last executing test programs:

58.079577488s ago: executing program 3 (id=469):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d00)={0x34, &(0x7f0000000ac0)={0x0, 0x7, 0x21, "c2a63a49ecae9abe5d83c1d6e4f041c5cad9db3e9e124bd20f7ce42c5587ca3b7e"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000b80)={0x20, 0x0, 0xc1, {0xbf, "bf1edb63943fb7f3c40e8598249e8ca4adb27f4c9ba7e957f8dc53e4c82fd01ed732a97fc790a56c9066f363786eaf2d5b56e76f427566facca02cf4494c6aa8d19fd986347ff17d8340edcccfa9e550b35d907e8090183ab05220b5b14e21f278427556399274717be05e13a4629828b165d8ab603c9f873b62b52a6eb8d92f4f078e6ec0de93e6ac635a8e48b65e986bd29c1eb3a7ee21129a2a8ecb431ced81f09894b418b6fa7ebcd87980fcfd889ae1b2666eb19cc61bd46bf7dadaeb"}}, &(0x7f0000000c80)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000cc0)={0x20, 0x0, 0x1, 0xdf}})
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000340)=0x1)
socket(0x80000000000000a, 0x2, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x5}, 0x0)

56.662809326s ago: executing program 3 (id=502):
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) (async)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x449) (async)
r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x80000006)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async)
r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
write$binfmt_elf64(r5, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x82, 0x1, 0x2, 0x3, 0xfffffffffffffffc, 0x3, 0x3e, 0x5, 0x100, 0x40, 0x2001df, 0x0, 0x3e, 0x38, 0x0, 0x7, 0x2, 0x1}}, 0x40) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) (async)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r6}, @flat=@binder={0x73622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

56.552246818s ago: executing program 3 (id=503):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
tee(0xffffffffffffffff, r1, 0x7fff, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x45002800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4048010}, 0x8054)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r3, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r7, 0x4004556b, 0x1000020050)
prctl$PR_SET_VMA(0x2a, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r9=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000200)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r9}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xea}]}]}, 0x2c}], 0x1}, 0xcc000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x1, 0x100000, 0x3c}, @flat=@binder={0x73622a85, 0x100, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0})

56.417244171s ago: executing program 3 (id=507):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x101402, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1a, &(0x7f0000000440)={[{@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x2005048, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
accept4(r1, 0x0, &(0x7f0000000200), 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0)
syz_open_procfs(0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc791989000000"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x42}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

56.312270553s ago: executing program 3 (id=509):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r2, &(0x7f0000000600)=""/161, 0xa1, 0x40)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x2, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_opts(r5, 0x0, 0x19, 0x0, 0x0)
io_setup(0x8, &(0x7f00000000c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x7}])
io_getevents(r6, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000180))

56.301550423s ago: executing program 3 (id=512):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wg1\x00'})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000106"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = syz_usb_connect$cdc_ecm(0x3, 0x77, &(0x7f0000000580)={{0x12, 0x1, 0x5d85ff0319dbee02, 0x2, 0x0, 0x0, 0xaf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x4, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "bf42db37"}, {0x5, 0x24, 0x0, 0x80b}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9953, 0xa, 0x38}, [@obex={0x5, 0x24, 0x15, 0xc}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x19}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0xf001, 0xe0, 0x3, 0x81, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4f, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xff, 0xd, 0xfe}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0x3, 0x4, 0xd, 0x40, 0x4}, 0xc, &(0x7f0000000640)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x6, 0x100}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x380a}}, {0xb2, &(0x7f0000000700)=@string={0xb2, 0x3, "123f0bac43db0f9040e2a60baf7e51c6acc8f6b5b5523fd9217b9e47a84eff07e328dbb41f3e23f596e609cf39430224b0e043c5cc16c1a46526102bc75ed28e144ea5020f2b013a6af33e3c73ee939c9e91b84726b8dc4daab53f1bcb20d35b8b2290efcadfbe84fea11f775ed09c8cf87c30f2df0d9e4d7fa5c69c2709681ae137800f0d3d4dcbcead294344f3ea595d2d49bebb376a6e5da15400db9f620e351fe8ad5699fa89d0e04547daae279c"}}]})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000040)={0x14, &(0x7f0000000280)={0x40, 0x1, 0x84, {0x84, 0x3, "a5827e95999f4ec18925158c2a79bef2555595801602b20424431ed9e54fbbf5a96584dc9e6eab40c7dfa0e588c5fd04f76edd6fdb7a971768494b27f30653a03a9058b3369fdf668f47f895f855cf1cbf156f38e8d0effb8406ff5c6f77b2cbeb236a5a8c94df04cd167b5b2294cdc8cdb1888b8d9eba516d2adff382dd9cfcbb8d"}}, &(0x7f0000000340)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "14da6c676f10dd51ec23af6692b7a698e994aac9fa4f1d9c921d9a18367bda66dcfbeeecbba2da8d7bd6467c0eae08959124593c1c89f6a9fb053c1f1bb7e1aa67cb1737d33b713335101ee307d0c684276615b9cb9905be6880247429d5f86df137818c0a17620a9a06ac822ba4f280a486de416d021185f91c81f261b29dcd2384c89e46578bc1ef2c0f8c2227b52355d3f9b06eba7f9d7452ffa426"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000080)={0x0, 0x18, 0x10, "7c155a48f1fe04159a61f42c6ea9e7c0"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000001c0)={0x20, 0x81, 0x1, "dc"}, &(0x7f0000000200)={0x20, 0x82, 0x3, "2689bb"}, &(0x7f0000000400)={0x20, 0x83, 0x2, '7\''}, &(0x7f0000000480)={0x20, 0x84, 0x1, "eb"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "f828af"}})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0800000000000000f2000040"])
close_range(r3, 0xffffffffffffffff, 0x0)

56.255564764s ago: executing program 32 (id=512):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wg1\x00'})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000106"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = syz_usb_connect$cdc_ecm(0x3, 0x77, &(0x7f0000000580)={{0x12, 0x1, 0x5d85ff0319dbee02, 0x2, 0x0, 0x0, 0xaf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x4, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "bf42db37"}, {0x5, 0x24, 0x0, 0x80b}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9953, 0xa, 0x38}, [@obex={0x5, 0x24, 0x15, 0xc}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x19}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0xf001, 0xe0, 0x3, 0x81, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4f, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xff, 0xd, 0xfe}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0x3, 0x4, 0xd, 0x40, 0x4}, 0xc, &(0x7f0000000640)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x6, 0x100}]}, 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x380a}}, {0xb2, &(0x7f0000000700)=@string={0xb2, 0x3, "123f0bac43db0f9040e2a60baf7e51c6acc8f6b5b5523fd9217b9e47a84eff07e328dbb41f3e23f596e609cf39430224b0e043c5cc16c1a46526102bc75ed28e144ea5020f2b013a6af33e3c73ee939c9e91b84726b8dc4daab53f1bcb20d35b8b2290efcadfbe84fea11f775ed09c8cf87c30f2df0d9e4d7fa5c69c2709681ae137800f0d3d4dcbcead294344f3ea595d2d49bebb376a6e5da15400db9f620e351fe8ad5699fa89d0e04547daae279c"}}]})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000040)={0x14, &(0x7f0000000280)={0x40, 0x1, 0x84, {0x84, 0x3, "a5827e95999f4ec18925158c2a79bef2555595801602b20424431ed9e54fbbf5a96584dc9e6eab40c7dfa0e588c5fd04f76edd6fdb7a971768494b27f30653a03a9058b3369fdf668f47f895f855cf1cbf156f38e8d0effb8406ff5c6f77b2cbeb236a5a8c94df04cd167b5b2294cdc8cdb1888b8d9eba516d2adff382dd9cfcbb8d"}}, &(0x7f0000000340)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "14da6c676f10dd51ec23af6692b7a698e994aac9fa4f1d9c921d9a18367bda66dcfbeeecbba2da8d7bd6467c0eae08959124593c1c89f6a9fb053c1f1bb7e1aa67cb1737d33b713335101ee307d0c684276615b9cb9905be6880247429d5f86df137818c0a17620a9a06ac822ba4f280a486de416d021185f91c81f261b29dcd2384c89e46578bc1ef2c0f8c2227b52355d3f9b06eba7f9d7452ffa426"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000080)={0x0, 0x18, 0x10, "7c155a48f1fe04159a61f42c6ea9e7c0"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000001c0)={0x20, 0x81, 0x1, "dc"}, &(0x7f0000000200)={0x20, 0x82, 0x3, "2689bb"}, &(0x7f0000000400)={0x20, 0x83, 0x2, '7\''}, &(0x7f0000000480)={0x20, 0x84, 0x1, "eb"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "f828af"}})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0800000000000000f2000040"])
close_range(r3, 0xffffffffffffffff, 0x0)

55.529534708s ago: executing program 4 (id=513):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000007000000002400000000000000290000003200000000000000000000000000ffff"], 0x40}, 0x6048090)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x122, 0x0, 0x32feb97c}]})
setrlimit(0xd, &(0x7f0000000000)={0x66e, 0x96ed})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415603, 0x3})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8c001}, 0x4000054)
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40011}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, r7, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "e762462bdbb03c57232ef9bb367284"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4801)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00')

55.283247892s ago: executing program 4 (id=537):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x802, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x76)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300020f000000fdffffffffdbdf2505000600002000000a004e2300000008fe8000000000000000000000000000aa000200000000000002000100000000000700fb03fffffffe05000500000000000a004e220000000c0000000000000000000000000000000109000000000000000100"], 0x78}, 0x1, 0x7}, 0x24000820)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

55.281413552s ago: executing program 4 (id=539):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)
pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

55.243166023s ago: executing program 4 (id=541):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
madvise(&(0x7f0000bd1000/0x1000)=nil, 0x1000, 0x65) (async)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x3, 0x4) (async)
bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async)
listen(r3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40000000001)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

55.120217976s ago: executing program 4 (id=542):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0x40087707, 0x2)
sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x10cc}}, 0x40)
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0xfffffffffffffd14)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket(0x11, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket(0x28, 0x800, 0x403)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x13, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00128008002100", @ANYRES32=r4, @ANYBLOB="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f200000020010680190175800800e6000345067253217cc248d62a019a7569a49239ea86a4a9f1d82ba94966e3000600998c6bf697b1a8dda7969f040cb4b976fcdbf2dcf3a6751522df8335109348af45b5b3103cfca4d99ce8", @ANYRES32, @ANYBLOB="897a22072687e16fdfb849e8dd3bce220a0ca5a0217c43a621fc12ea0f434990fb1debcbb8e87383381132856180c51cf041d37410e5c77c74341ca2fb3527623d0d2d2bc75c54319aadb5a0bf0789c47e56d4a00a4d5513d73c8f790a8c6205fc5adf3ece36d8bf098573c2ec8b3967135a4bcb4b37bbfc8f6f11a6125f87dedb659579fb127e221eb9a41ce6664ff427973789c92dbadbc1c26802fd2a7e6d315239617664002580c0ff5b800400388031ee704bf2205ac750d21a6c2f2dfbe2ec632ee97444c6e5508eecb0d002fed7244664b012fdb29ccd21c6e14a7fd67239cda477572049ea051a00e88008009900b01e7762650b500b0d4b55fe2c2c47524e16777aa44aa70a4db9ca48362a8a98c251c043a3662efbd4b60ce002ae2c3bc0bc1c9763c5f5d9ba3272bb9dab643d55bd3406224b4d589da44424c1e1cda70d50d5fa425d02efde27e2e591c50b3556ca8f1d01b8e5de7a28d8007f93917518f5ff253bb6d08e856a19cd6f80b505d57a4f88d5de5b5c2827ea19d5b3071c81bcf9f011dd82b75ab083ad8d89ddbc599360a7b5f76d559b7971c7be80427e25ef4cde6380074c063b9039fc0912d2e4d8579a19ae17669638", @ANYRES32=0x0, @ANYRESOCT=r7], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x804)
bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x1, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="100d0081bd70388836c0fb8db950ad83161fcb25"], 0x10}], 0x1, 0x0, 0x0, 0x20000001}, 0x20040051)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$tipc(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000481a}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010029fd70000800f0ff4400"/22], 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x480c3)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0090000000000000000000", @ANYRES16=r9, @ANYBLOB="020029bd7000fddbdf250c0000000c0099004a00000036000000110007009c0735a5246e2484ee684b2db100000008003700020000000800090005ac0f000500080003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004044}, 0x2044010)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38)
rt_tgsigqueueinfo(r1, 0x0, 0x1c, &(0x7f0000000140)={0x1a, 0x4, 0x27})

55.098775076s ago: executing program 33 (id=542):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0x40087707, 0x2)
sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x10cc}}, 0x40)
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$int_out(r3, 0x5460, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0xfffffffffffffd14)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket(0x11, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket(0x28, 0x800, 0x403)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x13, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00128008002100", @ANYRES32=r4, @ANYBLOB="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f200000020010680190175800800e6000345067253217cc248d62a019a7569a49239ea86a4a9f1d82ba94966e3000600998c6bf697b1a8dda7969f040cb4b976fcdbf2dcf3a6751522df8335109348af45b5b3103cfca4d99ce8", @ANYRES32, @ANYBLOB="897a22072687e16fdfb849e8dd3bce220a0ca5a0217c43a621fc12ea0f434990fb1debcbb8e87383381132856180c51cf041d37410e5c77c74341ca2fb3527623d0d2d2bc75c54319aadb5a0bf0789c47e56d4a00a4d5513d73c8f790a8c6205fc5adf3ece36d8bf098573c2ec8b3967135a4bcb4b37bbfc8f6f11a6125f87dedb659579fb127e221eb9a41ce6664ff427973789c92dbadbc1c26802fd2a7e6d315239617664002580c0ff5b800400388031ee704bf2205ac750d21a6c2f2dfbe2ec632ee97444c6e5508eecb0d002fed7244664b012fdb29ccd21c6e14a7fd67239cda477572049ea051a00e88008009900b01e7762650b500b0d4b55fe2c2c47524e16777aa44aa70a4db9ca48362a8a98c251c043a3662efbd4b60ce002ae2c3bc0bc1c9763c5f5d9ba3272bb9dab643d55bd3406224b4d589da44424c1e1cda70d50d5fa425d02efde27e2e591c50b3556ca8f1d01b8e5de7a28d8007f93917518f5ff253bb6d08e856a19cd6f80b505d57a4f88d5de5b5c2827ea19d5b3071c81bcf9f011dd82b75ab083ad8d89ddbc599360a7b5f76d559b7971c7be80427e25ef4cde6380074c063b9039fc0912d2e4d8579a19ae17669638", @ANYRES32=0x0, @ANYRESOCT=r7], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x804)
bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x1, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="100d0081bd70388836c0fb8db950ad83161fcb25"], 0x10}], 0x1, 0x0, 0x0, 0x20000001}, 0x20040051)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$tipc(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000481a}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010029fd70000800f0ff4400"/22], 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x480c3)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0090000000000000000000", @ANYRES16=r9, @ANYBLOB="020029bd7000fddbdf250c0000000c0099004a00000036000000110007009c0735a5246e2484ee684b2db100000008003700020000000800090005ac0f000500080003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004044}, 0x2044010)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38)
rt_tgsigqueueinfo(r1, 0x0, 0x1c, &(0x7f0000000140)={0x1a, 0x4, 0x27})

19.421812495s ago: executing program 1 (id=1225):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40288d0}, 0x2000c005)
recvmmsg(r1, &(0x7f0000000340), 0x0, 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000003a)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000140))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0xfffa, 0x3, 0x1c, 0x5, 0x2, 0x7, 0x2, 0xf9, 0x3, 0x2, 0x90, 0x8}, {0x0, 0x80, 0x45, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0x1, 0x0, 0x7f, 0x2}, {0x9, 0x5, 0x1, 0x19, 0x2, 0xd, 0x8, 0x8, 0xff, 0x6, 0x4, 0x3, 0x100}]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0xd94c, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x1, 0x7fffffff, 0x100000000004, 0x0, 0x0, 0xffffffffffffffff, 0x39], 0x80a0000, 0x200001})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r5, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_genetlink_get_family_id$wireguard(0xfffffffffffffffc, 0xffffffffffffffff)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x80003, 0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x18c82, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd2a, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0xff, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x44009004)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000e7ff"])
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r6 = eventfd(0x4)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r6})
r7 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_stats})

19.417738255s ago: executing program 1 (id=1226):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x198)
r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000ac0)=[@free_buffer={0x40086303, r2}, @enter_looper], 0x54, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f43e1"})
r3 = socket(0x10, 0x3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r3)
sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x54, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x4, 0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000054)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

19.416539196s ago: executing program 1 (id=1227):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0xffffffff, 0xd66}}) (async)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) (async)
sendto$inet6(r0, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) (async)
writev(r0, &(0x7f0000001180)=[{&(0x7f0000001240)="06", 0x1}], 0x1) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x44da2000) (async)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
vmsplice(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)="61c9a7314e1b5407da55da9024fcfec733443b6c60fea3a466648e536beea22c796f77429360ecee52867874c7fb11e5ec91351d8d1b4efddd3915457fce64ccfab4c27546b12c3a1afa6ec8e5634f27260204a998724130e4ae1e8691e9521e210006c8102e7486cd42e7034ced2478a55256275349aa6b5fb6863ad64ea09e4baa362b3149d1fd491b86b08e16c9e14d1caf8b76138e0a1153e341bfbf8d58e82f090aadab7088cb0251165bb9be20a76d94e0dcb582895de84d55638331f9f6ad2220c76d1fc703756ecf", 0xcc}, {&(0x7f00000001c0)="abd938a6ab3df315dbcba7811caaba14a7293d79ab262814d38f70d0d4639c9983416e68804a23fefb3b49ce16034ae887c63e70d9a7f7bfde30722d21babdf0badd9a5c412d92ca1b3df2fd338a31e1cef67faf2c5d6061663c790db4c42d0c87b541004ecdc13ae9ba67b34576b54434253afd02c7c35c71201c676af7500ee00c2fa65d87927479eeeaa58018fd04d080a244f18958ca373b64aca4f03c1eafe917b46defb28ca508f589861bacea39534af2cbf71508f11e4ca3e9417baf77cc37960ab61e180db70763cbbd70145219d87e926ce39b56f8183f1643d83be7317bc529dae21e5bfe5e41", 0xec}, {&(0x7f00000002c0)="1d49bce2605b361a748c068cb4d65fb5a5249ef94bea995fc2cfc76483fdfc761d37b9471e1ccc5061f8fc", 0x2b}, {&(0x7f0000000300)="5813739c1c9b3843aa3f93c6af89a59196b3558ca52c2057283939d5a133b28de304ca7b86cf6ba2", 0x28}, {&(0x7f0000000400)="5353a0ad5da50c63ca9d580dcae0c5e17ecaef22004b4b49a75a7957bd156cc1ac6644ee6890e8768ec5996cacb7c81af9f54f86a68f802182c3eaa445db06d18eba14e993b8931d6fa9b461f478db994ecec97ac97d16c43814bb0fa4f02cfc309ccab817929269981f605a47cd", 0x6e}, {&(0x7f0000000480)="2c816a51812d91d7ca89687fe64612e62b339123b7a648aa2b8fadddbbe358330725cf492e0d973a541d821704ad137f05179ed10095f65de83744d6584f68eb9de5618db65da4c39b1309b3a4e086d3428dc78b250053f0cfd4257d336a5d0beb4d141114c5576b5368d295305b5b724cdf481de7e66c5bcb26a5e5ef1ac85ec8009f004b55d3fcfa390dfc0dabc297beef88151115fdc028a9ef3310763472c9c26f30fa92b83c0343044abdf6a1ad264c0cccba5ff372e5d4247de52940501c371852042a6cb7fd2d19b6d0b5c35543c3668af07808e7c133c44c3d9be4", 0xdf}], 0x6, 0x2) (async)
socket$netlink(0x10, 0x3, 0x5) (async)
readv(r2, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/95, 0x5f}, {&(0x7f0000000780)=""/183, 0xb7}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000840)=""/147, 0x93}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)}], 0x9) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x40000, 0x824, 0xde4f, 0x101, 0x0, 0x8, 0x3, 0x1ff, 0x1, 0x5, 0x1c, 0x1a3, 0x0, 0xffffffffffffffff}}) (async)
futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

19.343067977s ago: executing program 1 (id=1231):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000000c0)={{r0}, "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"})
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c2600c, 0x12, r0, 0x22fb5000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000001180)=0x2fdd)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x70b5664865acab50)
pipe2$9p(0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x53}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000)

19.342740187s ago: executing program 1 (id=1232):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
write$cgroup_pid(r1, &(0x7f0000000000), 0x12)
sendfile(r0, r0, 0x0, 0x7ffff000)
r2 = gettid()
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/time\x00')
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async)
write$cgroup_pid(r1, &(0x7f0000000000), 0x12) (async)
sendfile(r0, r0, 0x0, 0x7ffff000) (async)
gettid() (async)
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/time\x00') (async)

19.242856819s ago: executing program 1 (id=1237):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d00)={0x34, &(0x7f0000000ac0)={0x0, 0x7, 0x1e, "c2a63a49ecae9abe5d83c1d6e4f041c5cad9db3e9e124bd20f7ce42c5587"}, 0x0, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000b80)={0x20, 0x0, 0x62, {0x60, "bf1edb63943fb7f3c40e8598249e8ca4adb27f4c9ba7e957f8dc53e4c82fd01ed732a97fc790a56c9066f363786eaf2d5b56e76f427566facca02cf4494c6aa8d19fd986347ff17d8340edcccfa9e550b35d907e8090183ab05220b5b14e21f2"}}, 0x0, &(0x7f0000000cc0)={0x20, 0x0, 0x1, 0xdf}})
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000340)=0x1)
socket(0x80000000000000a, 0x2, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x5}, 0x0)

19.199814449s ago: executing program 34 (id=1237):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d00)={0x34, &(0x7f0000000ac0)={0x0, 0x7, 0x1e, "c2a63a49ecae9abe5d83c1d6e4f041c5cad9db3e9e124bd20f7ce42c5587"}, 0x0, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000b80)={0x20, 0x0, 0x62, {0x60, "bf1edb63943fb7f3c40e8598249e8ca4adb27f4c9ba7e957f8dc53e4c82fd01ed732a97fc790a56c9066f363786eaf2d5b56e76f427566facca02cf4494c6aa8d19fd986347ff17d8340edcccfa9e550b35d907e8090183ab05220b5b14e21f2"}}, 0x0, &(0x7f0000000cc0)={0x20, 0x0, 0x1, 0xdf}})
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000340)=0x1)
socket(0x80000000000000a, 0x2, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x5}, 0x0)

5.400286606s ago: executing program 6 (id=1533):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040))
ioctl$TCSETSF(r0, 0x5457, 0x0) (async)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async)
r2 = socket$can_raw(0x1d, 0x3, 0x1) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r3, 0x0, 0x6, 0x0, &(0x7f0000000240)) (async)
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000080)=0x9, 0x4) (async)
ioprio_set$uid(0x3, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)

5.399248936s ago: executing program 6 (id=1534):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
fcntl$setflags(r3, 0x2, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)={0x68, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x805)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_AIE_ON(r4, 0x7001)
ioctl$SIOCSIFHWADDR(r1, 0x8911, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close(r5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x2d47)
write(r0, &(0x7f0000000400)="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", 0x1f000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
setns(r6, 0x10000000)
r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x531601, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0})
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x3, &(0x7f000050b000/0x2000)=nil, &(0x7f0000741000/0x3000)=nil, 0xf, &(0x7f0000000080)=[{0x0, 0x5, 0x2}], 0x1, 0x2, 0x0, 0x2, 0x3, 0x13})

5.21168481s ago: executing program 6 (id=1539):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0)={<r2=>0x0}, &(0x7f0000000900)=0xc)
sendmmsg$unix(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1400"], 0x18, 0x20040801}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x4084}}], 0x2, 0x4000001)
r3 = syz_open_dev$evdev(0x0, 0xb60, 0x80282)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
dup(0xffffffffffffffff)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8)
pivot_root(0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x5)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
listen(r0, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
connect$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) (async)
sendmmsg$unix(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1400"], 0x18, 0x20040801}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x4084}}], 0x2, 0x4000001) (async)
syz_open_dev$evdev(0x0, 0xb60, 0x80282) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
dup(0xffffffffffffffff) (async)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async)
signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) (async)
pivot_root(0x0, 0x0) (async)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) (async)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x5) (async)
ioctl$TCFLSH(r4, 0x400455c8, 0x0) (async)

5.147774331s ago: executing program 5 (id=1541):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x1000, 0xd, 0x2fae, 0x2}, 0x28, [0x7fff, 0x5, 0x3, 0xd, 0x0, 0x2, 0x23, 0x7, 0x44e, 0x8, 0xf4f2, 0x65, 0xa, 0xa32, 0xcfd, 0xffffff54, 0x5, 0x9, 0x4, 0x9, 0x3, 0x6a, 0x7, 0x6, 0x9000, 0xffffffe1, 0x2, 0xc, 0x8, 0xfffffff9, 0x4, 0x7, 0xfffffffc, 0x885, 0x9, 0x1, 0x9, 0x5, 0xfffffff8, 0xffffffff, 0x0, 0x8, 0x80000001, 0x8, 0xd0b, 0x5, 0x7ff, 0x9, 0x9, 0x0, 0xab, 0x13707275, 0x8bba, 0x1, 0x9, 0x9, 0x3, 0x4, 0x8, 0x4a, 0x3, 0x6, 0x4], [0x5, 0x9, 0x3, 0x7, 0x101, 0xff5, 0x3, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x7, 0xd, 0x0, 0x0, 0x7, 0xe, 0x6, 0x9, 0x1ff, 0x38e, 0x7, 0xccc3, 0x7, 0x8, 0x40000000, 0x72ab, 0x92, 0xfffffff3, 0x10001, 0x1, 0x7fffffff, 0x8, 0xa92f5e2d, 0x7fffffff, 0x4, 0x2, 0xb3, 0x4, 0x300, 0x6, 0xd4b2, 0xffffffff, 0x783e, 0x6, 0x3ff, 0xf4, 0x86, 0x6, 0x2, 0x400, 0x9, 0x5, 0x6, 0xe1, 0x9373, 0x6, 0x1c00, 0x9, 0x7, 0x26d, 0x7ff, 0x3ff], [0x4, 0x7, 0x1, 0x1, 0x4, 0x6, 0x1, 0x4, 0x9, 0x3, 0x0, 0x6, 0xb8f, 0x8, 0x0, 0x1, 0x4, 0x0, 0x9, 0xe6f6, 0x1, 0x80000000, 0x6, 0xfffffbff, 0x6, 0x8, 0x1, 0x1, 0xad27, 0x382, 0xd7d, 0x2, 0x4, 0x1, 0x81, 0x7fffffff, 0xaaa, 0x4, 0x8, 0x2, 0x5, 0x2, 0xc, 0x3, 0x5, 0xf, 0x2, 0x0, 0x1, 0x7, 0x1, 0xfefffffa, 0xfffffc01, 0x2, 0x6, 0x7a, 0x8, 0x401, 0x6, 0xd, 0x2, 0x7ff0, 0x80000000, 0xf], [0x4, 0x5, 0x101, 0x4, 0x4, 0x4, 0xd, 0xa, 0x5701, 0x3, 0x4, 0x0, 0xc, 0x0, 0x8, 0x7, 0x401, 0x101, 0x3, 0x7, 0x8, 0xce6, 0x80, 0x7f, 0x781, 0x80000000, 0x6a, 0x5, 0xea5, 0x8000, 0x2, 0x5, 0x6, 0x0, 0xff, 0xd, 0x3, 0x4, 0x1, 0x1, 0x0, 0x6, 0x5, 0x0, 0x80000001, 0xfa65, 0x10001, 0xffffffff, 0x4, 0x6, 0x2, 0x3, 0x81, 0x1, 0x6, 0xfffffffc, 0x3, 0xd8, 0x5, 0x3097be3d, 0x7f, 0x8, 0x1]}, 0x45c)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2})
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x0)
connect$inet(r2, &(0x7f0000000700)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10)
socket$unix(0x1, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00))
socket$key(0xf, 0x3, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00')
r4 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES16=r3], 0x0)
mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180))
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)='T', 0x1}], 0x1)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.170991759s ago: executing program 6 (id=1559):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00')
socket$inet(0x2, 0x5, 0x106)
pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

2.784819296s ago: executing program 2 (id=1576):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffff9, 0x10001)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x94, 0x0, &(0x7f0000000140)=[@exit_looper, @increfs_done={0x40106308, 0x3}, @increfs_done={0x40106308, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@handle={0x73682a85, 0x28a, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @register_looper], 0x0, 0x0, 0x0})
fcntl$addseals(r2, 0x409, 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffff9, 0x10001) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) (async)
sendfile(r2, r2, 0x0, 0x200) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x94, 0x0, &(0x7f0000000140)=[@exit_looper, @increfs_done={0x40106308, 0x3}, @increfs_done={0x40106308, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@handle={0x73682a85, 0x28a, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @register_looper], 0x0, 0x0, 0x0}) (async)
fcntl$addseals(r2, 0x409, 0x8) (async)

2.770662447s ago: executing program 2 (id=1577):
syz_io_uring_setup(0x5e81, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x1, 0xef}, 0x0, 0x0)
r0 = socket(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x4, 0x2, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x66, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}}}})
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4)
readv(r0, &(0x7f0000003600)=[{&(0x7f0000000880)=""/138, 0x8a}], 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
unshare(0x62040200)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f0008"], 0x24}}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f0000000100), 0x4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0x4020aeb2)
connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
exit(0xffff)
fchdir(r8)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000"], 0xa0}}, 0x0)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000000)='binder\x00', 0x2200892, 0x0)

2.063757331s ago: executing program 5 (id=1586):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xbc, 0x0, &(0x7f0000000a00)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000007c0)={@ptr={0x70742a85, 0x1, &(0x7f00000006c0), 0x0, 0x0, 0x3c}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/70, 0x46, 0x2, 0x2a}, @fda={0x66646185, 0x2, 0x1, 0x36}}, &(0x7f0000000840)={0x0, 0x28, 0x50}}, 0x400}, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x1, &(0x7f0000000880)=""/143, 0x8f, 0x2, 0x32}, @flat=@handle={0x73682a85, 0x100b, 0x3}, @fda={0x66646185, 0x0, 0x9, 0x40}}, &(0x7f00000009c0)={0x0, 0x28, 0x40}}}, @decrefs={0x40046307, 0x2}, @increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', <r3=>0x0, 0x29, 0x7, 0x64, 0x9, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x7800, 0x0, 0x3}})
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1100000015002b01"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0)
syz_open_dev$usbfs(0x0, 0x1ff, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f1e, {0x2, 0x0, @rand_addr=0x64010100}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r7 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x1000, @mcast2, 0x7}, 0x1c)
syz_pidfd_open(0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
r8 = dup3(r1, r0, 0x0)
r9 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
fcntl$addseals(r9, 0x409, 0x8)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x3000000, 0x2010, r9, 0xde7f000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000b00)=[@request_death, @decrefs], 0x0, 0x0, 0x0})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r8)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="08002dbd7000fbdbdf250b00000008003400594a000008002c0009000000080032000700000008003400ff03000005002a0001000000050000000005002d00db070f7008002b00090000000800980a", @ANYRES32=r3, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x4)

2.020373461s ago: executing program 5 (id=1587):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

1.956328872s ago: executing program 5 (id=1588):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0xea7, 0xa)
ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)=0xd3c8)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000003c0)={"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"})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="420fc71d513a0000480fc7aa9e040000460f017b00c4e2499de166430fc732b9800000c00f3235004000000f3048b80c000100000000000f23d80f21f835000000000f23f80f01df0f20c035000000800f22c066bad104ec", 0x58}], 0x1, 0x6c, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.943638613s ago: executing program 0 (id=1590):
ftruncate(0xffffffffffffffff, 0x398a0bdb)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r1, 0x0, 0x0)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000100), 0x9)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x7, 0x5, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0x102, 0x401, 0x5, 0x5, 0x8, [0x80000005, 0x9]}})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5})
getsockopt$inet6_tcp_int(r4, 0x6, 0x2a, 0x0, &(0x7f0000001e80))
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000b4000040"])
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44004)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00')
read$FUSE(r11, &(0x7f00000029c0)={0x2020}, 0x2020)
openat$cgroup_subtree(r11, &(0x7f0000000140), 0x2, 0x0)
close_range(r3, r3, 0x2)

1.922430903s ago: executing program 2 (id=1591):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r2, &(0x7f00000001c0)={0x30000000})
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x100)
setresuid(r3, r3, r3)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000380)={0x1, 0xae, 0xfc29, 0x80000000, 0x7, "9177be902b64fce08dda120b1508f7d2d00965", 0xf7b, 0x3})
setfsuid(0x0)
ioctl$TIOCEXCL(r0, 0x540c)
r4 = socket(0xa, 0x801, 0x0)
getsockopt(r4, 0x0, 0x40, 0x0, &(0x7f00000000c0)=0x54)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc219, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r6)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r7, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9084)
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8c1}, 0x8011)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000340))
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='autofs\x00', 0x200000, 0x0)

1.864300594s ago: executing program 5 (id=1592):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
flistxattr(r1, &(0x7f0000001500)=""/4096, 0x1000)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
sendto(r3, 0x0, 0x0, 0x200048d1, 0x0, 0x0)
bind$802154_raw(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x13c}, 0x1, 0x0, 0x0, 0x40006}, 0x40d1)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "1615211d18d9f717", "0350dac0552469771defd9a0ca6315217926732467253bd90b23d43cb6b07b2a", "fddec243", "b329d7ef622e5a21"}, 0x38)
r6 = openat$cgroup_ro(r2, &(0x7f0000000440)='cpu.stat\x00', 0x275a, 0x0)
write$P9_RREMOVE(r4, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7)
sendfile(r4, r6, 0x0, 0xe74e)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000140)={0xa, 0x6ff, 0x220, 0x4, 0x4, 0x80, 0x29bd}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)

1.416152433s ago: executing program 0 (id=1593):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async)
syz_usb_connect(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b41"], 0x0) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) (async)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1.402915663s ago: executing program 2 (id=1594):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000001040)=0x2, 0x4)
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x7ffe, 0x1, 0x2000, 0x1000, &(0x7f0000cd0000/0x1000)=nil})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.224336817s ago: executing program 6 (id=1595):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x281, 0x4) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/210, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffa3, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

1.223323447s ago: executing program 6 (id=1596):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x400)

1.05460842s ago: executing program 5 (id=1597):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040), 0x4)
sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x20048860)
syz_usb_connect$cdc_ncm(0x6, 0xa7, &(0x7f0000000280)=ANY=[@ANYBLOB="12a1d61e5b819606c205a1a440000001020d00000a24060001f8589d972d05240001000d240f014d0b0000fefffbff1b06241a00001205240106031524120800a317a88b045e4f01a607c0ffcb7e392a1524120500a317a88b045e4f01a63500000000000000240100030905810300040840060904010000020d00000904010102020d000001000000000000000209050302200006040100000000000000000000000000000004"], &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xd2, 0x4, 0x0, 0xff, 0xfc}, 0x2f, &(0x7f0000000100)={0x5, 0xf, 0x2f, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xf, 0xb, 0xff2, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x3, 0xc}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0x2, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0x1, 0x5, 0x8, 0x1}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x82c}}, {0x3f, &(0x7f0000000340)=@string={0x3f, 0x3, "1875cf9b115442c324286de63f273fda041cbdba9d3c171de0bc6716500346a54f458eb92d136b0524e2fa6f6543bc4cb5b538aaf4023d1d823d63b49e"}}, {0xbd, &(0x7f0000000400)=@string={0xbd, 0x3, "3e89ec202e5550c2a7ac33008d0d8d7078ca0119a5d8e373993fe67e1c0cdc0b105e9640d74ada816d5e9381dcea48ba0975e4ecb1bb6d68a568940ea9e791c7dac37503f74aa5a53250801238c9da9abb6e57894e19ef017a6f69248af582fe023b4a83f19a0d975910a786e68f3318a95f2bd723ca524da1886e01742f7637d4656adf4d617dd8edb71ca08467206e2f742975c79c32101c9b0363f9561889796d0c6c68428fd717381fe89557637c7f29fab7855cb843ec6273"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c09}}, {0x29, &(0x7f0000000500)=@string={0x29, 0x3, "295bfb53b25ef7a3ecf1dabef3832cbd3887c6a9853d89e3ad923529ee7f9fb418f305ccbbe5a6"}}, {0xf6, &(0x7f0000000580)=@string={0xf6, 0x3, "4520149fc314fb6694492883bbd55362750908d30a8465d9e656d107733a10df5e4af22ce06d0bf8c628686fe2c056162ec99213e1b125efdfe3694f3100e4c470f10144fe85f1fd4ae5c90df75c22a7bb110ffc6d6dbb95574717fb8ecf59f66782207fc5477354b08be208bf3483a9dffc57c2da9dea51d4bd5dd21f83eb49ce15c3f05cddf1e60b4633f8e06e28c0d2b83c15552c31faeed185330482c3144f326441f9ee02be3b9917202c3260909e26c6f9b278cdfe0aaea034b113823bf5b264755fc578512a8848afae3c3369339ad6eca5e3650477f67814464674f1fd3cbe40f72a154fada619add9087db75700dcfa"}}]})
close(r2)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f00000000c0)={0x3, 0x100, 0x0, 0x3, 0x0, 0x9ff})
mprotect(&(0x7f0000284000/0x3000)=nil, 0x3000, 0x1)
r4 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000680))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}})
r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501)
socketpair(0x15, 0x1, 0x6, &(0x7f0000000780)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x2080005, r9})
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2d}, @dev={0xfe, 0x80, '\x00', 0x20}, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x6, 0x110022})
r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
getsockopt$inet_mreqn(r10, 0x0, 0x0, &(0x7f0000000840)={@private, @private}, &(0x7f0000000880)=0xc)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000007c0)=@req3={0x2, 0x1, 0xd0, 0x240000, 0x4b, 0x40, 0x40}, 0x1c)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x747a81, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r11, 0xa0e4f000)

904.828263ms ago: executing program 0 (id=1598):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x102, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r2, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4}, 0x6e)
r3 = memfd_create(&(0x7f0000000a00)='\vem\xda\x99R@i\x93\xfe\x9b#*\xff', 0x2)
write(r3, &(0x7f0000000040)="06", 0x1)
sendfile(r3, r3, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000340)={0x77359400}, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000006a00151000000008ffffffff894150da2e000000"], 0x18}], 0x1}, 0x8000)
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

818.788514ms ago: executing program 2 (id=1599):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x2)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
syz_usb_disconnect(r0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000001300)={'filter\x00', 0xb001, 0x4, 0x3c0, 0xe8, 0x0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000700)={@rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}}, 0xc)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) (async)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x40095505, 0x0)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5) (async)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0x5)
ioctl$ASHMEM_GET_NAME(r4, 0x81007702, 0x0) (async)
ioctl$ASHMEM_GET_NAME(r4, 0x81007702, 0x0)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
syz_usb_connect$cdc_ncm(0x1, 0xf7, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x2, 0x1, 0x8, 0x60, 0xe, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "be3df053"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x7ff, 0xb5}, {0x6, 0x24, 0x1a, 0xb63, 0x2}, [@mdlm_detail={0x85, 0x24, 0x13, 0x0, "7d0b698821b2e5638d26bb3c04dfdb6a4d591c02013de23200c3ee459f978438e730b97f5127455897669ba706f4c73c232eb785ac50ba0aecaa2a2d0d98cb38c03bc34d5e417caa7d3bbe0dde13f65d308f81097e2cf56a7fbba8c3b6cb5283cf059699a660bc81eda2f96143538e6b900db387adfd89af5296e138ad6a4111f2"}]}, {{0x9, 0x5, 0x81, 0x3, 0x608, 0x59, 0x3, 0xf0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x11, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0xff, 0xed}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x5d, 0x85, 0x8, 0xff, 0x45}, 0xbe, &(0x7f0000000740)={0x5, 0xf, 0xbe, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x95, 0x10, 0xa, "e7f269dc30003dc7c9c7e5835729f51164affbee3e578eeb1dbdcc93155238a120a95cdfc2eebd0693f9019a99b4d0f3d110c199c5fa6e9e8c05afd02ca994379368df5483b5f1efc994871eb2df94c2d5b17c077f590e2435944c11b217cc5f76fa6e2da62d5fd911419d730783164390c834f9506731b7bdddc3227543570f657b4d04e040cf56871b0032ab264fda389b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x73, 0x0, 0xc8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f8b853aa941c9066b8d841a75e7bcaff"}]}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40e}}]}) (async)
syz_usb_connect$cdc_ncm(0x1, 0xf7, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x2, 0x1, 0x8, 0x60, 0xe, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "be3df053"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x7ff, 0xb5}, {0x6, 0x24, 0x1a, 0xb63, 0x2}, [@mdlm_detail={0x85, 0x24, 0x13, 0x0, "7d0b698821b2e5638d26bb3c04dfdb6a4d591c02013de23200c3ee459f978438e730b97f5127455897669ba706f4c73c232eb785ac50ba0aecaa2a2d0d98cb38c03bc34d5e417caa7d3bbe0dde13f65d308f81097e2cf56a7fbba8c3b6cb5283cf059699a660bc81eda2f96143538e6b900db387adfd89af5296e138ad6a4111f2"}]}, {{0x9, 0x5, 0x81, 0x3, 0x608, 0x59, 0x3, 0xf0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x11, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0xff, 0xed}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x5d, 0x85, 0x8, 0xff, 0x45}, 0xbe, &(0x7f0000000740)={0x5, 0xf, 0xbe, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x95, 0x10, 0xa, "e7f269dc30003dc7c9c7e5835729f51164affbee3e578eeb1dbdcc93155238a120a95cdfc2eebd0693f9019a99b4d0f3d110c199c5fa6e9e8c05afd02ca994379368df5483b5f1efc994871eb2df94c2d5b17c077f590e2435944c11b217cc5f76fa6e2da62d5fd911419d730783164390c834f9506731b7bdddc3227543570f657b4d04e040cf56871b0032ab264fda389b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x73, 0x0, 0xc8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "f8b853aa941c9066b8d841a75e7bcaff"}]}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40e}}]})
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xa, 0x9, 0x8f}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x9, 0x4}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0xc6, 0xf6, 0x5, 0x8, 0x8}, 0x5d, &(0x7f0000000380)={0x5, 0xf, 0x5d, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x4c, 0x2, 0xd, 0xf000, 0x9, [0xff00, 0xffff00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x7, 0x2, 0x8}, @generic={0xb, 0x10, 0x4, "e3673848312cbfbc"}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x4494, 0xf0f, 0xe55, [0xc0, 0x3f0f, 0xf, 0xf, 0xffc000, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x1, 0x3, 0x4}]}})
setsockopt$inet_tcp_int(r6, 0x6, 0x5, &(0x7f0000000980)=0x3, 0x4) (async)
setsockopt$inet_tcp_int(r6, 0x6, 0x5, &(0x7f0000000980)=0x3, 0x4)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x1, 0x2e, 0x33, 0x7}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

120.604028ms ago: executing program 2 (id=1600):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x1c, 0x16, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}}, 0x40)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000340)={'ip_vti0\x00', <r6=>r5, 0x8000, 0x40, 0xffffffff, 0x10001, {{0x26, 0x4, 0x2, 0x7, 0x98, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, {[@noop, @ssrr={0x89, 0x1b, 0xb3, [@multicast2, @local, @loopback, @rand_addr=0x64010102, @multicast2, @multicast2]}, @end, @rr={0x7, 0x2b, 0x25, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}, @empty, @multicast1, @multicast2, @local]}, @timestamp_addr={0x44, 0x3c, 0xe4, 0x1, 0xc, [{@multicast1, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@empty, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb484}, {@multicast2, 0x8}, {@remote, 0xfffeffff}]}]}}}}})
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r7, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001d00)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0xfffffffffffffd22}, 0x8b}], 0x2, 0x10001, 0x0)
ppoll(&(0x7f0000000280)=[{r7, 0xc0}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x40, r5})
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
pidfd_send_signal(r8, 0x25, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)="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", 0x188}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c7984d2e7a6fa33748b6729b3ff9b59edf8f98e8ae7521b231410b752a4b3bdc57b6dc866405f0", 0x97}, {&(0x7f0000000280)="d0dc81753ef03a796b2a22ba029070ad1380604c9fc692ef42cff0e4d191", 0x1e}, {&(0x7f00000002c0)="6d2657493131db30447fce55af67ac7f10106db6d5cacd06cd9a77b8", 0x1c}], 0x4}}], 0x1, 0x14008094)
close_range(r0, 0xffffffffffffffff, 0x0)

63.731929ms ago: executing program 0 (id=1601):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x44da2000)
futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x30})
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f00000000c0)='./bus\x00', 0x41)
mkdir(&(0x7f0000000440)='./file1\x00', 0x149)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000600)=ANY=[@ANYRES8=r1])
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r6=>0x0)
write$cgroup_pid(r2, &(0x7f0000000080)=r6, 0x12)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setreuid(0x0, r8)
fchown(r7, r8, 0x0)
getgroups(0x6, &(0x7f00000001c0)=[0x0, <r9=>0x0, 0xee01, 0xee00, 0xee01, 0xee01])
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x4000)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=<r11=>0x0)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2202004, &(0x7f0000000500)={[{@uid={'uid', 0x3d, r8}}, {@gid={'gid', 0x3d, r9}}, {@gid={'gid', 0x3d, r10}}, {@mode={'mode', 0x3d, 0x8000000000000000}}], [{@uid_eq={'uid', 0x3d, r11}}, {@dont_measure}]})

306.21µs ago: executing program 0 (id=1602):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000003c3bd94488f2b40040da091a00210000000001090224000100001000090400fa010301000921f6f40001220500090500"], 0x0) (rerun: 64)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r1, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="002216000000770bed9cd0"], 0x0}, 0x0) (async, rerun: 64)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async, rerun: 32)
socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0xd6c) (async)
ioprio_set$pid(0x1, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000440)=0x10, 0x4) (async)
sendfile(r0, r0, 0x0, 0xd9)

0s ago: executing program 0 (id=1603):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x2, 0x0, 0x0, 0x80, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5})
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f040000ff170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/152, 0x98}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000500)=""/251, 0xfb}], 0x3, 0x801, 0x562)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x0)
prctl$PR_MCE_KILL_GET(0x22)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r6, &(0x7f0000000100), 0x2, 0x0)
syz_usb_connect(0x3, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002c41d3b403f1b022057fc000000010902a200017ffd007f09043600000e0100000824020106015b0408240601"], 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0xfffffffffffffdcd, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x980}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts.
[   24.500631][   T36] audit: type=1400 audit(1756878782.520:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   24.502217][  T281] cgroup: Unknown subsys name 'net'
[   24.524110][   T36] audit: type=1400 audit(1756878782.520:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.553298][   T36] audit: type=1400 audit(1756878782.550:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.553575][  T281] cgroup: Unknown subsys name 'devices'
[   24.738436][  T281] cgroup: Unknown subsys name 'hugetlb'
[   24.744569][  T281] cgroup: Unknown subsys name 'rlimit'
[   24.899455][   T36] audit: type=1400 audit(1756878782.920:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   24.923889][   T36] audit: type=1400 audit(1756878782.920:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   24.934647][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   24.953175][   T36] audit: type=1400 audit(1756878782.920:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   24.990587][   T36] audit: type=1400 audit(1756878782.990:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.002398][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   25.018917][   T36] audit: type=1400 audit(1756878782.990:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.059786][   T36] audit: type=1400 audit(1756878783.020:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   25.090707][   T36] audit: type=1400 audit(1756878783.020:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.391679][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.399648][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.410040][  T291] bridge_slave_0: entered allmulticast mode
[   26.418624][  T291] bridge_slave_0: entered promiscuous mode
[   26.426589][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.434057][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.442292][  T288] bridge_slave_0: entered allmulticast mode
[   26.449469][  T288] bridge_slave_0: entered promiscuous mode
[   26.462942][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.470515][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.478781][  T291] bridge_slave_1: entered allmulticast mode
[   26.486000][  T291] bridge_slave_1: entered promiscuous mode
[   26.492686][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.500618][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.508837][  T288] bridge_slave_1: entered allmulticast mode
[   26.516909][  T288] bridge_slave_1: entered promiscuous mode
[   26.533073][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.540964][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.549175][  T290] bridge_slave_0: entered allmulticast mode
[   26.557086][  T290] bridge_slave_0: entered promiscuous mode
[   26.575744][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.583700][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.591435][  T290] bridge_slave_1: entered allmulticast mode
[   26.598698][  T290] bridge_slave_1: entered promiscuous mode
[   26.662922][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.671239][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.679738][  T289] bridge_slave_0: entered allmulticast mode
[   26.686201][  T289] bridge_slave_0: entered promiscuous mode
[   26.695691][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.702858][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.710444][  T289] bridge_slave_1: entered allmulticast mode
[   26.717074][  T289] bridge_slave_1: entered promiscuous mode
[   26.900993][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.909841][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.918872][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.926322][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.935241][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.942358][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.951076][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.959698][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.970621][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.980437][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.989154][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.998009][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.007202][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.015438][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.022851][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.030205][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.087142][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.095923][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.103423][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.110952][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.119407][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.127029][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.134337][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.142050][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.159795][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.167095][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.181509][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.189053][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.197258][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.204502][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.212636][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.219915][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.237675][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.245069][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.253111][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.260213][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.277555][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.284650][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.296062][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.303509][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.354974][  T288] veth0_vlan: entered promiscuous mode
[   27.373911][  T288] veth1_macvtap: entered promiscuous mode
[   27.392675][  T290] veth0_vlan: entered promiscuous mode
[   27.403760][  T289] veth0_vlan: entered promiscuous mode
[   27.426917][  T291] veth0_vlan: entered promiscuous mode
[   27.450576][  T289] veth1_macvtap: entered promiscuous mode
[   27.458287][  T290] veth1_macvtap: entered promiscuous mode
[   27.473714][  T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   27.473938][  T291] veth1_macvtap: entered promiscuous mode
[   27.589261][  T337] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   27.696967][  T337] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer.
[   28.997312][  T412] kvm: pic: non byte write
[   29.510462][   T36] kauditd_printk_skb: 65 callbacks suppressed
[   29.510481][   T36] audit: type=1326 audit(1756878787.530:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=470 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   29.547541][   T36] audit: type=1326 audit(1756878787.530:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=470 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   29.572630][   T36] audit: type=1326 audit(1756878787.530:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=470 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   29.598599][   T36] audit: type=1326 audit(1756878787.530:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=470 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   29.625381][   T36] audit: type=1326 audit(1756878787.530:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=470 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   29.670118][   T36] audit: type=1326 audit(1756878787.530:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=470 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   29.696060][   T36] audit: type=1326 audit(1756878787.530:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=470 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   29.721403][   T36] audit: type=1326 audit(1756878787.530:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=470 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   29.748951][   T36] audit: type=1326 audit(1756878787.530:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=470 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   29.789591][  T485] kvm: emulating exchange as write
[   29.795501][   T36] audit: type=1326 audit(1756878787.530:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=470 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   29.832970][  T493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   29.961735][  T508] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   30.476210][  T564] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   30.491771][  T564] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[   30.500357][  T564] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[   30.509282][  T564] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[   30.518329][  T564] kvm: requested 170133 ns i8254 timer period limited to 200000 ns
[   30.528343][  T564] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[   30.536632][  T564] kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[   30.658913][  T584] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1415652382 (90601752448 ns) > initial count (23233060352 ns). Using initial count to start timer.
[   30.677126][  T584] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer.
[   31.091416][  T634] netlink: 'syz.3.135': attribute type 4 has an invalid length.
[   31.267255][  T649] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   31.293065][  T649] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[   31.307426][  T649] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[   31.384145][  T669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=669 comm=syz.2.149
[   31.525246][   T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   31.584968][  T677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136
[   31.590692][  T679] rust_binder: 676: removing orphan mapping 0:24
[   31.606677][  T679] rust_binder: 0: removing orphan mapping 24:1112
[   31.685202][   T45] usb 4-1: Using ep0 maxpacket: 16
[   31.694230][   T45] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   31.703523][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.711680][   T45] usb 4-1: Product: syz
[   31.716501][   T45] usb 4-1: Manufacturer: syz
[   31.721122][   T45] usb 4-1: SerialNumber: syz
[   31.728898][   T45] r8152-cfgselector 4-1: Unknown version 0x0000
[   31.745189][   T45] r8152-cfgselector 4-1: config 0 descriptor??
[   31.875158][  T679] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   31.954459][   T45] r8152-cfgselector 4-1: Unknown version 0x0000
[   31.960976][   T45] r8152-cfgselector 4-1: bad CDC descriptors
[   31.968313][   T45] r8152-cfgselector 4-1: USB disconnect, device number 2
[   32.025147][  T679] usb 1-1: Using ep0 maxpacket: 32
[   32.032171][  T679] usb 1-1: unable to get BOS descriptor or descriptor too short
[   32.041019][  T679] usb 1-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64
[   32.053056][  T679] usb 1-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   32.067106][  T679] usb 1-1: config 1 interface 0 has no altsetting 0
[   32.076960][  T679] usb 1-1: string descriptor 0 read error: -22
[   32.083319][  T679] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   32.092456][  T679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.101643][  T684] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   32.109282][  T684] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   32.300966][  T698] netlink: 'syz.2.159': attribute type 27 has an invalid length.
[   32.315036][  T701] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false
[   32.316023][  T701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   32.325679][  T684] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[   32.344824][  T701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:63
[   32.359118][  T679] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8
[   32.391679][  T679] usb 1-1: USB disconnect, device number 2
[   32.399554][  T679] usblp0: removed
[   32.432055][  T705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:80
[   32.483878][  T714] mmap: syz.2.164 (714): VmData 29339648 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[   32.655227][   T62] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   32.755226][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   32.795170][   T62] usb 2-1: device descriptor read/64, error -71
[   32.889798][  T730] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   32.921292][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   32.933772][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   32.947161][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   32.975128][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   32.995137][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   33.006898][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.021994][    T9] usb 4-1: config 0 descriptor??
[   33.030927][  T743] capability: warning: `syz.2.172' uses deprecated v2 capabilities in a way that may be insecure
[   33.044334][  T743] incfs_lookup_dentry err:-13
[   33.049161][  T743] incfs: Can't find or create .index dir in ./file0
[   33.055154][   T62] usb 2-1: device descriptor read/64, error -71
[   33.056053][  T743] incfs: mount failed -13
[   33.084979][  T746] netlink: 165 bytes leftover after parsing attributes in process `syz.2.173'.
[   33.115028][  T750] 9pnet_fd: Insufficient options for proto=fd
[   33.157047][  T756] =======================================================
[   33.157047][  T756] WARNING: The mand mount option has been deprecated and
[   33.157047][  T756]          and is ignored by this kernel. Remove the mand
[   33.157047][  T756]          option from the mount to silence this warning.
[   33.157047][  T756] =======================================================
[   33.198685][  T756] 9pnet_fd: p9_fd_create_tcp (756): problem connecting socket to 127.0.0.1
[   33.232813][    T9] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max
[   33.244669][    T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   33.257554][    T9] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   33.325990][   T62] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   33.405756][  T679] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   33.465223][   T62] usb 2-1: device descriptor read/64, error -71
[   33.546999][  T761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.555176][  T679] usb 1-1: Using ep0 maxpacket: 16
[   33.555776][  T761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.561103][  T771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.577753][  T771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.579924][  T679] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   33.594771][  T679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.602888][  T679] usb 1-1: Product: syz
[   33.607145][  T679] usb 1-1: Manufacturer: syz
[   33.611921][  T679] usb 1-1: SerialNumber: syz
[   33.618556][  T679] r8152-cfgselector 1-1: Unknown version 0x0000
[   33.624851][  T679] r8152-cfgselector 1-1: config 0 descriptor??
[   33.715233][   T62] usb 2-1: device descriptor read/64, error -71
[   33.825450][   T62] usb usb2-port1: attempt power cycle
[   33.834716][  T679] r8152-cfgselector 1-1: Unknown version 0x0000
[   33.845561][  T679] r8152-cfgselector 1-1: bad CDC descriptors
[   33.854114][  T679] r8152-cfgselector 1-1: USB disconnect, device number 3
[   33.916873][  T787] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.165227][   T62] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   34.186383][   T62] usb 2-1: device descriptor read/8, error -71
[   34.316460][   T62] usb 2-1: device descriptor read/8, error -71
[   34.531785][  T802] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   34.542824][   T36] kauditd_printk_skb: 129 callbacks suppressed
[   34.542844][   T36] audit: type=1400 audit(1756878792.560:278): avc:  denied  { remount } for  pid=800 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   34.546023][  T806] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   34.580942][   T62] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   34.606142][   T62] usb 2-1: device descriptor read/8, error -71
[   34.665111][  T813] loop2: detected capacity change from 0 to 7
[   34.665135][   T36] audit: type=1400 audit(1756878792.680:279): avc:  denied  { append } for  pid=812 comm="syz.0.196" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   34.692428][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   34.707504][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   34.716561][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   34.725830][   T36] audit: type=1400 audit(1756878792.740:280): avc:  denied  { ioctl } for  pid=812 comm="syz.0.196" path="socket:[7304]" dev="sockfs" ino=7304 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   34.727864][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   34.761490][   T36] audit: type=1400 audit(1756878792.780:281): avc:  denied  { setopt } for  pid=812 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   34.767581][  T346]  loop2: unable to read partition table
[   34.785921][   T36] audit: type=1400 audit(1756878792.780:282): avc:  denied  { write } for  pid=812 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   34.794193][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   34.822121][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   34.831063][   T62] usb 2-1: device descriptor read/8, error -71
[   34.838583][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   34.848897][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   34.858494][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   34.868677][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   34.877495][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   34.887222][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   34.895581][  T813]  loop2: unable to read partition table
[   34.896412][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   34.901779][  T813] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   34.911049][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   34.934109][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   34.943512][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   34.952695][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   34.955319][   T62] usb usb2-port1: unable to enumerate USB device
[   34.962365][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   35.017613][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   35.028220][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   35.037480][  T109]  loop2: unable to read partition table
[   35.060812][  T826] rust_binder: Write failure EFAULT in pid:172
[   35.093655][   T36] audit: type=1400 audit(1756878793.110:283): avc:  denied  { create } for  pid=828 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   35.150322][   T36] audit: type=1400 audit(1756878793.170:284): avc:  denied  { associate } for  pid=831 comm="syz.3.201" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   35.183192][   T36] audit: type=1400 audit(1756878793.200:285): avc:  denied  { mounton } for  pid=835 comm="syz.3.202" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   35.236759][  T842] process 'syz.3.204' launched './file2' with NULL argv: empty string added
[   35.246262][   T36] audit: type=1400 audit(1756878793.270:286): avc:  denied  { execute_no_trans } for  pid=840 comm="syz.3.204" path="/39/file2" dev="tmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   35.247539][  T841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.204'.
[   35.355620][  T679] usb 4-1: USB disconnect, device number 3
[   35.453585][   T36] audit: type=1400 audit(1756878793.470:287): avc:  denied  { ioctl } for  pid=843 comm="syz.1.205" path="socket:[8306]" dev="sockfs" ino=8306 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   35.502030][  T846] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false
[   35.875136][  T678] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   35.915179][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   36.045170][  T678] usb 2-1: Using ep0 maxpacket: 32
[   36.055340][  T678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.069999][   T10] usb 1-1: Using ep0 maxpacket: 8
[   36.080278][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   36.088965][  T678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.101656][  T678] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   36.111299][  T678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.111369][   T10] usb 1-1: config 0 has an invalid interface number: 88 but max is 0
[   36.129876][   T10] usb 1-1: config 0 has no interface number 0
[   36.136451][  T678] usb 2-1: config 0 descriptor??
[   36.142194][   T10] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   36.154799][  T678] hub 2-1:0.0: USB hub found
[   36.160242][   T10] usb 1-1: config 0 interface 88 has no altsetting 0
[   36.170082][   T10] usb 1-1: string descriptor 0 read error: -22
[   36.176599][   T10] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   36.186488][   T10] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   36.197225][   T10] usb 1-1: config 0 descriptor??
[   36.207985][   T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input5
[   36.281189][  T863] /dev/nullb0: Can't lookup blockdev
[   36.307117][  T866] netlink: 'syz.2.214': attribute type 4 has an invalid length.
[   36.317867][  T867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.215'.
[   36.340699][  T869] netlink: 'syz.2.216': attribute type 16 has an invalid length.
[   36.348691][  T869] netlink: 'syz.2.216': attribute type 3 has an invalid length.
[   36.356423][  T869] netlink: 'syz.2.216': attribute type 1 has an invalid length.
[   36.360391][  T857] rust_binder: Write failure EFAULT in pid:81
[   36.364260][  T869] netlink: 64030 bytes leftover after parsing attributes in process `syz.2.216'.
[   36.366077][  T678] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[   36.392424][  T678] usbhid 2-1:0.0: can't add hid device: -71
[   36.399593][  T678] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   36.444436][  T678] usb 2-1: USB disconnect, device number 6
[   36.579649][  T679] usb 1-1: USB disconnect, device number 4
[   36.682446][  T877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'.
[   36.903202][  T883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.221'.
[   37.038746][  T916] netlink: 'syz.2.232': attribute type 4 has an invalid length.
[   37.068203][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   37.068766][  T923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   37.074710][  T923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:92
[   37.245173][  T685] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   37.312353][  T939] x_tables: duplicate underflow at hook 1
[   37.318443][  T939] __vm_enough_memory: pid: 939, comm: syz.3.240, bytes: 18014402804453376 not enough memory for the allocation
[   37.331577][  T939] x_tables: duplicate underflow at hook 1
[   37.331959][  T940] __vm_enough_memory: pid: 940, comm: syz.3.240, bytes: 18014402804453376 not enough memory for the allocation
[   37.405296][  T685] usb 1-1: Using ep0 maxpacket: 16
[   37.413554][  T685] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   37.426100][  T685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.430810][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.434947][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.441781][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.442117][  T685] usb 1-1: Product: syz
[   37.448328][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.455442][  T685] usb 1-1: Manufacturer: syz
[   37.459488][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.470599][  T685] usb 1-1: SerialNumber: syz
[   37.470666][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.482069][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.482855][  T685] r8152-cfgselector 1-1: Unknown version 0x0000
[   37.488449][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.495318][  T685] r8152-cfgselector 1-1: config 0 descriptor??
[   37.501405][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.514485][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.515432][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.527077][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.527080][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.527105][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.546527][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.546527][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.546555][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.566174][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.566176][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.566203][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.586187][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.586190][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.586216][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.586232][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.612500][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.612503][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.612528][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.632193][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.638887][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.639085][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.652574][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.659468][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.659738][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.673129][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.680263][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.680515][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.693562][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.700397][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.700643][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.711671][  T685] r8152-cfgselector 1-1: Unknown version 0x0000
[   37.713656][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.727764][  T685] r8152-cfgselector 1-1: bad CDC descriptors
[   37.728964][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.735258][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.748857][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.750307][  T685] r8152-cfgselector 1-1: USB disconnect, device number 5
[   37.755934][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.769905][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.776285][  T946] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.776288][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.789616][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.796039][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.802325][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.808749][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.815620][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.822499][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.828925][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.835522][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.842009][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.848953][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.855729][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.862196][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.869037][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.875647][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.882066][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.889004][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.895659][  T947] rust_binder: Write failure EINVAL in pid:119
[   37.902166][  T947] rust_binder: Write failure EINVAL in pid:119
[   38.215195][  T685] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   38.252197][  T965] SELinux:  policydb magic number 0xabda6000 does not match expected magic number 0xf97cff8c
[   38.262843][  T965] SELinux: failed to load policy
[   38.270119][   T13] tipc: Subscription rejected, illegal request
[   38.355193][  T685] usb 4-1: device descriptor read/64, error -71
[   38.595182][  T685] usb 4-1: device descriptor read/64, error -71
[   38.835245][  T685] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   38.965177][  T685] usb 4-1: device descriptor read/64, error -71
[   39.085200][  T926] Bluetooth: hci0: command 0x1003 tx timeout
[   39.091582][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   39.103345][  T979] netlink: 'syz.0.254': attribute type 10 has an invalid length.
[   39.117872][  T979] __vm_enough_memory: pid: 979, comm: syz.0.254, bytes: 18014402804453376 not enough memory for the allocation
[   39.183877][  T987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.257'.
[   39.205145][  T685] usb 4-1: device descriptor read/64, error -71
[   39.315311][  T685] usb usb4-port1: attempt power cycle
[   39.445169][  T678] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   39.595183][  T678] usb 1-1: Using ep0 maxpacket: 16
[   39.603381][  T678] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   39.612860][  T678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.621080][  T678] usb 1-1: Product: syz
[   39.625489][  T678] usb 1-1: Manufacturer: syz
[   39.630591][  T678] usb 1-1: SerialNumber: syz
[   39.638244][  T678] r8152-cfgselector 1-1: Unknown version 0x0000
[   39.644557][  T678] r8152-cfgselector 1-1: config 0 descriptor??
[   39.655192][  T685] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   39.676671][  T685] usb 4-1: device descriptor read/8, error -71
[   39.806263][  T685] usb 4-1: device descriptor read/8, error -71
[   39.905278][   T36] kauditd_printk_skb: 40 callbacks suppressed
[   39.905297][   T36] audit: type=1400 audit(1756878797.930:328): avc:  denied  { read } for  pid=1001 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   39.932774][   T36] audit: type=1400 audit(1756878797.930:329): avc:  denied  { nlmsg_read } for  pid=1001 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   40.023985][   T36] audit: type=1400 audit(1756878798.040:330): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   40.046647][  T685] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   40.055220][  T678] r8152-cfgselector 1-1: Unknown version 0x0000
[   40.065335][  T678] r8152-cfgselector 1-1: bad CDC descriptors
[   40.075469][  T678] r8152-cfgselector 1-1: USB disconnect, device number 6
[   40.076257][  T685] usb 4-1: device descriptor read/8, error -71
[   40.098817][   T36] audit: type=1400 audit(1756878798.120:331): avc:  denied  { mount } for  pid=1003 comm="syz.1.263" name="/" dev="ramfs" ino=8830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   40.171556][ T1011] rust_binder: 108: no such ref 4294967294
[   40.190686][ T1013] netlink: 2 bytes leftover after parsing attributes in process `syz.1.266'.
[   40.190705][   T36] audit: type=1400 audit(1756878798.210:332): avc:  denied  { nlmsg_read } for  pid=1012 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   40.220937][   T36] audit: type=1400 audit(1756878798.240:333): avc:  denied  { read } for  pid=1012 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   40.242912][  T685] usb 4-1: device descriptor read/8, error -71
[   40.276290][ T1013] rust_binder: Error in use_page_slow: ESRCH
[   40.276311][ T1013] rust_binder: use_range failure ESRCH
[   40.282326][ T1013] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   40.288055][ T1013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   40.296373][ T1013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:110
[   40.331887][ T1017] rust_binder: Write failure EFAULT in pid:113
[   40.355224][  T685] usb usb4-port1: unable to enumerate USB device
[   40.421758][ T1024] capability: warning: `syz.1.269' uses 32-bit capabilities (legacy support in use)
[   40.467062][   T36] audit: type=1400 audit(1756878798.490:334): avc:  denied  { connect } for  pid=1028 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   40.489319][   T36] audit: type=1400 audit(1756878798.490:335): avc:  denied  { write } for  pid=1028 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   40.649202][   T36] audit: type=1400 audit(1756878798.670:336): avc:  denied  { bind } for  pid=1042 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   40.735308][  T678] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   40.886216][ T1024] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.955490][  T678] usb 2-1: unable to read config index 0 descriptor/start: -71
[   40.971940][  T678] usb 2-1: can't read configurations, error -71
[   41.025332][   T36] audit: type=1400 audit(1756878799.050:337): avc:  denied  { append } for  pid=1066 comm="syz.3.282" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   41.355169][   T62] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   41.505120][   T62] usb 4-1: Using ep0 maxpacket: 16
[   41.513025][   T62] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   41.522374][   T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.530453][   T62] usb 4-1: Product: syz
[   41.534883][   T62] usb 4-1: Manufacturer: syz
[   41.539984][   T62] usb 4-1: SerialNumber: syz
[   41.548486][   T62] r8152-cfgselector 4-1: Unknown version 0x0000
[   41.554996][   T62] r8152-cfgselector 4-1: config 0 descriptor??
[   41.672926][ T1088] netlink: 32 bytes leftover after parsing attributes in process `syz.0.289'.
[   41.965930][   T62] r8152-cfgselector 4-1: Unknown version 0x0000
[   41.974886][   T62] r8152-cfgselector 4-1: bad CDC descriptors
[   41.987262][   T62] r8152-cfgselector 4-1: USB disconnect, device number 8
[   42.019354][ T1105] rust_binder: Got transaction with invalid offset.
[   42.019395][ T1105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   42.026337][ T1105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142
[   42.049822][ T1107] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   42.059345][ T1107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:144
[   42.228432][ T1120] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   42.251911][ T1121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=1121 comm=syz.1.299
[   42.266768][ T1121] input: syz1 as /devices/virtual/input/input8
[   42.327251][ T1121] rust_binder: 149: no such ref 1
[   42.332795][ T1114] rust_binder: Error while translating object.
[   42.332820][ T1114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   42.339097][ T1114] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender.
[   42.349046][ T1114] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:149
[   42.454847][  T685] rust_binder: 1113: removing orphan mapping 0:24
[   42.502750][ T1138] fuse: Bad value for 'fd'
[   42.795195][ T1165] Zero length message leads to an empty skb
[   42.955175][  T685] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   43.020715][ T1187] netlink: 1300 bytes leftover after parsing attributes in process `syz.2.322'.
[   43.125130][  T685] usb 4-1: Using ep0 maxpacket: 16
[   43.133494][  T685] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   43.143312][  T685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.151576][  T685] usb 4-1: Product: syz
[   43.155992][  T685] usb 4-1: Manufacturer: syz
[   43.160762][  T685] usb 4-1: SerialNumber: syz
[   43.169945][  T685] r8152-cfgselector 4-1: Unknown version 0x0000
[   43.176783][  T685] r8152-cfgselector 4-1: config 0 descriptor??
[   43.587921][  T685] r8152-cfgselector 4-1: Unknown version 0x0000
[   43.597733][  T685] r8152-cfgselector 4-1: bad CDC descriptors
[   43.612886][  T685] r8152-cfgselector 4-1: USB disconnect, device number 9
[   43.715152][ T1193] mmap: syz.1.325 (1193) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   43.824876][ T1201] cgroup: name respecified
[   43.830984][ T1203] cgroup: name respecified
[   43.847599][ T1206] netlink: 'syz.2.328': attribute type 4 has an invalid length.
[   43.855675][ T1206] netlink: 'syz.2.328': attribute type 4 has an invalid length.
[   43.866630][ T1206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'.
[   44.609477][ T1262] overlayfs: failed to resolve './file1': -2
[   44.612401][ T1260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'.
[   44.699686][ T1263] rust_binder: Write failure EFAULT in pid:170
[   44.965291][   T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   45.125168][   T45] usb 2-1: Using ep0 maxpacket: 16
[   45.134746][   T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   45.144076][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.152629][   T45] usb 2-1: Product: syz
[   45.157097][   T45] usb 2-1: Manufacturer: syz
[   45.161771][   T45] usb 2-1: SerialNumber: syz
[   45.170341][   T45] r8152-cfgselector 2-1: Unknown version 0x0000
[   45.177730][   T45] r8152-cfgselector 2-1: config 0 descriptor??
[   45.386265][   T45] r8152-cfgselector 2-1: Needed 1 retries to read version
[   45.394131][   T45] r8152-cfgselector 2-1: Unknown version 0x4830
[   45.401361][   T45] r8152-cfgselector 2-1: bad CDC descriptors
[   45.455157][  T678] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   45.492272][ T1304] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   45.509502][   T36] kauditd_printk_skb: 17 callbacks suppressed
[   45.509522][   T36] audit: type=1400 audit(1756878803.530:355): avc:  denied  { ioctl } for  pid=1308 comm="syz.2.364" path="socket:[9525]" dev="sockfs" ino=9525 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   45.544666][   T36] audit: type=1400 audit(1756878803.560:356): avc:  denied  { getopt } for  pid=1310 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   45.564430][   T36] audit: type=1400 audit(1756878803.560:357): avc:  denied  { ioctl } for  pid=1312 comm="syz.2.366" path="socket:[9545]" dev="sockfs" ino=9545 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   45.592774][   T36] audit: type=1400 audit(1756878803.560:358): avc:  denied  { map } for  pid=1310 comm="syz.0.365" path="socket:[9541]" dev="sockfs" ino=9541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   45.598437][   T45] r8152-cfgselector 2-1: USB disconnect, device number 9
[   45.616752][   T36] audit: type=1400 audit(1756878803.560:359): avc:  denied  { read } for  pid=1310 comm="syz.0.365" path="socket:[9541]" dev="sockfs" ino=9541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   45.648620][   T36] audit: type=1400 audit(1756878803.560:360): avc:  denied  { setattr } for  pid=1310 comm="syz.0.365" name="" dev="pipefs" ino=10412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   45.671170][  T678] usb 4-1: Using ep0 maxpacket: 16
[   45.677619][  T678] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   45.687805][  T678] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.699085][  T678] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.708959][  T678] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   45.735296][  T678] usb 4-1: config 7 interface 0 has no altsetting 0
[   45.742041][  T678] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[   45.752303][  T678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.079535][   T36] audit: type=1400 audit(1756878804.100:361): avc:  denied  { create } for  pid=1328 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   46.136447][   T36] audit: type=1400 audit(1756878804.160:362): avc:  denied  { write } for  pid=1338 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   46.147557][ T1339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.374'.
[   46.169587][ T1285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.177980][   T36] audit: type=1400 audit(1756878804.170:363): avc:  denied  { mount } for  pid=1338 comm="syz.0.374" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   46.182852][ T1339] fuse: Bad value for 'group_id'
[   46.205846][ T1285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.205942][ T1339] fuse: Bad value for 'group_id'
[   46.218595][ T1285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1285 comm=syz.3.356
[   46.235164][  T678] usbhid 4-1:7.0: can't add hid device: -71
[   46.241749][  T678] usbhid 4-1:7.0: probe with driver usbhid failed with error -71
[   46.262701][  T678] usb 4-1: USB disconnect, device number 11
[   46.321783][   T36] audit: type=1400 audit(1756878804.340:364): avc:  denied  { mounton } for  pid=1353 comm="syz.0.381" path="/file0" dev="ramfs" ino=10506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   46.375017][ T1355] tc_dump_action: action bad kind
[   46.771918][ T1359] binder: Unknown parameter 'de�I�Ӫ�N��:'
[   47.018430][ T1373] exFAT-fs (rnullb0): invalid boot record signature
[   47.025289][ T1373] exFAT-fs (rnullb0): failed to read boot sector
[   47.032039][ T1373] exFAT-fs (rnullb0): failed to recognize exfat type
[   47.108206][ T1376] fuseblk: Unknown parameter 'user_)d'
[   47.192489][ T1385] bridge0: port 3(ip6gretap0) entered blocking state
[   47.199320][ T1385] bridge0: port 3(ip6gretap0) entered disabled state
[   47.206332][ T1385] ip6gretap0: entered allmulticast mode
[   47.212297][ T1385] ip6gretap0: entered promiscuous mode
[   47.218256][ T1385] bridge0: port 3(ip6gretap0) entered blocking state
[   47.225286][ T1385] bridge0: port 3(ip6gretap0) entered forwarding state
[   47.258945][ T1390] fuse: Bad value for 'user_id'
[   47.264143][ T1390] fuse: Bad value for 'user_id'
[   47.872976][ T1398] rust_binder: Write failure EINVAL in pid:158
[   47.950177][ T1418] netlink: 108 bytes leftover after parsing attributes in process `syz.0.407'.
[   48.065327][ T1431] netlink: 104 bytes leftover after parsing attributes in process `syz.3.411'.
[   48.096960][ T1441] overlayfs: disabling nfs_export due to verity=require
[   48.122772][ T1441] overlayfs: failed to clone upperpath
[   48.630718][ T1487] netlink: 188 bytes leftover after parsing attributes in process `syz.2.430'.
[   49.292182][ T1511] tipc: MTU too low for tipc bearer
[   49.299691][ T1511] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   49.327641][ T1511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.437'.
[   49.874220][ T1530] fuse: Unknown parameter '3�'
[   49.945362][ T1538] fuseblk: Unknown parameter 'grOup_�d'
[   50.244295][ T1559] tmpfs: Bad value for 'nr_inodes'
[   50.288399][ T1561] binder: Unknown parameter 'rQ4�� '
[   50.336200][ T1563] sit0: entered promiscuous mode
[   50.350252][ T1563] netlink: 'syz.3.458': attribute type 1 has an invalid length.
[   50.369622][ T1563] netlink: 1 bytes leftover after parsing attributes in process `syz.3.458'.
[   50.471971][ T1573] netlink: 'syz.2.461': attribute type 29 has an invalid length.
[   50.492120][ T1573] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.461'.
[   50.618303][ T1585] rust_binder: Write failure EFAULT in pid:211
[   50.706636][ T1595] rust_binder: Write failure EFAULT in pid:213
[   50.744789][   T36] kauditd_printk_skb: 13 callbacks suppressed
[   50.744810][   T36] audit: type=1400 audit(1756878808.760:378): avc:  denied  { accept } for  pid=1596 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   51.015225][  T678] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   51.185246][  T678] usb 4-1: Using ep0 maxpacket: 16
[   51.193205][  T678] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   51.213052][  T678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.222560][  T678] usb 4-1: Product: syz
[   51.227579][  T678] usb 4-1: Manufacturer: syz
[   51.232828][  T678] usb 4-1: SerialNumber: syz
[   51.242819][  T678] r8152-cfgselector 4-1: Unknown version 0x0000
[   51.250354][  T678] r8152-cfgselector 4-1: config 0 descriptor??
[   51.459053][  T678] r8152-cfgselector 4-1: Needed 1 retries to read version
[   51.472796][  T678] r8152-cfgselector 4-1: Unknown version 0x4830
[   51.483929][  T678] r8152-cfgselector 4-1: bad CDC descriptors
[   51.662987][  T678] r8152-cfgselector 4-1: USB disconnect, device number 12
[   51.788445][   T36] audit: type=1400 audit(1756878809.810:379): avc:  denied  { create } for  pid=1661 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   51.949304][ T1672] overlayfs: failed to clone upperpath
[   52.183315][   T36] audit: type=1400 audit(1756878810.200:380): avc:  denied  { watch } for  pid=1699 comm="syz.3.502" path="/84/file0" dev="tmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   52.312273][ T1706] rust_binder: Error while translating object.
[   52.312326][ T1706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   52.319019][ T1706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222
[   52.429784][   T36] audit: type=1400 audit(1756878810.450:381): avc:  denied  { append } for  pid=1714 comm="syz.3.507" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   52.430351][ T1715] overlayfs: missing 'lowerdir'
[   52.531021][   T13] bridge_slave_1: left allmulticast mode
[   52.541937][   T13] bridge_slave_1: left promiscuous mode
[   52.549159][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.558409][   T13] bridge_slave_0: left allmulticast mode
[   52.570979][   T13] bridge_slave_0: left promiscuous mode
[   52.578758][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.623481][ T1731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=107 sclass=netlink_route_socket pid=1731 comm=syz.0.515
[   52.684743][   T36] audit: type=1400 audit(1756878810.700:382): avc:  denied  { mounton } for  pid=1741 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   52.714830][   T13] veth1_macvtap: left promiscuous mode
[   52.720650][   T13] veth0_vlan: left promiscuous mode
[   52.781434][   T36] audit: type=1400 audit(1756878810.800:383): avc:  denied  { mount } for  pid=1752 comm="syz.0.521" name="/" dev="pstore" ino=2390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   52.836118][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.844206][ T1741] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.853162][ T1741] bridge_slave_0: entered allmulticast mode
[   52.859735][ T1741] bridge_slave_0: entered promiscuous mode
[   52.868168][ T1741] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.875432][ T1741] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.882607][ T1741] bridge_slave_1: entered allmulticast mode
[   52.889500][ T1741] bridge_slave_1: entered promiscuous mode
[   52.954754][ T1776] netlink: 5308 bytes leftover after parsing attributes in process `syz.2.529'.
[   52.967194][ T1774] overlayfs: failed to clone lowerpath
[   52.988790][ T1741] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.996583][ T1741] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.004469][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.012504][ T1741] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.048348][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.057527][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.068279][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.075411][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.095871][  T328] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.102966][  T328] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.115991][ T1793] netlink: 'syz.1.533': attribute type 4 has an invalid length.
[   53.123816][ T1793] netlink: 17 bytes leftover after parsing attributes in process `syz.1.533'.
[   53.167322][ T1741] veth0_vlan: entered promiscuous mode
[   53.187722][ T1741] veth1_macvtap: entered promiscuous mode
[   53.247715][   T36] audit: type=1400 audit(1756878811.270:384): avc:  denied  { read } for  pid=1796 comm="syz.1.534" path="socket:[11910]" dev="sockfs" ino=11910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   53.306997][   T36] audit: type=1400 audit(1756878811.310:385): avc:  denied  { mounton } for  pid=1741 comm="syz-executor" path="/root/syzkaller.b82OXN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   53.545030][ T1810] netlink: 'syz.2.538': attribute type 13 has an invalid length.
[   53.567108][   T36] audit: type=1400 audit(1756878811.590:386): avc:  denied  { execstack } for  pid=1811 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   53.658737][   T46] bridge_slave_1: left allmulticast mode
[   53.677427][   T46] bridge_slave_1: left promiscuous mode
[   53.683750][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.695408][   T46] bridge_slave_0: left allmulticast mode
[   53.701125][   T46] bridge_slave_0: left promiscuous mode
[   53.706992][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.824780][   T46] veth1_macvtap: left promiscuous mode
[   53.831053][ T1819] netlink: 165 bytes leftover after parsing attributes in process `syz.1.543'.
[   53.832210][   T46] veth0_vlan: left promiscuous mode
[   53.938522][ T1816] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.948286][ T1816] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.956124][ T1816] bridge_slave_0: entered allmulticast mode
[   53.963936][ T1816] bridge_slave_0: entered promiscuous mode
[   53.971105][ T1816] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.978903][ T1816] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.987251][ T1816] bridge_slave_1: entered allmulticast mode
[   53.993355][   T36] audit: type=1400 audit(1756878812.010:387): avc:  denied  { getopt } for  pid=1840 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   54.011798][ T1843] netlink: 68 bytes leftover after parsing attributes in process `syz.1.551'.
[   54.016621][ T1816] bridge_slave_1: entered promiscuous mode
[   54.108520][ T1816] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.115951][ T1816] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.123271][ T1816] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.130420][ T1816] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.158139][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.166074][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.176552][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.183883][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.194460][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.201572][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.242466][ T1816] veth0_vlan: entered promiscuous mode
[   54.259448][ T1816] veth1_macvtap: entered promiscuous mode
[   54.335500][ T1872] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   54.448902][ T1885] rust_binder: 1878 RLIMIT_NICE not set
[   54.473699][   T45] rust_binder: 1877: removing orphan mapping 0:24
[   54.499059][ T1891] rust_binder: 10: no such ref 3
[   54.506581][ T1893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1893 comm=syz.0.566
[   54.953127][ T1943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.585'.
[   54.962594][ T1943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.585'.
[   55.355194][   T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   55.482927][ T1965] netlink: 'syz.0.593': attribute type 6 has an invalid length.
[   55.490765][ T1965] IPv6: NLM_F_CREATE should be specified when creating new route
[   55.505229][   T45] usb 6-1: Using ep0 maxpacket: 16
[   55.513545][   T45] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   55.522873][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.531222][   T45] usb 6-1: Product: syz
[   55.535658][   T45] usb 6-1: Manufacturer: syz
[   55.540403][   T45] usb 6-1: SerialNumber: syz
[   55.556054][   T45] r8152-cfgselector 6-1: Unknown version 0x0000
[   55.563167][   T45] r8152-cfgselector 6-1: config 0 descriptor??
[   55.775411][   T45] r8152-cfgselector 6-1: Needed 1 retries to read version
[   55.782895][   T45] r8152-cfgselector 6-1: Unknown version 0x4830
[   55.789465][   T45] r8152-cfgselector 6-1: bad CDC descriptors
[   55.977716][   T45] r8152-cfgselector 6-1: USB disconnect, device number 2
[   56.850429][ T2024] tipc: Started in network mode
[   56.855454][ T2024] tipc: Node identity 4, cluster identity 4711
[   56.861749][ T2024] tipc: Node number set to 4
[   56.918597][   T36] kauditd_printk_skb: 6 callbacks suppressed
[   56.918616][   T36] audit: type=1400 audit(1756878814.940:394): avc:  denied  { read } for  pid=2023 comm="syz.0.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   57.011139][ T2035] syz.5.617 uses obsolete (PF_INET,SOCK_PACKET)
[   57.058017][   T36] audit: type=1400 audit(1756878815.080:395): avc:  denied  { lock } for  pid=2032 comm="syz.2.616" path="socket:[13066]" dev="sockfs" ino=13066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   57.266412][ T2041] netlink: 'syz.2.616': attribute type 19 has an invalid length.
[   57.461439][ T2051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'.
[   58.062135][ T2078] fuse: Unknown parameter 'a���)M�UɣB�^�N.2{x�0x0000000000000003'
[   58.073781][ T2078] overlayfs: failed to clone upperpath
[   58.123981][ T2082] overlayfs: failed to clone lowerpath
[   58.125142][   T36] audit: type=1400 audit(1756878816.140:396): avc:  denied  { mount } for  pid=2081 comm="syz.1.634" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   58.434254][   T36] audit: type=1400 audit(1756878816.450:397): avc:  denied  { setopt } for  pid=2107 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.755175][   T45] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   58.905142][   T45] usb 6-1: Using ep0 maxpacket: 16
[   58.913232][   T45] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   58.922729][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.930818][   T45] usb 6-1: Product: syz
[   58.935159][   T45] usb 6-1: Manufacturer: syz
[   58.940013][   T45] usb 6-1: SerialNumber: syz
[   58.947064][   T45] r8152-cfgselector 6-1: Unknown version 0x0000
[   58.953455][   T45] r8152-cfgselector 6-1: config 0 descriptor??
[   59.163333][   T45] r8152-cfgselector 6-1: Needed 1 retries to read version
[   59.172061][   T45] r8152-cfgselector 6-1: Unknown version 0x4830
[   59.179096][   T45] r8152-cfgselector 6-1: bad CDC descriptors
[   59.244473][ T2119] netlink: 'syz.0.648': attribute type 4 has an invalid length.
[   59.253417][ T2119] netlink: 'syz.0.648': attribute type 21 has an invalid length.
[   59.261253][ T2119] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.648'.
[   59.366323][   T45] r8152-cfgselector 6-1: USB disconnect, device number 3
[   59.785991][   T36] audit: type=1400 audit(1756878817.810:398): avc:  denied  { accept } for  pid=2120 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   59.918264][   T36] audit: type=1400 audit(1756878817.940:399): avc:  denied  { getopt } for  pid=2135 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   59.983298][   T36] audit: type=1400 audit(1756878818.000:400): avc:  denied  { ioctl } for  pid=2143 comm="syz.0.658" path="socket:[13230]" dev="sockfs" ino=13230 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   60.181564][   T36] audit: type=1400 audit(1756878818.200:401): avc:  denied  { create } for  pid=2157 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   60.731986][ T2163] loop2: detected capacity change from 0 to 7
[   60.738581][    C1] blk_print_req_error: 1 callbacks suppressed
[   60.738600][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.754081][    C1] buffer_io_error: 1 callbacks suppressed
[   60.754099][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   60.767967][ T2163]  loop2: unable to read partition table
[   60.768040][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.775012][ T2163] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   60.783132][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   60.784103][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.814431][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   60.823520][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.833083][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[   60.841252][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.851042][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   60.859264][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.868820][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   60.877126][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.886577][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[   60.938172][   T36] audit: type=1400 audit(1756878818.960:402): avc:  denied  { read write } for  pid=2172 comm="syz.5.667" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   60.961826][   T36] audit: type=1400 audit(1756878818.960:403): avc:  denied  { open } for  pid=2172 comm="syz.5.667" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   61.461933][ T2209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'.
[   62.078324][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   62.078342][   T36] audit: type=1400 audit(1756878820.100:406): avc:  denied  { getopt } for  pid=2237 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.105520][   T36] audit: type=1326 audit(1756878820.100:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2229 comm="syz.2.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07dd8ebe9 code=0x7fc00000
[   62.136547][   T36] audit: type=1400 audit(1756878820.160:408): avc:  denied  { create } for  pid=2246 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   62.157355][   T36] audit: type=1400 audit(1756878820.160:409): avc:  denied  { create } for  pid=2246 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   62.177419][   T36] audit: type=1400 audit(1756878820.170:410): avc:  denied  { getopt } for  pid=2246 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   62.555239][  T678] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   62.653102][   T36] audit: type=1326 audit(1756878820.670:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.2.702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc07dd8ebe9 code=0x0
[   62.705141][  T678] usb 6-1: Using ep0 maxpacket: 16
[   62.713593][  T678] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   62.723211][  T678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.731924][  T678] usb 6-1: Product: syz
[   62.736675][  T678] usb 6-1: Manufacturer: syz
[   62.741575][  T678] usb 6-1: SerialNumber: syz
[   62.757110][  T678] r8152-cfgselector 6-1: Unknown version 0x0000
[   62.763620][  T678] r8152-cfgselector 6-1: config 0 descriptor??
[   62.973501][  T678] r8152-cfgselector 6-1: Needed 1 retries to read version
[   62.981034][  T678] r8152-cfgselector 6-1: Unknown version 0x4830
[   62.987663][  T678] r8152-cfgselector 6-1: bad CDC descriptors
[   63.175495][  T678] r8152-cfgselector 6-1: USB disconnect, device number 4
[   63.699481][ T2309] netlink: 'syz.5.715': attribute type 4 has an invalid length.
[   63.711250][ T2309] netlink: 'syz.5.715': attribute type 4 has an invalid length.
[   64.057716][ T2322] netlink: 'syz.2.719': attribute type 4 has an invalid length.
[   64.162815][   T36] audit: type=1400 audit(1756878822.180:412): avc:  denied  { remount } for  pid=2333 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   64.587290][  T678] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   64.600271][  T678] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   64.646851][   T36] audit: type=1400 audit(1756878822.670:413): avc:  denied  { write } for  pid=2340 comm="syz.5.725" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   64.771016][ T2363] 9pnet_fd: Insufficient options for proto=fd
[   64.804242][ T2367] fuse: Bad value for 'fd'
[   64.834498][   T36] audit: type=1400 audit(1756878822.850:414): avc:  denied  { setopt } for  pid=2370 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   64.854792][   T36] audit: type=1400 audit(1756878822.860:415): avc:  denied  { bind } for  pid=2370 comm="syz.2.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   64.889787][ T2378] overlayfs: failed to clone upperpath
[   65.483297][ T2463] 9pnet_fd: Insufficient options for proto=fd
[   65.530337][ T2472] /dev/loop0: Can't lookup blockdev
[   65.535046][ T2476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'.
[   65.578491][ T2484] SELinux:  Context system_u:object_r:ld_so_cache_t:s0 is not valid (left unmapped).
[   65.627068][ T2502] FAT-fs (rnullb0): bogus number of reserved sectors
[   65.634281][ T2502] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   66.075117][  T678] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   66.076133][ T2519] overlayfs: failed to resolve './cgroup.cpu/cpuset.cpus': -2
[   66.128278][ T2525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[   66.137248][ T2525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[   66.146261][ T2525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[   66.155282][ T2525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[   66.164431][ T2525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[   66.173612][ T2525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[   66.182912][ T2525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[   66.192612][ T2525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[   66.202089][ T2525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[   66.235121][  T678] usb 6-1: Using ep0 maxpacket: 16
[   66.243646][  T678] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[   66.252312][  T678] usb 6-1: config 0 has no interface number 0
[   66.265228][  T678] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[   66.275660][  T678] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   66.289681][  T678] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   66.299758][  T678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.308110][  T678] usb 6-1: Product: syz
[   66.312895][  T678] usb 6-1: Manufacturer: syz
[   66.317560][  T678] usb 6-1: SerialNumber: syz
[   66.322966][  T678] usb 6-1: config 0 descriptor??
[   66.328565][ T2515] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   66.336040][ T2515] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   66.545320][ T2515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.554568][ T2515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.563418][ T2515] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   66.570779][ T2515] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   66.584760][ T2541] netlink: 'syz.1.792': attribute type 4 has an invalid length.
[   66.980475][  T678] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[   66.991307][  T678] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61
[   67.004204][  T678] asix 6-1:0.251: probe with driver asix failed with error -61
[   67.193816][  T678] usb 6-1: USB disconnect, device number 5
[   67.341589][ T2559] netlink: 'syz.0.798': attribute type 5 has an invalid length.
[   67.350775][   T36] kauditd_printk_skb: 4 callbacks suppressed
[   67.350795][   T36] audit: type=1400 audit(1756878825.370:420): avc:  denied  { mount } for  pid=2558 comm="syz.0.798" name="/" dev="configfs" ino=2239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   67.380647][   T36] audit: type=1400 audit(1756878825.370:421): avc:  denied  { search } for  pid=2558 comm="syz.0.798" name="/" dev="configfs" ino=2239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   67.403800][   T36] audit: type=1400 audit(1756878825.370:422): avc:  denied  { read } for  pid=2558 comm="syz.0.798" name="/" dev="configfs" ino=2239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   67.431004][   T36] audit: type=1400 audit(1756878825.370:423): avc:  denied  { open } for  pid=2558 comm="syz.0.798" path="/" dev="configfs" ino=2239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   67.805465][   T36] audit: type=1400 audit(1756878825.830:424): avc:  denied  { listen } for  pid=2594 comm="syz.5.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   68.125880][   T36] audit: type=1400 audit(1756878826.140:425): avc:  denied  { getopt } for  pid=2615 comm="syz.1.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   68.237882][   T36] audit: type=1400 audit(1756878826.260:426): avc:  denied  { getopt } for  pid=2633 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   68.274403][   T36] audit: type=1400 audit(1756878826.280:427): avc:  denied  { create } for  pid=2638 comm="syz.0.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[   68.323050][   T36] audit: type=1400 audit(1756878826.340:428): avc:  denied  { ioctl } for  pid=2642 comm="syz.5.826" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   69.067076][ T2698] tmpfs: Bad value for 'nr_inodes'
[   69.172233][ T2715] rust_binder: Failed copying into alloc: EFAULT
[   69.172268][ T2715] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   69.181568][ T2715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   69.190155][ T2715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:124
[   69.680777][   T36] audit: type=1400 audit(1756878827.700:429): avc:  denied  { create } for  pid=2729 comm="syz.0.859" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   70.279984][ T2766] overlayfs: failed to clone upperpath
[   70.295323][  T329] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[   70.446658][  T329] usb 6-1: unable to get BOS descriptor or descriptor too short
[   70.454788][  T329] usb 6-1: not running at top speed; connect to a high speed hub
[   70.458587][ T2777] netlink: 'syz.1.875': attribute type 4 has an invalid length.
[   70.463712][  T329] usb 6-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   70.484075][  T329] usb 6-1: config 1 interface 0 has no altsetting 0
[   70.494410][  T329] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   70.504025][  T329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.512439][  T329] usb 6-1: Manufacturer: 탈ᖩ쒸阡翀⎇碭밨񦅡
[   70.519580][  T329] usb 6-1: SerialNumber: syz
[   70.735283][  T329] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8
[   70.761247][  T329] usb 6-1: USB disconnect, device number 6
[   70.776863][  T329] usblp0: removed
[   71.124435][ T2815] 9pnet: p9_errstr2errno: server reported unknown error 

[   71.207702][ T2829] /dev/loop0: Can't lookup blockdev
[   71.485544][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   71.635158][   T10] usb 6-1: Using ep0 maxpacket: 16
[   71.647530][   T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   71.656745][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.664889][   T10] usb 6-1: Product: syz
[   71.669206][   T10] usb 6-1: Manufacturer: syz
[   71.673918][   T10] usb 6-1: SerialNumber: syz
[   71.674874][ T2850] __nla_validate_parse: 60 callbacks suppressed
[   71.674896][ T2850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.903'.
[   71.684003][   T10] r8152-cfgselector 6-1: Unknown version 0x0000
[   71.701127][   T10] r8152-cfgselector 6-1: config 0 descriptor??
[   71.909552][   T10] r8152-cfgselector 6-1: Needed 1 retries to read version
[   71.916900][   T10] r8152-cfgselector 6-1: Unknown version 0x4830
[   71.923416][   T10] r8152-cfgselector 6-1: bad CDC descriptors
[   72.119741][  T679] r8152-cfgselector 6-1: USB disconnect, device number 7
[   72.268326][ T2896] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.644989][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   72.654652][   T10] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   72.700019][   T36] kauditd_printk_skb: 17 callbacks suppressed
[   72.700038][   T36] audit: type=1400 audit(1756878830.720:447): avc:  denied  { listen } for  pid=2907 comm="syz.5.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   73.133354][ T2919] overlayfs: failed to clone upperpath
[   73.532415][ T2939] netlink: 'syz.0.932': attribute type 63 has an invalid length.
[   73.540486][ T2939] netlink: 5 bytes leftover after parsing attributes in process `syz.0.932'.
[   73.549751][ T2939] gretap0: entered allmulticast mode
[   73.555825][ T2939] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   73.599635][ T2941] netlink: 'syz.0.933': attribute type 4 has an invalid length.
[   73.616901][ T2944] can0: slcan on ptm0.
[   73.621126][   T36] audit: type=1400 audit(1756878831.640:448): avc:  denied  { read } for  pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   73.650639][   T36] audit: type=1400 audit(1756878831.640:449): avc:  denied  { search } for  pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.675346][   T36] audit: type=1400 audit(1756878831.640:450): avc:  denied  { read } for  pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=2207 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   73.704225][   T36] audit: type=1400 audit(1756878831.640:451): avc:  denied  { open } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2207 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   73.735886][ T2946] can0 (unregistered): slcan off ptm0.
[   73.767815][   T36] audit: type=1400 audit(1756878831.640:452): avc:  denied  { getattr } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2207 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   73.807846][   T36] audit: type=1400 audit(1756878831.690:453): avc:  denied  { read } for  pid=2950 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.834069][   T36] audit: type=1400 audit(1756878831.690:454): avc:  denied  { open } for  pid=2950 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.871936][   T36] audit: type=1400 audit(1756878831.690:455): avc:  denied  { getattr } for  pid=2950 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.904063][   T36] audit: type=1400 audit(1756878831.770:456): avc:  denied  { write } for  pid=2949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   74.032943][ T2991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.281339][ T3006] overlayfs: failed to clone lowerpath
[   74.288054][ T3006] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.946'.
[   74.300481][ T3007] overlayfs: failed to clone lowerpath
[   74.713422][ T3028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'.
[   74.722967][ T3028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3028 comm=syz.0.954
[   74.955375][ T3045] overlay: filesystem on ./bus is read-only
[   75.558594][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   75.877192][ T3080] /dev/loop0: Can't lookup blockdev
[   75.906432][ T3084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'.
[   77.483468][ T3127] syz.0.987: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[   77.498271][ T3127] CPU: 0 UID: 0 PID: 3127 Comm: syz.0.987 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02
[   77.498305][ T3127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   77.498330][ T3127] Call Trace:
[   77.498339][ T3127]  <TASK>
[   77.498349][ T3127]  __dump_stack+0x21/0x30
[   77.498397][ T3127]  dump_stack_lvl+0x10c/0x190
[   77.498431][ T3127]  ? __cfi_dump_stack_lvl+0x10/0x10
[   77.498466][ T3127]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   77.498504][ T3127]  dump_stack+0x19/0x20
[   77.498535][ T3127]  warn_alloc+0x1bc/0x2a0
[   77.498567][ T3127]  ? stack_depot_save_flags+0x399/0x800
[   77.498593][ T3127]  ? __cfi_warn_alloc+0x10/0x10
[   77.498624][ T3127]  ? kasan_save_track+0x4f/0x80
[   77.498649][ T3127]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[   77.498687][ T3127]  ? xskq_create+0x68/0x2a0
[   77.498708][ T3127]  ? xsk_init_queue+0xb6/0x120
[   77.498728][ T3127]  ? xsk_setsockopt+0x43f/0x6f0
[   77.498761][ T3127]  ? do_sock_setsockopt+0x26a/0x400
[   77.498785][ T3127]  ? __x64_sys_setsockopt+0x1b8/0x250
[   77.498807][ T3127]  ? x64_sys_call+0x2adc/0x2ee0
[   77.498844][ T3127]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   77.498873][ T3127]  __vmalloc_node_range_noprof+0x135/0x1420
[   77.498912][ T3127]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   77.498947][ T3127]  ? avc_has_perm+0x144/0x220
[   77.498982][ T3127]  ? kasan_save_alloc_info+0x40/0x50
[   77.499015][ T3127]  ? __kasan_kmalloc+0x96/0xb0
[   77.499042][ T3127]  vmalloc_user_noprof+0x77/0x90
[   77.499076][ T3127]  ? xskq_create+0xdb/0x2a0
[   77.499100][ T3127]  xskq_create+0xdb/0x2a0
[   77.499124][ T3127]  xsk_init_queue+0xb6/0x120
[   77.499148][ T3127]  xsk_setsockopt+0x43f/0x6f0
[   77.499186][ T3127]  ? __cfi_xsk_setsockopt+0x10/0x10
[   77.499224][ T3127]  ? do_futex+0x309/0x500
[   77.499262][ T3127]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[   77.499294][ T3127]  ? security_socket_setsockopt+0x33/0xd0
[   77.499316][ T3127]  ? __cfi_xsk_setsockopt+0x10/0x10
[   77.499353][ T3127]  do_sock_setsockopt+0x26a/0x400
[   77.499377][ T3127]  ? __cfi_do_sock_setsockopt+0x10/0x10
[   77.499403][ T3127]  __x64_sys_setsockopt+0x1b8/0x250
[   77.499428][ T3127]  x64_sys_call+0x2adc/0x2ee0
[   77.499464][ T3127]  do_syscall_64+0x58/0xf0
[   77.499497][ T3127]  ? clear_bhb_loop+0x50/0xa0
[   77.499526][ T3127]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   77.499553][ T3127] RIP: 0033:0x7fbaaaf8ebe9
[   77.499583][ T3127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.499606][ T3127] RSP: 002b:00007fbaabe57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   77.499634][ T3127] RAX: ffffffffffffffda RBX: 00007fbaab1c5fa0 RCX: 00007fbaaaf8ebe9
[   77.499652][ T3127] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   77.499669][ T3127] RBP: 00007fbaab011e19 R08: 0000000000000004 R09: 0000000000000000
[   77.499685][ T3127] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.499702][ T3127] R13: 00007fbaab1c6038 R14: 00007fbaab1c5fa0 R15: 00007ffe7c724718
[   77.499724][ T3127]  </TASK>
[   77.499738][ T3127] Mem-Info:
[   77.575147][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   77.578572][  T926] Bluetooth: hci0: command 0x1003 tx timeout
[   77.582966][ T3127] active_anon:13206 inactive_anon:2 isolated_anon:0
[   77.582966][ T3127]  active_file:21028 inactive_file:2993 isolated_file:0
[   77.582966][ T3127]  unevictable:16362 dirty:12 writeback:0
[   77.582966][ T3127]  slab_reclaimable:6247 slab_unreclaimable:71544
[   77.582966][ T3127]  mapped:29094 shmem:7109 pagetables:1170
[   77.582966][ T3127]  sec_pagetables:0 bounce:0
[   77.582966][ T3127]  kernel_misc_reclaimable:0
[   77.582966][ T3127]  free:1495900 free_pcp:6858 free_cma:0
[   77.868039][ T3127] Node 0 active_anon:41220kB inactive_anon:8kB active_file:84112kB inactive_file:11972kB unevictable:65448kB isolated(anon):0kB isolated(file):0kB mapped:106536kB dirty:48kB writeback:0kB shmem:16956kB shmem_thp:6144kB shmem_pmdmapped:4096kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5544kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no
[   77.901822][ T3127] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:5672kB free_cma:0kB
[   77.933073][ T3127] lowmem_reserve[]: 0 3921 3921
[   77.938625][ T3127] Normal free:3027984kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41344kB inactive_anon:8kB active_file:84112kB inactive_file:11972kB unevictable:65448kB writepending:48kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:29292kB local_pcp:1616kB free_cma:0kB
[   77.971847][ T3127] lowmem_reserve[]: 0 0 0
[   77.977462][ T3127] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[   77.997193][   T36] kauditd_printk_skb: 17 callbacks suppressed
[   77.997214][   T36] audit: type=1400 audit(1756878836.020:474): avc:  denied  { write } for  pid=3139 comm="syz.5.992" name="netlink" dev="proc" ino=4026532312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   78.002543][ T3127] Normal: 3*4kB (UE) 404*8kB (UME) 537*16kB (UME) 372*32kB (UME) 320*64kB (UME) 87*128kB (ME) 31*256kB (UME) 32*512kB (UME) 19*1024kB (ME) 7*2048kB (ME) 718*4096kB (M) = 3054396kB
[   78.045222][ T3127] 44621 total pagecache pages
[   78.049959][ T3127] 2 pages in swap cache
[   78.054234][ T3127] Free swap  = 118492kB
[   78.065118][ T3127] Total swap = 124996kB
[   78.069418][ T3127] 2097051 pages RAM
[   78.074744][ T3127] 0 pages HighMem/MovableOnly
[   78.079985][ T3127] 351533 pages reserved
[   78.086946][ T3127] 0 pages cma reserved
[   78.098238][ T3127] Memory allocations:
[   78.104315][ T3127]          0 B        0 init/main.c:1370 func:do_initcalls
[   78.112141][ T3127]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   78.120687][ T3127]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   78.131393][ T3154] syz.5.997: attempt to access beyond end of device
[   78.131393][ T3154] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[   78.144441][ T3127]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   78.152441][ T3127]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   78.159714][ T3154] FAT-fs (loop5): unable to read boot sector
[   78.160995][ T3127]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   78.177132][ T3127]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   78.186475][ T3127]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   78.194757][ T3127]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   78.209863][ T3127]          0 B        0 init/initramfs.c:101 func:find_link
[   78.318780][   T36] audit: type=1400 audit(1756878836.340:475): avc:  denied  { relabelfrom } for  pid=3185 comm="syz.1.1009" name="NETLINK" dev="sockfs" ino=16083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   78.687844][   T36] audit: type=1400 audit(1756878836.710:476): avc:  denied  { accept } for  pid=3218 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   78.888289][   T36] audit: type=1400 audit(1756878836.910:477): avc:  denied  { execute } for  pid=3224 comm="syz.0.1024" path=2F6D656D66643A9D23202864656C6574656429 dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   78.924363][   T36] audit: type=1326 audit(1756878836.940:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3224 comm="syz.0.1024" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbaaaf8ebe9 code=0x0
[   79.887068][ T3266] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer.
[   79.975148][   T36] audit: type=1400 audit(1756878837.990:479): avc:  denied  { execute } for  pid=3269 comm="syz.5.1040" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   80.220155][ T3282] fuse: Bad value for 'fd'
[   80.443277][ T3317] fuseblk: Unknown parameter '0x00000000000000000x0000000000000004'
[   80.449533][   T36] audit: type=1400 audit(1756878838.460:480): avc:  denied  { mounton } for  pid=3316 comm="syz.5.1061" path="/72/file0" dev="tmpfs" ino=402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   80.571717][ T3334] rust_binder: Error while translating object.
[   80.571745][ T3334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   80.578108][ T3334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:215
[   80.995183][  T329] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   81.155187][  T329] usb 6-1: Using ep0 maxpacket: 16
[   81.162296][  T329] usb 6-1: unable to read config index 0 descriptor/start: -61
[   81.170109][  T329] usb 6-1: can't read configurations, error -61
[   81.250731][ T3370] tmpfs: Unknown parameter 'no'
[   81.305243][  T329] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   81.455215][  T329] usb 6-1: Using ep0 maxpacket: 16
[   81.462605][  T329] usb 6-1: unable to read config index 0 descriptor/start: -61
[   81.471267][  T329] usb 6-1: can't read configurations, error -61
[   81.479388][  T329] usb usb6-port1: attempt power cycle
[   81.633141][ T3382] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=3382 comm=syz.1.1084
[   81.712965][   T36] audit: type=1326 audit(1756878839.724:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.1.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f38ebe9 code=0x7fc00000
[   81.737321][   T36] audit: type=1326 audit(1756878839.744:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.1.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a7f38ebe9 code=0x7fc00000
[   81.825298][  T329] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   81.845543][  T329] usb 6-1: Using ep0 maxpacket: 16
[   81.852440][  T329] usb 6-1: unable to read config index 0 descriptor/start: -61
[   81.864409][  T329] usb 6-1: can't read configurations, error -61
[   82.005181][  T329] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   82.025644][  T329] usb 6-1: Using ep0 maxpacket: 16
[   82.033014][  T329] usb 6-1: unable to read config index 0 descriptor/start: -61
[   82.040862][  T329] usb 6-1: can't read configurations, error -61
[   82.047295][  T329] usb usb6-port1: unable to enumerate USB device
[   82.493990][   T36] audit: type=1326 audit(1756878840.504:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.1.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f38ebe9 code=0x7fc00000
[   83.729879][   T36] audit: type=1400 audit(1756878841.744:484): avc:  denied  { accept } for  pid=3429 comm="syz.0.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   83.950054][   T36] audit: type=1400 audit(1756878841.964:485): avc:  denied  { wake_alarm } for  pid=3458 comm="syz.5.1112" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   84.331907][   T36] audit: type=1400 audit(1756878842.344:486): avc:  denied  { mounton } for  pid=3493 comm="syz.1.1123" path="/282/file0" dev="tmpfs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   84.331919][ T3494] sockfs: Unknown parameter 'check'
[   84.814185][ T3504] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=513 sclass=netlink_xfrm_socket pid=3504 comm=syz.2.1127
[   84.828539][ T3504] 9pnet_fd: Insufficient options for proto=fd
[   84.935906][ T3528] netlink: 'syz.2.1139': attribute type 58 has an invalid length.
[   85.155195][  T329] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   85.306866][  T329] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   85.318885][  T329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   85.330036][  T329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   85.340720][  T329] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   85.353043][ T3543] fuse: Bad value for 'fd'
[   85.354742][  T329] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   85.368863][  T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.381477][  T329] usb 6-1: config 0 descriptor??
[   85.563189][ T3563] tmpfs: Unknown parameter 'fowner>00000000000000000000'
[   85.898491][ T3566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.907559][ T3566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.975118][  T329] usbhid 6-1:0.0: can't add hid device: -71
[   85.981680][  T329] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   85.992867][  T329] usb 6-1: USB disconnect, device number 13
[   86.040742][ T3575] netlink: 'syz.2.1158': attribute type 4 has an invalid length.
[   86.050843][ T3576] netlink: 'syz.2.1158': attribute type 4 has an invalid length.
[   86.094688][ T3587] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1162'.
[   86.149032][   T36] audit: type=1400 audit(1756878844.164:487): avc:  denied  { create } for  pid=3593 comm="syz.2.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   86.210672][ T3609] netlink: 'syz.2.1170': attribute type 58 has an invalid length.
[   86.694125][   T36] audit: type=1400 audit(1756878844.704:488): avc:  denied  { accept } for  pid=3632 comm="syz.1.1179" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   87.044593][ T3651] EXT4-fs: dax option not supported
[   87.195150][  T678] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[   87.225153][   T36] audit: type=1326 audit(1756878845.234:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.1.1189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a7f38ebe9 code=0x0
[   87.362636][  T678] usb 6-1: Using ep0 maxpacket: 32
[   87.426064][  T678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.445640][  T678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.462731][  T678] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   87.472693][  T678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.486054][  T678] usb 6-1: config 0 descriptor??
[   87.896022][  T678] hid-led 0003:27B8:01ED.0004: item fetching failed at offset 0/2
[   87.909752][  T678] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -22
[   88.095530][  T678] usb 6-1: USB disconnect, device number 14
[   88.473058][ T3690] overlayfs: failed to clone upperpath
[   88.644147][ T3708] overlayfs: failed to clone upperpath
[   88.789338][ T3716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'.
[   88.875151][  T678] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[   89.025153][  T678] usb 6-1: Using ep0 maxpacket: 16
[   89.032128][  T678] usb 6-1: unable to get BOS descriptor or descriptor too short
[   89.040625][  T678] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   89.053613][  T678] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[   89.066391][  T678] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   89.075709][  T678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.083718][  T678] usb 6-1: Product: syz
[   89.088153][  T678] usb 6-1: Manufacturer: syz
[   89.092986][  T678] usb 6-1: SerialNumber: syz
[   89.204858][ T3735] /dev/loop0: Can't lookup blockdev
[   89.256785][ T3744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1222'.
[   89.266524][ T3744] 9pnet_fd: Insufficient options for proto=fd
[   89.301185][ T3706] rust_binder: Error while translating object.
[   89.301236][ T3706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   89.307941][ T3706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265
[   89.321319][   T36] audit: type=1400 audit(1756878847.334:490): avc:  denied  { write } for  pid=3705 comm="syz.5.1207" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   89.346046][ T3706] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   89.352833][   T36] audit: type=1400 audit(1756878847.334:491): avc:  denied  { open } for  pid=3705 comm="syz.5.1207" path="/90/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   89.362501][ T3752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3752 comm=syz.1.1226
[   89.384887][  T678] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   89.409858][  T678] usb 6-1: USB disconnect, device number 15
[   89.439063][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   89.464744][ T3758] overlayfs: failed to clone lowerpath
[   89.532522][   T36] audit: type=1400 audit(1756878847.544:492): avc:  denied  { bind } for  pid=3768 comm="syz.0.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   89.570827][   T36] audit: type=1400 audit(1756878847.574:493): avc:  denied  { setopt } for  pid=3768 comm="syz.0.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   89.768299][   T13] bridge_slave_1: left allmulticast mode
[   89.774147][   T13] bridge_slave_1: left promiscuous mode
[   89.781496][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.794737][   T13] bridge_slave_0: left allmulticast mode
[   89.800782][   T13] bridge_slave_0: left promiscuous mode
[   89.809372][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.938357][ T3785] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.952157][ T3785] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.963045][ T3785] bridge_slave_0: entered allmulticast mode
[   89.969759][ T3785] bridge_slave_0: entered promiscuous mode
[   89.978034][   T13] veth1_macvtap: left promiscuous mode
[   89.983668][   T13] veth0_vlan: left promiscuous mode
[   90.064038][ T3785] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.071453][ T3785] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.081485][ T3785] bridge_slave_1: entered allmulticast mode
[   90.088700][ T3785] bridge_slave_1: entered promiscuous mode
[   90.118577][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.118611][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.130026][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.132231][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.139012][ T3825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   90.151126][ T3825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275
[   90.155805][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.165690][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.171644][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.179414][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.184830][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.191485][ T3825] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   90.191588][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.198015][ T3825] rust_binder: Read failure Err(EFAULT) in pid:275
[   90.206424][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.220158][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.232133][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.233826][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.241554][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.249969][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.256781][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.273465][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.273490][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.280806][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.300013][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.300040][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.308521][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.323737][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.334677][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.348325][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.354900][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.363689][ T3785] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.377934][ T3785] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.378357][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.385912][ T3785] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.386109][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.392369][ T3785] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.400042][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.415393][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.422069][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.430211][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.437306][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.444216][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.444232][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.452428][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.465477][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.469065][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.472337][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.478887][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.500237][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.500264][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.506801][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.513375][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.520341][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.528663][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.535721][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.539373][ T3785] veth0_vlan: entered promiscuous mode
[   90.542386][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.542405][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.559879][ T3785] veth1_macvtap: entered promiscuous mode
[   90.562098][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.575240][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.581791][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.588542][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.597196][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.604263][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.611264][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.618599][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.625458][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.632041][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.638980][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.645538][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.652226][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.659034][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.665562][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.672105][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.678795][ T3826] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   90.688143][ T3848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=3848 comm=syz.6.1238
[   90.707994][ T3848] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1238'.
[   90.783166][ T3853] rust_binder: Error while translating object.
[   90.783208][ T3853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   90.790269][ T3853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282
[   90.899296][ T3869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1265'.
[   90.985346][ T3891] incfs: Error accessing: /dev/nullb0.
[   90.992914][ T3891] incfs: mount failed -2
[   91.055141][   T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   91.070828][ T3913] rust_binder: Error while translating object.
[   91.070865][ T3913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   91.077718][ T3913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:303
[   91.096269][ T3913] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1274'.
[   91.141060][   T36] audit: type=1400 audit(1756878849.154:494): avc:  denied  { unmount } for  pid=1816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   91.215125][   T10] usb 7-1: Using ep0 maxpacket: 8
[   91.225260][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[   91.234852][   T10] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[   91.251819][   T10] usb 7-1: config 0 has an invalid descriptor of length 156, skipping remainder of the config
[   91.263282][   T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   91.274872][   T10] usb 7-1: string descriptor 0 read error: -22
[   91.281297][   T10] usb 7-1: New USB device found, idVendor=6a60, idProduct=00b8, bcdDevice=96.31
[   91.291069][   T10] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   91.303093][   T10] usb 7-1: config 0 descriptor??
[   91.337870][ T3932] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1284'.
[   91.388000][ T3937] netlink: 'syz.2.1286': attribute type 11 has an invalid length.
[   91.396036][ T3937] netlink: 'syz.2.1286': attribute type 1 has an invalid length.
[   91.403818][ T3937] netlink: 3593 bytes leftover after parsing attributes in process `syz.2.1286'.
[   91.511543][   T10] usb 7-1: USB disconnect, device number 2
[   91.605134][  T329] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[   91.756337][  T329] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   91.765634][  T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.774402][  T329] usb 6-1: config 0 descriptor??
[   91.959387][ T3943] fuse: Bad value for 'user_id'
[   91.964625][ T3943] fuse: Bad value for 'user_id'
[   91.971663][ T3943] overlayfs: failed to clone upperpath
[   91.982715][  T329] usb 6-1: Cannot read MAC address
[   92.003391][  T329] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   92.016358][ T3950] bpf: Bad value for 'gid'
[   92.017589][  T329] usb 6-1: USB disconnect, device number 16
[   92.050105][ T3954] overlayfs: failed to clone lowerpath
[   92.130197][ T3967] x_tables: unsorted underflow at hook 2
[   92.501371][ T3987] rust_binder: Write failure EFAULT in pid:23
[   92.775173][   T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   92.811662][   T36] audit: type=1400 audit(1756878850.824:495): avc:  denied  { execute_no_trans } for  pid=4018 comm="syz.5.1317" path="/108/file0" dev="tmpfs" ino=594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   92.813004][ T4019] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   92.945125][   T31] usb 7-1: Using ep0 maxpacket: 32
[   92.952054][   T31] usb 7-1: unable to get BOS descriptor or descriptor too short
[   92.961173][   T31] usb 7-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64
[   92.971603][   T31] usb 7-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   92.985529][   T31] usb 7-1: config 1 interface 0 has no altsetting 0
[   92.994949][   T31] usb 7-1: string descriptor 0 read error: -22
[   93.001736][   T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   93.011304][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.021797][ T3996] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[   93.029480][ T3996] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[   93.088747][ T4029] rust_binder: Write failure EFAULT in pid:327
[   93.108714][ T4033] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=37
[   93.115044][ T4033] rust_binder: Error while translating object.
[   93.124287][ T4033] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   93.130584][ T4033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:329
[   93.239119][ T3996] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[   93.262228][   T31] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8
[   93.278700][   T31] usb 7-1: USB disconnect, device number 3
[   93.287560][   T31] usblp0: removed
[   93.360603][   T36] audit: type=1400 audit(1756878851.374:496): avc:  denied  { append } for  pid=4054 comm="syz.5.1328" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   94.498089][ T4119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63646 sclass=netlink_route_socket pid=4119 comm=syz.5.1351
[   94.537369][ T4132] overlayfs: failed to clone upperpath
[   94.604582][ T4142] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   94.612408][ T4142] rust_binder: 356: no such ref 0
[   94.705692][ T4151] tipc: Started in network mode
[   94.715223][ T4151] tipc: Node identity aa77965a04d1, cluster identity 4711
[   94.726718][ T4151] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96
[   94.741574][ T4151] tipc: Enabled bearer <eth:xfrm0>, priority 10
[   94.752217][ T4156] rust_binder: Write failure EFAULT in pid:368
[   94.797460][ T4165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1365'.
[   94.863051][ T4175] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[   94.870616][ T4175] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   94.919558][ T4177] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[   94.960487][ T4185] rust_binder: Write failure EFAULT in pid:54
[   94.979261][   T36] audit: type=1400 audit(1756878852.994:497): avc:  denied  { unmount } for  pid=1816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   95.016839][ T4188] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1373'.
[   95.027187][ T4188] rust_binder: inc_ref_done called when no active inc_refs
[   95.028396][ T4189] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1373'.
[   95.087589][ T4200] overlayfs: missing 'lowerdir'
[   95.170685][ T4205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63
[   95.202353][ T4209] x_tables: unsorted underflow at hook 3
[   95.219041][ T4208] netlink: 'syz.6.1379': attribute type 4 has an invalid length.
[   95.392300][ T4221] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1384'.
[   95.401429][   T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[   95.401437][ T4221] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1384'.
[   95.418290][ T4221] netlink: 'syz.6.1384': attribute type 5 has an invalid length.
[   95.426315][ T4221] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1384'.
[   95.546576][   T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.557061][   T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.566909][   T31] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   95.576225][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   95.584338][   T31] usb 6-1: SerialNumber: syz
[   95.793403][   T31] usb 6-1: 0:2 : does not exist
[   95.798634][   T31] usb 6-1: unit 5 not found!
[   95.804979][   T31] usb 6-1: USB disconnect, device number 17
[   95.815239][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   95.855120][  T725] tipc: Node number set to 2930153050
[   95.859060][ T4228] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   96.005697][ T4241] rust_binder: Write failure EFAULT in pid:403
[   96.013322][ T4241] rust_binder: Write failure EFAULT in pid:403
[   96.053950][ T4249] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false
[   96.101310][ T4253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=4253 comm=syz.5.1394
[   96.126870][ T4253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=4253 comm=syz.5.1394
[   96.140991][ T4253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=4253 comm=syz.5.1394
[   96.154891][ T4253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=4253 comm=syz.5.1394
[   96.259466][   T36] audit: type=1400 audit(1756878854.274:498): avc:  denied  { connect } for  pid=4263 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   96.595193][ T4290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:428
[   96.932583][ T4299] overlayfs: failed to clone upperpath
[   96.999582][ T4310] fuseblk: Unknown parameter '��:*�00000000000000000000'
[   97.343325][   T10] rust_binder: 4289: removing orphan mapping 0:24
[   97.451453][ T4359] 9pnet_fd: Insufficient options for proto=fd
[   97.529070][ T4376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'.
[   97.536063][ T4357] 9pnet_fd: Insufficient options for proto=fd
[   97.545086][   T36] audit: type=1400 audit(1756878855.544:499): avc:  denied  { mounton } for  pid=4356 comm="syz.5.1424" path="/145/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   97.641956][ T4381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4381 comm=syz.0.1430
[   97.890029][ T4394] __vm_enough_memory: pid: 4394, comm: syz.6.1436, bytes: 18014402804453376 not enough memory for the allocation
[   98.384217][   T36] audit: type=1326 audit(1756878856.394:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   98.408990][   T36] audit: type=1326 audit(1756878856.394:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   98.433864][   T36] audit: type=1326 audit(1756878856.394:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   98.458484][   T36] audit: type=1326 audit(1756878856.394:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   98.482990][   T36] audit: type=1326 audit(1756878856.394:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   98.506887][   T36] audit: type=1326 audit(1756878856.394:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   98.530983][   T36] audit: type=1326 audit(1756878856.394:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.0.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8ebe9 code=0x7ffc0000
[   98.712197][ T4437] /dev/loop0: Can't lookup blockdev
[   99.526170][ T4460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4460 comm=syz.2.1457
[   99.541354][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   99.567547][ T4475] tipc: New replicast peer: 255.255.255.255
[   99.573970][ T4475] tipc: Enabled bearer <udp:syz2>, priority 10
[   99.580772][ T4475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1462'.
[   99.590232][ T4475] tipc: Disabling bearer <udp:syz2>
[   99.597267][ T4475] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1462'.
[   99.776919][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'.
[   99.785966][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'.
[   99.924918][ T4553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5 sclass=netlink_audit_socket pid=4553 comm=syz.2.1488
[   99.939190][ T4553] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  100.017882][   T36] kauditd_printk_skb: 15 callbacks suppressed
[  100.017902][   T36] audit: type=1400 audit(1756878858.034:522): avc:  denied  { create } for  pid=4558 comm="syz.2.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  100.126368][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1492'.
[  100.629330][ T4609] cgroup: fork rejected by pids controller in /syz0
[  101.565155][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  101.565194][  T925] Bluetooth: hci0: command 0x1003 tx timeout
[  101.686822][ T4670] 9pnet_fd: Insufficient options for proto=fd
[  101.719462][ T4675] SELinux: security_context_str_to_sid () failed with errno=-22
[  101.741320][ T4677] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  101.749204][ T4677] rust_binder: 468: no such ref 1
[  102.685410][   T53] Bluetooth: hci1: command 0x1003 tx timeout
[  102.685455][  T926] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  102.719313][   T36] audit: type=1400 audit(1756878860.724:523): avc:  denied  { map } for  pid=4696 comm="syz.6.1526" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  103.304246][ T4709] FAT-fs (rnullb0): bogus number of reserved sectors
[  103.311123][ T4709] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  103.319960][   T36] audit: type=1400 audit(1756878861.344:524): avc:  denied  { write } for  pid=4708 comm="syz.5.1530" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  103.320041][ T4709] random: crng reseeded on system resumption
[  103.357274][   T36] audit: type=1400 audit(1756878861.344:525): avc:  denied  { open } for  pid=4708 comm="syz.5.1530" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  103.605019][ T4734] rust_binder: Error while translating object.
[  103.605090][ T4734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  103.611515][ T4734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:499
[  103.631532][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  103.648586][ T4741] rust_binder: Error while translating object.
[  103.648628][ T4741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  103.654520][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  103.670743][ T4741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:504
[  103.702343][ T4748] random: crng reseeded on system resumption
[  103.702844][   T36] audit: type=1400 audit(1756878861.714:526): avc:  denied  { append } for  pid=4747 comm="syz.5.1541" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  103.946092][ T4752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4752 comm=syz.2.1543
[  103.995105][   T31] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  104.145118][   T31] usb 6-1: Using ep0 maxpacket: 16
[  104.151522][   T31] usb 6-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config
[  104.162218][   T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  104.172714][   T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  104.181991][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.190602][   T31] usb 6-1: Product: syz
[  104.194794][   T31] usb 6-1: Manufacturer: syz
[  104.199450][   T31] usb 6-1: SerialNumber: syz
[  105.596554][ T4784] x_tables: unsorted underflow at hook 3
[  105.645105][  T926] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  105.645112][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[  105.675531][   T36] audit: type=1400 audit(2000000000.230:527): avc:  denied  { execute } for  pid=4794 comm="syz.2.1560" name="file2" dev="ramfs" ino=22259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  105.697482][   T36] audit: type=1400 audit(2000000000.230:528): avc:  denied  { execute_no_trans } for  pid=4794 comm="syz.2.1560" path="/file2" dev="ramfs" ino=22259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  105.720849][   T36] audit: type=1326 audit(2000000000.260:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07dd8ebe9 code=0x7ffc0000
[  105.744405][   T36] audit: type=1326 audit(2000000000.260:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07dd8ebe9 code=0x7ffc0000
[  105.767914][   T36] audit: type=1326 audit(2000000000.260:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07dd8ebe9 code=0x7ffc0000
[  105.791618][   T36] audit: type=1326 audit(2000000000.260:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07dd8ebe9 code=0x7ffc0000
[  105.815332][   T36] audit: type=1326 audit(2000000000.260:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc07dd8ebe9 code=0x7ffc0000
[  105.838963][   T36] audit: type=1326 audit(2000000000.260:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07dd8ebe9 code=0x7ffc0000
[  105.862514][   T36] audit: type=1326 audit(2000000000.260:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07dd8ebe9 code=0x7ffc0000
[  105.869793][ T4814] overlayfs: failed to clone upperpath
[  105.887612][   T36] audit: type=1326 audit(2000000000.260:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07dd8ebe9 code=0x7ffc0000
[  105.925131][  T725] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  105.933318][ T4818] 9pnet_fd: Insufficient options for proto=fd
[  106.076364][  T725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.087361][  T725] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  106.096781][  T725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.106349][  T725] usb 7-1: config 0 descriptor??
[  106.516491][  T725] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  106.528251][  T725] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0005/input/input10
[  106.605691][  T725] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[  106.624204][ T4853] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  106.706760][   T31] usb 6-1: 0:2 : does not exist
[  106.714819][   T31] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  106.730311][   T31] usb 6-1: USB disconnect, device number 18
[  106.749204][  T346] udevd[346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  106.793479][ T4864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:512
[  107.036265][  T725] usb 7-1: USB disconnect, device number 5
Stopping sshd: stopped /usr/sbin/sshd (pid 201)
OK
Stopping crond: stopped /usr/sbin/crond (pid 193)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 147)
Stopping network: OK
Stopping iptables: OK
Stopping system message bus: done
[  107.447167][ T4919] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1594'.
Stopping klogd: OK
Stopping acpid: [  107.825155][  T725] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  107.975109][  T725] usb 7-1: Using ep0 maxpacket: 8
[  107.982255][  T725] usb 7-1: config index 0 descriptor too short (expected 5924, got 36)
[  107.991474][  T725] usb 7-1: config 250 has an invalid interface number: 228 but max is -1
[  108.000169][  T725] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0
[  108.010226][  T725] usb 7-1: config 250 has no interface number 0
[  108.016902][  T725] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  108.029060][  T725] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  108.035149][  T679] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  108.039777][  T725] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  108.057751][  T725] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  108.068206][  T725] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  108.082159][  T725] usb 7-1: config 250 interface 228 has no altsetting 0
[  108.090463][  T725] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  108.099758][  T725] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  108.108225][  T725] usb 7-1: Product: syz
[  108.112584][  T725] usb 7-1: SerialNumber: syz
[  108.123724][  T725] hub 7-1:250.228: bad descriptor, ignoring hub
[  108.130325][  T725] hub 7-1:250.228: probe with driver hub failed with error -5
[  108.216195][  T679] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  108.228687][  T679] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  108.239903][  T679] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  108.249746][  T679] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  108.262953][  T679] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  108.272220][  T679] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.281219][  T679] usb 6-1: config 0 descriptor??
[  108.335190][  T725] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
OK
Stopping syslogd: stopped /sbin/syslogd (pid 91)
OK
[  108.645202][   T31] usb 7-1: USB disconnect, device number 6
[  108.652235][   T31] usblp0: removed
[  108.696196][  T679] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max
[  108.721380][  T679] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  108.730645][  T679] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
umount: can't remount debugfs read-only
[  108.816872][ T4961] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1603'.
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Connection to 10.128.0.155 closed by remote host.
Sent SIGTERM to all processes
[  109.075073][   T13] bridge_slave_1: left allmulticast mode
[  109.080766][   T13] bridge_slave_1: left promiscuous mode
[  109.102935][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.114009][   T13] bridge_slave_0: left allmulticast mode
[  109.119883][   T13] bridge_slave_0: left promiscuous mode
[  109.125564][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.267517][   T13] veth1_macvtap: left promiscuous mode
[  109.273057][   T13] veth0_vlan: left promiscuous mode
[  109.336660][  T678] usb 6-1: USB disconnect, device number 19
[  109.575934][   T13] ip6gretap0: left allmulticast mode
[  109.581425][   T13] ip6gretap0: left promiscuous mode
[  109.587420][   T13] bridge0: port 3(ip6gretap0) entered disabled state
[  109.594504][   T13] bridge_slave_1: left allmulticast mode
[  109.600188][   T13] bridge_slave_1: left promiscuous mode
[  109.605915][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.613360][   T13] bridge_slave_0: left allmulticast mode
[  109.619103][   T13] bridge_slave_0: left promiscuous mode
[  109.624700][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.767050][   T13] tipc: Left network mode
[  109.772569][   T13] veth1_macvtap: left promiscuous mode
[  109.778166][   T13] veth0_vlan: left promiscuous mode
Sent SIGKILL to all processes
Requesting system poweroff
[  110.968258][ T4962] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  110.975152][ T4962] ACPI: PM: Preparing to enter system sleep state S5
[  110.982137][ T4962] kvm: exiting hardware virtualization
[  110.987691][ T4962] reboot: Power down
serialport: VM disconnected.