ T4303] netlink: 'syz.2.1260': attribute type 2 has an invalid length.
[  124.658585][  T499] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.915865][ T4310] 9pnet_fd: Insufficient options for proto=fd
[  125.046262][ T4314] erofs: Bad value for 'dax'
[  125.280528][ T4346] netlink: 'syz.2.1268': attribute type 10 has an invalid length.
[  125.413580][ T4356] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1272'.
[  125.836405][   T36] audit: type=1400 audit(1762900825.110:560): avc:  denied  { create } for  pid=4362 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  125.878348][ T4369] netlink: 'syz.2.1276': attribute type 13 has an invalid length.
[  125.995398][ T4390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1284'.
[  126.522988][ T4401] netlink: 'syz.2.1289': attribute type 10 has an invalid length.
[  126.541602][ T4405] overlay: ./file0 is not a directory
[  127.171759][  T516] usb 5-1: USB disconnect, device number 37
[  127.339160][ T4434] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  127.390404][ T4435] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  127.396959][ T4435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  127.404986][ T4435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:590
[  127.414807][ T4435] rust_binder: Read failure Err(EAGAIN) in pid:590
[  128.081592][ T4473] IPv6: A: Disabled Multicast RS
[  128.465874][ T4506] /dev/rnullb0: Can't open blockdev
[  128.486166][ T4512] /dev/rnullb0: Can't open blockdev
[  128.520202][ T4519] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  128.553031][ T4526] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  128.553776][ T4526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:615
[  128.575070][   T36] audit: type=1400 audit(1762900827.839:561): avc:  denied  { setattr } for  pid=4527 comm="syz.4.1330" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  128.609579][   T36] audit: type=1400 audit(1762900827.879:562): avc:  denied  { create } for  pid=504 comm="syz-executor" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  128.630381][   T36] audit: type=1400 audit(1762900827.879:563): avc:  denied  { link } for  pid=504 comm="syz-executor" name="#d" dev="tmpfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  128.630440][  T504] ------------[ cut here ]------------
[  128.652734][   T36] audit: type=1400 audit(1762900827.879:564): avc:  denied  { rename } for  pid=504 comm="syz-executor" name="#e" dev="tmpfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  128.657990][  T504] WARNING: CPU: 0 PID: 504 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[  128.689499][  T504] Modules linked in:
[  128.693415][  T504] CPU: 0 UID: 0 PID: 504 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  128.705120][  T504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  128.715212][  T504] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  128.720900][  T504] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  128.740555][  T504] RSP: 0018:ffffc9000156fb68 EFLAGS: 00010293
[  128.746640][  T504] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff888115b8b900
[  128.754640][  T504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  128.762642][  T504] RBP: ffffc9000156fb90 R08: ffff888130e364ff R09: 1ffff110261c6c9f
[  128.770651][  T504] R10: dffffc0000000000 R11: ffffed10261c6ca0 R12: 0000000000000000
[  128.778655][  T504] R13: dffffc0000000000 R14: ffff888130e36460 R15: ffff888130d3f660
[  128.786652][  T504] FS:  0000555590996500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  128.795613][  T504] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  128.802247][  T504] CR2: 00005555909b94e8 CR3: 0000000114df2000 CR4: 00000000003526b0
[  128.810275][  T504] DR0: 00000000000000f9 DR1: 0000000000000b7f DR2: 000000000000000d
[  128.818274][  T504] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  128.826244][  T504] Call Trace:
[  128.829570][  T504]  <TASK>
[  128.832527][  T504]  ovl_do_remove+0x7b8/0xcf0
[  128.837127][  T504]  ? ovl_set_redirect+0x780/0x780
[  128.842197][  T504]  ? down_write+0xe9/0x2a0
[  128.846646][  T504]  ? __cfi_down_write+0x10/0x10
[  128.851534][  T504]  ovl_rmdir+0x1e/0x30
[  128.855627][  T504]  vfs_rmdir+0x3dd/0x560
[  128.859904][  T504]  incfs_kill_sb+0x109/0x230
[  128.864523][  T504]  deactivate_locked_super+0xd5/0x2a0
[  128.869931][  T504]  deactivate_super+0xb8/0xe0
[  128.874630][  T504]  cleanup_mnt+0x3f1/0x480
[  128.879076][  T504]  __cleanup_mnt+0x1d/0x40
[  128.883508][  T504]  task_work_run+0x1e0/0x250
[  128.888096][  T504]  ? __cfi_task_work_run+0x10/0x10
[  128.893258][  T504]  ? __x64_sys_umount+0x126/0x170
[  128.898327][  T504]  ? __cfi___x64_sys_umount+0x10/0x10
[  128.903768][  T504]  ? __kasan_check_read+0x15/0x20
[  128.908867][  T504]  resume_user_mode_work+0x36/0x50
[  128.913986][  T504]  syscall_exit_to_user_mode+0x64/0xb0
[  128.919490][  T504]  do_syscall_64+0x64/0xf0
[  128.923935][  T504]  ? clear_bhb_loop+0x50/0xa0
[  128.928626][  T504]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  128.934564][  T504] RIP: 0033:0x7fe1a81909f7
[  128.939024][  T504] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  128.958679][  T504] RSP: 002b:00007fffc52c3fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  128.967134][  T504] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe1a81909f7
[  128.975163][  T504] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc52c4090
[  128.983186][  T504] RBP: 00007fffc52c4090 R08: 0000000000000000 R09: 0000000000000000
[  128.991213][  T504] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc52c5180
[  128.999300][  T504] R13: 00007fe1a8211d7d R14: 000000000001f63a R15: 00007fffc52c6250
[  129.007299][  T504]  </TASK>
[  129.010375][  T504] ---[ end trace 0000000000000000 ]---
[  129.016195][  T504] ------------[ cut here ]------------
[  129.021718][  T504] WARNING: CPU: 0 PID: 504 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[  129.031081][  T504] Modules linked in:
[  129.034999][  T504] CPU: 0 UID: 0 PID: 504 Comm: syz-executor Tainted: G        W          syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  129.048149][  T504] Tainted: [W]=WARN
[  129.052002][  T504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  129.062100][  T504] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  129.067761][  T504] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  129.087482][  T504] RSP: 0018:ffffc9000156fb68 EFLAGS: 00010293
[  129.093599][  T504] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff888115b8b900
[  129.101611][  T504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  129.109635][  T504] RBP: ffffc9000156fb90 R08: ffff888130e364ff R09: 1ffff110261c6c9f
[  129.117623][  T504] R10: dffffc0000000000 R11: ffffed10261c6ca0 R12: 0000000000000000
[  129.125634][  T504] R13: dffffc0000000000 R14: ffff888130e36460 R15: ffff888130d3f660
[  129.133666][  T504] FS:  0000555590996500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  129.142637][  T504] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  129.149227][  T504] CR2: 00005555909b94e8 CR3: 0000000114df2000 CR4: 00000000003526b0
[  129.157264][  T504] DR0: 00000000000000f9 DR1: 0000000000000b7f DR2: 000000000000000d
[  129.165302][  T504] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  129.173308][  T504] Call Trace:
[  129.176593][  T504]  <TASK>
[  129.179524][  T504]  ovl_do_remove+0x7b8/0xcf0
[  129.184155][  T504]  ? ovl_set_redirect+0x780/0x780
[  129.189216][  T504]  ? down_write+0xe9/0x2a0
[  129.193680][  T504]  ? __cfi_down_write+0x10/0x10
[  129.198555][  T504]  ovl_rmdir+0x1e/0x30
[  129.202668][  T504]  vfs_rmdir+0x3dd/0x560
[  129.206959][  T504]  incfs_kill_sb+0x1a0/0x230
[  129.211591][  T504]  deactivate_locked_super+0xd5/0x2a0
[  129.216998][  T504]  deactivate_super+0xb8/0xe0
[  129.221725][  T504]  cleanup_mnt+0x3f1/0x480
[  129.226162][  T504]  __cleanup_mnt+0x1d/0x40
[  129.230636][  T504]  task_work_run+0x1e0/0x250
[  129.235248][  T504]  ? __cfi_task_work_run+0x10/0x10
[  129.240421][  T504]  ? __x64_sys_umount+0x126/0x170
[  129.245473][  T504]  ? __cfi___x64_sys_umount+0x10/0x10
[  129.250878][  T504]  ? __kasan_check_read+0x15/0x20
[  129.255961][  T504]  resume_user_mode_work+0x36/0x50
[  129.261159][  T504]  syscall_exit_to_user_mode+0x64/0xb0
[  129.266658][  T504]  do_syscall_64+0x64/0xf0
[  129.271115][  T504]  ? clear_bhb_loop+0x50/0xa0
[  129.275817][  T504]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  129.281736][  T504] RIP: 0033:0x7fe1a81909f7
[  129.286166][  T504] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.305835][  T504] RSP: 002b:00007fffc52c3fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.314296][  T504] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe1a81909f7
[  129.322327][  T504] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc52c4090
[  129.330341][  T504] RBP: 00007fffc52c4090 R08: 0000000000000000 R09: 0000000000000000
[  129.338322][  T504] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc52c5180
[  129.346330][  T504] R13: 00007fe1a8211d7d R14: 000000000001f63a R15: 00007fffc52c6250
[  129.354353][  T504]  </TASK>
[  129.357380][  T504] ---[ end trace 0000000000000000 ]---
[  129.372077][ T4531] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  129.372245][ T4530] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  129.378688][ T4530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }