last executing test programs:

1m44.485794616s ago: executing program 2 (id=614):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x1f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000000000007300004000"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m44.400927608s ago: executing program 2 (id=615):
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x10})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})

1m44.400516958s ago: executing program 2 (id=616):
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)

1m43.491792386s ago: executing program 2 (id=624):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00')

1m43.491172076s ago: executing program 2 (id=626):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="a1aa21559f8e711370bedc2d32b3822519ae401e9bd95654001a9447ebf59267cf019bfbcad14dad002033543d55ae7d4d4a3d5236bf8f24aa934608b6778d712bd48ba642b3a7c75fd6cc7aaf42e8eb3ec0b52cd427e9e73d3e", 0x5a, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff47"], 0xa0}}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2000c000, 0x0, 0x0)

1m43.470411856s ago: executing program 2 (id=627):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1m43.399381997s ago: executing program 32 (id=627):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1.996895121s ago: executing program 0 (id=2278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0xfffffffc, 0x0, 0x4}, 0x4000004)

1.876043374s ago: executing program 0 (id=2280):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x181}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}]}]}, 0x38}, 0x1, 0x0, 0x600}, 0x0)

1.875280543s ago: executing program 0 (id=2281):
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8ae02, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto(r1, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6)
write(r0, &(0x7f0000000400)="547bbe", 0x3)
ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00')
read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102)
r4 = inotify_init1(0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x40, &(0x7f00000005c0)={[{}]})
inotify_add_watch(r4, &(0x7f0000000140)='./file1\x00', 0xa4000061)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f00000000c0)={[{}, {@subsystem='pids'}]})
readv(r3, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2)

1.765089285s ago: executing program 0 (id=2282):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) (async)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000a00fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) (async)
pipe2$9p(&(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0)
ioctl$RNDADDENTROPY(r3, 0x40085203, 0x0) (async)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r4 = dup(r2)
write$FUSE_BMAP(r4, &(0x7f0000000140)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async, rerun: 64)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}}) (rerun: 64)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0xd37)

1.715015917s ago: executing program 4 (id=2284):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000500)="1c00f4001a009b8a14e500"/28, 0x1c)

1.51994067s ago: executing program 4 (id=2285):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x22000)
ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000080))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES16=r1], 0xd0060)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00')
r4 = memfd_create(&(0x7f0000000a00)='\vem\xda\x99R@i\x93\xfe\x9b#*\xff', 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='decodes mem'], 0xc)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
poll(&(0x7f0000000200)=[{r4, 0x8001}, {r5, 0x1020}], 0x2, 0x7f)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020)
openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x400007, 0x3, 0x10000, 0x3, 0x0, 0x400, 0x6}, 0x1c)
write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0)
preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

1.51978757s ago: executing program 3 (id=2286):
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000030000000000000000df58"])

1.393660383s ago: executing program 3 (id=2288):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0) (async, rerun: 32)
r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 32)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0) (async)
sendmmsg$inet6(r3, 0x0, 0x0, 0x200880c0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x5, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x1, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x8001, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x7ff, 0xc8, 0xf9, 0xe, 0x2bf, 0x40001, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x8, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x0, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0xa, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x80, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x8100, 0x8d6, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xc, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0xfffff25b, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x3, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x10, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
setns(r1, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x2080, 0xac)
read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async)
read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020)
mount_setattr(r4, &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000001dc0)={0x10008d, 0x0, 0x40000}, 0x20)

1.268014615s ago: executing program 0 (id=2289):
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32, @ANYBLOB="08000300000000001400020076657468315f746f5f627269646765000800030003"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x240008d4)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff7088001c8003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)

1.157070528s ago: executing program 3 (id=2291):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4)
syz_open_procfs(0x0, &(0x7f0000003f40)='mountstats\x00')
recvmmsg(r1, &(0x7f0000001240), 0x0, 0x10162, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0x4008af10, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x6, 0x9, 0x0, 0x36, 0xc7e, 0xfffffffc, 0x101, 0x2, 0x1, 0x8, 0xb}})
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001100)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001240)=""/4095, 0x1000, 0xfdff, 0x1ff, 0x8, 0x8000001, 0xe92a}}, 0x3)
r4 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105000048740000006207f8c00008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)

1.154534357s ago: executing program 0 (id=2292):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x620642, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000003c0), 0x6)
ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000040)="e7405d0e7ba2bdf99de3af10563946592c9b2314aa9604b38bb8e3eafcb3f9")
ioctl$TCFLSH(r0, 0x400455c8, 0x0)

1.01449175s ago: executing program 1 (id=2294):
syz_usb_connect(0x0, 0x2c6, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x3a, 0x4c, 0x52, 0x40, 0xbda, 0xc82e, 0x5cf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b4, 0x2, 0x40, 0x9, 0x20, 0x26, [{{0x9, 0x4, 0xeb, 0x5, 0x6, 0xff, 0xff, 0xff, 0xff, [@generic={0x40, 0xd, "c020608313d0555a3db01c6ac51434fd1b7a7e3550d23d33a41f6410f2c9a63d4bc8a088f736b2f15d2b5b88c21fd4ee1d474bd2877a03d0a564fd4d5f5d"}, @generic={0x1e, 0x0, "1c8a683cf7cf7ccbac2ee75db84757274e155b4d4dfcdaddc6bd0373"}], [{{0x9, 0x5, 0xc, 0x2, 0x400, 0x9, 0x9c, 0x7}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x80, 0xe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x41, 0xfff7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xf, 0x8, 0xb}}, {{0x9, 0x5, 0xa, 0x21, 0x200, 0xc, 0x9, 0x6}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x81, 0x48, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf6, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8f6}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x4, 0x9, 0x4, [@generic={0xd8, 0x1e, "e25f8cc23e2f39f750212c71e0bce4a064b5ccbcec070c00d2d8250a7d9b8550618586560dac45da230e2b7e34105fb8b2aa0c454540dcce29b9a48dac0c57258fff71f1275911173cb00284a87d9b59be721807e9e78a845785de8031ecdcbd2699ac8afbcb3da754d8d874d4c778ffb780db9d2cdc0e2c5d272b0c3325f05d7cc438fe9011d9ba4b69fcc93f3603e90d84b819648496bc5b1a03681c696db60bedd8822bce646956827f2a07de52fc400cbfa2bf45ad50d080f288ef794b17bf90c89f5d51312170d68243b0ba561b2453d3c2d89b"}]}}]}}, {{0x9, 0x4, 0xef, 0x8, 0x7, 0xb0, 0x15, 0xe6, 0x36, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "994599"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xc3c, 0x1000, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x6, 0x8}, [@dmm={0x7, 0x24, 0x14, 0xc951, 0xb300}]}], [{{0x9, 0x5, 0x9, 0x4, 0x400, 0xf, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x8000}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0xf8, 0x9a, 0x99, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x2, 0xe, 0x6, [@generic={0x67, 0x10, "3bc13d2ce0b4616c55df9c2cfe6f863177141b9cafde8884f515220f8df385428eb4eb7243e55e60c838b031747ae86891d5a910027f6967734fbcd42b367040dbfb03f6929f7d69ba5acafb7650089d67e876889dd78e297315453c0273223b0be17c0dcb"}, @generic={0x2f, 0x7, "3d2dba2e1e8d477360e07dc4de83a1f836dad9faa16bf735a14658fedcb8dcc2dd34949aa668952e472fa204f5"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x1, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x2}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x9, 0x40, 0x6}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x7, 0x7}}, {{0x9, 0x5, 0x84, 0x10, 0x3ff, 0x3, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xf}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xfa, 0x10, 0xf, 0xff, 0x7}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x820}}, {0x5f, &(0x7f0000000180)=@string={0x5f, 0x3, "28b377f76752916f32d635f8eba81a8251b5a16e41a328aa7d8b91f0736973e81a022084e43fdac1a94f5d453d33558b035ec966bec095919cc14bf5cd92bb7a356078aeccbd9cbab3eb3f92402f50ab5d73994f5410e02f776a0f8166"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1c0a}}]})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x32}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0x0, 0x1, 0xa}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000980)=""/23, 0x17, 0x1, 0x2c}}, &(0x7f0000000a40)={0x0, 0x20, 0x38}}, 0x1000}, @exit_looper, @request_death], 0x0, 0x0, 0x0})

570.666249ms ago: executing program 4 (id=2295):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x5c, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x80007ffe, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x4000084)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f4c2a, 0x0)
sendto$inet6(r2, &(0x7f0000000140)="8469b66f", 0x20, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fdatasync(r2)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x149f02, 0x1a0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="340400002000010000000000100000000a00000008000000ac1414aa18041680aef6"], 0x434}, 0x1, 0x0, 0x0, 0x14}, 0x0)
write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000080), 0x8)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e24, 0x101, @private0, 0xfffffffe}, 0x1c)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r0, 0x5)
r9 = fsmount(r0, 0x1, 0x0)
fchdir(r9)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0))
mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r5, 0x0, 0x5002)

386.744712ms ago: executing program 1 (id=2296):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ec0000002100010000000002fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100ac1414aa000000000000000000000000fc001100000000000000000100000001fc020000000000000000000000000d00fe8000000000000000000000000000aa320300200200"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000)

357.948423ms ago: executing program 4 (id=2297):
socket$inet_udp(0x2, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x3c9182, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$UHID_INPUT(r0, &(0x7f0000002280)={0x8, {"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", 0x1000}}, 0x1006)
r1 = socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x20, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0xa, 0x4d, 0x39cc191a, 0x59, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2000004, 0x7, 0x4, 0x3c57, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7ff, 0x8, 0x8, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x8000005, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8003, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0x2, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x20000009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400001], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0x0, 0x2, 0x86, 0x1, 0x9, 0x4, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0x4000cc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0xff], [0x0, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x8, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x8a20, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000060", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)

312.896224ms ago: executing program 1 (id=2298):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x802, 0x0) (async, rerun: 64)
r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
r1 = socket(0x11, 0x2, 0x0)
r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000280)={'c', ' *:* ', 'wm\x00'}, 0x9) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) (async)
setsockopt(r1, 0x107, 0x2, &(0x7f00000001c0)="110000000200010001001a00002b4000", 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x9c, 0xd, 0x0, 0xfffff024}, {0x6, 0x0, 0xfc, 0x3}]}, 0x10) (async)
sendmmsg(r7, 0x0, 0x0, 0x0) (async, rerun: 32)
r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="23af2dbd7000fddbdf2517000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b0060af836d060016000900000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00abb3ffff060016000900000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000500000006001600050000000500120000000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000500000006001600090000000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b0002000000060016000000000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b0006000000060016000400000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100008006001600ff03000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b0005000000060016003c2b00000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000500000008000b00f8ffffff06001600010000000500120000000000"], 0x244}, 0x1, 0x0, 0x0, 0x4458760c65b205ff}, 0x800) (async)
ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000040))
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r12, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0x101, 0x0, 0x0, 0x0, 0x50ea, 0x0, 0x8, 0x5, 0x4})
write$FUSE_NOTIFY_RESEND(r9, &(0x7f0000000100)={0x14}, 0x14) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req={0x4, 0x8, 0x6, 0x10001}, 0x10)

231.163855ms ago: executing program 1 (id=2299):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
read$FUSE(r1, &(0x7f00000012c0)={0x2020}, 0x2020)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x4014)
pipe2(&(0x7f00000009c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80800)
flistxattr(r4, 0x0, 0x0)
futex(&(0x7f0000000040)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1)
preadv2(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000080)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x9, 0x800d, 0x9)
sendmmsg(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f00000018c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x3, {0xa, 0x4e22, 0x5769ea24, @empty}}}, 0x80, 0x0}}], 0x1, 0x20000000)
pselect6(0x40, &(0x7f0000000000)={0x8001, 0x8, 0x8, 0xfffffffffffffff2, 0x6, 0x8001, 0x2}, &(0x7f0000000100)={0x6, 0x3, 0x6f, 0x8046, 0x2, 0x5, 0x0, 0x8}, &(0x7f0000000140)={0x7, 0x1, 0x4, 0xf04c, 0x1000, 0x1, 0x0, 0x2}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xb]}, 0x8})

230.833525ms ago: executing program 3 (id=2300):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000018", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf251800"], 0x60}}, 0x4024000)

184.013366ms ago: executing program 1 (id=2301):
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32, @ANYBLOB="08000300000000001400020076657468315f746f5f627269646765000800030003"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x240008d4)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800208003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)

183.797006ms ago: executing program 4 (id=2302):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="5c2ebed3bfefcc345925ef2f1b410dd7cb107cf4dec83881aa05ef188e344f60ec15f18e0bc46f55f4cdca3007b2f57286869167b739511c0612daec182a8678c5a07097c0854fe07647de51255300dbdd8e36d6b58e218f12d31794a1081d1110ab1531abf5aad852b7e6e9013655d2791cde9da7c9a5c96601f4eb11fcc1ab13f43fb714409ae68c7303cdfab5c87f8290b4029c6219920be1021b0b3852eb5a392977363639ebea35e7455a9bb5a2d75acfb4983ac3ae6f353f88c6550bf9354323bd96ba151f7339d8e57873e57553de5535d677d00fac39313afe43dc63566db3490d4132986e4dc89efd8ff32713", 0xf1}, {&(0x7f0000000100)="94408e837a60da9cd64d68d13e9d0558e874d8eef6448fbb1647bf62fb6c50d163", 0x21}, {&(0x7f0000000140)="68d9ea94ccf25b0a623693f598436ad97ce8013816748fd8a19b", 0x1a}, {&(0x7f0000000200)="29839bbe2b78b3212e4a983853d8687a9a7890853c3bf653c841f8b38d306a27292be4767faa4965cc0e379d9bdae81c34c237476e64d224c755fb9184c5f2b242e009a81d92f97c6819dd8c5d9ab65889d1fd706104a2edbd4e4b00b410795f2d522b874fe4bc0c36adf0565451dd089f666d9bc7ff78ba62f6377709a7c674305c45b7421438eeba82751916c9a1", 0x8f}, {&(0x7f00000002c0)="f692cdfbcfa2f86fa4a03a7ccc12aa68b1603e6590df595f74d5741085e884c4715ed44253bc00427a4ee9f6348a0e7da054b99453009a0194f283395592f4cd9797514f89fdef78fb1bf053ca271a12306abdc9a014a34efadf3923f14d1b94a3e9a1c8891103e95e21ed0aa3e26cad91d5db580684a8f4d1b6f40ed438d843804cdc20ea7236a209f684ca4e3b96d0d7df70490bbfbcba9e267160f05af35e840966afc68b72a3da471a90b8b154b56c3d3786f307742841108312d1b72198d5d7724e99ab71dba0631ec551f0aaa5d80f4b4d1ccd743614eb704cd0feae0dc873", 0xe2}, {&(0x7f00000003c0)="100d128b7f8d2b066b2a", 0xa}, {&(0x7f0000000400)="b25ca180d87407e38c3b52bc1f09aefd9d2b156e438dfb92f7b3706abf2c49f786b80dcb64a38299dff2900dac91f424640c6045a8d8e1058977ace80117d05361", 0x41}], 0x7, &(0x7f0000000500)=[@tclass={{0x14}}, @dstopts={{0xa8, 0x29, 0x37, {0x0, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x20}, @calipso={0x7, 0x18, {0x3, 0x4, 0x80, 0x2, [0xb, 0x2]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0xf}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0x8, [0x10000, 0x9, 0x23, 0x9, 0x5, 0x6, 0x7]}}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0xf0}}, {{&(0x7f0000000600)={0xa, 0x4e22, 0x4, @loopback, 0x200}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000640)="f50913f43c873fec693a2b154b41a1e50e6ceaa11cdb73f92a9284481db006d61e44af275975473b2e6176e7a6858169d5d3058ba97fed959c29b1cc8f96a87d88201a582dae0cf93cbd9caafb28a6cb1ab0a437a95951be5fd7194409211897f3992e365666804c4f6fb29852d9aab1824663a55b3fd55dc609b2a9ea74eca9712b56eeb7635234734c360ac8a67c0e4ead89e8bb0abf95ecee9bc4cfd3829b736eed16e9ba577f2d8f89151f6e98c70e68b629c309c12662b559d573f17af0970dc38b5a1ba8", 0xc7}, {&(0x7f0000000740)="f30f30b076e5b1d623d0fbc505cdd544ef84e4104002a179fdef2d6890ded6ecf667267e0b7fa2459ef31a7ef195aaad030dad44f4455c6803bdebbb8f7a3ebb0934203b97a66affff98bf8ac2d5bc401a9b5e57005da0ac925c020d", 0x5c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4001c00)

148.506637ms ago: executing program 3 (id=2303):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x11, 0x0, 0x0) (async)
rename(&(0x7f00000001c0)='./cgroup\x00', &(0x7f00000000c0)='./cgroup/file0\x00') (async)
unshare(0x22020600) (async)
r2 = socket(0x11, 0xa, 0xffffffd)
r3 = fcntl$dupfd(r2, 0x406, r2)
getpeername$packet(r3, 0x0, 0x0) (async)
r4 = syz_clone(0x10a11000, &(0x7f0000000300)="4d9cc72fcefecba081888c73411481e2c58c81ca08d904b4009015a160722903ca29edcefe80e4edd9c99d5844b11cc9fcbc2f1f8302a2e77f2fab47e16edc6f8845d30de4ec5a9da33add64a6bae91b0efa3dd71d8191943ed6f18d6ec38d8eaf4967319867e08e7f01a56dada1e123e6fc8f7b2837acbae12f07d6cfce77254a10b99d308791a0d1", 0x89, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240)="c86062430081e2cb4ce38b67eedec470dd82c5c2bbece9b4c12b4d9b625d420f75fef2e131c670f570de11f8557a10cfa7380e7b74ee835876d66ad51250e2885cb0f9e325addd142ee1d2eadba318ad90ff58b6767f85f17b8ebbc2f5a000d805bcd24b7654ad81999311ff2a9b68d47a2ca2fbd298112f3c49a2965a3dcf850135197af1e2bddfe8db1a0ab015e57fb1cbba047cb9f83e8d47e4")
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) (async)
prlimit64(r4, 0x4, &(0x7f00000000c0)={0x6, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)={0x18, 0x20, 0x1, 0x70bd23, 0x0, "", [@typed={0x8, 0x62, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) (async)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r9 = dup3(r8, r6, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@decrefs={0x400c6314}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0xa, 0x2, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/64, 0x40, 0x2, 0x29}}, &(0x7f0000000540)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
fcntl$lock(r10, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) (async)
fcntl$lock(r10, 0x24, &(0x7f0000000200)={0x0, 0x3, 0x3, 0x1, r4}) (async)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_FLUSHABLE(r11, 0x112, 0x8, &(0x7f0000000140)=0x1000, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendfile(r0, r0, 0x0, 0x8000) (async)
truncate(&(0x7f0000000180)='./file0\x00', 0xffff)

118.161937ms ago: executing program 1 (id=2304):
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_format(r0, 0x0, 0x0)
pwritev(r0, &(0x7f0000000500)=[{&(0x7f00000001c0)="d2dd59297bb2cc193d4f172ba626b2c4aa4c3952efb20b564e780d3375c7a0f06fbae75fdc45299758bac574f288e471fa1307e0908178d0e8f39f81b0084335fb84edc9314aa3f82d762c2f867b933cb85adb449a", 0x5}, {0x0}, {0x0}, {0x0}, {0x0, 0x53}], 0x5, 0x10000004, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x42, 0x0, &(0x7f0000000180))
prlimit64(0x0, 0x0, &(0x7f0000000080)={0x40, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) (async)
r2 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmsg(r3, 0x0, 0x0) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) (async)
setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x58) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r2, 0x1, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0)
read$eventfd(r6, 0x0, 0x0) (async)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) (async)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r8) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x1000)

64.001028ms ago: executing program 4 (id=2305):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000001a00)={{&(0x7f0000978000/0x3000)=nil, 0x3000}, 0x1})
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0)
r2 = fsmount(r0, 0x1, 0x0)
fchdir(r2)
fcntl$setstatus(r0, 0x4, 0x4400)
mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0)

0s ago: executing program 3 (id=2306):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
getpid()
tkill(r1, 0x7)
close_range(r0, 0xffffffffffffffff, 0x0)
setitimer(0x2, &(0x7f0000001d80)={{}, {0x0, 0x2710}}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x80200)
ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000040))
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f040000ff170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)
close_range(r2, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13)

kernel console output (not intermixed with test programs):

_register_driver returned -16
[   79.379842][ T2322] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   79.410363][ T2322] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   79.706394][  T641] r8152-cfgselector 4-1: Unknown version 0x0000
[   79.721199][  T641] r8152-cfgselector 4-1: bad CDC descriptors
[   79.752737][  T641] r8152-cfgselector 4-1: USB disconnect, device number 19
[   79.760691][ T2327] binder: Unknown parameter '01777777777777777777777'
[   80.578501][ T2351] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true
[   80.624051][ T2355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'.
[   80.761822][  T641] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[   80.841795][   T66] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[   80.912863][  T641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.927058][  T641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.943378][  T641] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   80.964950][  T641] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   80.981086][  T641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.990138][  T641] usb 2-1: config 0 descriptor??
[   81.011775][   T66] usb 4-1: Using ep0 maxpacket: 32
[   81.018233][   T66] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   81.026714][   T66] usb 4-1: config 0 has no interface number 0
[   81.034502][   T66] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   81.043902][   T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.052452][   T66] usb 4-1: Product: syz
[   81.056777][   T66] usb 4-1: Manufacturer: syz
[   81.061440][   T66] usb 4-1: SerialNumber: syz
[   81.067358][   T66] usb 4-1: config 0 descriptor??
[   81.073422][   T66] smsc95xx v2.0.0
[   81.400513][  T641] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[   81.418076][  T641] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   81.483780][   T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   81.500345][   T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   81.583577][ T2375] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   81.594052][ T2375] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   81.731805][  T641] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   81.881794][  T641] usb 5-1: Using ep0 maxpacket: 8
[   81.888001][  T641] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   81.897218][  T641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.905983][  T641] usb 5-1: config 0 descriptor??
[   82.113340][  T641] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   82.219897][ T2393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'.
[   82.228858][ T2393] syz_tun: left allmulticast mode
[   82.233983][ T2393] syz_tun: left promiscuous mode
[   82.239046][ T2393] bridge0: port 3(syz_tun) entered disabled state
[   82.246337][ T2393] bridge_slave_1: left allmulticast mode
[   82.252697][ T2393] bridge_slave_1: left promiscuous mode
[   82.258372][ T2393] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.266404][ T2393] bridge_slave_0: left allmulticast mode
[   82.272212][ T2393] bridge_slave_0: left promiscuous mode
[   82.277865][ T2393] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.514074][  T641] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[   82.524218][  T641] asix 5-1:0.0: probe with driver asix failed with error -61
[   82.906017][ T2396] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   82.916020][ T2396] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   83.327891][   T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[   83.340505][   T66] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[   83.352206][   T66] usb 4-1: USB disconnect, device number 20
[   83.474587][    T9] usb 2-1: USB disconnect, device number 20
[   83.896068][   T36] audit: type=1400 audit(1759241018.340:330): avc:  denied  { shutdown } for  pid=2411 comm="syz.0.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   84.141813][  T630] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[   84.229655][ T2425] can0: slcan on ttyS3.
[   84.235222][ T2425] rust_binder: Read failure Err(EAGAIN) in pid:368
[   84.253545][ T2424] can0 (unregistered): slcan off ttyS3.
[   84.291809][  T630] usb 4-1: Using ep0 maxpacket: 16
[   84.302863][  T630] usb 4-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[   84.315267][  T630] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.327485][  T630] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   84.349476][  T630] usb 4-1: config 0 interface 0 has no altsetting 0
[   84.356391][  T630] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[   84.358083][ T2442] tipc: Started in network mode
[   84.365766][  T630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.379701][ T2442] tipc: Node identity 7f000001, cluster identity 4711
[   84.386888][ T2442] tipc: Enabled bearer <udp:syz2>, priority 10
[   84.387948][  T630] usb 4-1: config 0 descriptor??
[   84.401241][ T2442] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   84.411176][ T2442] tipc: Enabled bearer <udp:syz0>, priority 10
[   84.435623][ T2447] netlink: 'syz.1.826': attribute type 4 has an invalid length.
[   84.496463][   T66] usb 5-1: USB disconnect, device number 3
[   84.729684][ T2482] wg2: entered promiscuous mode
[   84.736619][ T2482] wg2: entered allmulticast mode
[   84.777169][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   84.808172][  T630] sony 0003:054C:024B.0014: item fetching failed at offset 5/7
[   84.816841][  T630] sony 0003:054C:024B.0014: parse failed
[   84.822621][  T630] sony 0003:054C:024B.0014: probe with driver sony failed with error -22
[   85.015254][  T630] usb 4-1: USB disconnect, device number 21
[   85.501810][    T9] tipc: Node number set to 2130706433
[   85.691531][ T2509] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37
[   85.691561][ T2509] rust_binder: Error while translating object.
[   85.700554][ T2509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   85.706958][ T2509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:392
[   86.201811][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[   86.223834][ T2522] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[   86.306266][ T2534] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   86.372856][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   86.382474][    T9] usb 2-1: config 0 has no interface number 0
[   86.388627][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.399570][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.409405][    T9] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[   86.418686][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.427904][    T9] usb 2-1: config 0 descriptor??
[   86.611810][  T641] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[   86.762905][  T641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.773888][  T641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.783724][  T641] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   86.792827][  T641] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.801836][  T641] usb 4-1: config 0 descriptor??
[   86.821842][ T2490] Bluetooth: hci0: command 0x1003 tx timeout
[   86.821862][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   86.821928][ T2175] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   86.838072][    T9] prodikeys 0003:041E:2801.0015: unknown main item tag 0x0
[   86.851578][    T9] prodikeys 0003:041E:2801.0015: unknown main item tag 0x0
[   86.859085][    T9] prodikeys 0003:041E:2801.0015: unknown main item tag 0x0
[   86.866390][    T9] prodikeys 0003:041E:2801.0015: unknown main item tag 0x0
[   86.873833][    T9] prodikeys 0003:041E:2801.0015: unknown main item tag 0x0
[   86.881289][    T9] prodikeys 0003:041E:2801.0015: unknown main item tag 0x0
[   86.888801][    T9] prodikeys 0003:041E:2801.0015: unknown main item tag 0x0
[   86.898941][ T2542] rust_binder: 2542 RLIMIT_NICE not set
[   86.900797][    T9] prodikeys 0003:041E:2801.0015: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1
[   86.914134][  T630] rust_binder: 2541: removing orphan mapping 0:1048
[   86.933661][    T9] hid_prodikeys: hid-prodikeys: failed to find output report
[   86.933661][    T9] 
[   87.049330][  T630] usb 2-1: USB disconnect, device number 21
[   87.213019][  T641] hid-led 0003:27B8:01ED.0016: item fetching failed at offset 0/5
[   87.221823][  T641] hid-led 0003:27B8:01ED.0016: probe with driver hid-led failed with error -22
[   87.369407][   T36] audit: type=1400 audit(1759241021.810:331): avc:  denied  { remount } for  pid=2557 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   87.408684][ T2562] overlayfs: failed to clone upperpath
[   87.419899][   T45] usb 4-1: USB disconnect, device number 22
[   87.511839][  T641] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   87.663003][  T641] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   87.676046][  T641] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[   87.685203][  T641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.693914][  T641] usb 5-1: config 0 descriptor??
[   87.700235][  T641] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   87.861811][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[   87.942467][   T66] usb 5-1: USB disconnect, device number 4
[   88.011812][    T9] usb 2-1: Using ep0 maxpacket: 32
[   88.022521][    T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.033862][    T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.049910][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   88.059411][    T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   88.067829][    T9] usb 2-1: Product: syz
[   88.072447][    T9] usb 2-1: Manufacturer: syz
[   88.080401][    T9] hub 2-1:4.0: USB hub found
[   88.167688][ T2583] fuse: Bad value for 'fd'
[   88.282188][    T9] hub 2-1:4.0: 6 ports detected
[   88.287406][    T9] hub 2-1:4.0: insufficient power available to use all downstream ports
[   88.344084][   T36] audit: type=1400 audit(1759241022.790:332): avc:  denied  { append } for  pid=2595 comm="syz.3.884" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   88.369790][ T2596] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   88.503334][   T36] audit: type=1400 audit(1759241022.950:333): avc:  denied  { write } for  pid=2607 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   88.894981][    T9] usb 2-1: USB disconnect, device number 22
[   89.080241][   T36] audit: type=1400 audit(1759241023.520:334): avc:  denied  { getopt } for  pid=2626 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   89.100407][   T36] audit: type=1400 audit(1759241023.540:335): avc:  denied  { mount } for  pid=2626 comm="syz.0.896" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   89.103571][ T2627] incfs: Backing dir is not set, filesystem can't be mounted.
[   89.129894][ T2627] incfs: mount failed -2
[   90.551817][   T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   90.702947][   T45] usb 5-1: New USB device found, idVendor=056a, idProduct=00db, bcdDevice= 0.00
[   90.712184][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.722132][   T45] usb 5-1: config 0 descriptor??
[   90.821845][    T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[   90.973174][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.983563][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   90.994601][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   91.004328][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.012616][    T9] usb 4-1: Product: syz
[   91.017017][    T9] usb 4-1: Manufacturer: syz
[   91.021701][    T9] usb 4-1: SerialNumber: syz
[   91.135402][   T45] wacom 0003:056A:00DB.0017: Unknown device_type for 'HID 056a:00db'. Assuming pen.
[   91.152043][   T45] wacom 0003:056A:00DB.0017: hidraw0: USB HID v0.02 Device [HID 056a:00db] on usb-dummy_hcd.4-1/input0
[   91.169862][   T45] input: Wacom Bamboo 2FG 6x8 SE Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00DB.0017/input/input11
[   91.240773][    T9] usb 4-1: 0:2 : does not exist
[   91.254906][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[   91.285256][    T9] usb 4-1: USB disconnect, device number 23
[   91.337278][ T2686] fuse: Unknown parameter '0x0000000000000003'
[   91.418301][   T36] audit: type=1400 audit(1759241032.860:336): avc:  denied  { write } for  pid=2688 comm="syz.0.920" name="file0" dev="tmpfs" ino=1896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   91.437375][ T2691] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   91.457473][   T36] audit: type=1400 audit(1759241032.860:337): avc:  denied  { open } for  pid=2688 comm="syz.0.920" path="/351/file0/file0" dev="tmpfs" ino=1896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   91.529402][    T9] usb 5-1: USB disconnect, device number 5
[   91.909159][ T2708] rust_binder: Error while translating object.
[   91.909205][ T2708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   91.915573][ T2708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:160
[   92.073371][ T2719] fuse: Unknown parameter 'user_i00000000000000000000'
[   93.080137][ T2745] FAULT_INJECTION: forcing a failure.
[   93.080137][ T2745] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   93.093358][ T2745] CPU: 0 UID: 0 PID: 2745 Comm: syz.4.943 Not tainted syzkaller #0 99b3eabaa23ae162c27001e7be83a6c28a211609
[   93.093396][ T2745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   93.093411][ T2745] Call Trace:
[   93.093419][ T2745]  <TASK>
[   93.093429][ T2745]  __dump_stack+0x21/0x30
[   93.093462][ T2745]  dump_stack_lvl+0x10c/0x190
[   93.093485][ T2745]  ? __cfi_dump_stack_lvl+0x10/0x10
[   93.093507][ T2745]  ? kstrtoull+0x13b/0x1e0
[   93.093533][ T2745]  dump_stack+0x19/0x20
[   93.093554][ T2745]  should_fail_ex+0x3d9/0x530
[   93.093571][ T2745]  should_fail+0xf/0x20
[   93.093592][ T2745]  should_fail_usercopy+0x1e/0x30
[   93.093610][ T2745]  _copy_from_user+0x22/0xb0
[   93.093630][ T2745]  ___sys_sendmsg+0x159/0x2a0
[   93.093654][ T2745]  ? __sys_sendmsg+0x280/0x280
[   93.093676][ T2745]  ? proc_fail_nth_write+0x17e/0x210
[   93.093699][ T2745]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   93.093727][ T2745]  __x64_sys_sendmsg+0x1eb/0x2c0
[   93.093750][ T2745]  ? fput+0x1a5/0x240
[   93.093769][ T2745]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   93.093792][ T2745]  ? ksys_write+0x1ef/0x250
[   93.093808][ T2745]  ? __kasan_check_read+0x15/0x20
[   93.093843][ T2745]  x64_sys_call+0x2a4c/0x2ee0
[   93.093877][ T2745]  do_syscall_64+0x58/0xf0
[   93.093903][ T2745]  ? clear_bhb_loop+0x50/0xa0
[   93.093928][ T2745]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   93.093953][ T2745] RIP: 0033:0x7ff69d78eec9
[   93.093968][ T2745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.093983][ T2745] RSP: 002b:00007ff69e596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.094002][ T2745] RAX: ffffffffffffffda RBX: 00007ff69d9e5fa0 RCX: 00007ff69d78eec9
[   93.094015][ T2745] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[   93.094025][ T2745] RBP: 00007ff69e596090 R08: 0000000000000000 R09: 0000000000000000
[   93.094036][ T2745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.094046][ T2745] R13: 00007ff69d9e6038 R14: 00007ff69d9e5fa0 R15: 00007ffc2f90b108
[   93.094061][ T2745]  </TASK>
[   93.551804][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   93.621407][ T2750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'.
[   93.701781][    T9] usb 5-1: Using ep0 maxpacket: 16
[   93.707999][    T9] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[   93.716254][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.726567][    T9] usb 5-1: config 0 has no interface number 0
[   93.734407][    T9] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[   93.743559][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.751548][    T9] usb 5-1: Product: syz
[   93.755774][    T9] usb 5-1: Manufacturer: syz
[   93.760427][    T9] usb 5-1: SerialNumber: syz
[   93.765722][    T9] usb 5-1: config 0 descriptor??
[   93.851820][  T333] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   93.973079][ T2747] cgroup2: Unknown parameter 'net_cls'
[   93.979169][   T36] audit: type=1400 audit(1759241035.420:338): avc:  granted  { setsecparam } for  pid=2746 comm="syz.4.944" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   93.983200][ T2747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.006855][ T2747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.021790][  T333] usb 2-1: Using ep0 maxpacket: 16
[   94.028023][  T333] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[   94.037923][  T333] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[   94.047983][  T333] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   94.060982][  T333] usb 2-1: config 1 interface 0 has no altsetting 0
[   94.069132][  T333] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   94.078334][  T333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.086380][  T333] usb 2-1: Product: syz
[   94.090566][  T333] usb 2-1: Manufacturer: syz
[   94.095413][  T333] usb 2-1: SerialNumber: syz
[   94.303571][  T333] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[   94.508226][   T36] audit: type=1400 audit(1759241035.950:339): avc:  denied  { read write } for  pid=2749 comm="syz.1.945" name="lp0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   94.509409][    T9] usb 2-1: USB disconnect, device number 23
[   94.531815][   T36] audit: type=1400 audit(1759241035.950:340): avc:  denied  { open } for  pid=2749 comm="syz.1.945" path="/dev/usb/lp0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   94.682350][ T2759] netlink: 'syz.0.948': attribute type 28 has an invalid length.
[   94.700725][   T36] audit: type=1400 audit(1759241036.140:341): avc:  denied  { create } for  pid=2760 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   94.721347][   T36] audit: type=1400 audit(1759241036.140:342): avc:  denied  { write } for  pid=2760 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   94.754395][   T36] audit: type=1400 audit(1759241036.140:343): avc:  denied  { nlmsg_write } for  pid=2760 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   94.775813][ T2749] usblp0: removed
[   94.781022][   T36] audit: type=1400 audit(1759241036.170:344): avc:  denied  { mount } for  pid=2764 comm="syz.0.951" name="/" dev="incremental-fs" ino=1986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   94.804272][   T36] audit: type=1400 audit(1759241036.230:345): avc:  denied  { ioctl } for  pid=2749 comm="syz.1.945" path=2F6465762F7573622F6C7030202864656C6574656429 dev="devtmpfs" ino=634 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   94.822027][ T2769] fuse: Unknown parameter 'fd0x0000000000000003'
[   94.832466][   T36] audit: type=1400 audit(1759241036.250:346): avc:  denied  { mounton } for  pid=2768 comm="syz.0.954" path="/369/file0" dev="tmpfs" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   94.880871][   T36] audit: type=1400 audit(1759241036.320:347): avc:  denied  { create } for  pid=2770 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   94.901288][   T36] audit: type=1400 audit(1759241036.330:348): avc:  denied  { ioctl } for  pid=2770 comm="syz.0.955" path="socket:[17749]" dev="sockfs" ino=17749 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   95.311367][ T2775] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0
[   95.322171][ T2776] tmpfs: Unknown parameter 'filter'
[   95.469396][ T2788] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.469847][ T2788] rust_binder: inc_ref_done called when no active inc_refs
[   95.479564][ T2788] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.497638][ T2788] ip6gretap0: mtu less than device minimum
[   95.591834][  T495] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   95.744706][  T495] usb 2-1: config 0 has no interfaces?
[   95.752458][  T495] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[   95.761612][  T495] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[   95.769815][  T495] usb 2-1: Manufacturer: syz
[   95.776733][  T495] usb 2-1: config 0 descriptor??
[   95.998765][  T630] usb 2-1: USB disconnect, device number 24
[   96.326220][  T333] usb 5-1: USB disconnect, device number 6
[   96.585157][ T2816] cgroup: Invalid name
[   96.921802][  T630] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   97.014122][ T2842] syz.0.985 uses obsolete (PF_INET,SOCK_PACKET)
[   97.081796][  T630] usb 2-1: Using ep0 maxpacket: 32
[   97.089291][  T630] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[   97.098315][  T630] usb 2-1: config 0 has no interface number 0
[   97.107903][  T630] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   97.117159][  T630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.125298][  T630] usb 2-1: Product: syz
[   97.129497][  T630] usb 2-1: Manufacturer: syz
[   97.134202][  T630] usb 2-1: SerialNumber: syz
[   97.140414][  T630] usb 2-1: config 0 descriptor??
[   97.148726][  T630] smsc95xx v2.0.0
[   97.288638][ T2844] incfs: Options parsing error. -22
[   97.293977][ T2844] incfs: mount failed -22
[   97.379378][ T2844] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   97.571813][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[   97.591439][  T630] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   97.611798][  T630] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   97.721937][    T9] usb 4-1: Using ep0 maxpacket: 32
[   97.730091][    T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.741224][    T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.754258][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   97.772082][    T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   97.780485][    T9] usb 4-1: Product: syz
[   97.786180][    T9] usb 4-1: Manufacturer: syz
[   97.797493][    T9] hub 4-1:4.0: USB hub found
[   98.007754][    T9] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[   98.034896][    T9] usb 4-1: USB disconnect, device number 24
[   98.544925][ T2884] rust_binder: Write failure EINVAL in pid:530
[   98.609080][ T2890] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1002'.
[   98.823063][ T2901] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   98.833316][ T2901] overlayfs: missing 'lowerdir'
[   99.631894][   T36] kauditd_printk_skb: 414 callbacks suppressed
[   99.631940][   T36] audit: type=1400 audit(1759241041.080:763): avc:  denied  { unmount } for  pid=1881 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   99.668643][   T36] audit: type=1400 audit(1759241041.100:764): avc:  denied  { create } for  pid=2818 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   99.689015][  T630] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71
[   99.731843][  T630] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[   99.751217][   T36] audit: type=1400 audit(1759241041.120:765): avc:  denied  { read write } for  pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   99.780278][  T630] usb 2-1: USB disconnect, device number 25
[   99.809700][   T36] audit: type=1400 audit(1759241041.120:766): avc:  denied  { read write open } for  pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   99.897853][   T36] audit: type=1400 audit(1759241041.120:767): avc:  denied  { ioctl } for  pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   99.934195][   T36] audit: type=1400 audit(1759241041.150:768): avc:  denied  { read write } for  pid=1881 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   99.960961][ T2937] fuse: Unknown parameter 'gro}p_id500000000000000000000'
[  100.011204][   T36] audit: type=1400 audit(1759241041.150:769): avc:  denied  { read write open } for  pid=1881 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  100.084199][   T36] audit: type=1400 audit(1759241041.150:770): avc:  denied  { ioctl } for  pid=1881 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  100.148324][   T36] audit: type=1400 audit(1759241041.150:771): avc:  denied  { create } for  pid=2927 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  100.170893][   T36] audit: type=1400 audit(1759241041.150:772): avc:  denied  { create } for  pid=2927 comm="syz.3.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  100.313085][ T2951] __vm_enough_memory: pid: 2951, comm: syz.1.1027, bytes: 18014402804453376 not enough memory for the allocation
[  100.467123][ T2960] cgroup2: Unknown parameter 'net_cls'
[  100.475283][ T2959] netlink: 'syz.3.1030': attribute type 16 has an invalid length.
[  100.489050][ T2960] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1031'.
[  100.492369][ T2959] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1030'.
[  100.691853][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  100.764535][ T2970] 9pnet_fd: Insufficient options for proto=fd
[  100.841774][    T9] usb 2-1: Using ep0 maxpacket: 16
[  100.854941][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.881765][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  100.905410][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  100.921401][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.935295][    T9] usb 2-1: Product: syz
[  100.939518][    T9] usb 2-1: Manufacturer: syz
[  100.945391][    T9] usb 2-1: SerialNumber: syz
[  101.173780][    T9] usb 2-1: 0:2 : does not exist
[  101.184962][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  101.223058][    T9] usb 2-1: USB disconnect, device number 26
[  101.381801][   T45] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  101.468227][  T499] udevd[499]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  101.541800][   T45] usb 5-1: device descriptor read/64, error -71
[  101.791817][   T45] usb 5-1: device descriptor read/64, error -71
[  102.031894][   T45] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[  102.171789][   T45] usb 5-1: device descriptor read/64, error -71
[  102.411807][   T45] usb 5-1: device descriptor read/64, error -71
[  102.497851][ T3048] netlink: 'syz.1.1071': attribute type 1 has an invalid length.
[  102.505752][ T3048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'.
[  102.521860][   T45] usb usb5-port1: attempt power cycle
[  102.630833][ T3057] overlayfs: failed to clone upperpath
[  102.704009][ T3059] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  102.717107][ T3059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:564
[  102.871775][   T45] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  102.890343][ T3071] rust_binder: 470: no such ref 0
[  102.895901][ T3071] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  102.903424][ T3071] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  102.924800][   T45] usb 5-1: device descriptor read/8, error -71
[  103.062793][   T45] usb 5-1: device descriptor read/8, error -71
[  103.321808][   T45] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  103.344123][   T45] usb 5-1: device descriptor read/8, error -71
[  103.474184][   T45] usb 5-1: device descriptor read/8, error -71
[  103.581890][   T45] usb usb5-port1: unable to enumerate USB device
[  103.987011][ T3108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1093'.
[  104.141637][ T3116] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[  104.193955][ T3116] netlink: 'syz.1.1096': attribute type 1 has an invalid length.
[  104.209903][ T3116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'.
[  104.674493][   T36] kauditd_printk_skb: 762 callbacks suppressed
[  104.674514][   T36] audit: type=1400 audit(1759241046.120:1535): avc:  denied  { create } for  pid=3141 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  104.729109][   T36] audit: type=1400 audit(1759241046.150:1536): avc:  denied  { bind } for  pid=3141 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  104.749702][   T36] audit: type=1400 audit(1759241046.150:1537): avc:  denied  { listen } for  pid=3141 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  104.782778][   T36] audit: type=1400 audit(1759241046.150:1538): avc:  denied  { create } for  pid=3141 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  104.806856][   T36] audit: type=1400 audit(1759241046.150:1539): avc:  denied  { connect } for  pid=3141 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  104.827738][   T36] audit: type=1400 audit(1759241046.160:1540): avc:  denied  { write } for  pid=3141 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  104.848193][   T36] audit: type=1400 audit(1759241046.160:1541): avc:  denied  { accept } for  pid=3141 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  104.871652][ T3151] SELinux:  Context ϧ®-·)ç:EØ2¡Ù­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped).
[  104.875708][   T36] audit: type=1400 audit(1759241046.160:1542): avc:  denied  { read } for  pid=3141 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  104.901501][   T36] audit: type=1400 audit(1759241046.160:1543): avc:  denied  { read } for  pid=3141 comm="syz.3.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  104.920942][   T36] audit: type=1400 audit(1759241046.170:1544): avc:  denied  { read write } for  pid=1881 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  105.160384][ T3163] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  105.176494][ T3163] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  105.357105][ T3171] netlink: 'syz.4.1120': attribute type 1 has an invalid length.
[  105.364925][ T3171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  105.573549][ T3182] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  105.607548][ T3182] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  105.701809][   T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  105.851971][   T45] usb 5-1: device descriptor read/64, error -71
[  105.908808][ T3206] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1136'.
[  105.962936][ T3208] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  105.977225][  T641] rust_binder: 3192: removing orphan mapping 0:4120
[  105.986495][ T3208] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  106.096714][ T3214] netlink: 'syz.1.1139': attribute type 1 has an invalid length.
[  106.121790][ T3214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'.
[  106.121798][   T45] usb 5-1: device descriptor read/64, error -71
[  106.361789][   T45] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  106.511826][   T45] usb 5-1: device descriptor read/64, error -71
[  106.595486][ T3240] incfs: Can't find or create .index dir in ./file0
[  106.602283][ T3240] incfs: mount failed -13
[  106.751795][   T45] usb 5-1: device descriptor read/64, error -71
[  106.781810][  T495] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[  106.862314][   T45] usb usb5-port1: attempt power cycle
[  106.934400][  T495] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  106.942772][  T495] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  106.950870][  T495] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  106.959849][  T495] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  106.970748][  T495] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  106.982483][  T495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  106.993590][  T495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  107.005603][  T495] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  107.023598][  T495] usb 4-1: string descriptor 0 read error: -22
[  107.029918][  T495] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  107.039070][  T495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.048751][  T495] usb 4-1: config 0 descriptor??
[  107.055498][ T3238] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  107.065073][  T495] hub 4-1:0.0: bad descriptor, ignoring hub
[  107.071030][  T495] hub 4-1:0.0: probe with driver hub failed with error -5
[  107.079307][  T495] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14
[  107.212172][   T45] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  107.235431][   T45] usb 5-1: device descriptor read/8, error -71
[  107.288373][ T3238] syzkaller0: entered promiscuous mode
[  107.295166][ T3238] syzkaller0: entered allmulticast mode
[  107.311060][ T3238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.319797][ T3238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.335888][  T641] usb 4-1: USB disconnect, device number 25
[  107.390448][   T45] usb 5-1: device descriptor read/8, error -71
[  107.641836][   T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  107.665941][   T45] usb 5-1: device descriptor read/8, error -71
[  107.667943][ T3269] SELinux: security_context_str_to_sid () failed with errno=-22
[  107.804276][   T45] usb 5-1: device descriptor read/8, error -71
[  107.911914][   T45] usb usb5-port1: unable to enumerate USB device
[  107.956151][ T3271] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  108.657547][ T3297] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1171'.
[  109.241789][  T495] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  109.392470][  T495] usb 5-1: device descriptor read/64, error -71
[  109.431892][ T3330] __vm_enough_memory: pid: 3330, comm: syz.3.1183, bytes: 18014402804453376 not enough memory for the allocation
[  109.661799][  T495] usb 5-1: device descriptor read/64, error -71
[  109.682609][   T36] kauditd_printk_skb: 839 callbacks suppressed
[  109.682628][   T36] audit: type=1400 audit(1759241051.130:2384): avc:  denied  { create } for  pid=3337 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  109.713068][   T36] audit: type=1400 audit(1759241051.130:2385): avc:  denied  { ioctl } for  pid=3337 comm="syz.0.1189" path="socket:[21695]" dev="sockfs" ino=21695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  109.739872][   T36] audit: type=1400 audit(1759241051.130:2386): avc:  denied  { bind } for  pid=3337 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  109.762278][   T36] audit: type=1400 audit(1759241051.130:2387): avc:  denied  { create } for  pid=3337 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  109.795746][   T36] audit: type=1400 audit(1759241051.130:2388): avc:  denied  { create } for  pid=3337 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  109.821142][   T36] audit: type=1400 audit(1759241051.130:2389): avc:  denied  { ioctl } for  pid=3337 comm="syz.0.1189" path="socket:[21697]" dev="sockfs" ino=21697 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  109.848984][   T36] audit: type=1400 audit(1759241051.130:2390): avc:  denied  { write } for  pid=3337 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  109.910621][   T36] audit: type=1400 audit(1759241051.130:2391): avc:  denied  { mounton } for  pid=3337 comm="syz.0.1189" path="/479/file0" dev="tmpfs" ino=2603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  109.941783][  T495] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  109.957622][   T36] audit: type=1400 audit(1759241051.130:2392): avc:  denied  { write } for  pid=3337 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  109.980015][   T36] audit: type=1400 audit(1759241051.190:2393): avc:  denied  { read write } for  pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  110.131839][  T495] usb 5-1: device descriptor read/64, error -71
[  110.197834][ T3362] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.372538][  T495] usb 5-1: device descriptor read/64, error -71
[  110.492099][  T495] usb usb5-port1: attempt power cycle
[  110.841787][  T495] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  110.877000][  T495] usb 5-1: device descriptor read/8, error -71
[  111.019945][  T495] usb 5-1: device descriptor read/8, error -71
[  111.055583][ T3378] SELinux: security_context_str_to_sid () failed with errno=-22
[  111.271782][  T495] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  111.304572][  T495] usb 5-1: device descriptor read/8, error -71
[  111.443284][  T495] usb 5-1: device descriptor read/8, error -71
[  111.465330][ T3394] netlink: 'syz.3.1212': attribute type 1 has an invalid length.
[  111.475388][ T3394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'.
[  111.552400][  T495] usb usb5-port1: unable to enumerate USB device
[  112.599461][ T3428] rust_binder: 3428 RLIMIT_NICE not set
[  112.635857][  T495] rust_binder: 3427: removing orphan mapping 0:1048
[  112.710452][ T3434] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  112.819244][  T332] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  112.962066][  T332] usb 2-1: device descriptor read/64, error -71
[  113.211771][  T332] usb 2-1: device descriptor read/64, error -71
[  113.385588][ T3458] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1238'.
[  113.461787][  T332] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  113.611417][  T332] usb 2-1: device descriptor read/64, error -71
[  113.668914][ T3462] netlink: 'syz.3.1240': attribute type 1 has an invalid length.
[  113.676847][ T3462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'.
[  113.851793][ T3466] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1242'.
[  113.881769][  T332] usb 2-1: device descriptor read/64, error -71
[  113.993380][  T332] usb usb2-port1: attempt power cycle
[  114.166330][ T3477] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1246'.
[  114.265246][ T3479] futex_wake_op: syz.3.1247 tries to shift op by -1; fix this program
[  114.351949][  T332] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  114.385049][  T332] usb 2-1: device descriptor read/8, error -71
[  114.524683][  T332] usb 2-1: device descriptor read/8, error -71
[  114.551772][    T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  114.712381][   T36] kauditd_printk_skb: 1140 callbacks suppressed
[  114.712401][   T36] audit: type=1400 audit(1759241056.160:3534): avc:  denied  { ioctl } for  pid=3478 comm="syz.3.1247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.756413][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  114.772594][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  114.784176][  T332] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  114.791823][   T36] audit: type=1400 audit(1759241056.160:3536): avc:  denied  { ioctl } for  pid=3478 comm="syz.3.1247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.819992][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.840115][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.849686][  T332] usb 2-1: device descriptor read/8, error -71
[  114.858170][   T36] audit: type=1400 audit(1759241056.160:3535): avc:  denied  { ioctl } for  pid=3425 comm="syz.1.1225" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.892291][   T36] audit: type=1400 audit(1759241056.190:3537): avc:  denied  { ioctl } for  pid=3478 comm="syz.3.1247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.922675][   T36] audit: type=1400 audit(1759241056.190:3538): avc:  denied  { ioctl } for  pid=3478 comm="syz.3.1247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.949594][    T9] usb 4-1: string descriptor 0 read error: -22
[  114.956370][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  114.967001][   T36] audit: type=1400 audit(1759241056.200:3539): avc:  denied  { ioctl } for  pid=3478 comm="syz.3.1247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  114.991945][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.002244][   T36] audit: type=1400 audit(1759241056.200:3540): avc:  denied  { ioctl } for  pid=3478 comm="syz.3.1247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.004991][  T332] usb 2-1: device descriptor read/8, error -71
[  115.043706][    T9] usb 4-1: 0:2 : does not exist
[  115.054430][   T36] audit: type=1400 audit(1759241056.200:3541): avc:  denied  { ioctl } for  pid=3478 comm="syz.3.1247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.086902][   T36] audit: type=1400 audit(1759241056.200:3542): avc:  denied  { ioctl } for  pid=3478 comm="syz.3.1247" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.112797][   T36] audit: type=1400 audit(1759241056.210:3543): avc:  denied  { create } for  pid=3492 comm="syz.0.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  115.152976][  T332] usb usb2-port1: unable to enumerate USB device
[  115.281787][  T630] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  115.431786][  T630] usb 5-1: Using ep0 maxpacket: 16
[  115.439661][  T630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.450652][  T630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.460907][  T630] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  115.470015][  T630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.480046][  T630] usb 5-1: config 0 descriptor??
[  115.586330][ T3498] incfs: Backing dir is not set, filesystem can't be mounted.
[  115.594026][ T3498] incfs: mount failed -2
[  115.893169][    T9] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  115.912680][    T9] usb 4-1: Warning! Unlikely big volume range (=8960), cval->res is probably wrong.
[  115.912903][  T630] hid-multitouch 0003:1FD2:6007.0018: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0
[  115.937238][    T9] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/8960/1
[  115.953957][    T9] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  115.971676][    T9] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  115.981551][ T3518] incfs: Backing dir is not set, filesystem can't be mounted.
[  115.989218][ T3518] incfs: mount failed -2
[  115.998641][    T9] usb 4-1: USB disconnect, device number 26
[  116.037501][  T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  116.107501][  T333] usb 5-1: USB disconnect, device number 19
[  116.560509][ T3541] kvm: pic: non byte read
[  116.572281][ T3541] kvm: pic: level sensitive irq not supported
[  116.572350][ T3541] kvm: pic: non byte read
[  116.594924][ T3541] kvm: pic: level sensitive irq not supported
[  116.594995][ T3541] kvm: pic: non byte read
[  116.609628][ T3541] kvm: pic: level sensitive irq not supported
[  116.609693][ T3541] kvm: pic: non byte read
[  116.630676][ T3541] kvm: pic: level sensitive irq not supported
[  116.630742][ T3541] kvm: pic: non byte read
[  116.631648][ T3552] SELinux: security_context_str_to_sid () failed with errno=-22
[  116.651269][ T3541] kvm: pic: level sensitive irq not supported
[  116.651335][ T3541] kvm: pic: non byte read
[  116.665248][ T3541] kvm: pic: level sensitive irq not supported
[  116.665496][ T3541] kvm: pic: non byte read
[  116.676555][ T3541] kvm: pic: level sensitive irq not supported
[  116.676617][ T3541] kvm: pic: non byte read
[  116.702494][ T3541] kvm: pic: level sensitive irq not supported
[  116.702560][ T3541] kvm: pic: non byte read
[  117.088161][ T3582] rust_binder: 3582 RLIMIT_NICE not set
[  117.100314][  T332] rust_binder: 3581: removing orphan mapping 0:1048
[  117.239084][ T3596] overlay: Unknown parameter 'dont_measure'
[  117.281790][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  117.461786][    T9] usb 2-1: device descriptor read/64, error -71
[  117.701794][    T9] usb 2-1: device descriptor read/64, error -71
[  117.941788][    T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  118.081773][    T9] usb 2-1: device descriptor read/64, error -71
[  118.341769][    T9] usb 2-1: device descriptor read/64, error -71
[  118.386930][ T3640] rust_binder: Error in use_page_slow: ESRCH
[  118.386957][ T3640] rust_binder: use_range failure ESRCH
[  118.402973][ T3640] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  118.415077][ T3640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  118.429833][ T3640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:676
[  118.462350][    T9] usb usb2-port1: attempt power cycle
[  118.741788][  T332] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  118.812514][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  118.835011][    T9] usb 2-1: device descriptor read/8, error -71
[  118.892096][  T332] usb 4-1: Using ep0 maxpacket: 32
[  118.905099][  T332] usb 4-1: config 0 has an invalid interface number: 16 but max is 0
[  118.923318][  T332] usb 4-1: config 0 has no interface number 0
[  118.939840][  T332] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  118.954800][  T332] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48
[  118.971063][  T332] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  118.981173][  T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.002106][  T332] usb 4-1: Product: syz
[  119.006675][    T9] usb 2-1: device descriptor read/8, error -71
[  119.013449][  T332] usb 4-1: Manufacturer: syz
[  119.018085][  T332] usb 4-1: SerialNumber: syz
[  119.033935][  T332] usb 4-1: config 0 descriptor??
[  119.040348][ T3640] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  119.062042][ T3640] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  119.261869][    T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  119.294460][    T9] usb 2-1: device descriptor read/8, error -71
[  119.330581][  T630] usb 4-1: USB disconnect, device number 27
[  119.428475][    T9] usb 2-1: device descriptor read/8, error -71
[  119.551988][    T9] usb usb2-port1: unable to enumerate USB device
[  119.741782][  T630] usb 4-1: new low-speed USB device number 28 using dummy_hcd
[  119.752999][   T36] kauditd_printk_skb: 538 callbacks suppressed
[  119.753021][   T36] audit: type=1400 audit(1759241061.190:4082): avc:  denied  { ioctl } for  pid=3650 comm="syz.3.1320" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.786979][   T36] audit: type=1400 audit(1759241061.200:4083): avc:  denied  { ioctl } for  pid=3650 comm="syz.3.1320" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.812119][   T36] audit: type=1400 audit(1759241061.200:4084): avc:  denied  { ioctl } for  pid=3650 comm="syz.3.1320" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.842292][   T36] audit: type=1400 audit(1759241061.290:4085): avc:  denied  { ioctl } for  pid=3650 comm="syz.3.1320" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  119.891459][   T36] audit: type=1400 audit(1759241061.290:4086): avc:  denied  { read write } for  pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  119.917178][ T3666] rust_binder: Error while translating object.
[  119.917239][ T3666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  119.925050][ T3666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:563
[  119.927459][   T36] audit: type=1400 audit(1759241061.290:4087): avc:  denied  { read write open } for  pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  119.973198][   T36] audit: type=1400 audit(1759241061.290:4088): avc:  denied  { ioctl } for  pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  119.975563][  T630] usb 4-1: No LPM exit latency info found, disabling LPM.
[  120.000564][   T36] audit: type=1400 audit(1759241061.330:4089): avc:  denied  { read write } for  pid=1881 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  120.025320][  T630] usb 4-1: config 64 has an invalid interface number: 174 but max is 2
[  120.030505][   T36] audit: type=1400 audit(1759241061.330:4090): avc:  denied  { read write open } for  pid=1881 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  120.040570][  T630] usb 4-1: config 64 has an invalid interface number: 252 but max is 2
[  120.063647][   T36] audit: type=1400 audit(1759241061.330:4091): avc:  denied  { ioctl } for  pid=1881 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  120.073665][  T630] usb 4-1: config 64 has an invalid interface descriptor of length 2, skipping
[  120.135490][  T630] usb 4-1: config 64 has an invalid interface number: 140 but max is 2
[  120.143846][  T630] usb 4-1: config 64 has no interface number 0
[  120.150035][  T630] usb 4-1: config 64 has no interface number 1
[  120.156278][  T630] usb 4-1: config 64 has no interface number 2
[  120.163879][  T630] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8
[  120.175767][  T630] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8
[  120.189974][  T630] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt
[  120.200971][  T630] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8
[  120.212213][  T630] usb 4-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  120.223077][  T630] usb 4-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8
[  120.235129][  T630] usb 4-1: config 64 interface 174 has no altsetting 0
[  120.242455][  T630] usb 4-1: config 64 interface 252 has no altsetting 0
[  120.249441][  T630] usb 4-1: config 64 interface 140 has no altsetting 0
[  120.263812][  T630] usb 4-1: string descriptor 0 read error: -22
[  120.270073][  T630] usb 4-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00
[  120.279244][  T630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.283887][ T3673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'.
[  120.299349][  T630] usb-storage 4-1:64.174: USB Mass Storage device detected
[  120.366766][  T630] usb-storage 4-1:64.252: USB Mass Storage device detected
[  120.394294][  T630] usb-storage 4-1:64.140: USB Mass Storage device detected
[  120.473951][ T3683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=3683 comm=syz.4.1331
[  120.511205][  T332] usb 4-1: USB disconnect, device number 28
[  120.668843][    T9] rust_binder: get_current_thread was called from the wrong process.
[  120.671516][ T3689] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1334'.
[  120.743651][ T3695] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1336'.
[  120.782158][ T3695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.831333][ T3702] GUP no longer grows the stack in syz.1.1340 (3702): 200000005000-200000008000 (200000004000)
[  120.841813][ T3702] CPU: 1 UID: 0 PID: 3702 Comm: syz.1.1340 Not tainted syzkaller #0 99b3eabaa23ae162c27001e7be83a6c28a211609
[  120.841852][ T3702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  120.841868][ T3702] Call Trace:
[  120.841876][ T3702]  <TASK>
[  120.841885][ T3702]  __dump_stack+0x21/0x30
[  120.841919][ T3702]  dump_stack_lvl+0x10c/0x190
[  120.841942][ T3702]  ? __cfi_dump_stack_lvl+0x10/0x10
[  120.841966][ T3702]  ? futex_lock_pi_atomic+0xdd/0xc70
[  120.841987][ T3702]  dump_stack+0x19/0x20
[  120.842009][ T3702]  fixup_user_fault+0x63d/0x6d0
[  120.842032][ T3702]  fault_in_user_writeable+0x76/0xe0
[  120.842048][ T3702]  futex_lock_pi+0x258/0xa10
[  120.842067][ T3702]  ? futex_unqueue+0x136/0x160
[  120.842085][ T3702]  ? __cfi_futex_lock_pi+0x10/0x10
[  120.842105][ T3702]  ? __cfi_futex_wake_mark+0x10/0x10
[  120.842128][ T3702]  ? futex_setup_timer+0xb4/0xd0
[  120.842143][ T3702]  ? __cfi_futex_wake_mark+0x10/0x10
[  120.842166][ T3702]  ? mas_find+0x358/0x5f0
[  120.842180][ T3702]  ? __kasan_check_write+0x18/0x20
[  120.842208][ T3702]  do_futex+0x25c/0x500
[  120.842224][ T3702]  ? __cfi_do_futex+0x10/0x10
[  120.842241][ T3702]  ? __vm_munmap+0x2c7/0x370
[  120.842259][ T3702]  __se_sys_futex+0x28f/0x300
[  120.842277][ T3702]  ? __x64_sys_futex+0x110/0x110
[  120.842294][ T3702]  ? __cfi___close_range+0x10/0x10
[  120.842312][ T3702]  ? __kasan_check_write+0x18/0x20
[  120.842339][ T3702]  __x64_sys_futex+0xe9/0x110
[  120.842357][ T3702]  x64_sys_call+0x227f/0x2ee0
[  120.842382][ T3702]  do_syscall_64+0x58/0xf0
[  120.842401][ T3702]  ? clear_bhb_loop+0x50/0xa0
[  120.842418][ T3702]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  120.842444][ T3702] RIP: 0033:0x7f87f498eec9
[  120.842458][ T3702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.842473][ T3702] RSP: 002b:00007f87f581b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  120.842491][ T3702] RAX: ffffffffffffffda RBX: 00007f87f4be5fa0 RCX: 00007f87f498eec9
[  120.842505][ T3702] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[  120.842516][ T3702] RBP: 00007f87f4a11f91 R08: 0000000000000000 R09: 0000000000000000
[  120.842528][ T3702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.842538][ T3702] R13: 00007f87f4be6038 R14: 00007f87f4be5fa0 R15: 00007fff10a1c5e8
[  120.842563][ T3702]  </TASK>
[  121.245825][ T3717] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1345'.
[  121.641782][    T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  121.804782][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  121.813230][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  121.823066][    T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  121.833329][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.847787][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  121.857540][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.865629][    T9] usb 5-1: Product: syz
[  121.869929][    T9] usb 5-1: Manufacturer: syz
[  121.874606][    T9] usb 5-1: SerialNumber: syz
[  122.102976][    T9] usb 5-1: 0:2 : does not exist
[  122.123134][    T9] usb 5-1: USB disconnect, device number 20
[  122.178001][  T499] udevd[499]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  122.508156][ T3754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  122.508193][ T3754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:696
[  122.713129][ T3765] rust_binder: 3765 RLIMIT_NICE not set
[  122.770270][  T332] rust_binder: 3764: removing orphan mapping 0:1048
[  123.075216][ T3794] rust_binder: Error while translating object.
[  123.075263][ T3794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  123.097400][ T3794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:383
[  123.927121][ T3828] veth0_virt_wifi: entered allmulticast mode
[  123.941788][  T630] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  123.963834][ T3830] netlink: 'syz.0.1392': attribute type 12 has an invalid length.
[  124.081781][  T630] usb 4-1: device descriptor read/64, error -71
[  124.201984][ T3846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  124.321791][  T630] usb 4-1: device descriptor read/64, error -71
[  124.571848][  T630] usb 4-1: new low-speed USB device number 30 using dummy_hcd
[  124.692838][ T3824] veth0_virt_wifi: left allmulticast mode
[  124.711808][  T630] usb 4-1: device descriptor read/64, error -71
[  124.788186][   T36] kauditd_printk_skb: 564 callbacks suppressed
[  124.788205][   T36] audit: type=1400 audit(1759241066.230:4656): avc:  denied  { sys_module } for  pid=3857 comm="syz.1.1403" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  124.851335][   T36] audit: type=1400 audit(1759241066.280:4657): avc:  denied  { ioctl } for  pid=3818 comm="syz.3.1387" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.949684][   T36] audit: type=1400 audit(1759241066.280:4658): avc:  denied  { ioctl } for  pid=3818 comm="syz.3.1387" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  124.974961][  T630] usb 4-1: device descriptor read/64, error -71
[  125.054118][   T36] audit: type=1400 audit(1759241066.280:4659): avc:  denied  { ioctl } for  pid=3818 comm="syz.3.1387" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  125.101007][  T630] usb usb4-port1: attempt power cycle
[  125.159875][   T36] audit: type=1400 audit(1759241066.280:4660): avc:  denied  { ioctl } for  pid=3818 comm="syz.3.1387" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  125.258377][   T36] audit: type=1400 audit(1759241066.280:4661): avc:  denied  { ioctl } for  pid=3818 comm="syz.3.1387" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  125.283421][   T36] audit: type=1400 audit(1759241066.280:4662): avc:  denied  { ioctl } for  pid=3818 comm="syz.3.1387" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  125.308644][   T36] audit: type=1400 audit(1759241066.280:4663): avc:  denied  { ioctl } for  pid=3818 comm="syz.3.1387" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  125.333736][   T36] audit: type=1400 audit(1759241066.340:4664): avc:  denied  { mounton } for  pid=3859 comm="syz.1.1404" path="/250/file0" dev="tmpfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  125.355710][ T3875] fuse: Unknown parameter 'nd<000000000000000000050x0000000000000004'
[  125.357209][   T36] audit: type=1400 audit(1759241066.350:4665): avc:  denied  { ioctl } for  pid=3818 comm="syz.3.1387" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  125.471765][  T630] usb 4-1: new low-speed USB device number 31 using dummy_hcd
[  125.508280][  T630] usb 4-1: device descriptor read/8, error -71
[  125.538649][ T3892] mmap: syz.1.1416 (3892) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  125.567105][ T3895] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1417'.
[  125.653948][  T630] usb 4-1: device descriptor read/8, error -71
[  125.891838][  T630] usb 4-1: new low-speed USB device number 32 using dummy_hcd
[  125.914234][  T630] usb 4-1: device descriptor read/8, error -71
[  126.044141][  T630] usb 4-1: device descriptor read/8, error -71
[  126.158691][  T630] usb usb4-port1: unable to enumerate USB device
[  126.228246][ T3913] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1426'.
[  126.443850][ T3935] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1436'.
[  126.637105][ T3954] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  126.734621][ T3958] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch
[  127.381801][  T333] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  127.532834][  T333] usb 5-1: Using ep0 maxpacket: 16
[  127.549547][ T3982] x_tables: duplicate underflow at hook 1
[  127.549850][  T333] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.567485][  T333] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.583536][  T333] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.592819][  T333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.601191][  T333] usb 5-1: Product: syz
[  127.607202][  T333] usb 5-1: Manufacturer: syz
[  127.614182][  T333] usb 5-1: SerialNumber: syz
[  127.629645][ T3983] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[  127.838351][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3989 comm=syz.1.1459
[  127.856351][ T3989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3989 comm=syz.1.1459
[  127.932137][ T3992] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=3992 comm=syz.1.1459
[  128.082911][  T333] usb 5-1: 0:2 : does not exist
[  128.444676][ T4014] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1469'.
[  128.559727][  T333] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  128.577752][  T333] usb 5-1: USB disconnect, device number 21
[  128.670533][  T499] udevd[499]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  128.828039][ T4026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=4026 comm=syz.1.1474
[  129.001811][  T332] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  129.095344][ T4030] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1476'.
[  129.131781][  T332] usb 4-1: device descriptor read/64, error -71
[  129.303958][ T4046] netlink: 'syz.0.1481': attribute type 7 has an invalid length.
[  129.372011][  T332] usb 4-1: device descriptor read/64, error -71
[  129.611778][  T332] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  129.751769][  T332] usb 4-1: device descriptor read/64, error -71
[  129.862599][   T36] kauditd_printk_skb: 532 callbacks suppressed
[  129.862623][   T36] audit: type=1400 audit(1759241071.310:5198): avc:  denied  { ioctl } for  pid=4023 comm="syz.3.1473" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  129.930481][   T36] audit: type=1400 audit(1759241071.350:5199): avc:  denied  { ioctl } for  pid=4023 comm="syz.3.1473" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  129.962243][   T36] audit: type=1400 audit(1759241071.350:5200): avc:  denied  { ioctl } for  pid=4023 comm="syz.3.1473" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  130.011001][   T36] audit: type=1400 audit(1759241071.350:5201): avc:  denied  { ioctl } for  pid=4023 comm="syz.3.1473" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  130.037179][   T36] audit: type=1400 audit(1759241071.350:5202): avc:  denied  { ioctl } for  pid=4023 comm="syz.3.1473" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  130.041846][  T332] usb 4-1: device descriptor read/64, error -71
[  130.063598][   T36] audit: type=1400 audit(1759241071.350:5203): avc:  denied  { ioctl } for  pid=4023 comm="syz.3.1473" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  130.131758][   T36] audit: type=1400 audit(1759241071.350:5204): avc:  denied  { ioctl } for  pid=4023 comm="syz.3.1473" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  130.157710][   T36] audit: type=1400 audit(1759241071.430:5205): avc:  denied  { ioctl } for  pid=4023 comm="syz.3.1473" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  130.187291][   T36] audit: type=1400 audit(1759241071.630:5206): avc:  denied  { create } for  pid=4062 comm="syz.1.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  130.191876][ T4063] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1488'.
[  130.207871][   T36] audit: type=1400 audit(1759241071.630:5207): avc:  denied  { create } for  pid=4062 comm="syz.1.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  130.216967][  T332] usb usb4-port1: attempt power cycle
[  130.279393][ T4067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65043 sclass=netlink_route_socket pid=4067 comm=syz.4.1490
[  130.281108][ T4065] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2555610895/2555610897
[  130.304056][ T4065] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2555610895/2555610897
[  130.313458][ T4065] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2555610895/2555610897
[  130.591822][  T332] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  130.614409][  T332] usb 4-1: device descriptor read/8, error -71
[  130.691832][  T630] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  130.744118][  T332] usb 4-1: device descriptor read/8, error -71
[  130.841773][  T630] usb 5-1: Using ep0 maxpacket: 16
[  130.855296][  T630] usb 5-1: config 0 has an invalid interface number: 198 but max is 0
[  130.864856][  T630] usb 5-1: config 0 has no interface number 0
[  130.871020][  T630] usb 5-1: config 0 interface 198 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  130.881992][  T630] usb 5-1: config 0 interface 198 has no altsetting 0
[  130.891572][  T630] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=13.da
[  130.900699][  T630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.908839][  T630] usb 5-1: Product: syz
[  130.913028][  T630] usb 5-1: Manufacturer: syz
[  130.917637][  T630] usb 5-1: SerialNumber: syz
[  130.924003][  T630] usb 5-1: config 0 descriptor??
[  130.991800][  T332] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  131.014311][  T332] usb 4-1: device descriptor read/8, error -71
[  131.135162][  T630] rtl8150 5-1:0.198: couldn't find required endpoints
[  131.149778][  T630] rtl8150 5-1:0.198: probe with driver rtl8150 failed with error -5
[  131.160760][  T332] usb 4-1: device descriptor read/8, error -71
[  131.163514][  T630] usb 5-1: USB disconnect, device number 22
[  131.282290][  T332] usb usb4-port1: unable to enumerate USB device
[  131.908582][ T4118] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1513'.
[  132.582161][ T4125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1517'.
[  133.770789][ T4182] veth1: entered allmulticast mode
[  133.827416][ T4184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1542'.
[  133.911792][  T333] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  134.061756][  T333] usb 4-1: Using ep0 maxpacket: 16
[  134.069950][  T333] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  134.080201][  T333] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.094936][  T333] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  134.104523][  T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.113187][  T333] usb 4-1: Product: syz
[  134.117640][  T333] usb 4-1: Manufacturer: syz
[  134.122313][  T333] usb 4-1: SerialNumber: syz
[  134.171949][  T332] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  134.324433][  T332] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  134.332956][  T332] usb 5-1: config 1 has no interface number 0
[  134.338400][  T333] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  134.339092][  T332] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  134.364655][  T332] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64
[  134.365354][  T333] usb 4-1: USB disconnect, device number 37
[  134.379764][  T332] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  134.391045][  T332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.399926][  T332] usb 5-1: Product: syz
[  134.404888][  T332] usb 5-1: Manufacturer: syz
[  134.409513][  T332] usb 5-1: SerialNumber: syz
[  134.428185][ T4187] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  134.445200][ T4187] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  134.474374][  T499] udevd[499]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  134.600221][ T4181] veth1: left allmulticast mode
[  134.749404][ T4207] overlayfs: failed to clone upperpath
[  134.761043][ T4207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4207 comm=syz.1.1553
[  134.908823][   T36] kauditd_printk_skb: 413 callbacks suppressed
[  134.908842][   T36] audit: type=1400 audit(1759241076.350:5621): avc:  denied  { read write } for  pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  134.945703][ T4216] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch
[  134.954059][   T36] audit: type=1400 audit(1759241076.350:5622): avc:  denied  { read write open } for  pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  134.980812][   T36] audit: type=1400 audit(1759241076.350:5623): avc:  denied  { ioctl } for  pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  135.007077][   T36] audit: type=1400 audit(1759241076.380:5624): avc:  denied  { read write } for  pid=4215 comm="syz.3.1557" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  135.070334][   T36] audit: type=1400 audit(1759241076.380:5625): avc:  denied  { read write open } for  pid=4215 comm="syz.3.1557" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  135.133528][   T36] audit: type=1400 audit(1759241076.390:5626): avc:  denied  { ioctl } for  pid=4215 comm="syz.3.1557" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  135.161787][   T36] audit: type=1400 audit(1759241076.390:5627): avc:  denied  { set_context_mgr } for  pid=4215 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  135.182633][   T36] audit: type=1400 audit(1759241076.390:5628): avc:  denied  { read } for  pid=4215 comm="syz.3.1557" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  135.206235][   T36] audit: type=1400 audit(1759241076.390:5629): avc:  denied  { read open } for  pid=4215 comm="syz.3.1557" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  135.237005][   T36] audit: type=1400 audit(1759241076.390:5630): avc:  denied  { ioctl } for  pid=4215 comm="syz.3.1557" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  135.384098][   T45] usb 5-1: USB disconnect, device number 23
[  135.463555][ T4227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'.
[  136.041614][ T4249] /dev/rnullb0: Can't open blockdev
[  136.329820][ T4263] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1572'.
[  136.399587][ T4269] /dev/rnullb0: Can't open blockdev
[  136.530625][ T4280] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  136.625959][ T4290] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1583'.
[  136.812287][ T4305] rust_binder: 495: no such ref 0
[  136.927769][ T4312] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  136.935122][ T4313] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  137.478185][ T4354] 9pnet_fd: Insufficient options for proto=fd
[  137.526553][ T4356] tipc: Bearer <eth:xfrm0>: already 2 bearers with priority 10
[  137.534268][ T4356] tipc: Bearer <eth:xfrm0>: trying with adjusted priority
[  137.548613][ T4356] tipc: Enabled bearer <eth:xfrm0>, priority 9
[  137.570330][ T4356] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1612'.
[  137.798065][ T4377] syz.4.1621 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  137.839632][ T4377] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1621'.
[  138.035324][ T4396] netlink: 61922 bytes leftover after parsing attributes in process `syz.0.1627'.
[  138.048528][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  138.069374][ T4393] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[  138.676053][ T4419] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1636'.
[  138.814519][ T4422] overlayfs: failed to clone upperpath
[  139.246875][ T4440] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1645'.
[  139.439929][ T4448] incfs: Options parsing error. -22
[  139.450618][ T4448] incfs: mount failed -22
[  139.460414][ T4448] devpts: called with bogus options
[  139.672394][ T4458] netlink: 'syz.1.1654': attribute type 1 has an invalid length.
[  139.680315][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'.
[  139.996149][   T36] kauditd_printk_skb: 554 callbacks suppressed
[  139.996170][   T36] audit: type=1400 audit(1759241081.440:6185): avc:  denied  { create } for  pid=4474 comm="syz.1.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  140.043819][   T36] audit: type=1400 audit(1759241081.470:6186): avc:  denied  { create } for  pid=4474 comm="syz.1.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  140.079474][   T36] audit: type=1400 audit(1759241081.470:6187): avc:  denied  { write } for  pid=4474 comm="syz.1.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  140.100874][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  140.102110][ T2175] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  140.107020][   T36] audit: type=1400 audit(1759241081.470:6188): avc:  denied  { read } for  pid=4474 comm="syz.1.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  140.161815][   T36] audit: type=1400 audit(1759241081.470:6189): avc:  denied  { read } for  pid=4474 comm="syz.1.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  140.182211][   T36] audit: type=1400 audit(1759241081.470:6190): avc:  denied  { write } for  pid=4474 comm="syz.1.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  140.202956][   T36] audit: type=1400 audit(1759241081.600:6191): avc:  denied  { read write } for  pid=1881 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  140.230947][   T36] audit: type=1400 audit(1759241081.600:6192): avc:  denied  { read write open } for  pid=1881 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  140.291809][   T36] audit: type=1400 audit(1759241081.600:6193): avc:  denied  { ioctl } for  pid=1881 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  140.340657][   T36] audit: type=1400 audit(1759241081.750:6194): avc:  denied  { create } for  pid=4482 comm="syz.0.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  140.513845][ T4496] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1668'.
[  140.552551][ T4496] gretap0: entered promiscuous mode
[  140.568328][ T4498] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1668'.
[  140.591831][ T4498] 0ªî{X¹¦: renamed from gretap0
[  140.599227][ T4498] 0ªî{X¹¦: left promiscuous mode
[  140.606168][ T4498] 0ªî{X¹¦: entered allmulticast mode
[  140.613247][ T4498] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  141.333890][ T4525] /dev/rnullb0: Can't open blockdev
[  141.500962][ T4446] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true
[  141.501784][ T4446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  141.519063][ T4446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:781
[  141.530808][ T4535] Invalid ELF header magic: != ELF
[  141.955999][   T45] rust_binder: 4551: removing orphan mapping 0:4120
[  142.029910][ T4560] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1693'.
[  142.041150][ T4559] netlink: 'syz.1.1695': attribute type 1 has an invalid length.
[  142.051495][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'.
[  142.450357][ T4571] netlink: 'syz.4.1700': attribute type 1 has an invalid length.
[  142.652685][ T4598] __nla_validate_parse: 4 callbacks suppressed
[  142.652706][ T4598] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1711'.
[  142.754089][ T4606] rust_binder: Write failure EINVAL in pid:796
[  142.772761][ T4612] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1717'.
[  142.820153][ T4614] 9pnet_fd: Insufficient options for proto=fd
[  142.962682][ T4625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34580 sclass=netlink_tcpdiag_socket pid=4625 comm=syz.4.1722
[  143.005555][ T4628] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1726'.
[  143.276040][ T4654] netlink: 'syz.1.1736': attribute type 1 has an invalid length.
[  143.283986][ T4654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'.
[  143.313128][ T4657] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1738'.
[  143.344013][ T4659] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1739'.
[  143.935635][ T4685] kvm: apic: phys broadcast and lowest prio
[  144.080907][ T4693] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1752'.
[  144.258048][ T4699] sit0: entered promiscuous mode
[  144.274794][ T4699] netlink: 'syz.0.1754': attribute type 1 has an invalid length.
[  144.295137][ T4699] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1754'.
[  144.419859][ T4709] rust_binder: 598: no such ref 0
[  144.510175][ T4718] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1760'.
[  144.721874][  T330] Bluetooth: hci0: Frame reassembly failed (-84)
[  144.759401][ T4736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  144.856158][ T4740] rust_binder: Error while translating object.
[  144.856203][ T4740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  144.864407][ T4740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:829
[  144.882098][ T4746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  145.002423][   T36] kauditd_printk_skb: 639 callbacks suppressed
[  145.002444][   T36] audit: type=1400 audit(1759241086.450:6834): avc:  denied  { ioctl } for  pid=4751 comm="syz.3.1775" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  145.068630][ T4752] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  145.101749][   T36] audit: type=1400 audit(1759241086.460:6835): avc:  denied  { create } for  pid=4753 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  145.151765][   T36] audit: type=1400 audit(1759241086.460:6836): avc:  denied  { create } for  pid=4753 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  145.184155][ T4759] rust_binder: Write failure EINVAL in pid:835
[  145.191517][ T4760] netlink: 'syz.1.1778': attribute type 1 has an invalid length.
[  145.191760][   T36] audit: type=1400 audit(1759241086.460:6837): avc:  denied  { write } for  pid=4753 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  145.229012][ T4752] kernel read not supported for file /policy (pid: 4752 comm: syz.3.1775)
[  145.265398][   T36] audit: type=1400 audit(1759241086.460:6838): avc:  denied  { read } for  pid=4753 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  145.286904][ T4762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=4762 comm=syz.1.1779
[  145.306609][   T36] audit: type=1400 audit(1759241086.480:6839): avc:  denied  { read } for  pid=4753 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  145.348252][   T36] audit: type=1400 audit(1759241086.480:6840): avc:  denied  { write } for  pid=4753 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  145.368962][   T36] audit: type=1400 audit(1759241086.500:6841): avc:  denied  { read } for  pid=4751 comm="syz.3.1775" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  145.392450][   T36] audit: type=1400 audit(1759241086.500:6842): avc:  denied  { read open } for  pid=4751 comm="syz.3.1775" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  145.422507][   T36] audit: type=1400 audit(1759241086.510:6843): avc:  denied  { ioctl } for  pid=4751 comm="syz.3.1775" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  145.491758][  T333] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  145.644155][ T4776] syz.1.1785 (4776): attempted to duplicate a private mapping with mremap.  This is not supported.
[  145.652941][  T333] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  145.676961][  T333] usb 4-1: unable to read config index 0 descriptor/start: -61
[  145.692259][  T333] usb 4-1: can't read configurations, error -61
[  145.746547][ T4781] netlink: 'syz.1.1787': attribute type 1 has an invalid length.
[  145.841770][  T333] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  146.002575][  T333] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  146.013656][  T333] usb 4-1: unable to read config index 0 descriptor/start: -61
[  146.021258][  T333] usb 4-1: can't read configurations, error -61
[  146.029620][  T333] usb usb4-port1: attempt power cycle
[  146.371835][  T333] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  146.393427][  T333] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  146.404111][  T333] usb 4-1: unable to read config index 0 descriptor/start: -61
[  146.411754][  T333] usb 4-1: can't read configurations, error -61
[  146.494209][ T4810] netlink: 'syz.1.1800': attribute type 1 has an invalid length.
[  146.541843][  T333] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  146.569718][  T333] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  146.581166][  T333] usb 4-1: unable to read config index 0 descriptor/start: -61
[  146.589299][  T333] usb 4-1: can't read configurations, error -61
[  146.596156][  T333] usb usb4-port1: unable to enumerate USB device
[  146.731848][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  146.732235][ T2175] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  146.834666][ T4831] overlayfs: failed to clone upperpath
[  147.668105][ T4889] __nla_validate_parse: 13 callbacks suppressed
[  147.668125][ T4889] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1837'.
[  147.917080][ T4900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=4900 comm=syz.0.1841
[  148.173552][ T4912] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1846'.
[  148.262753][ T4918] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1849'.
[  148.502140][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1848'.
[  148.542982][ T4919] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1848'.
[  148.644837][ T4929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7194 sclass=netlink_route_socket pid=4929 comm=syz.0.1854
[  148.792062][ T4937] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1857'.
[  148.877729][ T4937] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[  148.911780][  T333] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  149.051819][  T333] usb 4-1: device descriptor read/64, error -71
[  149.249281][ T4944] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1859'.
[  149.301772][  T333] usb 4-1: device descriptor read/64, error -71
[  149.517401][ T4968] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1869'.
[  149.541801][  T333] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  149.681756][  T333] usb 4-1: device descriptor read/64, error -71
[  149.761805][  T332] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[  149.798731][ T4986] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1877'.
[  149.837563][ T4988] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1878'.
[  149.912085][  T332] usb 5-1: Invalid ep0 maxpacket: 64
[  149.921760][  T333] usb 4-1: device descriptor read/64, error -71
[  150.031835][  T333] usb usb4-port1: attempt power cycle
[  150.032327][   T36] kauditd_printk_skb: 563 callbacks suppressed
[  150.032345][   T36] audit: type=1400 audit(1759241091.480:7407): avc:  denied  { ioctl } for  pid=4926 comm="syz.3.1853" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.069030][  T332] usb 5-1: new low-speed USB device number 25 using dummy_hcd
[  150.076928][   T36] audit: type=1400 audit(1759241091.490:7408): avc:  denied  { ioctl } for  pid=4926 comm="syz.3.1853" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.102658][   T36] audit: type=1400 audit(1759241091.490:7409): avc:  denied  { ioctl } for  pid=4926 comm="syz.3.1853" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.128693][   T36] audit: type=1400 audit(1759241091.550:7410): avc:  denied  { ioctl } for  pid=4965 comm="syz.4.1868" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.154987][   T36] audit: type=1400 audit(1759241091.560:7411): avc:  denied  { ioctl } for  pid=4926 comm="syz.3.1853" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.180071][   T36] audit: type=1400 audit(1759241091.560:7412): avc:  denied  { ioctl } for  pid=4926 comm="syz.3.1853" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.211970][   T36] audit: type=1400 audit(1759241091.570:7413): avc:  denied  { ioctl } for  pid=4965 comm="syz.4.1868" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.237363][   T36] audit: type=1400 audit(1759241091.570:7414): avc:  denied  { ioctl } for  pid=4965 comm="syz.4.1868" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.262974][   T36] audit: type=1400 audit(1759241091.650:7415): avc:  denied  { ioctl } for  pid=4965 comm="syz.4.1868" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  150.288581][  T332] usb 5-1: Invalid ep0 maxpacket: 64
[  150.301942][  T332] usb usb5-port1: attempt power cycle
[  150.311314][   T36] audit: type=1400 audit(1759241091.680:7416): avc:  denied  { create } for  pid=5008 comm="syz.0.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  150.371783][  T333] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  150.404623][  T333] usb 4-1: device descriptor read/8, error -71
[  150.549169][  T333] usb 4-1: device descriptor read/8, error -71
[  150.561570][ T5042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19482 sclass=netlink_route_socket pid=5042 comm=syz.0.1901
[  150.608116][ T5045] overlayfs: failed to clone lowerpath
[  150.616853][ T5045] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  150.641762][  T332] usb 5-1: new low-speed USB device number 26 using dummy_hcd
[  150.672518][  T332] usb 5-1: Invalid ep0 maxpacket: 64
[  150.791783][  T333] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  150.811973][  T332] usb 5-1: new low-speed USB device number 27 using dummy_hcd
[  150.815296][  T333] usb 4-1: device descriptor read/8, error -71
[  150.828479][ T5063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24602 sclass=netlink_route_socket pid=5063 comm=syz.0.1911
[  150.842631][  T332] usb 5-1: Invalid ep0 maxpacket: 64
[  150.849822][  T332] usb usb5-port1: unable to enumerate USB device
[  150.954595][  T333] usb 4-1: device descriptor read/8, error -71
[  151.062516][  T333] usb usb4-port1: unable to enumerate USB device
[  151.636299][ T5116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34586 sclass=netlink_route_socket pid=5116 comm=syz.0.1942
[  152.049688][ T5138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5138 comm=syz.0.1943
[  152.770610][ T5158] __nla_validate_parse: 9 callbacks suppressed
[  152.770629][ T5158] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1950'.
[  152.815616][ T5162] netlink: 'syz.3.1953': attribute type 29 has an invalid length.
[  152.829016][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1953'.
[  152.977838][ T5175] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1958'.
[  153.074432][ T5183] netlink: 'syz.0.1960': attribute type 16 has an invalid length.
[  153.082454][ T5183] netlink: 'syz.0.1960': attribute type 2 has an invalid length.
[  153.090296][ T5183] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.1960'.
[  153.176631][ T5194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:643
[  153.177854][ T5195] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  153.262912][ T5205] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1969'.
[  153.437356][ T5224] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1976'.
[  153.442236][ T5225] ext4: Unknown parameter ''
[  153.500229][ T5229] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1979'.
[  153.824944][ T5245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.833099][ T5244] tipc: Disabling bearer <eth:syzkaller0>
[  154.686716][ T5286] kvm_intel: kvm [5285]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x98b7
[  154.698446][ T5286] kvm: kvm [5285]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x7a2
[  154.709608][ T5286] kvm: kvm [5285]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x768e
[  154.721215][ T5296] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2007'.
[  154.734067][ T5286] kvm: kvm [5285]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xa128
[  154.745676][ T5286] kvm: kvm [5285]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1014
[  154.754840][ T5286] kvm: kvm [5285]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7f00
[  154.951541][ T5304] overlayfs: failed to clone upperpath
[  155.075468][   T36] kauditd_printk_skb: 694 callbacks suppressed
[  155.075489][   T36] audit: type=1400 audit(1759241096.520:8111): avc:  denied  { read write } for  pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  155.151743][   T36] audit: type=1400 audit(1759241096.520:8112): avc:  denied  { read write open } for  pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  155.178640][   T36] audit: type=1400 audit(1759241096.520:8113): avc:  denied  { ioctl } for  pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  155.221831][   T36] audit: type=1400 audit(1759241096.550:8114): avc:  denied  { create } for  pid=5311 comm="syz.3.2014" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  155.224354][ T5316] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2016'.
[  155.267725][   T36] audit: type=1400 audit(1759241096.560:8115): avc:  denied  { ioctl } for  pid=5311 comm="syz.3.2014" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31682 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  155.295768][   T36] audit: type=1400 audit(1759241096.560:8116): avc:  denied  { ioctl } for  pid=5311 comm="syz.3.2014" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31682 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  155.329595][   T36] audit: type=1400 audit(1759241096.580:8117): avc:  denied  { read write } for  pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  155.379802][   T36] audit: type=1400 audit(1759241096.580:8118): avc:  denied  { read write open } for  pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  155.413840][   T36] audit: type=1400 audit(1759241096.580:8119): avc:  denied  { ioctl } for  pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  155.452833][   T36] audit: type=1400 audit(1759241096.650:8120): avc:  denied  { create } for  pid=5313 comm="syz.3.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  155.695084][ T5329] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2021'.
[  156.615844][ T5385] 9pnet_fd: Insufficient options for proto=fd
[  157.000082][ T5404] netlink: 'syz.1.2053': attribute type 1 has an invalid length.
[  157.596841][ T5447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5447 comm=syz.1.2073
[  157.610930][ T5447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5447 comm=syz.1.2073
[  157.820701][ T5468] __nla_validate_parse: 5 callbacks suppressed
[  157.820715][ T5468] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2081'.
[  158.016761][ T5480] netlink: 'syz.4.2087': attribute type 1 has an invalid length.
[  158.031755][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'.
[  158.123388][ T5484] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[  158.184661][ T5488] bpf: Bad value for 'gid'
[  158.228597][ T5488] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.266418][ T5488] syzkaller0: entered promiscuous mode
[  158.272003][ T5488] syzkaller0: entered allmulticast mode
[  158.277848][ T5488] tipc: Resetting bearer <eth:syzkaller0>
[  158.302677][ T5490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  158.302717][ T5490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:948
[  158.351906][    T9] rust_binder: 5489: removing orphan mapping 0:8
[  158.472504][ T5498] rust_binder: Write failure EFAULT in pid:951
[  158.485330][ T5498] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2096'.
[  158.531785][  T333] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  158.676357][ T5507] netlink: 'syz.1.2100': attribute type 1 has an invalid length.
[  158.687126][ T5507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'.
[  158.701792][  T333] usb 5-1: device descriptor read/64, error -71
[  158.753676][ T5510] __vm_enough_memory: pid: 5510, comm: syz.3.2099, bytes: 18014402804453376 not enough memory for the allocation
[  158.822192][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.829273][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.841775][ T5505] bridge_slave_0: entered allmulticast mode
[  158.848306][ T5505] bridge_slave_0: entered promiscuous mode
[  158.856851][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.864587][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.873065][ T5505] bridge_slave_1: entered allmulticast mode
[  158.879500][ T5505] bridge_slave_1: entered promiscuous mode
[  158.941747][  T333] usb 5-1: device descriptor read/64, error -71
[  159.108122][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.115405][ T5505] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.122746][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.129796][ T5505] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.191753][  T333] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  159.222131][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.239716][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.292919][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.300010][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.348978][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.356125][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.361780][  T333] usb 5-1: device descriptor read/64, error -71
[  159.548194][ T5505] veth0_vlan: entered promiscuous mode
[  159.605026][ T5505] veth1_macvtap: entered promiscuous mode
[  159.621768][  T333] usb 5-1: device descriptor read/64, error -71
[  159.742304][  T333] usb usb5-port1: attempt power cycle
[  160.040731][ T5553] batadv_slave_1: entered promiscuous mode
[  160.059563][ T5552] batadv_slave_1: left promiscuous mode
[  160.092151][  T333] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  160.103700][   T36] kauditd_printk_skb: 780 callbacks suppressed
[  160.103719][   T36] audit: type=1400 audit(1759241101.550:8901): avc:  denied  { create } for  pid=5554 comm="syz.3.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  160.172707][  T333] usb 5-1: device descriptor read/8, error -71
[  160.182094][   T36] audit: type=1400 audit(1759241101.580:8902): avc:  denied  { name_bind } for  pid=5547 comm="syz.0.2113" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  160.230508][   T36] audit: type=1400 audit(1759241101.580:8903): avc:  denied  { node_bind } for  pid=5547 comm="syz.0.2113" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  160.262638][ T5559] SELinux: security_context_str_to_sid () failed with errno=-22
[  160.271762][   T36] audit: type=1400 audit(1759241101.580:8904): avc:  denied  { create } for  pid=5554 comm="syz.3.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  160.301776][   T36] audit: type=1400 audit(1759241101.580:8905): avc:  denied  { write } for  pid=5554 comm="syz.3.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  160.323006][   T36] audit: type=1400 audit(1759241101.580:8906): avc:  denied  { read } for  pid=5554 comm="syz.3.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  160.353828][  T333] usb 5-1: device descriptor read/8, error -71
[  160.387724][   T36] audit: type=1400 audit(1759241101.580:8907): avc:  denied  { read } for  pid=5554 comm="syz.3.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  160.418812][   T36] audit: type=1400 audit(1759241101.580:8908): avc:  denied  { write } for  pid=5554 comm="syz.3.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  160.439356][   T36] audit: type=1400 audit(1759241101.600:8909): avc:  denied  { read write } for  pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  160.476773][   T36] audit: type=1400 audit(1759241101.600:8910): avc:  denied  { read write open } for  pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  160.553595][ T5570] netlink: 'syz.1.2121': attribute type 16 has an invalid length.
[  160.561620][ T5570] netlink: 'syz.1.2121': attribute type 2 has an invalid length.
[  160.570859][ T5570] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.2121'.
[  160.591795][  T333] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  160.614690][  T333] usb 5-1: device descriptor read/8, error -71
[  160.661016][ T5575] netlink: 'syz.1.2123': attribute type 1 has an invalid length.
[  160.668962][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2123'.
[  160.731846][   T45] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  160.746324][  T333] usb 5-1: device descriptor read/8, error -71
[  160.862274][  T333] usb usb5-port1: unable to enumerate USB device
[  160.877822][ T5586] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  160.878355][ T5586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8
[  160.894927][   T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.914793][   T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.927327][   T45] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  160.938158][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  160.948521][   T45] usb 4-1: SerialNumber: syz
[  161.168176][ T5488] tipc: Resetting bearer <eth:syzkaller0>
[  161.190805][ T5488] tipc: Disabling bearer <eth:syzkaller0>
[  161.327392][ T5601] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2132'.
[  161.374551][   T61] Bluetooth: hci0: Frame reassembly failed (-84)
[  161.381090][   T61] Bluetooth: hci0: Frame reassembly failed (-84)
[  161.391946][   T61] Bluetooth: hci0: Frame reassembly failed (-84)
[  161.845452][ T5610] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  161.847611][ T5610] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  161.860654][ T5610] batadv_slave_1: entered promiscuous mode
[  161.879419][ T5609] batadv_slave_1: left promiscuous mode
[  162.187330][ T5624] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2143'.
[  162.302315][ T5630] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  162.303703][ T5630] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.366807][ T5633] netlink: 'syz.1.2147': attribute type 1 has an invalid length.
[  162.381200][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'.
[  162.552843][ T5651] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2153'.
[  162.670803][ T5659] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  162.674619][ T5659] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.767095][ T5662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=5662 comm=syz.0.2157
[  162.949984][ T5665] rust_binder: 5664 RLIMIT_NICE not set
[  162.996090][ T5667] netlink: 'syz.1.2159': attribute type 1 has an invalid length.
[  163.009786][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2159'.
[  163.161098][ T5676] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2162'.
[  163.428394][   T45] usb 4-1: 0:2 : does not exist
[  163.446896][   T45] usb 4-1: USB disconnect, device number 46
[  163.452093][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  163.453001][ T2175] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  163.634331][  T499] udevd[499]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  163.791921][ T5699] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2171'.
[  163.855693][ T5702] netlink: 'syz.3.2175': attribute type 1 has an invalid length.
[  163.891757][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2175'.
[  163.990450][ T5708] rust_binder: 5708 RLIMIT_NICE not set
[  164.142576][   T45] rust_binder: 5704: removing orphan mapping 0:1144
[  164.458012][ T5738] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2186'.
[  164.481777][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  164.538082][ T5742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=5742 comm=syz.4.2187
[  164.641743][    T9] usb 1-1: Using ep0 maxpacket: 16
[  164.650740][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.671739][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.685106][    T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  164.701745][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.722974][    T9] usb 1-1: config 0 descriptor??
[  165.137771][   T36] kauditd_printk_skb: 606 callbacks suppressed
[  165.137792][   T36] audit: type=1400 audit(1759241106.580:9517): avc:  denied  { read } for  pid=5716 comm="syz.0.2180" dev="nsfs" ino=4026532402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  165.181097][    T9] konepure 0003:1E7D:2DB4.0019: unknown main item tag 0x0
[  165.204347][    T9] konepure 0003:1E7D:2DB4.0019: unknown main item tag 0x0
[  165.217017][   T36] audit: type=1400 audit(1759241106.580:9518): avc:  denied  { read open } for  pid=5716 comm="syz.0.2180" path="net:[4026532402]" dev="nsfs" ino=4026532402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  165.240991][    T9] konepure 0003:1E7D:2DB4.0019: unknown main item tag 0x0
[  165.253650][    T9] konepure 0003:1E7D:2DB4.0019: unknown main item tag 0x0
[  165.273108][    T9] konepure 0003:1E7D:2DB4.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0
[  165.285680][   T36] audit: type=1400 audit(1759241106.580:9519): avc:  denied  { create } for  pid=5716 comm="syz.0.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  165.320930][    T9] usb 1-1: USB disconnect, device number 2
[  165.349851][   T36] audit: type=1400 audit(1759241106.590:9520): avc:  denied  { create } for  pid=5779 comm="syz.1.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  165.413950][   T36] audit: type=1400 audit(1759241106.620:9521): avc:  denied  { ioctl } for  pid=5716 comm="syz.0.2180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  165.521795][   T36] audit: type=1400 audit(1759241106.620:9522): avc:  denied  { ioctl } for  pid=5716 comm="syz.0.2180" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  165.583438][ T5790] fido_id[5790]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  165.601768][   T36] audit: type=1400 audit(1759241106.620:9523): avc:  denied  { bind } for  pid=5716 comm="syz.0.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  165.652596][   T36] audit: type=1400 audit(1759241106.620:9524): avc:  denied  { create } for  pid=5716 comm="syz.0.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  165.710661][   T36] audit: type=1400 audit(1759241106.650:9525): avc:  denied  { mounton } for  pid=5777 comm="syz.4.2203" path="/297/file1" dev="tmpfs" ino=1623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  165.738454][ T5801] 9pnet_virtio: no channels available for device syz
[  165.765670][   T36] audit: type=1400 audit(1759241106.660:9526): avc:  denied  { read write } for  pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  165.929017][ T5809] overlayfs: failed to clone upperpath
[  165.997544][ T5811] rust_binder: Write failure EFAULT in pid:55
[  166.061790][    T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  166.271741][    T9] usb 4-1: Using ep0 maxpacket: 8
[  166.287767][    T9] usb 4-1: config index 0 descriptor too short (expected 19222, got 18)
[  166.326860][    T9] usb 4-1: config 28 has too many interfaces: 241, using maximum allowed: 32
[  166.349074][    T9] usb 4-1: config 28 has 1 interface, different from the descriptor's value: 241
[  166.363402][    T9] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=62.0d
[  166.398824][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.421744][    T9] usb 4-1: Product: syz
[  166.438486][    T9] usb 4-1: Manufacturer: syz
[  166.447615][    T9] usb 4-1: SerialNumber: syz
[  166.692228][    T9] usb 4-1: USB disconnect, device number 47
[  167.487510][ T5878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34578 sclass=netlink_tcpdiag_socket pid=5878 comm=syz.3.2247
[  167.828215][ T5900] netlink: 'syz.3.2256': attribute type 16 has an invalid length.
[  167.836641][ T5900] netlink: 'syz.3.2256': attribute type 2 has an invalid length.
[  167.846111][ T5900] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.2256'.
[  168.096085][ T5909] netlink: 'syz.4.2262': attribute type 1 has an invalid length.
[  168.122947][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2262'.
[  168.411521][ T5924] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  168.598521][ T5939] netlink: 'syz.0.2272': attribute type 1 has an invalid length.
[  168.612932][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'.
[  168.667936][ T5941] netlink: 'syz.0.2274': attribute type 16 has an invalid length.
[  168.675940][ T5941] netlink: 'syz.0.2274': attribute type 2 has an invalid length.
[  168.684686][ T5941] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.2274'.
[  168.996249][ T5955] cgroup: subsys name conflicts with all
[  169.073397][ T5957] netlink: 'syz.0.2282': attribute type 10 has an invalid length.
[  169.103660][ T5957] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2282'.
[  169.193080][ T5963] netlink: 'syz.3.2283': attribute type 1 has an invalid length.
[  169.221807][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'.
[  169.286930][ T5965] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  169.550442][ T5980] netlink: 'syz.0.2289': attribute type 16 has an invalid length.
[  169.552636][ T5976] bridge0: port 3(syz_tun) entered disabled state
[  169.558433][ T5980] netlink: 'syz.0.2289': attribute type 2 has an invalid length.
[  169.574626][ T5976] syz_tun (unregistering): left allmulticast mode
[  169.582033][ T5976] syz_tun (unregistering): left promiscuous mode
[  169.588471][ T5980] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.2289'.
[  169.598115][ T5976] bridge0: port 3(syz_tun) entered disabled state
[  169.662538][   T61] Bluetooth: hci0: Frame reassembly failed (-84)
[  170.216600][   T36] kauditd_printk_skb: 560 callbacks suppressed
[  170.216620][   T36] audit: type=1400 audit(1759241111.660:10087): avc:  denied  { read write } for  pid=1881 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  170.248186][   T36] audit: type=1400 audit(1759241111.660:10088): avc:  denied  { read write open } for  pid=1881 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  170.274164][   T36] audit: type=1400 audit(1759241111.660:10089): avc:  denied  { ioctl } for  pid=1881 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  170.275345][ T5994] netlink: 'syz.4.2295': attribute type 22 has an invalid length.
[  170.301218][   T36] audit: type=1400 audit(1759241111.690:10090): avc:  denied  { create } for  pid=5993 comm="syz.4.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  170.329340][   T36] audit: type=1400 audit(1759241111.690:10091): avc:  denied  { write } for  pid=5993 comm="syz.4.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  170.351818][   T36] audit: type=1400 audit(1759241111.690:10092): avc:  denied  { create } for  pid=5993 comm="syz.4.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  170.372372][   T36] audit: type=1400 audit(1759241111.690:10093): avc:  denied  { connect } for  pid=5993 comm="syz.4.2295" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  170.398597][   T36] audit: type=1400 audit(1759241111.690:10094): avc:  denied  { setopt } for  pid=5993 comm="syz.4.2295" laddr=fe80::2c lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  170.423225][   T36] audit: type=1400 audit(1759241111.690:10095): avc:  denied  { setopt } for  pid=5993 comm="syz.4.2295" laddr=fe80::2c lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  170.446891][   T36] audit: type=1400 audit(1759241111.700:10096): avc:  denied  { create } for  pid=5993 comm="syz.4.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  170.483679][ T6000] netlink: 'syz.4.2297': attribute type 1 has an invalid length.
[  170.501269][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'.
[  170.578404][ T6009] netlink: 'syz.1.2301': attribute type 16 has an invalid length.
[  170.586592][ T6009] netlink: 'syz.1.2301': attribute type 2 has an invalid length.
[  170.621763][ T6009] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.2301'.
[  170.708187][ T6014] rust_binder: 1036: no such ref 0
SYZFAIL: posix_spawnp failed
 (errno 2: No such file or directory)
[  171.055293][   T61] bridge_slave_1: left allmulticast mode
[  171.060993][   T61] bridge_slave_1: left promiscuous mode
[  171.068164][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.082282][   T61] bridge_slave_0: left allmulticast mode
[  171.087959][   T61] bridge_slave_0: left promiscuous mode
[  171.101826][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.245480][   T61] tipc: Disabling bearer <udp:syz2>
[  171.250805][   T61] tipc: Disabling bearer <udp:syz0>
[  171.257351][   T61] tipc: Left network mode
[  171.272851][   T61] veth1_macvtap: left promiscuous mode
[  171.278394][   T61] veth0_vlan: left promiscuous mode
[  171.692014][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  171.692011][ T2175] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  171.784348][   T61] bridge_slave_1: left allmulticast mode
[  171.790056][   T61] bridge_slave_1: left promiscuous mode
[  171.797051][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.805765][   T61] bridge_slave_0: left allmulticast mode
[  171.811448][   T61] bridge_slave_0: left promiscuous mode
[  171.818565][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.944922][   T61] veth1_macvtap: left promiscuous mode
[  171.950445][   T61] veth0_vlan: left promiscuous mode