last executing test programs:

1m29.12299247s ago: executing program 0 (id=525):
getrlimit(0xc, &(0x7f0000000140))
getrlimit(0xc, &(0x7f0000000000))
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000000c0)=0x800001, 0x4)
sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x40, &(0x7f0000000240)={0xa, 0x4ea5, 0x5, @empty, 0x401}, 0x1c)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11)
write$tcp_mem(r3, &(0x7f00000004c0)={0x20001, 0x2d, 0x2, 0x3a, 0x3, 0x2c}, 0xfffffd4e)
prlimit64(r2, 0x7, &(0x7f0000000040)={0xfffffffffffff5ae, 0x5}, &(0x7f0000000080))

1m29.12277267s ago: executing program 0 (id=526):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1)

1m29.100490401s ago: executing program 0 (id=527):
unshare(0x20080)
r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0)
ftruncate(r0, 0xffff)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$FUSE(r3, &(0x7f0000000e00)={0x2020}, 0x2020)

1m28.963018257s ago: executing program 0 (id=528):
pipe2$9p(&(0x7f00000001c0), 0x80000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x2a4b01, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

1m28.48661136s ago: executing program 0 (id=531):
r0 = userfaultfd(0x1)
write$ppp(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
keyctl$search(0xa, 0x0, &(0x7f00000003c0)='asymmetric\x00', 0x0, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m28.238953391s ago: executing program 0 (id=532):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}})
setuid(0xee01)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(r1, r1, 0x9, &(0x7f0000000600)={0x31, 0x3, 0x80000000})
r2 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e", 0x52f, r2)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={r3}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'poly1305-arm\x00'}}, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1)

1m12.925429096s ago: executing program 32 (id=532):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}})
setuid(0xee01)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_tgsigqueueinfo(r1, r1, 0x9, &(0x7f0000000600)={0x31, 0x3, 0x80000000})
r2 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e", 0x52f, r2)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={r3}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'poly1305-arm\x00'}}, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1)

1m10.182803545s ago: executing program 2 (id=646):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000380)="703a742d73742f6576656e7431202e2f66696c65303a30783020617267323dc4a78c15d892f2cb16bffa883f3f1a6b71a2799941fda9f8933a9d2cc789670585ff3e7809a4", 0x45)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
epoll_create1(0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x10)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
bind$bt_hci(r5, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newsa={0x164, 0x10, 0x413, 0x70b52b, 0x0, {{@in=@local, @in=@broadcast, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {0x4, 0x7, 0x0, 0x40000000000005, 0xffffffffff7fffff, 0x6, 0x7f, 0x2}, {0x0, 0xfbffffffffffffff, 0x4}, {0xf6, 0x2, 0x100}, 0x70bd21, 0x34fc, 0x2, 0x1, 0xbe}, [@algo_aead={0x72, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x130, 0x40, "e40d9c8427202d9ffa6e0368fd3c61811ffa17a01d21165fbcd6129c37e9e192b691301999ad"}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20004050}, 0x810)
preadv(r4, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7494d36f08266060266b9800000c00f326635000400000f30eade780066b9aa0200000fb266b9ab0900000f30f2b031b3e759dc2c", 0x37}], 0x1, 0x9f6a364b3fac2a47, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f00000001c0)={0xd5, 0x0, 0x34})
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000285000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000240)={{0x2ffc, 0x1ff8, 0xa, 0x8, 0x0, 0x7, 0x3, 0x6b, 0x1, 0x7, 0x5c, 0xe9}, {0xdc65b6c58461b90f, 0x60000, 0x0, 0x5, 0x3, 0x7f, 0xf8, 0xf3, 0x6, 0x8, 0x8, 0x9}, {0x3ff8, 0xffffffff, 0xd, 0x4, 0x5a, 0x4, 0x3, 0xb8, 0x80, 0x16, 0x4, 0x80}, {0x50000, 0xf000, 0x9, 0x2, 0xf, 0x8, 0x8, 0xfc, 0x1, 0xe, 0x0, 0x7}, {0xffffffff, 0x1ff8, 0xb, 0x2, 0x95, 0x3, 0xff, 0x0, 0x3, 0x40, 0x8, 0x6}, {0xfec00000, 0x1ffc, 0x0, 0x80, 0x7f, 0x3, 0xff, 0x4, 0x83, 0x5, 0x8, 0x9}, {0x100000, 0x80a0000, 0x0, 0x81, 0x2, 0x8, 0x6, 0x7, 0x9, 0x2, 0xd, 0x5}, {0x0, 0x1ffe, 0x0, 0x1, 0x73, 0xf, 0xe, 0x9, 0x14, 0x5, 0x4, 0xf2}, {0x1ff8, 0x101}, {0x54000, 0x3}, 0x50009, 0x0, 0xfec00000, 0x20201, 0xc, 0x1800, 0x1ff8, [0x6, 0x80000001, 0x7fffffff, 0x7fffffff]})

1m9.767014573s ago: executing program 2 (id=653):
unshare(0x20080)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0xffff)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$FUSE(r2, &(0x7f0000000e00)={0x2020}, 0x2020)

1m9.671858188s ago: executing program 2 (id=654):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="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", 0x14f}], 0x1}}, {{0xffffffffffffffff, 0x0, &(0x7f0000001840)=[{&(0x7f0000000740)="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", 0xec1}, {&(0x7f0000001740)}], 0x2}}], 0x2, 0x6081)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x40)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e81c"}, 0x0, 0x0, 0x0, 0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="380000002c000100000000000000000008000200", @ANYRES32, @ANYBLOB="0b000288976b6408686030"], 0x38}], 0x1}, 0xcc000)
syz_usb_control_io$hid(r1, &(0x7f0000000780)={0x24, &(0x7f0000000440)={0x40, 0xc, 0xf6, {0xf6, 0x24, "731a4b3ac15d5b3a7e0d40ff91533c4cd50cc31cab1f009814450716722a45aa48533d7ea3202725abcceea152b0326576309dd624f9e6fb58abc7d1c6f8fe9ffb5da50e5430af175035815226baeb1475910e8dcf091f3fedf2f3a9bb08c3396593a79501318326821ca3c9b9b208f80bb085f51494cb281fdfc0917013972dae65d690844ecef41f17486466ee130b75214fc3d3359c1fd15349572d920193ee156a3ba90f6acf2eb4b0bda8af87e28b8e94d6c593b2cdd133709ca287e909cf0d5a2abac596a21a6f9ac749a1b22f81eb7e21d3e849d6ce1ad5f80f7e5e056aed29726a76c1b9d02bbe23363fa7e82419bbc8"}}, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0xe, "a8a2f59e"}, @global=@item_012={0x0, 0x1, 0x2}, @main=@item_012={0x1, 0x0, 0x8, "a9"}, @main=@item_4={0x3, 0x0, 0x9, "37392b98"}, @local=@item_012={0x1, 0x2, 0x3, 'p'}, @local=@item_4={0x3, 0x2, 0x0, "02667766"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0x8d7}}}}, &(0x7f00000009c0)={0x2c, &(0x7f00000007c0)={0x0, 0x15, 0xca, "a706eed780004377435f9ed4dba7c8ce6ccfe1918d72d590b83a5e03b1199677af30ac966ce346f6dba18f94b5b7414b25f1039ebf58c192abe5ee6803c1def789d6220de0794f4128e57d3a4dfb92b627444e1506a3e2db74d5d3dbf4aadac7dcc9579629ee0c7ffe4c2a8a7dbe23217b2993ac576e31e58d5ede7b3cd75f0b25104db57d09acfa38cf3daf9ae1e408201896ee911b31a09194f88b98454db010735ec6f8f897e43bd2282d04337e496d05b3afd8691a756c7e6d6d35c7e2e290a733fde8c683df29db"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x38}, &(0x7f0000000940), &(0x7f0000000980)={0x20, 0x3, 0x1, 0x6}})
syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, &(0x7f0000000240)={0x40, 0xa, 0x4, {0x4, 0x11, "7ba4"}}, &(0x7f0000000640)=ANY=[@ANYBLOB="0003040000004403190404712a80bccb7dc08ae6a6b3887a89142e336a425207a7db09b13c3ad8cfed2df2e32260c1cf6ef0f44b89f2bad908479c7a7aa7a5823c5e067c085d20180ab81c08a21b6e967d72825342b3cc79196bdd41f806ae1e5c559f4cce9f447520ca6a1506e2ce276a051a26b2ec7cd400"/135], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x82, 0x31, 0x1, "52000100", "ed554bbe"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x62, 0x8, 0xed, 0x0, 0xc}}}, &(0x7f0000001b80)={0x84, &(0x7f0000001640)={0x40, 0x17, 0x83, "1f861b414c7a35d19ae702d210d5b408995a774f7151884b5d990ac4c0f27a211d89f5cb04dc98d404f38b16a6a066dd8809e594e8eab6373b9b44352ca6ea18d4faf7ff9aab159d36566db2154abcb4abd2ff2d968fb7ae5c6e08a3e9744bac333d8ee4a51c86383e05d2f7b4d9d88208dc4a570149e2b518444c60653430c17b0a9c"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x7}}, &(0x7f00000017c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001800)={0x40, 0x7, 0x2, 0x2009}, &(0x7f0000001880)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000018c0)={0x40, 0xb, 0x2, "cc95"}, &(0x7f0000001900)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000001940)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001980)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000019c0)={0x40, 0x19, 0x2, "22b5"}, &(0x7f0000001a00)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001ac0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001b00)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000001b40)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

1m9.115260964s ago: executing program 2 (id=659):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4605069e0d000000000000e7ff02000300d9000000ca020000380000005e020000040400000000200003"], 0x98)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f00000018c0)=ANY=[@ANYBLOB="696e6f646533322c008523563edfaae156d49f325184f846571cd91144dfeb4bd7f043bb50971616058b3bf728451680f974eba70293858e16a48cf7063f48f11ad6e167a3edc43ab44780bfee856913840af89641fe552db400ea94241b"])
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="656e633d6f61657020686173683d78786861736836340000000000000000000000000000000000000000000000000000000000000000000000865800"/78], 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='8', 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x0, 0x5, 0x1, 0x4}, {0x3, 0x1, 0x1, 0x508}, {0xb1b, 0x1, 0xba, 0x8d6}, {0x101, 0x7, 0x60}, {0x200, 0x9, 0x0, 0xf2d8}, {0xff69, 0x22, 0xfb, 0xda17}]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0)
timer_create(0x5, &(0x7f0000000380)={0x0, 0xe, 0x0, @thr={&(0x7f0000000240)="bbc6bc4096cc42b2a711970b0351ca40cac72727fee619496b6554704d42119fabbc92908fa2f429daa19366aa291c1f81bcdc0696c0c0457578e7735ab485ab09f1f5b77a0e9b75961a90f453ad90a72cc3bc1d26d866d05df7c2871486cf2cc3b066ae2caa83f807d5741f40b65ea58c169d7f02c692c991ee3e9ac55fb273c6724f", &(0x7f0000000300)="d7bf101378eeea0c9067fbe3b4181c1c74451b3619793700e22a10933acc15a36047048e1b4a251f04af431c3b640b358d46d0ea91d7d4962dfcb073f42350b7be2b75e9a5ca8d2f35e87e4fad0d4e9e42ce17a882993e825776d9da1eab35fbfe334240"}}, &(0x7f00000003c0))
syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x3, 0x614, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0xa0}}}, &(0x7f00000004c0)=<r3=>0x0)
setreuid(0x0, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000680)='syscall\x00')
pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4)
syz_ublk_setup_queues(r1, r3, &(0x7f0000000500)={0x0, 0x9749, 0x800, 0x2, 0x2a1, 0x0, r1}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecf6, 0x80, 0x1, 0x1b6, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0c4, 0x8000, 0x3, 0xdd, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6aa6, 0x3c866f284866d902, 0x3, 0x1bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xace7, 0x2000, 0x3, 0x2f3, 0x0, r1}}], 0x4, &(0x7f0000001800)={0x2e, 0x12, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xc8}, 0x0, 0x0, '\x00', {0x2, 0x2c1, 0x0, &(0x7f0000000800)=@buf_max_buf="689fe6ec29e4c1a080bbeaf19db5742b5b6fb86b0ef092e070f0290f90667d5f84ac60680ebd8a18998886bfde9657522857979c957a171cf9115a974c90c809f3ce9bbaa8195d34ee0cf2d55f168ef2595c18fd15a5e831d781616e11b24b27618077baab4711896ede1a2de47468675704283c59cb7965e3878eb8fbb26cc62f56c3f48c1ec47f1cd491b44703222090dde38c776d1ee51280bfb98787012ed2e5edcdbd16be2a276054cc8ce692114cd5f0b4e8da0fec5246d3c18cea563e5cc49e950d2e4b06fc54abe3de2dec7e1f1f1c78bedb9a758b9cf23287db41640b97961b321ac8ef7c4045af6cda03ff042762a71eb7f617c8f6946ff00e1eaf7836549d91e959787af06ee8ec169079f3637d68c51a29605aee3f0ad3056dc74c8598330c73ec1cff8881778dda7441bccb99b199238e409f7ce31b33c4ba35a87a3c3ba3212bdc40eeee51c4e5b05f752bbe6adb8c354a6efd6b4311abaa48a6134c4645ae97fe846ce59a37fba658df944120015b7d7d78c317bd6368bfb19ff29becfc788d58f017910e2fb9d5a866d36fa67f40f508746f65de6b868412c378cd65ec1310c64a6fba178b07c08ae18fa7ed544734a3c3af5a0413f477e18f7edfd16705dd14c3419a0b0997c7e50a6f0db76c629e25b725aa1003e50f5b642241c388e9e5c4dc34e3c55648d64ad6e50565c2e20ad117d058c328f3bafdcfd50f0476a3ee654d5e94800014ab035c6b53612d7dd73eb32238903402101cab6b0c5ff20b5611f5890d5b1471835fff11bd7ff6fcbc826a05c21a636ffa1d09d1f49c38d62557719da0bad187bee5d8795f25d3808afb1927c94183c37018fe5b17e84e9c2db50558ef09f985d705b85e7f5a37d78e07eeae7b7601b45a2b0540fd50de8c731606ff83f554babae709378e3066149587694aafdd9ef8c2c877028e17c0dd75e4156645c4f5fa78dd6fdb75e20ad444e848abdecbc9d62f220a5849533565d1a282dedc3f797b5bcee5b8ba399ce16ac09c52f996be755ef63bce639ad630e1bbf949daf2142506a03947aeb831a7cef7459bed6a4d5876a92fc4b3c27c810c32326c9de5aaba0407d2bf8af7de868f40ac211f216a575307c8fb01618f7884d3935e0516bd2081303cc8e4cb3a8d80e1ade8bc943755d68ff7952df099bfec39c3afb52ef4676eff456c7912532feeed4d050d90c8ef37371c2d16f10e2df805ec870fb557133c637b7bc3dd0277fc87a44462c20e674d238b50928bcd24f48e906f25095175f517f69ef296736ccc1393e91ab6ba0eef63614672325292f0d575579c73c34f5837f3366c69a3f528e3e180aa56709f421ef1bb21ba91a2d2c8542d4615c7702f0fb64c794bafb2e34a66999b40a7382dfac081a5b7b12a395bd82d60294f931ec5caab75e3dacb39562b5e2745789838c91806ad9bcc426d196600b378720de25838d7b1070ab024d0e18d70b0d9219c9485b291f1fcbb9a5382462c29b8313c5d76d5b36dc42e9e3bf93d6f08fbcd7ce6527d8c6cb51f515d1691ad12dd0d9fac74fcfbf0d2a39003091b72de21af643ed45470efb542943c4ce1850da574f394a2708e446ee56bab27241843b86830e8cf88dab6e85989f211b19f763491c74c3549cf89888aa65e94528989784b93ffe8eb3a2a6d98c33db134a3eb3d78f4c8dcc16c45b2dd8e09fc3f992036346756930b1fba05d1ab2d3bd089a4dc47a5fa7d7015599220aac177d0a447c9219b344fb39c58d723c9e949e98ef0fb611f36324fb10bcc46b1a3a6870bff22125c96c758c235c14fb04ebc70231d40f175a7a48ee9b870102ab6c445cb7d4fa130edb1822ae66ddc52a6aebecce92c35ef824c40eb2dd2677c36a57cdceb9e1728782cda6f899da5e99884d330832e016db52d0136be13841797f803fbfa6a54b6cf7027bf7771dfd5c370a6001c9926b637fe5e4c4f754583405d6c03ef64f87bbb8fa3d11ebcf2b9ff0a2d3ad6643a996cb1b3531543693b37dacd46d7cc0a20bee26239684874c36a0e49807ef0e74bd96b61fd8e595b861143bec56cdb75af10f5f3b27a72aae27a910cf4f1347397e2d257e9223201584f729e93970c2a6a314a10fce37d86ae3a309dd9f5bdbf3992d2414a0fc5a4365dd2639f48feebc4817da481039ebc1b27fb43fbcf4e7a4950cc34c2662be93391cf67c794bc820f6662c6497a5a42d97fe30b5a92ed7eb0e7392acdda995026b83f4aff73225930b003f1f89d580cc3546305a62c7ebddcf223a1bd4a55d7fc14f6ac19a81c66cb85bbdb9d0200819d7e97ac7c6e084daceea6222fca2796afb750e056da3d35bb3cea8f50480a109806878a95bb20a156f2914211964c5b2eb23d7a3536a3e020ece93d1f083595c651c888e023e46cb795bbdd520c0bd978cc858027a22d55251f2edc51b3d0ee97d2f3c8cb6ae0cf09528084372160de560a9fa950ad5a645b666aac0dd17bbbf369011215c729d376a07a1999856d24e5438cba27514051be217d0d6cb8a889e2e791764fddc1f2b3a142e9ea34e02cc6186694633203b5d1dc5ceceec737d7176f62580ba4db627c8dd7781fdb9a0404504f875224b488b2009bd683a5fd623a6fa2ce3afad5429062ffb4fdc4e309b069dc6f04c93edb53a34be6d77e9a0526b8851ac9599a920e6f13a5930d122b3761c36229cc0f393a5d71d1099ca67a3c5d751cca83102db7077dd6bd23b087463e82647534d2491a82cd01ccaf3c36f3b3856dfe643710964eed20fb338c4c2cbf54c4824a779a3b28bd7a54c3ebe19ce872869dc1c8e38c247e7a2bc7f8532ff43ff6b830635b8b98f652a2f41419de6038d980b5e7f3d00c1abdc2513bb6f3ce3747e9e1d24a925802b482e2f9318ef38d0c3817398c2a2a837a9bc6132e9a25a556e22b527102a995f5645ddec3a658255b8697a59a97a334450e21c98f27890df5f017ce4693c79dd45b9d62493e34ee297c10e3ed1b8541e6e6484a33c00dd3411739e59ac30d0781b89b81ff31abadd73e5344872c20d80d4c0267cd97f5204dae86dba9f970365d1fed50ebab1b6c1df5164ac02074883faba2eccd337ca87590ecdc40ddbbf97573153073dcaa442990f4f2af3b3d238a4b2186384aea5f9e161acb039551298a22fcb529cbc46bd1328b982489e14aec447c599a98edc8c961dbf6831f76b3cfc336d8915ab67fd5b2d9d1b94e1cdb07e8ee4f42cc1bdb6e0f239507dfba4a39c6f7e60107bb56176bcd4d8ae04d3554c08ebc71fe1474b5af656c5eab5806d52e6cb4ab018eee71c1c2fa5bc3832dcd16c43c35ce45027608e0fc01010250411789ddbdf9289c22bd1aeb44e60ee03759c9c1478dcbee157abd61a20f9893ae9e8ed22c1b5183221ed82b993c06f7f1b599c748189840110a41081564880cc6d583d97e3cf94e2bf28ae85837d0e85538baf1543cfaa3bf42aa9ffdc0bb4a0ce4a805273dd54be26f652e6da3dd6ff73a571fe0ddb81a48f2cecf45538724fa09e627acf0d00428f7b0acd972a9f6bc983527ec8b8e27949d42c4d281fbb25488ebf796f80e09934c7108ae8b9d4d70f273be1fd0dc1af4098522eb3b1b1ea7b7252543f55189d9d247332b55cdda466d524313c15c80d962e36889b29dc88a18ac6f5959709a12767749f9822ad3329d26c0e4a04184a6a1241e86f4bad6d0c12bde1a96061f822bf0d3cc0e1bc012935240d08c3170850490657e9de8c2621953fa503a1ad8272db3498ccc93132f74b2bd6c52c1a8664e71492e42d1fb5b4e945d6ea13df3c6a9afdca0b998cd1be89f1300084aef3f43c0d07c1fd4a544f39a0430882b2320cf2597ba8202a130542edcc5341017621b5500f27baa5e2893bc56508b8a90589b3656fb662b9470fd70b4bea2111db3aed35aa54aa90616aae821d208f7ac1cabe802e5470a3a5ef675b82a13a0839a7f29b2e6698512c08622e69aca1406abe8fc345d295ea669c93d5d702d55f0a0f39d4ac97d7f58fd42227c0ed72c2eb264fa07f26afc890d0771470846223afbed6cfb697036f9966975b81a9a1f16367f73dd6da2d0c2bfbf116eaa3671742fa6c1f7b387585586097954488ce248dc53521a45cbd33d83f0d6c4f864afcf878c9912f5e5d368419b295dbffa4033692848cc0db2709e12208bca2bb4a3b3fca6a5b1dea209dae4a5c55d0d29a46dad592f05b78a000bff0db5e191fb77409ede31c7a65315b140bf265bf716b833363b47ee3cf8729c14c15b056ee8cb9c9a9aa44cbb8473f26af3d6eff1b7f03d103d972b917632ff3fd19b3c5ecdacb7eec64ae5c3a091161e06fc9cf5005e83f300ae9655c3d97c4d17a502c453e45df979b84287e44d59af50f0ea4e40327ee850a077bd73743bf0326a0f079dfec1ccf529cd89ed1d5112f9fe08401650b6876cf61b8706bda7ec09279488f7b51420bba15e1888c17779e4e45464fcbf4a4777daec4d81629fc3d94d8d15a40cbbabbfbcdbcce2945d552f602f1e69fec145ffd5939520b80505685c0efe007fe7d48d46cec1c88940603effa56032d426deec7a72bffa621c6d37e595e93e992a723dbeada3a04d62255208051cabd49e6d5228be9339664426f27c93aeb9be1e81a78475310ef4ceeba91ecaa6acdc91454a77440554518eda0907d7f83ba72f80d10e134b661c77f2dad5ccc489f1cc87145e0568c642c26b4de2c1d10617c09f4800a111002201100a6ef68e4fe43df92fd0b4a8b279bd562004ae8c5f5ee52cbbab46c1677a8be5d8533c17ff491b6cb4f80e1494277b4787b1291be09aea36b01fdd840c187d2d0ff0c25e9cfd60fd1cf0ff88772f2b41b7425482b9ed5f3ee4c2a46acdda5fe1e6555c6541d3bf20a5c7ae45c96ca265c776687541a4faaeb2fa3e03cc1a4f6e7b2176a81d16b666476bb371918b48ff72aca9dbd1a603cda0e42ef91850e925e78b2d22cc86757dc458037976ddd053fb170169cb7a5b2b07651ea367a2a8e04f4f3c8eefec2846ca749228a1ad07ee76734a7e4a60d938eafc55e60f2f36339f6714019ca95489b0d6c59d4b721b84a7bc66c83cca90abb9db04587e77828292a9dad889394dfbe6373d99849d37c36b0fddde59eb7fd79d7c8b381ba4e3b12d10f5667d9c6e23c4e73dbdf466ba5c8115b10ac4b638e2b799bbafa6aa46814424a72a79648deae44775a05e896695d312b51542f9f7dab55e77e4d5d0de7b31a19095b437d5b0df5b8017df08ca924cf55cf964039fb54a73519c631a7f9b64d0b67fc6f72b66a5cd8144c1740758960fa96e5e32367208a6843c3209052de4c711a69b1cee7ba78c32af5cb813c27375a0d22f883135399f25e60ed433ffb42b366a688dc05a009bfb3f5c6ca8103c5e4d3c0ed6c1b68d99355bb1e20e46ed1bd47c52713fc5b35cbb4f492b9c6d193550529bc61b92475e7a66eaae976d8dacd8119cdb38e2d3776f3ebfc29d74fe25579497a7bbf5805c684b8e5288e1e235b689bbeb30c94ee182e08aaa7eedb80408310dac1d3f31d732a3d96b5894314eda3bfb903e4c40bd0281f26915946405f5ad423a03d6ea865975c360997003c9a004fa80f227aa6a062a5d9326ff7fdf2eeff39964905b251de7926aeea3e5880d5b437f6f53ad5888e5c3de62074d8deb971ab02edc8682528e5d3fa11649586e466cbf2f5362072efb6c5d4abc6f3849ca93fa5ad23d4bf7ff89bc99f917cfdae2a5eea8d7fce8e5ef53b039fb761da0770f623b72553f9fc759ab"}}, &(0x7f0000001880))

1m9.107023474s ago: executing program 2 (id=660):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00')
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}], 0x1, 0x0)
pread64(r0, &(0x7f0000019180)=""/102385, 0x475f, 0x80000007)

1m8.99894393s ago: executing program 2 (id=661):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}], [{@context={'context', 0x3d, 'root'}}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x100, 0x1000000003, 0xa1a, 0x7, 0x5, 0x79, 0x3, 0x3], 0x3332d000, 0x2})
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x5)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000040)={0x8, 0x72ca, 0x7ff, 0x5, 0x6, 0x283})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m8.99673788s ago: executing program 33 (id=661):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}], [{@context={'context', 0x3d, 'root'}}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x100, 0x1000000003, 0xa1a, 0x7, 0x5, 0x79, 0x3, 0x3], 0x3332d000, 0x2})
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x5)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000040)={0x8, 0x72ca, 0x7ff, 0x5, 0x6, 0x283})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.905059448s ago: executing program 3 (id=1206):
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0xffff)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000080), 0x1004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r2)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="d707a8eaca2a028a2b43823ad35377434524f2c25712a133355845ca9d4f74001c012fd3de62415856cc96a9a42b3f53d3f12c2926bfd00b4e55fb8cce7ef57ce3dd79dc8957fad7b19e2bfebda5720746a90a1c166a31b85c41211f4909c33ad56b29c7ed191d5cd7987d00540fc5d84acdcdcd3c7cb5dbd5c34c8215f991864c0f79a3a78f11f2a2ff26ea9aad4f1c860d95c9ec8a1dfcd5d1891217"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x48010)
fcntl$lock(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x2, 0x0, 0x3ed4, 0x5, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x5a66, 0x0, 0x2010, r4, 0x0)
read$FUSE(r4, &(0x7f0000000e00)={0x2020}, 0x2020)

3.842451031s ago: executing program 5 (id=1208):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8000, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x9, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0x3, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xb0, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x100005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x22, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x4, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd504, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfbfffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0xedac, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1007, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x2, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0xffffff00, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket(0x400000010, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r3], 0x48}}, 0x40800)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

3.778870094s ago: executing program 3 (id=1209):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.728341536s ago: executing program 5 (id=1210):
r0 = socket$packet(0x11, 0x3, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x2, 0x0)
setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
shutdown(0xffffffffffffffff, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
write(r4, &(0x7f0000000400)='!', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
fallocate(r5, 0x100000000000011, 0x2000, 0x2f93)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5)
fallocate(r6, 0x20, 0x0, 0x4000)
r7 = socket$netlink(0x10, 0x3, 0x0)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0xcc5e57d5a992f470, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', <r8=>0x0})
sendto$packet(r0, &(0x7f00000001c0)="330312001200140000007ee82f555f2a0c09000000fd810000f786ddbbaa4b1f0f852b4632f47042195e0b8ca9767e06b5", 0x31, 0x4000, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x62, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8000}, 0x4)

3.678859509s ago: executing program 5 (id=1211):
unshare(0x64000600)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03031b003a00320006006300000000446cff00eaffffff0000000000ffffac141419ff020000000000000000000000000001"], 0x76)

3.678170598s ago: executing program 3 (id=1212):
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x29, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000015000b0000000000000000000a0000000400000014000100ff010000000000000000000000000001140002"], 0x40}}, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000b0f000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000480)="42094e00b805000000b9070000000f01d93e3e0f07470f0767029d0058000036650f01ca66430fd3f512bf0000010066450f38809daa00000066baf80cb8d53122840f01cf66bafc0cb00bee", 0x4c}], 0x1, 0x1a, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r9, 0x800448f0, &(0x7f00000003c0)={0x3, 0x7, "842f92", 0x1, 0xbe})
fallocate(r8, 0x0, 0x37e9, 0x10001)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0})
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="e41100001e00010a000000000000000007000000cf1143800800c700", @ANYRES32, @ANYBLOB="08003600ac"], 0x11e4}}, 0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, 0xffffffffffffffff, 0x4, 0x5003)

3.598699922s ago: executing program 5 (id=1213):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000001c0)="330312001200140015007ee82f555f2a0c09000000fd810000f786ddbbaa4b1f0f852b4632f47042195e0b8ca9767e06b5", 0x31, 0x4000, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

3.598381102s ago: executing program 5 (id=1214):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4044840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8)
fallocate(r0, 0x0, 0x200000000000003, 0x6)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmstat\x00', 0x0, 0x0)
timer_create(0x4, &(0x7f0000000700)={0x0, 0xd, 0x2, @thr={&(0x7f00000005c0)="62de06a423490f5a069213a80414d9c05d7f52630a1a970899386401d76e4518c24493279b1e0997e54e1c39963a16e74efdefde684574e312555836b0e00a43ebd9dee9e157297b2b348de3e7e355ad4efe2cd747db6dc4048b5d492847da44ae97a59875b1351ffac849a8adb28b5fec5b1f5f01b1aaef02568fd307f35e9372bf776a0bb211ec04b4cd7b7a7120bd80ada2ced8dc91f5", &(0x7f0000000680)}}, &(0x7f0000000740))
mknodat(r0, &(0x7f0000000180)='./proc\x00', 0x200, 0x8)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
writev(r1, &(0x7f0000000540)=[{&(0x7f0000000780)="00bbe95e6b02f1a10173bed35f902a19c74a88066f8a099aa39c35e9a3a2be18092be3011bfd70a9c94c98c72aba673952076d6843902697bc492616cf91bf38ee0a539c1430f6b80fc0f55286d0bfe970d4b430e7e680b5c7aabe01b92f4d9f2d1eabd07d8d0e8f49e76951c8a27c3d4f239ff55f9dcf9ac85833af30d376ad6c9ff5f9324a77737816d8e3dd9c1cde30cac0e300ef9fdce8", 0x99}, {&(0x7f0000000280)="12bd2897410327c9708bcaf44bcc3321b3484cb5f17d952ebf97be228138b2e95404087480746dbf3e62002620c721c1c9915d89729945cf5343d417d28481821b7006519d19fa5ae6d1848563306731ccb8570e23f8829a79c031e8b596b6b8b69ed2e51f0ea9476f220886fd1fe7c1f3a9ae1a40c9a594cf05af0354309204ab7a9771e206c9112b0b63db2517749321099a5f944b7286fd96970559386f0494a89f7dc4ab0c19b8838086b6677959778c17fa3c7840998d118060a2a5", 0xbe}, {&(0x7f0000000340)="4972a0f0627ff68da1856c3aed9ffb99e7986cd3f38ed482958acb87c5ab0a40912089858c7e5d9ee849dd999839cd851798ee72846ec3348d6301b5f6be08606624b563d58ddbd57bb36a84dfadf8cca36860b0ef04a071a791560561d7543991243ef0449774a75d3b385c741f857a1d703a077ce7dd727049f0b222e596b58b60d80c9f812fc1797e97b984d8", 0x8e}, {&(0x7f00000001c0)="a05301b1baa9c2ee9b16218c9ab5df22565dd79545f49e27a60e275b59929c23f43dc75fbb6548828cea699e22cac2d68f17641faf13bbbb356edd11564e71196d9817911ee248f51740b88cb3f54bbfb5", 0x51}, {&(0x7f00000004c0)="3ee9477e890d66e742987c61b09ec4699f6386f5d7062f0d47e9891296bc1909be94e7a5698543363da0de06cb68dd9972865b5dc9f3df09f3265c597a7582cc893a28e4169b452c523de13803feb2e701accd1876b632760501", 0x5a}], 0x5)
r2 = syz_open_dev$loop(&(0x7f00000006c0), 0x400, 0x40)
ioctl$IOC_PR_RELEASE(r2, 0x401070ca, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0xce08, 0x6, 0x5, 0x7, 0x4, 0x7fffffff, 0x3}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)

3.539392185s ago: executing program 3 (id=1215):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e81c"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000440)={0x40, 0xc, 0xf6, {0xf6, 0x24, "731a4b3ac15d5b3a7e0d40ff91533c4cd50cc31cab1f009814450716722a45aa48533d7ea3202725abcceea152b0326576309dd624f9e6fb58abc7d1c6f8fe9ffb5da50e5430af175035815226baeb1475910e8dcf091f3fedf2f3a9bb08c3396593a79501318326821ca3c9b9b208f80bb085f51494cb281fdfc0917013972dae65d690844ecef41f17486466ee130b75214fc3d3359c1fd15349572d920193ee156a3ba90f6acf2eb4b0bda8af87e28b8e94d6c593b2cdd133709ca287e909cf0d5a2abac596a21a6f9ac749a1b22f81eb7e21d3e849d6ce1ad5f80f7e5e056aed29726a76c1b9d02bbe23363fa7e82419bbc8"}}, &(0x7f0000001c40)=ANY=[@ANYBLOB="00039c0000009c03ff9c4d40e24be4c1608bac70488b9cf49d02c90eb09d275d2c3373afed3b360fab9620206bb03543bfa6ad92cd949f7285f976ce8bce7088d66218c42275f4cf007941e060df3657aacb05123827ad2c700d1697050be400efc92063e8a26de8941a0332e510819bc2cf1dd6c7f7df08364353c401b2e491be0c7ababe5c5329f59be1e8cb2a61f721679f5e525765ac8c0000f9f7e9de2d19d9baf7f6ff1076ff498dbdf20b3bc77592ba041a25d0b0090cd99a505a949c0f3127c8ffa8b42c6795918da31b4ed535fe65c7fcf857ae601a314dc65d1f388eb49e87cf4478b3b3e3d884dbe4ff8f70493ac71c9071346054c6ce781416b7d71b9538ccfa668a"], &(0x7f00000000c0)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0xe, "a8a2f59e"}, @global=@item_012={0x0, 0x1, 0x2}, @main=@item_012={0x1, 0x0, 0x8, "a9"}, @main=@item_4={0x3, 0x0, 0x9, "37392b98"}, @local=@item_012={0x1, 0x2, 0x3, 'p'}, @local=@item_4={0x3, 0x2, 0x0, "02667766"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0x8d7}}}}, &(0x7f00000009c0)={0x2c, &(0x7f00000007c0)={0x0, 0x15, 0xca, "a706eed780004377435f9ed4dba7c8ce6ccfe1918d72d590b83a5e03b1199677af30ac966ce346f6dba18f94b5b7414b25f1039ebf58c192abe5ee6803c1def789d6220de0794f4128e57d3a4dfb92b627444e1506a3e2db74d5d3dbf4aadac7dcc9579629ee0c7ffe4c2a8a7dbe23217b2993ac576e31e58d5ede7b3cd75f0b25104db57d09acfa38cf3daf9ae1e408201896ee911b31a09194f88b98454db010735ec6f8f897e43bd2282d04337e496d05b3afd8691a756c7e6d6d35c7e2e290a733fde8c683df29db"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x38}, &(0x7f0000000940), &(0x7f0000000980)={0x20, 0x3, 0x1, 0x6}})
mkdir(&(0x7f0000000140)='./file0\x00', 0x21)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000240)={0x40, 0xa, 0x4, {0x4, 0x11, "7ba4"}}, &(0x7f0000000640)=ANY=[@ANYBLOB="0003040000004403190404712a80bccb7dc08ae6a6b3887a89142e336a425207a7db09b13c3ad8cfed2df2e32260c1cf6ef0f44b89f2bad908479c7a7aa7a5823c5e067c085d20180ab81c08a21b6e967d72825342b3cc79196bdd41f806ae1e5c559f4cce9f447520ca6a1506e2ce276a051a26b2ec7cd400"/135], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x82, 0x31, 0x1, "52000100", "ed554bbe"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x62, 0x8, 0xed, 0x0, 0xc}}}, &(0x7f0000001b80)={0x84, &(0x7f0000001640)={0x40, 0x17, 0x83, "1f861b414c7a35d19ae702d210d5b408995a774f7151884b5d990ac4c0f27a211d89f5cb04dc98d404f38b16a6a066dd8809e594e8eab6373b9b44352ca6ea18d4faf7ff9aab159d36566db2154abcb4abd2ff2d968fb7ae5c6e08a3e9744bac333d8ee4a51c86383e05d2f7b4d9d88208dc4a570149e2b518444c60653430c17b0a9c"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x7}}, &(0x7f00000017c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001800)={0x40, 0x7, 0x2, 0x2009}, &(0x7f0000001880)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000018c0)={0x40, 0xb, 0x2, "cc95"}, &(0x7f0000001900)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000001940)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001980)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000019c0)={0x40, 0x19, 0x2, "22b5"}, &(0x7f0000001a00)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001ac0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001b00)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000001b40)={0x40, 0x21, 0x1, 0x3}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

2.342311541s ago: executing program 1 (id=1216):
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
poll(&(0x7f00000001c0), 0x0, 0x3)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000002600)={<r0=>0x0, "728797a9e059e5cbd96861a0fd259915"})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003600)={r0, "c05ddb9d829a45e35ae0d98dbab3993c"})
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00')
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x100, 0x1000000003, 0xa1a, 0x7, 0x5, 0x79, 0x3, 0x3], 0x3332d000, 0x2})
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0xd, 0x79, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xa}, {0x2, 0xffff1000, 0x8, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x3, 0x0, 0x6, 0xc4, 0x2, 0x9, 0x27, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x0, 0xc2, 0x3, 0x4, 0x6, 0x2, 0x34}, {0xffffffff, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xed, 0x5}, {0xeeee8000, 0xfec00000, 0xa, 0x3, 0x0, 0x0, 0x4, 0x20}, {0x0, 0x8080000, 0x0, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x9000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x60, 0x8, 0xf801, 0x3000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.294739093s ago: executing program 1 (id=1217):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000803, 0x0, 0x0)
quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0)
writev(r1, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async)
write(r0, &(0x7f0000000000)='3', 0x4e) (async)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000803, 0x0, 0x0) (async)
quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) (async)
writev(r1, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (async)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) (async)

2.294309843s ago: executing program 1 (id=1218):
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0xffff)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0)
ioctl$BLKSSZGET(r0, 0x1268, &(0x7f00000000c0))
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x3ed4, 0x8000, r1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r4 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece)
read$FUSE(r4, &(0x7f0000002e40)={0x2020}, 0x2020)

2.179759499s ago: executing program 1 (id=1220):
r0 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x103)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
socket$inet6(0x10, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r3], 0x20}}, 0x40816)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', <r4=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r7}}], 0x1, 0x0, 0x0)
ioctl$BLKSSZGET(r6, 0x1268, &(0x7f0000000100))
sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="330312001200140000007ee82f555f2a0c09000000fd810000f786ddbbaa4b1f0f852b4632f47042195e0b8ca9767e06b5", 0x31, 0x4000, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x62, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

2.178795299s ago: executing program 4 (id=1221):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.089704263s ago: executing program 4 (id=1222):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) (async)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=<r0=>0x0)
r1 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x0, 0x0, <r2=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f0000000080)={r1}) (async)
ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f0000000080)={r1, 0xffff, 0x0, 0x0, <r6=>0x0})
capset(&(0x7f0000000100)={0x19980330, r6}, &(0x7f00000001c0)={0xf, 0x0, 0x2, 0x9, 0x9, 0x5})
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setuid(r7) (async)
setuid(r7)
syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2742, 0x80000, 0x1000000, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x10000, 0x200, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf18e, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)

2.026978636s ago: executing program 4 (id=1223):
unshare(0x64000600)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03031b003a00320006006300000000446cff00000000000000000100ffffac141419ff020000000000000000000000000001"], 0x76)

2.011389427s ago: executing program 4 (id=1224):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000001c0)="330312001200140000037ee82f555f2a0c09000000fd810000f786ddbbaa4b1f0f852b4632f47042195e0b8ca9767e06b5", 0x31, 0x4000, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

1.997692377s ago: executing program 4 (id=1225):
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
poll(&(0x7f00000001c0), 0x0, 0x3)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000002600)={<r0=>0x0, "728797a9e059e5cbd96861a0fd259915"})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003600)={r0, "c05ddb9d829a45e35ae0d98dbab3993c"})
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
fchdir(r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00')
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x7, 0xfffffffffffffffd, 0x41, 0xc3d, 0x0, 0x100, 0x1000000003, 0xa1a, 0x7, 0x5, 0x79, 0x3, 0x3], 0x3332d000, 0x2})
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0xd, 0x79, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xa}, {0x2, 0xffff1000, 0x8, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x3, 0x0, 0x6, 0xc4, 0x2, 0x9, 0x27, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x0, 0xc2, 0x3, 0x4, 0x6, 0x2, 0x34}, {0xffffffff, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xed, 0x5}, {0xeeee8000, 0xfec00000, 0xa, 0x3, 0x0, 0x0, 0x4, 0x20}, {0x0, 0x8080000, 0x0, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x9000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x60, 0x8, 0xf801, 0x3000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.93888286s ago: executing program 4 (id=1226):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e81c"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000440)={0x40, 0xc, 0xf6, {0xf6, 0x24, "731a4b3ac15d5b3a7e0d40ff91533c4cd50cc31cab1f009814450716722a45aa48533d7ea3202725abcceea152b0326576309dd624f9e6fb58abc7d1c6f8fe9ffb5da50e5430af175035815226baeb1475910e8dcf091f3fedf2f3a9bb08c3396593a79501318326821ca3c9b9b208f80bb085f51494cb281fdfc0917013972dae65d690844ecef41f17486466ee130b75214fc3d3359c1fd15349572d920193ee156a3ba90f6acf2eb4b0bda8af87e28b8e94d6c593b2cdd133709ca287e909cf0d5a2abac596a21a6f9ac749a1b22f81eb7e21d3e849d6ce1ad5f80f7e5e056aed29726a76c1b9d02bbe23363fa7e82419bbc8"}}, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0xe, "a8a2f59e"}, @global=@item_012={0x0, 0x1, 0x2}, @main=@item_012={0x1, 0x0, 0x8, "a9"}, @main=@item_4={0x3, 0x0, 0x9, "37392b98"}, @local=@item_012={0x1, 0x2, 0x3, 'p'}, @local=@item_4={0x3, 0x2, 0x0, "02667766"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0x8d7}}}}, &(0x7f00000009c0)={0x2c, &(0x7f00000007c0)={0x0, 0x15, 0xca, "a706eed780004377435f9ed4dba7c8ce6ccfe1918d72d590b83a5e03b1199677af30ac966ce346f6dba18f94b5b7414b25f1039ebf58c192abe5ee6803c1def789d6220de0794f4128e57d3a4dfb92b627444e1506a3e2db74d5d3dbf4aadac7dcc9579629ee0c7ffe4c2a8a7dbe23217b2993ac576e31e58d5ede7b3cd75f0b25104db57d09acfa38cf3daf9ae1e408201896ee911b31a09194f88b98454db010735ec6f8f897e43bd2282d04337e496d05b3afd8691a756c7e6d6d35c7e2e290a733fde8c683df29db"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x38}, &(0x7f0000000940), &(0x7f0000000980)={0x20, 0x3, 0x1, 0x6}})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000240)={0x40, 0xa, 0x4, {0x4, 0x11, "7ba4"}}, &(0x7f0000000640)=ANY=[@ANYBLOB="0003040000004403190404712a80bccb7dc08ae6a6b3887a89142e336a425207a7db09b13c3ad8cfed2df2e32260c1cf6ef0f44b89f2bad908479c7a7aa7a5823c5e067c085d20180ab81c08a21b6e967d72825342b3cc79196bdd41f806ae1e5c559f4cce9f447520ca6a1506e2ce276a051a26b2ec7cd400"/135], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x82, 0x31, 0x1, "52000100", "ed554bbe"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x62, 0x8, 0xed, 0x0, 0xc}}}, &(0x7f0000001b80)={0x84, &(0x7f0000001640)={0x40, 0x17, 0x83, "1f861b414c7a35d19ae702d210d5b408995a774f7151884b5d990ac4c0f27a211d89f5cb04dc98d404f38b16a6a066dd8809e594e8eab6373b9b44352ca6ea18d4faf7ff9aab159d36566db2154abcb4abd2ff2d968fb7ae5c6e08a3e9744bac333d8ee4a51c86383e05d2f7b4d9d88208dc4a570149e2b518444c60653430c17b0a9c"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x7}}, &(0x7f00000017c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001800)={0x40, 0x7, 0x2, 0x2009}, &(0x7f0000001880)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000018c0)={0x40, 0xb, 0x2, "cc95"}, &(0x7f0000001900)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000001940)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001980)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000019c0)={0x40, 0x19, 0x2, "22b5"}, &(0x7f0000001a00)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001ac0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001b00)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000001b40)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

1.354920047s ago: executing program 1 (id=1227):
r0 = userfaultfd(0x80001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e) (async)
r2 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x1a5}) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
ioprio_set$uid(0x0, 0x0, 0x4007)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001380)={0x0, 0xd2f, 0x6, 0x1000, 0x5, 0x0, [{0x100, 0x8, 0x9, '\x00', 0x20c}, {0x6, 0xa, 0x100000001, '\x00', 0x2006}, {0x7, 0x8, 0x3ff, '\x00', 0x408}, {0x3, 0x6, 0x4000000000}, {0xed, 0x4, 0x80, '\x00', 0x180}]}) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000480)={0x7, 0x3, 0x836, 0x8, 0x4}, 0x4c) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
r7 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r7, &(0x7f0000001340)={&(0x7f0000000040)=@file={0x0, './proc/thread-self/fail-nth\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="9e919201d85afda6d6b5efbb579be6b940c116df5dc3a81006bdc93045289b959c32430b2357091f8798b1e6171ae7505aedcb2457b31072f1e75ff72533022ebff12210fc75fb5f1c8745872470a9a1d1e2cbc84602bb8f99e9a48492417fd077a3345ed1f99cd8113b3d6ff13edc19a50d7df6c6760ab8808369b25374490883bc84abaa5d02727f0b42a4b6d19c8b6e23a0035efe5ca0", 0x98}], 0x2, &(0x7f0000001300)=[@rights={{0x10}}], 0x10, 0x8000}, 0x8000)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0)

1.341970228s ago: executing program 1 (id=1228):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="5e88f47e9f94ce3ec6a71bf7349b6d9f1bd8670b1122c1316f2f5edcd02d5cbd27f83fcb2dbc277da9fcde37b722f3a8a97e33914335bb5c3757be5532d63764d0c6b0dc540f25c8827ebceabe7d7da144a03a7f88148dff5fc4e44f493bb113ec9290700c00982ecb6063bceb1d76f2a8da1b2c5edb201fc05c71e60c64107b928bf5b19f01a2a7b3614d7f89b7ec4a8d87ea842d36d063b8893ce706914c24a4686f2fa1f8d4e0c299a4a3f1b38f76ccf35317bd74898070079a53689889fc9c35b71d6612a83c335fdc45ea377bb588dcc6eceb5fb6f8b3afe6e8eb59fb9789c738924c0284200026c5ae72477ef8aa959fd063aeedc7e3f1be62c4452ec6266a0c864e97b290f925b1c48c1b9f1bf37fdb5faaa46433253972818a50ba8bc7399e947ac3bfd283f31b7d9a7ca3a640e3df6d5871785867b65228d972667895ff657bd510b801b7211d52f2011b", 0x14f}], 0x1}}, {{0xffffffffffffffff, 0x0, &(0x7f0000001840)=[{&(0x7f0000000740)="09f8f9855fc01f61992d27a8ded447b75599aab7d2b436e417f17e72a342d9df5df0e1daec9376ed88547087630ec4994c4577e0d49f23cc3a325f9dfd8f5fb8fab2cdf8aaf65f5982b91bc27507ceaf620d55711b5f6d150b0c86f807a2182db966b6da82adcb8fd8a93522b68f7aa50195f219d6ba95b4738b37ec7eedf59f0966cb23c03ec4dded554ab0c663d97e7e2c3b7662a7195fdb0e5db4ae41bc9caafc571ca5a2a9dbd1bcbe86de281668fb7c1b55a478f2e46991bf391d129c3a971a94369096b78d6bb6f536c1b22131c7c2db06b02ec4451ab8f46dd949090f921e06ba0bd7212e921846b8b7762c06b1e99483f7dcf93b129c236e7f865a1016828b5743b4e2e4eb38412484ed08f2dc88b5e444dc3dc1a53a67a631f3624717197df9010e664ad0a981ef7ea3da07aabe549ec609096995636f9ce53f2fe359a9b65eec38af9e5fc527113dff32076b5b004c8161e3aae70aa4a0f0acd83264ec4a3d78acac92ba737cb69aff76f8f0520b59cc353d415bccfd4cdf2a18fb16083046816f449151a9425453909631d36842100ef8b97a65c91c379b251ad2322e132362bca3b0e8a246f000b1c5dd9cd1c2068fed21a286675c8fea8c15ddd138f0b21a2ef867db4d837e9be158ca01be84a0bcde2e6a1e65dca6fb4dcdc04cba42b6655ad228793ff167ee6499c39b5a57a54e859ae100150b613552f2d0adf1cd74f0504e72937a52769758f9c189ab82f1d219c49ae5a3595e7677ee24b2eb03483beadb1d4d06028eee0f1550eff65527bf71798551be333cf307aac7bef6ff0ea459732759729ec03b9a1d5ab15bba94086d53212fa6f505f4675a3bff65e15f0ca1c27dd70eb2837438642dcb0ea31cf2ae90c38339e61ff873ded4e9d12df7ed4223c596cc53615ba3c465408de804e6a53b7ec3b14740e3b34890e3a060ec076e513c34818c923f6ad47ddf879f2e83cfd1aebd6f9b4d9219df7e4453ac44b45a7cf94bbb8a121e64321773c351c66db0e36cf2123a016b90816131cce144df80bb1bbf6915a20ad5cb4cec8731a55e7fbaad36d7f49fa8ab0044c0f377fd47f7616c9ebf9cea8a4cbaed4cc94771ece235b70453b37089339390db1de113888aa73051dbd91a1197a8b5e78df1b376ff30f5d54174dcd8f81fa86ef6b060ffe19f0b9e9776ebb2200e5cb15379f7eb9d9586c37de01d4696ab33dd3db2fe49ea523f5970ca7af2fd5936c3b449263b4a6267b73fb4e476d67f7c474908a42a58f9616d052865c2d37b89933d6ff301f7acb928066939a08a871e0ef7ebd53d95439b44ebc2844015bab4ebe3ede24eeb183846d8217c3e189c396929c417da2f618b223925354c0912cfd150ad787af19cd7c54908693d375f481fa40ad336b141341635668d9202c255ca74ddf03d99fb21e5dca0b0c724a7fe7affab93610130a3507cc7f5516d899d1683f906ea689ae7d4fa4e8677a02a8c263c7b629fe54a100487d14f52e2fe944e5fbe9ef1b6f4c5962d82d468de57f5702a44570e4927aa35c6a9634071bcba02c69bfee69ac2a020a9f8ac3da4f0bb4e7ec76a473910280016f37876405834df5f2e85170e8537e3b3cf41f1e0210c22c7fd84111768b06ebacda3f38c276e729c71c816a3de4a1fa1411c6d6d9b397f924c144d741e052bc7c6a5d4bee43879c98cf44391b773413af0b6ec9a51ba1acd43fa841168f047f95b96b4a34568480d46b6c66bf3e5c409581ea82bdefba0ff479aba9db732a419aa630d029ca0d608a9f078723005e55d754a41db92a6f62b60e55e8fd52fa2716ee01a9ca187861a2d2f6332b0ed12ebca5a0e30eccef0c2c7ad606662e6a35e0d6deaa9b79d4f7803e91283513c233f893de0d4442f6130a49d1fadd2b42eabcf8ca9342a447da1cfa2d6c9f75d812966510f40b67dae79c4e3f647076160bc9482f9f8923c8595efb44d7df1157cb4877dab09d03352c172b60fbe3fd713bccee1d99a95099a147b7384420d3df2e396a59c1234966522fd70a9b6ae7ce1968cf43c7bca4c8df98a37b2e2fae2820ce50d3c7ff1c2752bc7d5df95d111e40cb4e2b345d0156e63f37e44e778202ffcddd26d331f8db151b2700fc0cd60ebed6e1bf224b4713810f348916656df390e534aed9420ab97c2dee686bb0d74f0a8e2b660fb8f7e89e30eafd176c81c08c3eeadf8b7d50bb04b32085ec4bed3273820176420ffbd1e9d3a419efc3e282fabc84ba44af2d6415a4b399a53b867718acc1b3fa22a0ea43e20e1371aceb790cf5c97b15132a543283530a4076c48da491eb7be99ddcc00a77fae4b902fdb5cae420b222384b97900f78f99978df69c4e03da5faa9e1f92105f646d0484d504969137bf308f0533de6b8abdabec42049b47d61758cd365d0121e30b6c56cf26da42ca992c3718ca5564d171c20bfaf976845b4e94b4d121a4b0dfe364ccb4c5b44da5c3d552f3dd6be80596ac97e7dafd9fd05e94a2922a2219c814ed0aec012c09db888d5e3404842440bcaf6c81a700b32708d2cd9a7423b621783d2f4faee15ece50b2b5aa4ccddd92c039670f156359a2503e1f1e18f702f97452a983dc7f57c942421ca0bd6538f5df552fe241da0ed54e41eac9deeb4ac3abca589ec5e7d50ef6d248213905247e700d4a7129feaf763353d8b8c07158986354f47f33a5a32de8ab67ce8ec855e015ad77d2396a1c2cb5d9c1d4317cea0a12ead4b135268be3afa3daff4f36ae7e1240b8b280d4233b6bea740ca702814253b4096e6c6aec5717ced67bb021e4172b12ceb78bba5d3cc22c69bcaeb909b14e63d787ae80f42f651ec70692945bc09e223be0719495263f58deec0758df6d47a3ea8acb70a33be2922b07b52793c37ec369ec828e21455752d9eb2d8ebcd622b692ef8d8c0ef0a6fa9443c53cf996b6494f135b62c4121421c8240d3f4c227a395a960bf335c6d670cbd06fca6711b941b394704b9b49eef6b455b0b0aec95c353568f19425fc6a6eec828bbcd1d07fb83f4946a79d35098650d20447b4f5f53929523417aba72d095f8803f379b65d21281cb854bc074ee769856bc909f4dd53d5a67e01b5c077a8b0032e7cb6855dcb52453c0242cb86dab27e3e6f18e599e0f74981dc6bd58c9e90b835dd322549c0fce4b78a22abf0f59ad6232fd02fa85aed2a65cec5805f46e5e2bda648a248dc5974d6b25b54da033d5a16f1f9c9c422f8407602cb5457cf5e11cb72e39c1833e6ee251247bb94afc98908d60a9e2fd5928fc7c558ba728f6ba34091602e992eb18b6612e75c845accb6e8761bddfb83fe14c7a90887e76614a590f645e2cf11203494abc3945b7903f6f389937cfec42eb4c1792723d64c2ab9dad5f06b79c8b7dd68a4bb2ece370861a642de4a0eae07ed2aa575eee8bf309c9fe2da742f5c483fb58eb9fce64d28778005ecee0907a5059c0f1eff4a6a8826eba4bee94a0c3617808dd7030161718fee7840614fb669172d1110389dcffbec8363ee89f2e351204831539f28645650298d76967a3e3f30895bb70a5757c3299e780fe5dd1f2d279481fb7b5a201b165fa8b05b8d1c8e8f9b61960bf7b4028d91c4700b097dd478149a3d363fccdb06134cb5365122a1525912695f896a2b7aaaedee35b0fe8c1e4924011be6db4c195d4a43af9271b6600c5a424d7a4c605e4a4336b90037636fa85cd048e0c5521bfe6f648c86ba9ceca537e7a6278780b81d864c113f68b1b043e3bf7e75af38584896ac13210bb8456976946229637bce9d9fd894945dc26350eeb78a0fb0e33edceb0554ae89f35432eb55906db21d9742e717a62fbc9c165037580cf6febf39d7996d1a1f807527aca6894172eee3fc4cc049c01a8fffb0bfcb471abfeea100343858e3c21c358638f4d981a987ed5a44a344d3b8a35af785466305f2c0dd2ff3a86dec38b3c6ab294a4272230a234993152d0d26e062ca92dd2d1ce5aa3340fcaaaa09ec01c75655806fc9d4d08411e34672fff64d0759dd7bbe5a5423414ea97a1d96909e28f2ec0fa46162cbbe0abfa5ed8b8cece58c1367af1c50b8a77750440dfbdbf877da7273b128173ed71e8ee10c7cc06ca8c2feedf27b56f010898e28257ce7d2f778769c9d310ee05379eaa8c54542d3961e5751d219bdf5196344b87dd3179271890c59769ff02356743521ced566cfbe87fff67fb10970a81021d564156b5d715d8f775a2e5921b7990ec704e7e3d65ddecc68d458797b4f8a3f2a0a576f227d2a5535b92fd9f08a41e30ead88400b5beb14f2f0bfced1ff6d6030914dda5da8f606a346ad707ae6c8d4b191b7f96fcb4739004e43d3949912c2d4777dc490f790dba216caece096b7a4eb339cec3d220f87a920972e2b20ae9e59dced3d367e90b4958615b1184de0c7b95ffab6bec5bd74e78afe817de21db26f007aa81a7b80eea973a7d15345383cc04f1679b0718c75afaaf1f4f344ea6b44175d9f61bf02d5684c7be6816aba767c5ed57a74f0419c78b7830d5bfab1c32d5857b6f833a279999e4d651e5364a77b727d0a7b011ae6dda15665433f54e499ad548f02bb64bfe69ca6388a29c5976de7a47d1d0eb4404ff6d0de917aff30badb26f29b1cc65560cafdbbf449ed2a17be9eb43186cd190dbfc9e0bd2e672de8635b12345f8ed66a825e71ec69415577d7c1097673f82d5fb03cab2fb4bd6141ccb1376f9677edc242c132b791e5d20b95910cc440b65c23bcd5b98de0cbeffccff6b921c45a03602ac91f1b866551e32d9490972d03d7179b79d58f48408934a698ae7c6aef08b659ad09a5c77632e07d275a0be50d5e1bc65851049442e2e6c93b174006c70de4797fc179042831dd430eaba6bb9d7e93c2a09f28d014359313ef74a367dd5141d9194fcc65b956b0b9e4449c85470a28b6ef050c95a3a8b4774d768156738e9705b8953c61ce35f0166ec138c5ba51b162f3974814b7eebceacf7675958550de8104b1320a64a8f6001ef989ba7418287a87f2d5588ea6a7ead63026bb93268fadafec36326489fbbeca2ad1bc5f84561b8bcf1afd8a17b98d431f7bd4036f888e095e63c9c2856629b088954d62dfc11abb3c8141d00fdc6304b489ee96eb165296c544cfc3da9c850f01140cd94cf420f99a1e88e696e33008f2388e34a61dc40bf4bc571cf21beb9f0779c4a3f057fa2d42a2b7894ba95d41b7529bc0b074e6b239e8bb382d1682b579394f8e702d7ca7aae227a3820dca804429376f3204a974b9ec0897ce958ecaad3a61dbc5dc3f5b9732e91829572b61ffbf1d73f07dd087424b45d164", 0xec1}, {&(0x7f0000001740)}], 0x2}}], 0x2, 0x6081)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x40)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e81c"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000780)={0x24, &(0x7f0000000440)={0x40, 0xc, 0xf6, {0xf6, 0x24, "731a4b3ac15d5b3a7e0d40ff91533c4cd50cc31cab1f009814450716722a45aa48533d7ea3202725abcceea152b0326576309dd624f9e6fb58abc7d1c6f8fe9ffb5da50e5430af175035815226baeb1475910e8dcf091f3fedf2f3a9bb08c3396593a79501318326821ca3c9b9b208f80bb085f51494cb281fdfc0917013972dae65d690844ecef41f17486466ee130b75214fc3d3359c1fd15349572d920193ee156a3ba90f6acf2eb4b0bda8af87e28b8e94d6c593b2cdd133709ca287e909cf0d5a2abac596a21a6f9ac749a1b22f81eb7e21d3e849d6ce1ad5f80f7e5e056aed29726a76c1b9d02bbe23363fa7e82419bbc8"}}, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0xe, "a8a2f59e"}, @global=@item_012={0x0, 0x1, 0x2}, @main=@item_012={0x1, 0x0, 0x8, "a9"}, @main=@item_4={0x3, 0x0, 0x9, "37392b98"}, @local=@item_012={0x1, 0x2, 0x3, 'p'}, @local=@item_4={0x3, 0x2, 0x0, "02667766"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0x8d7}}}}, &(0x7f00000009c0)={0x2c, &(0x7f00000007c0)={0x0, 0x15, 0xca, "a706eed780004377435f9ed4dba7c8ce6ccfe1918d72d590b83a5e03b1199677af30ac966ce346f6dba18f94b5b7414b25f1039ebf58c192abe5ee6803c1def789d6220de0794f4128e57d3a4dfb92b627444e1506a3e2db74d5d3dbf4aadac7dcc9579629ee0c7ffe4c2a8a7dbe23217b2993ac576e31e58d5ede7b3cd75f0b25104db57d09acfa38cf3daf9ae1e408201896ee911b31a09194f88b98454db010735ec6f8f897e43bd2282d04337e496d05b3afd8691a756c7e6d6d35c7e2e290a733fde8c683df29db"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x38}, &(0x7f0000000940), &(0x7f0000000980)={0x20, 0x3, 0x1, 0x6}})
syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, &(0x7f0000000240)={0x40, 0xa, 0x4, {0x4, 0x11, "7ba4"}}, &(0x7f0000000640)=ANY=[@ANYBLOB="0003040000004403190404712a80bccb7dc08ae6a6b3887a89142e336a425207a7db09b13c3ad8cfed2df2e32260c1cf6ef0f44b89f2bad908479c7a7aa7a5823c5e067c085d20180ab81c08a21b6e967d72825342b3cc79196bdd41f806ae1e5c559f4cce9f447520ca6a1506e2ce276a051a26b2ec7cd400"/135], &(0x7f0000000380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x82, 0x31, 0x1, "52000100", "ed554bbe"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x62, 0x8, 0xed, 0x0, 0xc}}}, &(0x7f0000001b80)={0x84, &(0x7f0000001640)={0x40, 0x17, 0x83, "1f861b414c7a35d19ae702d210d5b408995a774f7151884b5d990ac4c0f27a211d89f5cb04dc98d404f38b16a6a066dd8809e594e8eab6373b9b44352ca6ea18d4faf7ff9aab159d36566db2154abcb4abd2ff2d968fb7ae5c6e08a3e9744bac333d8ee4a51c86383e05d2f7b4d9d88208dc4a570149e2b518444c60653430c17b0a9c"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x7}}, &(0x7f00000017c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001800)={0x40, 0x7, 0x2, 0x2009}, &(0x7f0000001880)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000018c0)={0x40, 0xb, 0x2, "cc95"}, &(0x7f0000001900)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000001940)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001980)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000019c0)={0x40, 0x19, 0x2, "22b5"}, &(0x7f0000001a00)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001ac0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001b00)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000001b40)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

570.801304ms ago: executing program 5 (id=1229):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmmsg$inet6(r0, &(0x7f0000005980)=[{{&(0x7f0000000080)={0xa, 0x4c20, 0x0, @remote, 0xc}, 0x1c, 0x0}}], 0x1, 0x6b38deb179a6f499)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='0', 0x1)
ftruncate(r1, 0xffff)
r2 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0)
close(0x3)
fcntl$lock(r1, 0x7, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000001001"], 0x48}}, 0x410)
sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xc, 0x9, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "b77bb752d3e38a6c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8800)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4005815)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$FUSE(r8, &(0x7f0000000e00)={0x2020}, 0x2020)

110.502385ms ago: executing program 3 (id=1230):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8000, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x9, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0x3, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xb0, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x100005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x22, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x4, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd504, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfbfffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0xedac, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1007, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x2, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0xffffff00, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket(0x400000010, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r3], 0x48}}, 0x40800)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

0s ago: executing program 3 (id=1231):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x2)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0)
write(r5, &(0x7f0000000240)='1', 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

ter parsing attributes in process `syz.2.497'.
[   90.733879][ T2021] fuse: Bad value for 'fd'
[   90.952007][   T36] audit: type=1400 audit(1789791158.870:206): avc:  denied  { module_load } for  pid=2030 comm="syz.1.500" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[   90.952113][ T2031] Invalid ELF header magic: != ELF
[   91.001793][ T1351] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[   91.093536][   T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   91.103699][   T45] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[   91.115924][   T45] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22
[   91.133989][  T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   91.151706][ T1351] usb 4-1: Using ep0 maxpacket: 32
[   91.158013][ T1351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.169002][ T1351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.179316][ T1351] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   91.188394][ T1351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.197273][ T1351] usb 4-1: config 0 descriptor??
[   91.203248][ T1351] hub 4-1:0.0: USB hub found
[   91.241697][  T310] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[   91.392724][  T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.402903][  T310] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   91.417747][  T310] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[   91.420820][ T1351] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[   91.427004][  T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.437044][ T2041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'.
[   91.448729][  T310] net1080 2-1:1.0: probe with driver net1080 failed with error -22
[   91.452374][ T1351] usbhid 4-1:0.0: can't add hid device: -71
[   91.465430][   T36] audit: type=1400 audit(1789791159.370:207): avc:  denied  { connect } for  pid=2040 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   91.465561][ T1351] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   91.499763][   T36] audit: type=1400 audit(1789791159.410:208): avc:  denied  { setopt } for  pid=2040 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   91.521168][ T1351] usb 4-1: USB disconnect, device number 35
[   91.731128][ T2047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.739849][ T2047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.765897][ T2048] fuse: Bad value for 'fd'
[   92.156711][ T1351] usb 2-1: USB disconnect, device number 23
[   92.267686][ T2057] FAULT_INJECTION: forcing a failure.
[   92.267686][ T2057] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   92.291730][ T2057] CPU: 0 UID: 0 PID: 2057 Comm: syz.2.508 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[   92.291767][ T2057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   92.291781][ T2057] Call Trace:
[   92.291788][ T2057]  <TASK>
[   92.291796][ T2057]  __dump_stack+0x21/0x30
[   92.291833][ T2057]  dump_stack_lvl+0x140/0x1c0
[   92.291862][ T2057]  ? __cfi_dump_stack_lvl+0x10/0x10
[   92.291893][ T2057]  ? check_stack_object+0x138/0x150
[   92.291918][ T2057]  dump_stack+0x19/0x20
[   92.291946][ T2057]  should_fail_ex+0x3c2/0x510
[   92.291974][ T2057]  should_fail+0xf/0x20
[   92.291997][ T2057]  should_fail_usercopy+0x1e/0x30
[   92.292024][ T2057]  _copy_to_user+0x24/0xa0
[   92.292053][ T2057]  simple_read_from_buffer+0xed/0x160
[   92.292085][ T2057]  proc_fail_nth_read+0x1aa/0x220
[   92.292117][ T2057]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   92.292148][ T2057]  ? bpf_lsm_file_permission+0xd/0x20
[   92.292177][ T2057]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   92.292207][ T2057]  vfs_read+0x288/0xc70
[   92.292230][ T2057]  ? __cfi_vfs_read+0x10/0x10
[   92.292253][ T2057]  ? __kasan_check_write+0x18/0x20
[   92.292275][ T2057]  ? mutex_lock+0x97/0x1d0
[   92.292301][ T2057]  ? __cfi_mutex_lock+0x10/0x10
[   92.292329][ T2057]  ksys_read+0x145/0x260
[   92.292352][ T2057]  ? __cfi_ksys_read+0x10/0x10
[   92.292375][ T2057]  ? __kasan_check_read+0x15/0x20
[   92.292398][ T2057]  __x64_sys_read+0x7f/0x90
[   92.292422][ T2057]  x64_sys_call+0x2638/0x2ee0
[   92.292454][ T2057]  do_syscall_64+0x57/0xf0
[   92.292474][ T2057]  ? clear_bhb_loop+0x50/0xa0
[   92.292501][ T2057]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   92.292528][ T2057] RIP: 0033:0x7f7dc955e98e
[   92.292547][ T2057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   92.292566][ T2057] RSP: 002b:00007f7dca3c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   92.292592][ T2057] RAX: ffffffffffffffda RBX: 00007f7dca3c46c0 RCX: 00007f7dc955e98e
[   92.292609][ T2057] RDX: 000000000000000f RSI: 00007f7dca3c40a0 RDI: 0000000000000004
[   92.292623][ T2057] RBP: 00007f7dca3c4090 R08: 0000000000000000 R09: 0000000000000000
[   92.292638][ T2057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.292652][ T2057] R13: 00007f7dc9826038 R14: 00007f7dc9825fa0 R15: 00007fff714644a8
[   92.292671][ T2057]  </TASK>
[   92.546309][   T36] audit: type=1400 audit(1789791160.460:209): avc:  denied  { mounton } for  pid=2064 comm="syz.2.509" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   92.671785][  T380] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[   92.831682][  T380] usb 4-1: Using ep0 maxpacket: 16
[   92.836979][    T9] usb 1-1: USB disconnect, device number 20
[   92.846367][  T380] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[   92.863137][  T380] usb 4-1: config 0 has no interface number 0
[   92.870353][  T380] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   92.880485][  T380] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 6992, setting to 1024
[   92.891700][  T380] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[   92.912827][  T380] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   92.921953][  T380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.929974][  T380] usb 4-1: Product: syz
[   92.934479][  T380] usb 4-1: Manufacturer: syz
[   92.939165][  T380] usb 4-1: SerialNumber: syz
[   92.951890][  T380] usb 4-1: config 0 descriptor??
[   92.957373][ T2060] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   92.964657][ T2060] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   93.173666][ T2060] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   93.181161][ T2060] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   93.191688][    T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   93.361686][    T9] usb 1-1: Using ep0 maxpacket: 32
[   93.367999][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.378966][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.388789][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   93.389656][  T380] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   93.397896][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.416887][    T9] usb 1-1: config 0 descriptor??
[   93.425291][    T9] hub 1-1:0.0: USB hub found
[   93.522413][ T2079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.533888][ T2079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.624680][    T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[   93.634714][    T9] usbhid 1-1:0.0: can't add hid device: -71
[   93.640718][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   93.672485][    T9] usb 1-1: USB disconnect, device number 21
[   93.790347][ T2060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.510'.
[   94.000412][ T2060] fuse: Bad value for 'fd'
[   94.015592][ T2088] netlink: 'syz.1.519': attribute type 16 has an invalid length.
[   94.025159][ T2088] tmpfs: Bad value for 'nr_inodes'
[   94.084104][ T2096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.093516][ T2096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.103186][ T2096] fuse: Bad value for 'fd'
[   94.162728][ T2101] kernel profiling enabled (shift: 63)
[   94.168432][ T2101] profiling shift: 63 too large
[   94.757994][ T2117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.781864][ T2117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.221957][  T380] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71
[   95.238248][  T380] asix 4-1:0.34: probe with driver asix failed with error -71
[   95.251214][  T380] usb 4-1: USB disconnect, device number 36
[   95.371698][ T1351] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[   95.414406][ T2130] FAULT_INJECTION: forcing a failure.
[   95.414406][ T2130] name failslab, interval 1, probability 0, space 0, times 0
[   95.427102][ T2130] CPU: 0 UID: 0 PID: 2130 Comm: syz.2.535 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[   95.427137][ T2130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   95.427151][ T2130] Call Trace:
[   95.427157][ T2130]  <TASK>
[   95.427165][ T2130]  __dump_stack+0x21/0x30
[   95.427201][ T2130]  dump_stack_lvl+0x140/0x1c0
[   95.427229][ T2130]  ? __cfi_dump_stack_lvl+0x10/0x10
[   95.427258][ T2130]  ? __kasan_check_write+0x18/0x20
[   95.427282][ T2130]  ? copy_mm+0x307/0x1da0
[   95.427307][ T2130]  dump_stack+0x19/0x20
[   95.427333][ T2130]  should_fail_ex+0x3c2/0x510
[   95.427359][ T2130]  should_failslab+0xac/0x100
[   95.427386][ T2130]  kmem_cache_alloc_noprof+0x42/0x410
[   95.427406][ T2130]  ? alloc_pid+0xa5/0xb80
[   95.427430][ T2130]  ? __asan_memcpy+0x5a/0x80
[   95.427451][ T2130]  alloc_pid+0xa5/0xb80
[   95.427476][ T2130]  copy_process+0x1467/0x3350
[   95.427504][ T2130]  ? __cfi_copy_process+0x10/0x10
[   95.427529][ T2130]  ? __kmalloc_cache_noprof+0x23c/0x470
[   95.427553][ T2130]  ? __kasan_check_write+0x18/0x20
[   95.427574][ T2130]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[   95.427600][ T2130]  vhost_task_create+0x1f7/0x3f0
[   95.427620][ T2130]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[   95.427645][ T2130]  ? __cfi_vhost_task_create+0x10/0x10
[   95.427669][ T2130]  ? __cfi_vhost_task_fn+0x10/0x10
[   95.427690][ T2130]  ? __kasan_check_write+0x18/0x20
[   95.427712][ T2130]  ? mutex_lock+0x97/0x1d0
[   95.427736][ T2130]  ? __cfi_mutex_lock+0x10/0x10
[   95.427759][ T2130]  ? kernel_text_address+0xa9/0xe0
[   95.427787][ T2130]  kvm_mmu_post_init_vm+0x161/0x300
[   95.427818][ T2130]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[   95.427845][ T2130]  ? _parse_integer_limit+0x195/0x1e0
[   95.427870][ T2130]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   95.427907][ T2130]  ? kstrtoull+0x13b/0x1e0
[   95.427930][ T2130]  ? kstrtouint+0x78/0xf0
[   95.427952][ T2130]  ? ioctl_has_perm+0x1bc/0x500
[   95.427974][ T2130]  ? __asan_memcpy+0x5a/0x80
[   95.427996][ T2130]  ? ioctl_has_perm+0x408/0x500
[   95.428018][ T2130]  ? has_cap_mac_admin+0xd0/0xd0
[   95.428040][ T2130]  ? __kasan_check_write+0x18/0x20
[   95.428060][ T2130]  ? mutex_lock_killable+0x97/0x1d0
[   95.428086][ T2130]  ? __cfi_mutex_lock_killable+0x10/0x10
[   95.428110][ T2130]  ? proc_fail_nth_write+0x184/0x220
[   95.428142][ T2130]  kvm_vcpu_ioctl+0xa43/0x1000
[   95.428164][ T2130]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   95.428186][ T2130]  ? __cfi_vfs_write+0x10/0x10
[   95.428209][ T2130]  ? __kasan_check_write+0x18/0x20
[   95.428229][ T2130]  ? mutex_unlock+0x90/0x240
[   95.428253][ T2130]  ? __cfi_mutex_unlock+0x10/0x10
[   95.428280][ T2130]  ? __fget_files+0x2bc/0x330
[   95.428307][ T2130]  ? bpf_lsm_file_ioctl+0xd/0x20
[   95.428333][ T2130]  ? security_file_ioctl+0x3e/0x110
[   95.428355][ T2130]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   95.428374][ T2130]  __se_sys_ioctl+0x123/0x1b0
[   95.428399][ T2130]  __x64_sys_ioctl+0x7f/0xa0
[   95.428425][ T2130]  x64_sys_call+0x1878/0x2ee0
[   95.428444][ T2130]  do_syscall_64+0x57/0xf0
[   95.428464][ T2130]  ? clear_bhb_loop+0x50/0xa0
[   95.428488][ T2130]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   95.428509][ T2130] RIP: 0033:0x7f7dc959e159
[   95.428525][ T2130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.428542][ T2130] RSP: 002b:00007f7dca3c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   95.428567][ T2130] RAX: ffffffffffffffda RBX: 00007f7dc9825fa0 RCX: 00007f7dc959e159
[   95.428583][ T2130] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   95.428596][ T2130] RBP: 00007f7dca3c4090 R08: 0000000000000000 R09: 0000000000000000
[   95.428609][ T2130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.428622][ T2130] R13: 00007f7dc9826038 R14: 00007f7dc9825fa0 R15: 00007fff714644a8
[   95.428637][ T2130]  </TASK>
[   95.641701][ T1351] usb 2-1: Using ep0 maxpacket: 32
[   95.902238][ T2134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.914021][ T2134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.932225][ T2134] fuse: Bad value for 'fd'
[   95.956276][ T1351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.967415][ T1351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.977358][ T1351] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   96.001672][ T1351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.022050][ T1351] usb 2-1: config 0 descriptor??
[   96.039062][ T1351] hub 2-1:0.0: USB hub found
[   96.235001][ T1351] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[   96.255558][ T1351] usbhid 2-1:0.0: can't add hid device: -71
[   96.271699][ T1351] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   96.302339][ T1351] usb 2-1: USB disconnect, device number 24
[   96.459645][   T36] audit: type=1400 audit(1789791164.370:210): avc:  denied  { write } for  pid=2145 comm="syz.2.541" name="wireless" dev="proc" ino=4026532450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   96.544277][   T36] audit: type=1400 audit(1789791164.460:211): avc:  denied  { ioctl } for  pid=2145 comm="syz.2.541" path="socket:[23146]" dev="sockfs" ino=23146 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   96.618025][ T2148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.652673][ T2148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.121716][   T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   97.291705][   T45] usb 2-1: Using ep0 maxpacket: 16
[   97.297999][   T45] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[   97.311667][   T45] usb 2-1: config 0 has no interface number 0
[   97.317924][   T45] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   97.341679][   T45] usb 2-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 6992, setting to 1024
[   97.371669][   T45] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[   97.393139][   T45] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   97.402423][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.410441][   T45] usb 2-1: Product: syz
[   97.431692][   T45] usb 2-1: Manufacturer: syz
[   97.436329][   T45] usb 2-1: SerialNumber: syz
[   97.448088][   T45] usb 2-1: config 0 descriptor??
[   97.456991][ T2163] process 'syz.2.547' launched './file0' with NULL argv: empty string added
[   97.466079][ T2158] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   97.474118][ T2158] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   97.698948][ T2158] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   97.710917][ T2158] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   97.719013][ T2167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.746521][ T2167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.763417][ T2167] fuse: Bad value for 'fd'
[   97.784630][ T2169] FAULT_INJECTION: forcing a failure.
[   97.784630][ T2169] name failslab, interval 1, probability 0, space 0, times 0
[   97.797349][ T2169] CPU: 0 UID: 0 PID: 2169 Comm: syz.3.550 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[   97.797395][ T2169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   97.797408][ T2169] Call Trace:
[   97.797415][ T2169]  <TASK>
[   97.797423][ T2169]  __dump_stack+0x21/0x30
[   97.797457][ T2169]  dump_stack_lvl+0x140/0x1c0
[   97.797485][ T2169]  ? __cfi_dump_stack_lvl+0x10/0x10
[   97.797513][ T2169]  ? proc_pident_instantiate+0x6d/0x2c0
[   97.797538][ T2169]  ? proc_tid_base_lookup+0x2f/0x40
[   97.797557][ T2169]  ? path_openat+0x1124/0x35a0
[   97.797583][ T2169]  ? do_filp_open+0x1f2/0x440
[   97.797609][ T2169]  ? __x64_sys_openat+0x13a/0x170
[   97.797637][ T2169]  ? x64_sys_call+0xe69/0x2ee0
[   97.797656][ T2169]  ? do_syscall_64+0x57/0xf0
[   97.797676][ T2169]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   97.797703][ T2169]  dump_stack+0x19/0x20
[   97.797729][ T2169]  should_fail_ex+0x3c2/0x510
[   97.797754][ T2169]  should_failslab+0xac/0x100
[   97.797778][ T2169]  kmem_cache_alloc_node_noprof+0x45/0x420
[   97.797798][ T2169]  ? __alloc_skb+0x10c/0x360
[   97.797820][ T2169]  ? avc_has_perm_noaudit+0x289/0x360
[   97.797846][ T2169]  __alloc_skb+0x10c/0x360
[   97.797868][ T2169]  alloc_skb_with_frags+0xd0/0x8b0
[   97.797892][ T2169]  sock_alloc_send_pskb+0x883/0x9a0
[   97.797922][ T2169]  ? __cfi_sock_alloc_send_pskb+0x10/0x10
[   97.797949][ T2169]  ? iov_iter_advance+0x9b/0x1e0
[   97.797978][ T2169]  tun_get_user+0xaef/0x3720
[   97.798003][ T2169]  ? ptr_ring_consume+0x430/0x430
[   97.798023][ T2169]  ? _parse_integer+0x2e/0x40
[   97.798053][ T2169]  ? kstrtoull+0x13b/0x1e0
[   97.798075][ T2169]  ? __kasan_check_write+0x18/0x20
[   97.798098][ T2169]  ? ref_tracker_alloc+0x32b/0x5b0
[   97.798124][ T2169]  ? __cfi_ref_tracker_alloc+0x10/0x10
[   97.798150][ T2169]  ? selinux_file_permission+0x318/0xb60
[   97.798174][ T2169]  ? __kasan_check_write+0x18/0x20
[   97.798195][ T2169]  ? proc_fail_nth_write+0x184/0x220
[   97.798225][ T2169]  tun_chr_write_iter+0x1fa/0x310
[   97.798247][ T2169]  vfs_write+0x75f/0xfd0
[   97.798269][ T2169]  ? __cfi_vfs_write+0x10/0x10
[   97.798291][ T2169]  ? __kasan_slab_free+0x6a/0x80
[   97.798316][ T2169]  ? putname+0x113/0x150
[   97.798339][ T2169]  ? putname+0x113/0x150
[   97.798362][ T2169]  ? __kasan_check_read+0x15/0x20
[   97.798390][ T2169]  ksys_write+0x145/0x260
[   97.798414][ T2169]  ? __cfi_ksys_write+0x10/0x10
[   97.798437][ T2169]  ? __kasan_check_read+0x15/0x20
[   97.798458][ T2169]  __x64_sys_write+0x7f/0x90
[   97.798480][ T2169]  x64_sys_call+0x271c/0x2ee0
[   97.798499][ T2169]  do_syscall_64+0x57/0xf0
[   97.798518][ T2169]  ? clear_bhb_loop+0x50/0xa0
[   97.798544][ T2169]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   97.798569][ T2169] RIP: 0033:0x7f87fe59e159
[   97.798586][ T2169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.798605][ T2169] RSP: 002b:00007f87ff4f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   97.798630][ T2169] RAX: ffffffffffffffda RBX: 00007f87fe825fa0 RCX: 00007f87fe59e159
[   97.798647][ T2169] RDX: 0000000000000054 RSI: 00002000000003c0 RDI: 0000000000000003
[   97.798661][ T2169] RBP: 00007f87ff4f4090 R08: 0000000000000000 R09: 0000000000000000
[   97.798675][ T2169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.798689][ T2169] R13: 00007f87fe826038 R14: 00007f87fe825fa0 R15: 00007fff75d8e8a8
[   97.798706][ T2169]  </TASK>
[   98.062300][   T45] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   98.531696][   T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[   98.555464][ T2158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'.
[   98.721737][   T31] usb 4-1: Using ep0 maxpacket: 32
[   98.732852][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.751703][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.775033][ T2158] fuse: Bad value for 'fd'
[   98.781677][   T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   98.796598][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.812585][   T31] usb 4-1: config 0 descriptor??
[   98.822388][ T2183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.834871][   T31] hub 4-1:0.0: USB hub found
[   98.841989][ T2183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.033977][   T31] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[   99.043920][   T31] usbhid 4-1:0.0: can't add hid device: -71
[   99.050112][   T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   99.072127][   T31] usb 4-1: USB disconnect, device number 37
[   99.803410][   T45] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   99.821760][   T45] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   99.844187][   T45] asix 2-1:0.34: probe with driver asix failed with error -71
[   99.863061][   T45] usb 2-1: USB disconnect, device number 25
[   99.881186][ T2207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.895198][ T2207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.929186][ T2207] fuse: Bad value for 'fd'
[  100.576549][  T950] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  100.741677][  T950] usb 2-1: Using ep0 maxpacket: 16
[  100.752773][  T950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.768731][  T950] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  100.783285][  T950] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  100.792643][  T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.800659][  T950] usb 2-1: Product: syz
[  100.813743][  T950] usb 2-1: Manufacturer: syz
[  100.821685][  T950] usb 2-1: SerialNumber: syz
[  100.835954][  T950] usb 2-1: config 0 descriptor??
[  101.077898][   T36] audit: type=1400 audit(1789791168.990:212): avc:  denied  { mount } for  pid=2224 comm="syz.3.569" name="/" dev="configfs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  101.121060][   T36] audit: type=1400 audit(1789791169.020:213): avc:  denied  { search } for  pid=2224 comm="syz.3.569" name="/" dev="configfs" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  101.167115][   T36] audit: type=1400 audit(1789791169.020:214): avc:  denied  { write } for  pid=2224 comm="syz.3.569" name="usb_gadget" dev="configfs" ino=2076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  101.210191][   T36] audit: type=1400 audit(1789791169.030:215): avc:  denied  { add_name } for  pid=2224 comm="syz.3.569" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  101.251702][   T36] audit: type=1400 audit(1789791169.030:216): avc:  denied  { create } for  pid=2224 comm="syz.3.569" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  101.282948][ T2228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.291685][   T36] audit: type=1400 audit(1789791169.030:217): avc:  denied  { write } for  pid=2224 comm="syz.3.569" name="idVendor" dev="configfs" ino=25605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  101.331674][   T36] audit: type=1400 audit(1789791169.030:218): avc:  denied  { open } for  pid=2224 comm="syz.3.569" path="/121/config/usb_gadget/g1/idVendor" dev="configfs" ino=25605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  101.331712][ T2228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.481743][  T400] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  101.642028][  T400] usb 4-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30
[  101.653048][  T400] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  101.664184][  T400] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  101.677392][  T400] usb 4-1: config 0 interface 0 has no altsetting 0
[  101.684069][  T400] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00
[  101.693217][  T400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.705655][  T400] usb 4-1: config 0 descriptor??
[  101.710975][ T2226] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  101.947006][  T400] usbhid 4-1:0.0: can't add hid device: -71
[  101.961712][  T400] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  101.976441][ T2234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.980533][  T400] usb 4-1: USB disconnect, device number 38
[  101.985836][ T2234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.010476][ T2234] fuse: Bad value for 'fd'
[  102.515910][   T36] audit: type=1400 audit(1789791170.430:219): avc:  denied  { unmount } for  pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  102.791689][   T31] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  102.961675][   T31] usb 4-1: Using ep0 maxpacket: 16
[  102.972764][   T31] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  102.991156][   T31] usb 4-1: config 0 has no interface number 0
[  103.001281][   T31] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  103.021554][   T31] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 6992, setting to 1024
[  103.051683][   T31] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  103.073139][   T31] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  103.082453][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.090558][   T31] usb 4-1: Product: syz
[  103.111675][   T31] usb 4-1: Manufacturer: syz
[  103.116317][   T31] usb 4-1: SerialNumber: syz
[  103.132514][   T31] usb 4-1: config 0 descriptor??
[  103.138034][ T2238] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  103.151730][ T2238] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  103.361949][ T1351] usb 2-1: USB disconnect, device number 26
[  103.368697][ T2238] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  103.381921][ T2238] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  103.593382][   T31] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  103.735593][ T2263] FAULT_INJECTION: forcing a failure.
[  103.735593][ T2263] name failslab, interval 1, probability 0, space 0, times 0
[  103.769048][ T2263] CPU: 0 UID: 0 PID: 2263 Comm: syz.2.581 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[  103.769086][ T2263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  103.769100][ T2263] Call Trace:
[  103.769107][ T2263]  <TASK>
[  103.769116][ T2263]  __dump_stack+0x21/0x30
[  103.769150][ T2263]  dump_stack_lvl+0x140/0x1c0
[  103.769178][ T2263]  ? __cfi_dump_stack_lvl+0x10/0x10
[  103.769205][ T2263]  ? is_bpf_text_address+0x17b/0x1a0
[  103.769237][ T2263]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  103.769268][ T2263]  dump_stack+0x19/0x20
[  103.769295][ T2263]  should_fail_ex+0x3c2/0x510
[  103.769320][ T2263]  should_failslab+0xac/0x100
[  103.769347][ T2263]  __kmalloc_node_noprof+0x69/0x500
[  103.769370][ T2263]  ? __kvmalloc_node_noprof+0x128/0x300
[  103.769390][ T2263]  ? __kasan_check_write+0x18/0x20
[  103.769413][ T2263]  __kvmalloc_node_noprof+0x128/0x300
[  103.769434][ T2263]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  103.769455][ T2263]  ? xas_start+0x317/0x3e0
[  103.769475][ T2263]  ? __kasan_check_write+0x18/0x20
[  103.769496][ T2263]  ? enqueue_timer+0x1c5/0x4b0
[  103.769523][ T2263]  __kvm_mmu_topup_memory_cache+0x58e/0x7e0
[  103.769555][ T2263]  ? mutex_unlock+0x90/0x240
[  103.769580][ T2263]  kvm_mmu_topup_memory_cache+0x24/0x30
[  103.769608][ T2263]  kvm_mmu_load+0xa1/0x2900
[  103.769635][ T2263]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[  103.769664][ T2263]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[  103.769690][ T2263]  ? kvm_apic_has_interrupt+0x77a/0x790
[  103.769718][ T2263]  ? kvm_vcpu_flush_tlb_guest+0xfe/0x220
[  103.769740][ T2263]  vcpu_run+0x4d72/0x7830
[  103.769768][ T2263]  ? kvm_sched_clock_read+0x15/0x30
[  103.769805][ T2263]  ? signal_pending+0xc0/0xc0
[  103.769831][ T2263]  ? __kasan_check_write+0x18/0x20
[  103.769851][ T2263]  ? xfd_validate_state+0x68/0x140
[  103.769878][ T2263]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[  103.769903][ T2263]  ? __kasan_check_write+0x18/0x20
[  103.769924][ T2263]  ? fpregs_mark_activate+0x68/0x160
[  103.769949][ T2263]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[  103.769973][ T2263]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[  103.769996][ T2263]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[  103.770024][ T2263]  ? _parse_integer_limit+0x195/0x1e0
[  103.770050][ T2263]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  103.770078][ T2263]  ? kstrtoull+0x13b/0x1e0
[  103.770100][ T2263]  ? kstrtouint+0x78/0xf0
[  103.770123][ T2263]  ? ioctl_has_perm+0x1bc/0x500
[  103.770143][ T2263]  ? __asan_memcpy+0x5a/0x80
[  103.770164][ T2263]  ? ioctl_has_perm+0x408/0x500
[  103.770187][ T2263]  ? has_cap_mac_admin+0xd0/0xd0
[  103.770208][ T2263]  ? __kasan_check_write+0x18/0x20
[  103.770229][ T2263]  ? mutex_lock_killable+0x97/0x1d0
[  103.770261][ T2263]  ? __cfi_mutex_lock_killable+0x10/0x10
[  103.770287][ T2263]  ? proc_fail_nth_write+0x184/0x220
[  103.770319][ T2263]  kvm_vcpu_ioctl+0xa43/0x1000
[  103.770342][ T2263]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  103.770364][ T2263]  ? __cfi_vfs_write+0x10/0x10
[  103.770387][ T2263]  ? __kasan_check_write+0x18/0x20
[  103.770407][ T2263]  ? mutex_unlock+0x90/0x240
[  103.770430][ T2263]  ? __cfi_mutex_unlock+0x10/0x10
[  103.770456][ T2263]  ? __fget_files+0x2bc/0x330
[  103.770481][ T2263]  ? bpf_lsm_file_ioctl+0xd/0x20
[  103.770509][ T2263]  ? security_file_ioctl+0x3e/0x110
[  103.770530][ T2263]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  103.770549][ T2263]  __se_sys_ioctl+0x123/0x1b0
[  103.770575][ T2263]  __x64_sys_ioctl+0x7f/0xa0
[  103.770599][ T2263]  x64_sys_call+0x1878/0x2ee0
[  103.770619][ T2263]  do_syscall_64+0x57/0xf0
[  103.770639][ T2263]  ? clear_bhb_loop+0x50/0xa0
[  103.770664][ T2263]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  103.770689][ T2263] RIP: 0033:0x7f7dc959e159
[  103.770708][ T2263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.770726][ T2263] RSP: 002b:00007f7dca3c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  103.770751][ T2263] RAX: ffffffffffffffda RBX: 00007f7dc9825fa0 RCX: 00007f7dc959e159
[  103.770767][ T2263] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  103.770782][ T2263] RBP: 00007f7dca3c4090 R08: 0000000000000000 R09: 0000000000000000
[  103.770795][ T2263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.770808][ T2263] R13: 00007f7dc9826038 R14: 00007f7dc9825fa0 R15: 00007fff714644a8
[  103.770826][ T2263]  </TASK>
[  103.993901][ T2238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.573'.
[  104.342175][   T36] audit: type=1400 audit(1789791172.250:220): avc:  denied  { bind } for  pid=2265 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  104.411254][   T36] audit: type=1400 audit(1789791172.250:221): avc:  denied  { listen } for  pid=2265 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  104.451299][   T36] audit: type=1400 audit(1789791172.250:222): avc:  denied  { connect } for  pid=2265 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  104.495840][ T2238] fuse: Bad value for 'fd'
[  104.712325][ T2278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.721611][ T2278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.841700][  T310] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  105.001684][  T310] usb 2-1: Using ep0 maxpacket: 16
[  105.010529][  T310] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  105.019126][  T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  105.029551][  T310] usb 2-1: config 0 has no interface number 0
[  105.035836][  T310] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  105.046106][  T310] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  105.062815][  T310] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  105.074467][  T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.082619][  T310] usb 2-1: Product: syz
[  105.086808][  T310] usb 2-1: Manufacturer: syz
[  105.091416][  T310] usb 2-1: SerialNumber: syz
[  105.101595][  T310] usb 2-1: config 0 descriptor??
[  105.106988][ T2275] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  105.116216][  T310] asix 2-1:0.34: probe with driver asix failed with error -22
[  105.399279][ T2285] rust_binder: Write failure EFAULT in pid:445
[  105.399618][   T36] audit: type=1400 audit(1789791173.310:223): avc:  denied  { block_suspend } for  pid=2284 comm="syz.2.588" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  105.441355][   T36] audit: type=1400 audit(1789791173.350:224): avc:  denied  { read } for  pid=2284 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  105.517609][   T31] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  105.529269][   T31] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  105.543977][   T31] asix 4-1:0.34: probe with driver asix failed with error -71
[  105.566112][   T31] usb 4-1: USB disconnect, device number 39
[  106.099319][   T36] audit: type=1400 audit(1789791174.010:225): avc:  denied  { mounton } for  pid=2293 comm="syz.3.590" path="/123/file0" dev="tmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  106.131748][   T36] audit: type=1400 audit(1789791174.040:226): avc:  denied  { map } for  pid=2293 comm="syz.3.590" path="/dev/sda1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  106.194626][   T36] audit: type=1400 audit(1789791174.110:227): avc:  denied  { ioctl } for  pid=2293 comm="syz.3.590" path="socket:[26143]" dev="sockfs" ino=26143 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  106.448797][ T2298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.458160][ T2298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.081858][ T2306] fuse: Bad value for 'fd'
[  107.300643][ T2309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.326379][ T2309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.891688][ T2322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.900512][ T2322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.920879][ T2322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.599'.
[  107.930689][ T2322] fuse: Bad value for 'fd'
[  108.183333][   T31] usb 2-1: USB disconnect, device number 27
[  108.673231][ T2352] FAULT_INJECTION: forcing a failure.
[  108.673231][ T2352] name failslab, interval 1, probability 0, space 0, times 0
[  108.701709][  T400] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  108.719533][ T2352] CPU: 0 UID: 0 PID: 2352 Comm: syz.2.609 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[  108.719572][ T2352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  108.719586][ T2352] Call Trace:
[  108.719593][ T2352]  <TASK>
[  108.719601][ T2352]  __dump_stack+0x21/0x30
[  108.719641][ T2352]  dump_stack_lvl+0x140/0x1c0
[  108.719669][ T2352]  ? __cfi_dump_stack_lvl+0x10/0x10
[  108.719698][ T2352]  ? __kasan_kmalloc+0x96/0xb0
[  108.719725][ T2352]  dump_stack+0x19/0x20
[  108.719753][ T2352]  should_fail_ex+0x3c2/0x510
[  108.719779][ T2352]  should_failslab+0xac/0x100
[  108.719805][ T2352]  kmem_cache_alloc_noprof+0x42/0x410
[  108.719829][ T2352]  ? __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[  108.719859][ T2352]  ? __kasan_check_write+0x18/0x20
[  108.719882][ T2352]  __kvm_mmu_topup_memory_cache+0x1dd/0x7e0
[  108.719913][ T2352]  ? mutex_unlock+0x90/0x240
[  108.719939][ T2352]  kvm_mmu_topup_memory_cache+0x24/0x30
[  108.719970][ T2352]  kvm_mmu_load+0xa1/0x2900
[  108.719996][ T2352]  ? kvm_hv_setup_tsc_page+0x5f6/0xa80
[  108.720027][ T2352]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[  108.720053][ T2352]  ? kvm_apic_has_interrupt+0x77a/0x790
[  108.720082][ T2352]  ? kvm_vcpu_flush_tlb_guest+0xfe/0x220
[  108.720104][ T2352]  vcpu_run+0x4d72/0x7830
[  108.720134][ T2352]  ? kvm_sched_clock_read+0x15/0x30
[  108.720170][ T2352]  ? signal_pending+0xc0/0xc0
[  108.720197][ T2352]  ? __kasan_check_write+0x18/0x20
[  108.720218][ T2352]  ? xfd_validate_state+0x68/0x140
[  108.720247][ T2352]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[  108.720281][ T2352]  ? __kasan_check_write+0x18/0x20
[  108.720303][ T2352]  ? fpregs_mark_activate+0x68/0x160
[  108.720328][ T2352]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[  108.720352][ T2352]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[  108.720377][ T2352]  kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0
[  108.720406][ T2352]  ? _parse_integer_limit+0x195/0x1e0
[  108.720430][ T2352]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  108.720458][ T2352]  ? kstrtoull+0x13b/0x1e0
[  108.720482][ T2352]  ? kstrtouint+0x78/0xf0
[  108.720506][ T2352]  ? ioctl_has_perm+0x1bc/0x500
[  108.720530][ T2352]  ? __asan_memcpy+0x5a/0x80
[  108.720552][ T2352]  ? ioctl_has_perm+0x408/0x500
[  108.720574][ T2352]  ? has_cap_mac_admin+0xd0/0xd0
[  108.720596][ T2352]  ? __kasan_check_write+0x18/0x20
[  108.720617][ T2352]  ? mutex_lock_killable+0x97/0x1d0
[  108.720642][ T2352]  ? __cfi_mutex_lock_killable+0x10/0x10
[  108.720669][ T2352]  ? proc_fail_nth_write+0x184/0x220
[  108.720701][ T2352]  kvm_vcpu_ioctl+0xa43/0x1000
[  108.720723][ T2352]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  108.720745][ T2352]  ? __cfi_vfs_write+0x10/0x10
[  108.720767][ T2352]  ? __kasan_check_write+0x18/0x20
[  108.720788][ T2352]  ? mutex_unlock+0x90/0x240
[  108.720812][ T2352]  ? __cfi_mutex_unlock+0x10/0x10
[  108.720838][ T2352]  ? __fget_files+0x2bc/0x330
[  108.720864][ T2352]  ? bpf_lsm_file_ioctl+0xd/0x20
[  108.720891][ T2352]  ? security_file_ioctl+0x3e/0x110
[  108.720913][ T2352]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  108.720934][ T2352]  __se_sys_ioctl+0x123/0x1b0
[  108.720961][ T2352]  __x64_sys_ioctl+0x7f/0xa0
[  108.720987][ T2352]  x64_sys_call+0x1878/0x2ee0
[  108.721008][ T2352]  do_syscall_64+0x57/0xf0
[  108.721026][ T2352]  ? clear_bhb_loop+0x50/0xa0
[  108.721049][ T2352]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  108.721072][ T2352] RIP: 0033:0x7f7dc959e159
[  108.721090][ T2352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.721107][ T2352] RSP: 002b:00007f7dca3c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  108.721155][ T2352] RAX: ffffffffffffffda RBX: 00007f7dc9825fa0 RCX: 00007f7dc959e159
[  108.721172][ T2352] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  108.721187][ T2352] RBP: 00007f7dca3c4090 R08: 0000000000000000 R09: 0000000000000000
[  108.721202][ T2352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.721216][ T2352] R13: 00007f7dc9826038 R14: 00007f7dc9825fa0 R15: 00007fff714644a8
[  108.721235][ T2352]  </TASK>
[  109.191688][  T400] usb 2-1: Using ep0 maxpacket: 16
[  109.198081][  T400] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  109.206259][  T400] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.211709][ T2359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.216440][  T400] usb 2-1: config 0 has no interface number 0
[  109.231001][  T400] usb 2-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  109.241816][  T400] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  109.252383][ T2359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.271795][  T400] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  109.280882][  T400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.281863][ T2359] fuse: Bad value for 'fd'
[  109.288921][  T400] usb 2-1: Product: syz
[  109.297511][  T400] usb 2-1: Manufacturer: syz
[  109.302162][  T400] usb 2-1: SerialNumber: syz
[  109.307611][  T400] usb 2-1: config 0 descriptor??
[  109.313435][  T400] asix 2-1:0.34: probe with driver asix failed with error -22
[  109.831477][ T2373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.843007][ T2373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.859669][ T2373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.868369][ T2373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.878852][ T2373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.888858][ T2373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.938925][ T2376] FAULT_INJECTION: forcing a failure.
[  109.938925][ T2376] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.952355][ T2376] CPU: 1 UID: 0 PID: 2376 Comm: syz.3.617 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[  109.952390][ T2376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  109.952404][ T2376] Call Trace:
[  109.952411][ T2376]  <TASK>
[  109.952418][ T2376]  __dump_stack+0x21/0x30
[  109.952452][ T2376]  dump_stack_lvl+0x140/0x1c0
[  109.952482][ T2376]  ? __cfi_dump_stack_lvl+0x10/0x10
[  109.952512][ T2376]  dump_stack+0x19/0x20
[  109.952539][ T2376]  should_fail_ex+0x3c2/0x510
[  109.952566][ T2376]  should_fail+0xf/0x20
[  109.952589][ T2376]  should_fail_usercopy+0x1e/0x30
[  109.952615][ T2376]  _copy_from_iter+0x1a6/0x1520
[  109.952653][ T2376]  ? __kasan_check_write+0x18/0x20
[  109.952676][ T2376]  ? skb_set_owner_w+0x280/0x3d0
[  109.952706][ T2376]  ? __virt_addr_valid+0x2a1/0x370
[  109.952732][ T2376]  ? __cfi__copy_from_iter+0x10/0x10
[  109.952760][ T2376]  ? __check_object_size+0x54c/0x870
[  109.952783][ T2376]  ? __cfi___check_object_size+0x10/0x10
[  109.952807][ T2376]  ? __cfi_sock_alloc_send_pskb+0x10/0x10
[  109.952838][ T2376]  skb_copy_datagram_from_iter+0xf4/0x6f0
[  109.952867][ T2376]  tun_get_user+0xd99/0x3720
[  109.952894][ T2376]  ? ptr_ring_consume+0x430/0x430
[  109.952916][ T2376]  ? _parse_integer+0x2e/0x40
[  109.952938][ T2376]  ? kstrtoull+0x13b/0x1e0
[  109.952962][ T2376]  ? __kasan_check_write+0x18/0x20
[  109.952983][ T2376]  ? ref_tracker_alloc+0x32b/0x5b0
[  109.953011][ T2376]  ? __cfi_ref_tracker_alloc+0x10/0x10
[  109.953037][ T2376]  ? selinux_file_permission+0x318/0xb60
[  109.953061][ T2376]  ? __kasan_check_write+0x18/0x20
[  109.953083][ T2376]  ? proc_fail_nth_write+0x184/0x220
[  109.953114][ T2376]  tun_chr_write_iter+0x1fa/0x310
[  109.953137][ T2376]  vfs_write+0x75f/0xfd0
[  109.953160][ T2376]  ? __cfi_vfs_write+0x10/0x10
[  109.953182][ T2376]  ? __kasan_slab_free+0x6a/0x80
[  109.953208][ T2376]  ? putname+0x113/0x150
[  109.953232][ T2376]  ? putname+0x113/0x150
[  109.953255][ T2376]  ? __kasan_check_read+0x15/0x20
[  109.953276][ T2376]  ksys_write+0x145/0x260
[  109.953299][ T2376]  ? __cfi_ksys_write+0x10/0x10
[  109.953321][ T2376]  ? __kasan_check_read+0x15/0x20
[  109.953343][ T2376]  __x64_sys_write+0x7f/0x90
[  109.953364][ T2376]  x64_sys_call+0x271c/0x2ee0
[  109.953384][ T2376]  do_syscall_64+0x57/0xf0
[  109.953404][ T2376]  ? clear_bhb_loop+0x50/0xa0
[  109.953429][ T2376]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  109.953453][ T2376] RIP: 0033:0x7f87fe59e159
[  109.953472][ T2376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.953490][ T2376] RSP: 002b:00007f87ff4f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  109.953515][ T2376] RAX: ffffffffffffffda RBX: 00007f87fe825fa0 RCX: 00007f87fe59e159
[  109.953531][ T2376] RDX: 0000000000000054 RSI: 00002000000003c0 RDI: 0000000000000003
[  109.953545][ T2376] RBP: 00007f87ff4f4090 R08: 0000000000000000 R09: 0000000000000000
[  109.953559][ T2376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.953573][ T2376] R13: 00007f87fe826038 R14: 00007f87fe825fa0 R15: 00007fff75d8e8a8
[  109.953590][ T2376]  </TASK>
[  110.438401][   T36] audit: type=1400 audit(1789791178.340:228): avc:  denied  { getopt } for  pid=2379 comm="syz.3.619" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  110.495798][   T36] audit: type=1400 audit(1789791178.410:229): avc:  denied  { mounton } for  pid=2386 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  110.570426][ T2386] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.577954][ T2386] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.585129][ T2386] bridge_slave_0: entered allmulticast mode
[  110.591473][ T2386] bridge_slave_0: entered promiscuous mode
[  110.600082][ T2386] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.607248][ T2386] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.614623][ T2386] bridge_slave_1: entered allmulticast mode
[  110.621205][ T2386] bridge_slave_1: entered promiscuous mode
[  110.680558][  T309] bridge_slave_1: left allmulticast mode
[  110.699096][  T309] bridge_slave_1: left promiscuous mode
[  110.708697][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.717329][  T309] bridge_slave_0: left allmulticast mode
[  110.724548][  T309] bridge_slave_0: left promiscuous mode
[  110.734705][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.808973][ T2386] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.816065][ T2386] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.823419][ T2386] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.830475][ T2386] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.850987][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.858335][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.870026][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.877169][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.894807][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.901887][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.920529][  T309] tipc: Disabling bearer <udp:syz2>
[  110.926669][  T309] tipc: Left network mode
[  110.932913][  T309] veth1_macvtap: left promiscuous mode
[  110.938434][  T309] veth0_vlan: left promiscuous mode
[  110.971687][   T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  111.008236][ T2386] veth0_vlan: entered promiscuous mode
[  111.018529][ T2386] veth1_macvtap: entered promiscuous mode
[  111.043195][   T36] audit: type=1400 audit(1789791178.950:230): avc:  denied  { mounton } for  pid=2386 comm="syz-executor" path="/root/syzkaller.ri0MaG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  111.073171][   T36] audit: type=1400 audit(1789791178.960:231): avc:  denied  { unmount } for  pid=2386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  111.112100][ T2413] FAULT_INJECTION: forcing a failure.
[  111.112100][ T2413] name failslab, interval 1, probability 0, space 0, times 0
[  111.127012][ T2413] CPU: 0 UID: 0 PID: 2413 Comm: syz.2.629 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[  111.127047][ T2413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  111.127060][ T2413] Call Trace:
[  111.127067][ T2413]  <TASK>
[  111.127075][ T2413]  __dump_stack+0x21/0x30
[  111.127108][ T2413]  dump_stack_lvl+0x140/0x1c0
[  111.127136][ T2413]  ? __cfi_dump_stack_lvl+0x10/0x10
[  111.127165][ T2413]  dump_stack+0x19/0x20
[  111.127192][ T2413]  should_fail_ex+0x3c2/0x510
[  111.127217][ T2413]  should_failslab+0xac/0x100
[  111.127243][ T2413]  __kmalloc_cache_node_noprof+0x46/0x430
[  111.127267][ T2413]  ? __get_vm_area_node+0x150/0x390
[  111.127305][ T2413]  ? kasan_save_alloc_info+0x3a/0x50
[  111.127324][ T2413]  ? __kasan_slab_alloc+0x73/0x90
[  111.127344][ T2413]  ? kmem_cache_alloc_node_noprof+0x1ca/0x420
[  111.127359][ T2413]  __get_vm_area_node+0x150/0x390
[  111.127376][ T2413]  __vmalloc_node_range_noprof+0x340/0x1300
[  111.127395][ T2413]  ? copy_process+0x57c/0x3350
[  111.127412][ T2413]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  111.127431][ T2413]  ? kasan_save_alloc_info+0x3a/0x50
[  111.127443][ T2413]  ? __kasan_slab_alloc+0x73/0x90
[  111.127458][ T2413]  ? arch_dup_task_struct+0x5b/0xe0
[  111.127476][ T2413]  ? __asan_memcpy+0x5a/0x80
[  111.127489][ T2413]  dup_task_struct+0x5d6/0xd80
[  111.127504][ T2413]  ? copy_process+0x57c/0x3350
[  111.127518][ T2413]  ? _raw_spin_lock_irq+0x93/0x120
[  111.127531][ T2413]  ? copy_process+0x3350/0x3350
[  111.127546][ T2413]  ? __kasan_check_write+0x18/0x20
[  111.127559][ T2413]  copy_process+0x57c/0x3350
[  111.127573][ T2413]  ? kstrtouint_from_user+0x117/0x170
[  111.127589][ T2413]  ? selinux_file_permission+0x318/0xb60
[  111.127605][ T2413]  ? __cfi_copy_process+0x10/0x10
[  111.127619][ T2413]  ? proc_fail_nth_write+0x184/0x220
[  111.127639][ T2413]  kernel_clone+0x233/0x810
[  111.127655][ T2413]  ? __cfi_kernel_clone+0x10/0x10
[  111.127672][ T2413]  __x64_sys_clone+0x1b7/0x230
[  111.127688][ T2413]  ? __cfi___x64_sys_clone+0x10/0x10
[  111.127706][ T2413]  ? __kasan_check_read+0x15/0x20
[  111.127719][ T2413]  x64_sys_call+0x2b3c/0x2ee0
[  111.127731][ T2413]  do_syscall_64+0x57/0xf0
[  111.127742][ T2413]  ? clear_bhb_loop+0x50/0xa0
[  111.127759][ T2413]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  111.127774][ T2413] RIP: 0033:0x7f7dc959e159
[  111.127786][ T2413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.127798][ T2413] RSP: 002b:00007f7dca3c3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  111.127815][ T2413] RAX: ffffffffffffffda RBX: 00007f7dc9825fa0 RCX: 00007f7dc959e159
[  111.127825][ T2413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020b84211
[  111.127834][ T2413] RBP: 00007f7dca3c4090 R08: 0000000000000000 R09: 0000000000000000
[  111.127843][ T2413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  111.127851][ T2413] R13: 00007f7dc9826038 R14: 00007f7dc9825fa0 R15: 00007fff714644a8
[  111.127862][ T2413]  </TASK>
[  111.127893][ T2413] syz.2.629: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  111.131670][   T31] usb 4-1: Using ep0 maxpacket: 16
[  111.141796][ T2413] ,cpuset=
[  111.156036][   T31] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  111.160576][ T2413] syz2
[  111.165989][   T31] usb 4-1: config 0 has no interface number 0
[  111.170288][ T2413] ,mems_allowed=0
[  111.174647][   T31] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  111.181674][ T2413] 
[  111.184218][   T31] usb 4-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  111.196411][ T2413] CPU: 0 UID: 0 PID: 2413 Comm: syz.2.629 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[  111.196443][ T2413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  111.196456][ T2413] Call Trace:
[  111.196462][ T2413]  <TASK>
[  111.196469][ T2413]  __dump_stack+0x21/0x30
[  111.196501][ T2413]  dump_stack_lvl+0x140/0x1c0
[  111.196528][ T2413]  ? __cfi_dump_stack_lvl+0x10/0x10
[  111.196555][ T2413]  dump_stack+0x19/0x20
[  111.196580][ T2413]  warn_alloc+0x1e7/0x2c0
[  111.196607][ T2413]  ? __kasan_kmalloc+0x28/0xb0
[  111.196631][ T2413]  ? __cfi_warn_alloc+0x10/0x10
[  111.196657][ T2413]  ? __get_vm_area_node+0x150/0x390
[  111.196684][ T2413]  ? kasan_save_alloc_info+0x3a/0x50
[  111.196703][ T2413]  ? __get_vm_area_node+0x382/0x390
[  111.196731][ T2413]  __vmalloc_node_range_noprof+0x365/0x1300
[  111.196764][ T2413]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  111.196792][ T2413]  ? kasan_save_alloc_info+0x3a/0x50
[  111.196810][ T2413]  ? __kasan_slab_alloc+0x73/0x90
[  111.196834][ T2413]  ? arch_dup_task_struct+0x5b/0xe0
[  111.196863][ T2413]  ? __asan_memcpy+0x5a/0x80
[  111.196882][ T2413]  dup_task_struct+0x5d6/0xd80
[  111.196906][ T2413]  ? copy_process+0x57c/0x3350
[  111.196930][ T2413]  ? _raw_spin_lock_irq+0x93/0x120
[  111.196948][ T2413]  ? copy_process+0x3350/0x3350
[  111.196972][ T2413]  ? __kasan_check_write+0x18/0x20
[  111.196992][ T2413]  copy_process+0x57c/0x3350
[  111.197015][ T2413]  ? kstrtouint_from_user+0x117/0x170
[  111.197039][ T2413]  ? selinux_file_permission+0x318/0xb60
[  111.197061][ T2413]  ? __cfi_copy_process+0x10/0x10
[  111.197084][ T2413]  ? proc_fail_nth_write+0x184/0x220
[  111.197114][ T2413]  kernel_clone+0x233/0x810
[  111.197147][ T2413]  ? __cfi_kernel_clone+0x10/0x10
[  111.197173][ T2413]  __x64_sys_clone+0x1b7/0x230
[  111.197198][ T2413]  ? __cfi___x64_sys_clone+0x10/0x10
[  111.197226][ T2413]  ? __kasan_check_read+0x15/0x20
[  111.197246][ T2413]  x64_sys_call+0x2b3c/0x2ee0
[  111.197265][ T2413]  do_syscall_64+0x57/0xf0
[  111.197282][ T2413]  ? clear_bhb_loop+0x50/0xa0
[  111.197307][ T2413]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  111.197330][ T2413] RIP: 0033:0x7f7dc959e159
[  111.197347][ T2413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.197364][ T2413] RSP: 002b:00007f7dca3c3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  111.197395][ T2413] RAX: ffffffffffffffda RBX: 00007f7dc9825fa0 RCX: 00007f7dc959e159
[  111.197410][ T2413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020b84211
[  111.197423][ T2413] RBP: 00007f7dca3c4090 R08: 0000000000000000 R09: 0000000000000000
[  111.197436][ T2413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  111.197449][ T2413] R13: 00007f7dc9826038 R14: 00007f7dc9825fa0 R15: 00007fff714644a8
[  111.197465][ T2413]  </TASK>
[  111.197473][ T2413] Mem-Info:
[  111.309756][   T31] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  111.314396][ T2413] active_anon:6866 inactive_anon:0 isolated_anon:0
[  111.314396][ T2413]  active_file:22952 inactive_file:2659 isolated_file:0
[  111.314396][ T2413]  unevictable:0 dirty:349 writeback:0
[  111.314396][ T2413]  slab_reclaimable:3909 slab_unreclaimable:74124
[  111.314396][ T2413]  mapped:26768 shmem:166 pagetables:894
[  111.314396][ T2413]  sec_pagetables:0 bounce:0
[  111.314396][ T2413]  kernel_misc_reclaimable:0
[  111.314396][ T2413]  free:1517285 free_pcp:1982 free_cma:0
[  111.318972][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.324313][ T2413] Node 0 active_anon:27464kB inactive_anon:0kB active_file:91808kB inactive_file:10636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107072kB dirty:1396kB writeback:0kB shmem:664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4728kB pagetables:3576kB sec_pagetables:0kB all_unreclaimable? no
[  111.330198][   T31] usb 4-1: Product: syz
[  111.335593][ T2413] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:68kB free_cma:0kB
[  111.338648][   T31] usb 4-1: Manufacturer: syz
[  111.343430][ T2413] lowmem_reserve[]:
[  111.350249][   T31] usb 4-1: SerialNumber: syz
[  111.353634][ T2413]  0
[  111.382391][   T31] usb 4-1: config 0 descriptor??
[  111.422495][ T2413]  3921
[  111.439378][ T2397] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  111.931590][ T2413]  3921
[  111.934674][ T2413] Normal free:3109976kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27464kB inactive_anon:0kB active_file:91808kB inactive_file:10636kB unevictable:0kB writepending:1396kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3608kB local_pcp:1848kB free_cma:0kB
[  111.941411][   T31] asix 4-1:0.34: probe with driver asix failed with error -22
[  111.974972][   T45] usb 2-1: USB disconnect, device number 28
[  111.976755][ T2413] lowmem_reserve[]: 0 0 0
[  111.999148][ T2413] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB
[  112.014929][ T2413] Normal: 74*4kB (ME) 309*8kB (ME) 862*16kB (ME) 784*32kB (UME) 374*64kB (UME) 53*128kB (UME) 41*256kB (UME) 36*512kB (UM) 26*1024kB (UM) 9*2048kB (UME) 723*4096kB (M) = 3107760kB
[  112.033118][ T2413] 25777 total pagecache pages
[  112.038140][ T2413] 4 pages in swap cache
[  112.042619][ T2413] Free swap  = 124268kB
[  112.046813][ T2413] Total swap = 124996kB
[  112.051039][ T2413] 2097051 pages RAM
[  112.055135][ T2413] 0 pages HighMem/MovableOnly
[  112.059855][ T2413] 352241 pages reserved
[  112.070697][ T2413] 0 pages cma reserved
[  112.077317][ T2413] Memory allocations:
[  112.081845][ T2413]          0 B        0 init/main.c:1477 func:do_initcalls
[  112.090506][ T2413]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  112.098865][ T2413]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  112.106853][ T2413]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  112.122175][ T2413]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  112.154644][ T2413]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  112.168162][ T2413]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  112.181386][ T2413]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  112.189472][ T2413]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  112.197559][ T2413]          0 B        0 init/initramfs.c:101 func:find_link
[  112.246913][ T2426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.256296][ T2426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.324573][   T36] audit: type=1400 audit(1789791180.240:232): avc:  denied  { watch watch_reads } for  pid=2434 comm="syz.4.637" path="/4" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  112.466169][ T2426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.475370][ T2426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.485511][ T2426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.494755][ T2426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.661699][  T310] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  112.794217][ T2448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2448 comm=syz.1.641
[  112.811899][  T310] usb 5-1: Using ep0 maxpacket: 16
[  112.819684][  T310] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  112.830669][   T36] audit: type=1400 audit(1789791180.730:233): avc:  denied  { create } for  pid=2449 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  112.851305][  T310] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.866297][  T310] usb 5-1: config 0 has no interface number 0
[  112.872884][   T36] audit: type=1400 audit(1789791180.730:234): avc:  denied  { write } for  pid=2449 comm="syz.1.642" path="socket:[28307]" dev="sockfs" ino=28307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  112.897511][  T310] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  112.907553][  T310] usb 5-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.922457][  T310] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  112.931667][  T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.939693][  T310] usb 5-1: Product: syz
[  112.943938][  T310] usb 5-1: Manufacturer: syz
[  112.948892][  T310] usb 5-1: SerialNumber: syz
[  112.956943][  T310] usb 5-1: config 0 descriptor??
[  112.963786][ T2443] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  112.971952][  T310] asix 5-1:0.34: probe with driver asix failed with error -22
[  113.152107][   T36] audit: type=1400 audit(1789791181.070:235): avc:  denied  { nlmsg_write } for  pid=2459 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  113.223416][ T2462] kvm: kvm [2459]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111
[  113.224486][   T36] audit: type=1400 audit(1789791181.140:236): avc:  denied  { write } for  pid=2476 comm="syz.1.651" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  113.254525][   T36] audit: type=1400 audit(1789791181.140:237): avc:  denied  { remove_name } for  pid=2476 comm="syz.1.651" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  113.656275][ T2491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.665921][ T2491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.675064][ T2491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.654'.
[  113.714063][ T2495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2495 comm=syz.1.656
[  113.730812][  T310] usb 4-1: USB disconnect, device number 40
[  114.194992][ T2512] Invalid argument reading file caps for ./file0
[  114.226389][   T45] usb 3-1: USB disconnect, device number 18
[  114.301700][   T31] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  114.385524][   T13] bridge_slave_1: left allmulticast mode
[  114.391253][   T13] bridge_slave_1: left promiscuous mode
[  114.397043][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.404859][   T13] bridge_slave_0: left allmulticast mode
[  114.410497][   T13] bridge_slave_0: left promiscuous mode
[  114.416210][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.476817][ T2516] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.483955][ T2516] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.483959][   T31] usb 4-1: Using ep0 maxpacket: 8
[  114.485422][   T31] usb 4-1: unable to get BOS descriptor or descriptor too short
[  114.491147][ T2516] bridge_slave_0: entered allmulticast mode
[  114.496869][   T31] usb 4-1: config 8 has an invalid interface number: 64 but max is 0
[  114.504654][ T2516] bridge_slave_0: entered promiscuous mode
[  114.510052][   T31] usb 4-1: config 8 has no interface number 0
[  114.521107][ T2516] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.523838][   T31] usb 4-1: config 8 interface 64 has no altsetting 0
[  114.530123][ T2516] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.538398][   T31] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4e.fe
[  114.543901][ T2516] bridge_slave_1: entered allmulticast mode
[  114.550739][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.560713][ T2516] bridge_slave_1: entered promiscuous mode
[  114.565912][   T31] usb 4-1: Product: syz
[  114.584204][   T31] usb 4-1: Manufacturer: syz
[  114.588869][   T31] usb 4-1: SerialNumber: syz
[  114.609965][   T13] veth1_macvtap: left promiscuous mode
[  114.615976][   T13] veth0_vlan: left promiscuous mode
[  114.709603][ T2516] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.716695][ T2516] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.723993][ T2516] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.731033][ T2516] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.757624][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.765185][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.780306][  T309] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.787420][  T309] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.799789][  T309] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.806921][  T309] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.823744][   T31] usb_ehset_test 4-1:8.64: probe with driver usb_ehset_test failed with error -32
[  114.838670][   T31] usb 4-1: USB disconnect, device number 41
[  114.857875][ T2516] veth0_vlan: entered promiscuous mode
[  114.869314][ T2516] veth1_macvtap: entered promiscuous mode
[  114.934784][ T2530] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  115.271724][   T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  115.333527][ T2546] =======================================================
[  115.333527][ T2546] WARNING: The mand mount option has been deprecated and
[  115.333527][ T2546]          and is ignored by this kernel. Remove the mand
[  115.333527][ T2546]          option from the mount to silence this warning.
[  115.333527][ T2546] =======================================================
[  115.421676][   T31] usb 2-1: Using ep0 maxpacket: 16
[  115.432603][   T31] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  115.446588][  T310] usb 5-1: USB disconnect, device number 2
[  115.451737][   T31] usb 2-1: config 0 has no interface number 0
[  115.458883][   T31] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  115.469394][   T31] usb 2-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 6992, setting to 1024
[  115.472785][  T950] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  115.488106][   T31] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  115.502795][   T31] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  115.511973][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.521687][   T31] usb 2-1: Product: syz
[  115.525974][   T31] usb 2-1: Manufacturer: syz
[  115.530592][   T31] usb 2-1: SerialNumber: syz
[  115.547915][   T31] usb 2-1: config 0 descriptor??
[  115.553575][ T2536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  115.560782][ T2536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  115.631760][  T950] usb 6-1: Using ep0 maxpacket: 32
[  115.638272][  T950] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.663916][  T950] usb 6-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  115.678762][  T950] usb 6-1: config 1 interface 0 has no altsetting 0
[  115.686369][  T950] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  115.696195][  T950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  115.704503][  T950] usb 6-1: SerialNumber: syz
[  115.719993][  T950] hub 6-1:1.0: bad descriptor, ignoring hub
[  115.743810][  T950] hub 6-1:1.0: probe with driver hub failed with error -5
[  115.751341][  T950] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  115.759581][  T950] cdc_acm 6-1:1.0: This needs exactly 3 endpoints
[  115.767341][  T950] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22
[  115.771858][ T2536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  115.790880][ T2536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  115.929012][   T36] kauditd_printk_skb: 14 callbacks suppressed
[  115.929031][   T36] audit: type=1400 audit(1789791183.840:252): avc:  denied  { write } for  pid=2542 comm="syz.5.669" name="file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  115.983842][   T36] audit: type=1400 audit(1789791183.840:253): avc:  denied  { open } for  pid=2542 comm="syz.5.669" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.015877][   T31] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  116.028129][ T2564] tun0: tun_chr_ioctl cmd 1074025680
[  116.031810][   T45] usb 6-1: USB disconnect, device number 2
[  116.036991][ T2564] tun0: tun_chr_ioctl cmd 1074812117
[  116.039359][   T36] audit: type=1400 audit(1789791183.840:254): avc:  denied  { ioctl } for  pid=2542 comm="syz.5.669" path="/3/file0" dev="tmpfs" ino=33 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.045977][ T2564] tmpfs: Bad value for 'nr_blocks'
[  116.085081][   T36] audit: type=1400 audit(1789791183.930:255): avc:  denied  { set_context_mgr } for  pid=2563 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  116.099427][ T2566] overlay: ./file0 is not a directory
[  116.401788][ T1351] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  116.418837][ T2536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.667'.
[  116.449719][   T36] audit: type=1400 audit(1789791184.360:256): avc:  denied  { unlink } for  pid=2516 comm="syz-executor" name="file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  116.561682][ T1351] usb 5-1: Using ep0 maxpacket: 16
[  116.574426][ T1351] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  116.597982][ T1351] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.610981][ T1351] usb 5-1: config 0 has no interface number 0
[  116.617948][   T36] audit: type=1400 audit(1789791184.520:257): avc:  denied  { read } for  pid=2579 comm="syz.3.683" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  116.642320][ T1351] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  116.655247][ T1351] usb 5-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  116.675770][   T36] audit: type=1400 audit(1789791184.520:258): avc:  denied  { open } for  pid=2579 comm="syz.3.683" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  116.700979][   T36] audit: type=1400 audit(1789791184.530:259): avc:  denied  { ioctl } for  pid=2579 comm="syz.3.683" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  116.741608][ T1351] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  116.751032][ T1351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.769755][ T1351] usb 5-1: Product: syz
[  116.775740][ T1351] usb 5-1: Manufacturer: syz
[  116.780484][ T1351] usb 5-1: SerialNumber: syz
[  116.786533][ T1351] usb 5-1: config 0 descriptor??
[  116.791833][ T2568] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  116.802561][ T1351] asix 5-1:0.34: probe with driver asix failed with error -22
[  117.078254][ T2593] rust_binder: Write failure EFAULT in pid:24
[  117.100920][ T2596] netlink: 72 bytes leftover after parsing attributes in process `syz.5.689'.
[  117.197879][   T36] audit: type=1400 audit(1789791185.110:260): avc:  denied  { remount } for  pid=2598 comm="syz.3.690" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  117.313077][ T2603] veth1: entered allmulticast mode
[  117.368226][ T2602] veth1: left allmulticast mode
[  117.420262][   T36] audit: type=1400 audit(1789791185.330:261): avc:  denied  { bind } for  pid=2608 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  117.861915][   T31] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71
[  117.872178][   T31] asix 2-1:0.34: probe with driver asix failed with error -71
[  117.881353][   T31] usb 2-1: USB disconnect, device number 29
[  117.929318][ T2642] futex_wake_op: syz.3.704 tries to shift op by 144; fix this program
[  118.987002][ T2690] SELinux: security_context_str_to_sid () failed with errno=-22
[  119.062071][ T2692] syz.5.722 uses obsolete (PF_INET,SOCK_PACKET)
[  119.091684][   T65] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  119.187916][   T31] usb 5-1: USB disconnect, device number 3
[  119.241691][  T950] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  119.264834][   T65] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  119.275336][   T65] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  119.291981][   T65] usb 4-1: config 1 interface 0 has no altsetting 0
[  119.303483][   T65] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  119.315175][   T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.331785][   T65] usb 4-1: Product: syz
[  119.336001][   T65] usb 4-1: Manufacturer: syz
[  119.340629][   T65] usb 4-1: SerialNumber: syz
[  119.350533][ T2681] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  119.357947][ T2681] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  119.414599][  T950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  119.441670][  T950] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  119.456963][  T950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  119.475650][  T950] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  119.493141][  T950] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  119.511669][  T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.519827][  T950] usb 2-1: Product: syz
[  119.529927][  T950] usb 2-1: Manufacturer: syz
[  119.534605][  T950] usb 2-1: SerialNumber: syz
[  119.542244][  T950] usb 2-1: config 0 descriptor??
[  119.560779][  T950] ums-isd200 2-1:0.0: USB Mass Storage device detected
[  119.931517][  T950] scsi host1: usb-storage 2-1:0.0
[  119.944002][  T950] usb 2-1: USB disconnect, device number 30
[  120.421684][  T950] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  120.571819][  T950] usb 6-1: Using ep0 maxpacket: 16
[  120.579357][   T65] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:e1:22:24:1d:92
[  120.581980][  T950] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  120.599941][  T950] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.600606][   T65] rtl8150 4-1:1.0: eth1: rtl8150 is detected
[  120.610241][  T950] usb 6-1: config 0 has no interface number 0
[  120.624575][  T950] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  120.634988][  T950] usb 6-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  120.643684][   T65] usb 4-1: USB disconnect, device number 42
[  120.649737][  T950] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  120.664161][  T950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.672936][  T950] usb 6-1: Product: syz
[  120.678196][  T950] usb 6-1: Manufacturer: syz
[  120.704058][  T950] usb 6-1: SerialNumber: syz
[  120.716709][  T950] usb 6-1: config 0 descriptor??
[  120.734480][ T2727] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  120.742636][  T950] asix 6-1:0.34: probe with driver asix failed with error -22
[  120.944117][   T36] kauditd_printk_skb: 16 callbacks suppressed
[  120.944139][   T36] audit: type=1400 audit(1789791188.860:278): avc:  denied  { read write } for  pid=2769 comm="syz.1.741" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  121.001666][   T36] audit: type=1400 audit(1789791188.860:279): avc:  denied  { open } for  pid=2769 comm="syz.1.741" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  121.027572][   T36] audit: type=1400 audit(1789791188.860:280): avc:  denied  { ioctl } for  pid=2769 comm="syz.1.741" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  121.140714][ T2784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=296 sclass=netlink_route_socket pid=2784 comm=syz.3.745
[  121.306565][   T36] audit: type=1400 audit(1789791189.220:281): avc:  denied  { sys_admin } for  pid=2783 comm="syz.3.745" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  121.451701][  T400] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  121.612804][  T400] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.627392][  T400] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  121.641308][  T400] usb 5-1: config 0 interface 0 has no altsetting 0
[  121.648198][  T400] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  121.657680][  T400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.667135][  T400] usb 5-1: config 0 descriptor??
[  122.274306][   T36] audit: type=1400 audit(1789791190.190:282): avc:  denied  { write } for  pid=2782 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  122.351197][  T400] usbhid 5-1:0.0: can't add hid device: -71
[  122.357957][  T400] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  122.368551][  T400] usb 5-1: USB disconnect, device number 4
[  122.402954][   T36] audit: type=1400 audit(1789791190.320:283): avc:  denied  { create } for  pid=2814 comm="syz.4.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  122.501277][ T2820] bridge: RTM_NEWNEIGH with invalid ether address
[  122.508451][ T2820] bridge: RTM_NEWNEIGH with invalid ether address
[  122.565123][   T36] audit: type=1400 audit(1789791190.480:284): avc:  denied  { ioctl } for  pid=2825 comm="syz.4.755" path="socket:[32299]" dev="sockfs" ino=32299 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  122.590788][   T36] audit: type=1400 audit(1789791190.480:285): avc:  denied  { setopt } for  pid=2825 comm="syz.4.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  122.610946][   T36] audit: type=1400 audit(1789791190.480:286): avc:  denied  { write } for  pid=2825 comm="syz.4.755" path="socket:[32299]" dev="sockfs" ino=32299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  122.634938][   T36] audit: type=1326 audit(1789791190.480:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2825 comm="syz.4.755" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc8839e159 code=0x0
[  122.829455][ T2836] fuse: Unknown parameter 'f]0x0000000000000007'
[  122.838485][ T2836] MTRR 1 not used
[  123.200299][   T65] usb 6-1: USB disconnect, device number 3
[  123.371725][  T400] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  123.489915][ T2855] netlink: 80 bytes leftover after parsing attributes in process `syz.4.764'.
[  123.499217][ T2855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'.
[  123.540790][  T400] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  123.549975][  T400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.558762][  T400] usb 2-1: config 0 descriptor??
[  123.821688][  T310] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  123.971839][  T310] usb 5-1: Using ep0 maxpacket: 16
[  123.978221][  T310] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  123.986521][  T310] usb 5-1: config 0 has no interface number 0
[  123.992680][  T310] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  124.002791][  T310] usb 5-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 6992, setting to 1024
[  124.014045][  T310] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  124.025610][  T310] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  124.034873][  T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.042941][  T310] usb 5-1: Product: syz
[  124.047162][  T310] usb 5-1: Manufacturer: syz
[  124.051827][  T310] usb 5-1: SerialNumber: syz
[  124.060021][  T310] usb 5-1: config 0 descriptor??
[  124.065772][ T2857] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  124.073288][ T2857] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  124.282386][ T2857] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  124.289604][ T2857] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  124.399701][ T2876] FAULT_INJECTION: forcing a failure.
[  124.399701][ T2876] name failslab, interval 1, probability 0, space 0, times 0
[  124.412472][ T2876] CPU: 0 UID: 0 PID: 2876 Comm: syz.3.773 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[  124.412505][ T2876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  124.412517][ T2876] Call Trace:
[  124.412525][ T2876]  <TASK>
[  124.412533][ T2876]  __dump_stack+0x21/0x30
[  124.412564][ T2876]  dump_stack_lvl+0x140/0x1c0
[  124.412581][ T2876]  ? __cfi_dump_stack_lvl+0x10/0x10
[  124.412599][ T2876]  dump_stack+0x19/0x20
[  124.412615][ T2876]  should_fail_ex+0x3c2/0x510
[  124.412630][ T2876]  should_failslab+0xac/0x100
[  124.412646][ T2876]  __kmalloc_cache_node_noprof+0x46/0x430
[  124.412660][ T2876]  ? __get_vm_area_node+0x150/0x390
[  124.412677][ T2876]  ? kasan_save_alloc_info+0x3a/0x50
[  124.412689][ T2876]  ? __kasan_slab_alloc+0x73/0x90
[  124.412703][ T2876]  ? kmem_cache_alloc_node_noprof+0x1ca/0x420
[  124.412718][ T2876]  __get_vm_area_node+0x150/0x390
[  124.412735][ T2876]  __vmalloc_node_range_noprof+0x340/0x1300
[  124.412754][ T2876]  ? copy_process+0x57c/0x3350
[  124.412772][ T2876]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  124.412791][ T2876]  ? kasan_save_alloc_info+0x3a/0x50
[  124.412803][ T2876]  ? __kasan_slab_alloc+0x73/0x90
[  124.412817][ T2876]  ? arch_dup_task_struct+0x5b/0xe0
[  124.412836][ T2876]  ? __asan_memcpy+0x5a/0x80
[  124.412849][ T2876]  dup_task_struct+0x5d6/0xd80
[  124.412864][ T2876]  ? copy_process+0x57c/0x3350
[  124.412879][ T2876]  ? _raw_spin_lock_irq+0x93/0x120
[  124.412892][ T2876]  ? copy_process+0x3350/0x3350
[  124.412906][ T2876]  ? __kasan_check_write+0x18/0x20
[  124.412920][ T2876]  copy_process+0x57c/0x3350
[  124.412936][ T2876]  ? kasan_save_alloc_info+0x3a/0x50
[  124.412948][ T2876]  ? __cfi_copy_process+0x10/0x10
[  124.412963][ T2876]  ? __kmalloc_cache_noprof+0x23c/0x470
[  124.412977][ T2876]  ? __kasan_check_write+0x18/0x20
[  124.412989][ T2876]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  124.413004][ T2876]  vhost_task_create+0x1f7/0x3f0
[  124.413018][ T2876]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  124.413033][ T2876]  ? __cfi_vhost_task_create+0x10/0x10
[  124.413054][ T2876]  ? __cfi_vhost_task_fn+0x10/0x10
[  124.413067][ T2876]  ? __kasan_check_write+0x18/0x20
[  124.413079][ T2876]  ? mutex_lock+0x97/0x1d0
[  124.413093][ T2876]  ? __cfi_mutex_lock+0x10/0x10
[  124.413107][ T2876]  ? kernel_text_address+0xa9/0xe0
[  124.413124][ T2876]  kvm_mmu_post_init_vm+0x161/0x300
[  124.413141][ T2876]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  124.413157][ T2876]  ? _parse_integer_limit+0x195/0x1e0
[  124.413172][ T2876]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  124.413189][ T2876]  ? kstrtoull+0x13b/0x1e0
[  124.413202][ T2876]  ? kstrtouint+0x78/0xf0
[  124.413215][ T2876]  ? ioctl_has_perm+0x1bc/0x500
[  124.413228][ T2876]  ? __asan_memcpy+0x5a/0x80
[  124.413241][ T2876]  ? ioctl_has_perm+0x408/0x500
[  124.413254][ T2876]  ? has_cap_mac_admin+0xd0/0xd0
[  124.413267][ T2876]  ? __kasan_check_write+0x18/0x20
[  124.413280][ T2876]  ? mutex_lock_killable+0x97/0x1d0
[  124.413295][ T2876]  ? __cfi_mutex_lock_killable+0x10/0x10
[  124.413310][ T2876]  ? proc_fail_nth_write+0x184/0x220
[  124.413329][ T2876]  kvm_vcpu_ioctl+0xa43/0x1000
[  124.413342][ T2876]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  124.413354][ T2876]  ? __cfi_vfs_write+0x10/0x10
[  124.413368][ T2876]  ? __kasan_check_write+0x18/0x20
[  124.413380][ T2876]  ? mutex_unlock+0x90/0x240
[  124.413394][ T2876]  ? __cfi_mutex_unlock+0x10/0x10
[  124.413410][ T2876]  ? __fget_files+0x2bc/0x330
[  124.413425][ T2876]  ? bpf_lsm_file_ioctl+0xd/0x20
[  124.413441][ T2876]  ? security_file_ioctl+0x3e/0x110
[  124.413454][ T2876]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  124.413466][ T2876]  __se_sys_ioctl+0x123/0x1b0
[  124.413481][ T2876]  __x64_sys_ioctl+0x7f/0xa0
[  124.413496][ T2876]  x64_sys_call+0x1878/0x2ee0
[  124.413508][ T2876]  do_syscall_64+0x57/0xf0
[  124.413520][ T2876]  ? clear_bhb_loop+0x50/0xa0
[  124.413536][ T2876]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  124.413554][ T2876] RIP: 0033:0x7f87fe59e159
[  124.413566][ T2876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.413578][ T2876] RSP: 002b:00007f87ff4f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  124.413594][ T2876] RAX: ffffffffffffffda RBX: 00007f87fe825fa0 RCX: 00007f87fe59e159
[  124.413604][ T2876] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[  124.413613][ T2876] RBP: 00007f87ff4f4090 R08: 0000000000000000 R09: 0000000000000000
[  124.413621][ T2876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.413629][ T2876] R13: 00007f87fe826038 R14: 00007f87fe825fa0 R15: 00007fff75d8e8a8
[  124.413640][ T2876]  </TASK>
[  124.413660][ T2876] warn_alloc: 1 callbacks suppressed
[  124.413667][ T2876] syz.3.773: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=
[  124.872022][  T310] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  124.895642][ T2876] syz3,mems_allowed=0
[  124.900863][ T2876] CPU: 1 UID: 0 PID: 2876 Comm: syz.3.773 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[  124.900918][ T2876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  124.900931][ T2876] Call Trace:
[  124.900938][ T2876]  <TASK>
[  124.900946][ T2876]  __dump_stack+0x21/0x30
[  124.900979][ T2876]  dump_stack_lvl+0x140/0x1c0
[  124.901007][ T2876]  ? __cfi_dump_stack_lvl+0x10/0x10
[  124.901035][ T2876]  dump_stack+0x19/0x20
[  124.901060][ T2876]  warn_alloc+0x1e7/0x2c0
[  124.901089][ T2876]  ? __kasan_kmalloc+0x28/0xb0
[  124.901113][ T2876]  ? __cfi_warn_alloc+0x10/0x10
[  124.901139][ T2876]  ? __get_vm_area_node+0x150/0x390
[  124.901168][ T2876]  ? kasan_save_alloc_info+0x3a/0x50
[  124.901188][ T2876]  ? __get_vm_area_node+0x382/0x390
[  124.901217][ T2876]  __vmalloc_node_range_noprof+0x365/0x1300
[  124.901251][ T2876]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  124.901280][ T2876]  ? kasan_save_alloc_info+0x3a/0x50
[  124.901300][ T2876]  ? __kasan_slab_alloc+0x73/0x90
[  124.901324][ T2876]  ? arch_dup_task_struct+0x5b/0xe0
[  124.901355][ T2876]  ? __asan_memcpy+0x5a/0x80
[  124.901376][ T2876]  dup_task_struct+0x5d6/0xd80
[  124.901402][ T2876]  ? copy_process+0x57c/0x3350
[  124.901426][ T2876]  ? _raw_spin_lock_irq+0x93/0x120
[  124.901447][ T2876]  ? copy_process+0x3350/0x3350
[  124.901472][ T2876]  ? __kasan_check_write+0x18/0x20
[  124.901494][ T2876]  copy_process+0x57c/0x3350
[  124.901520][ T2876]  ? kasan_save_alloc_info+0x3a/0x50
[  124.901539][ T2876]  ? __cfi_copy_process+0x10/0x10
[  124.901564][ T2876]  ? __kmalloc_cache_noprof+0x23c/0x470
[  124.901596][ T2876]  ? __kasan_check_write+0x18/0x20
[  124.901624][ T2876]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  124.901649][ T2876]  vhost_task_create+0x1f7/0x3f0
[  124.901670][ T2876]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  124.901694][ T2876]  ? __cfi_vhost_task_create+0x10/0x10
[  124.901717][ T2876]  ? __cfi_vhost_task_fn+0x10/0x10
[  124.901738][ T2876]  ? __kasan_check_write+0x18/0x20
[  124.901759][ T2876]  ? mutex_lock+0x97/0x1d0
[  124.901782][ T2876]  ? __cfi_mutex_lock+0x10/0x10
[  124.901804][ T2876]  ? kernel_text_address+0xa9/0xe0
[  124.901831][ T2876]  kvm_mmu_post_init_vm+0x161/0x300
[  124.901861][ T2876]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  124.901889][ T2876]  ? _parse_integer_limit+0x195/0x1e0
[  124.901913][ T2876]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  124.901941][ T2876]  ? kstrtoull+0x13b/0x1e0
[  124.901963][ T2876]  ? kstrtouint+0x78/0xf0
[  124.901984][ T2876]  ? ioctl_has_perm+0x1bc/0x500
[  124.902006][ T2876]  ? __asan_memcpy+0x5a/0x80
[  124.902028][ T2876]  ? ioctl_has_perm+0x408/0x500
[  124.902048][ T2876]  ? has_cap_mac_admin+0xd0/0xd0
[  124.902070][ T2876]  ? __kasan_check_write+0x18/0x20
[  124.902089][ T2876]  ? mutex_lock_killable+0x97/0x1d0
[  124.902115][ T2876]  ? __cfi_mutex_lock_killable+0x10/0x10
[  124.902139][ T2876]  ? proc_fail_nth_write+0x184/0x220
[  124.902171][ T2876]  kvm_vcpu_ioctl+0xa43/0x1000
[  124.902192][ T2876]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  124.902212][ T2876]  ? __cfi_vfs_write+0x10/0x10
[  124.902234][ T2876]  ? __kasan_check_write+0x18/0x20
[  124.902254][ T2876]  ? mutex_unlock+0x90/0x240
[  124.902276][ T2876]  ? __cfi_mutex_unlock+0x10/0x10
[  124.902301][ T2876]  ? __fget_files+0x2bc/0x330
[  124.902327][ T2876]  ? bpf_lsm_file_ioctl+0xd/0x20
[  124.902353][ T2876]  ? security_file_ioctl+0x3e/0x110
[  124.902374][ T2876]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  124.902394][ T2876]  __se_sys_ioctl+0x123/0x1b0
[  124.902419][ T2876]  __x64_sys_ioctl+0x7f/0xa0
[  124.902444][ T2876]  x64_sys_call+0x1878/0x2ee0
[  124.902464][ T2876]  do_syscall_64+0x57/0xf0
[  124.902484][ T2876]  ? clear_bhb_loop+0x50/0xa0
[  124.902510][ T2876]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  124.902533][ T2876] RIP: 0033:0x7f87fe59e159
[  124.902552][ T2876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.902570][ T2876] RSP: 002b:00007f87ff4f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  124.902604][ T2876] RAX: ffffffffffffffda RBX: 00007f87fe825fa0 RCX: 00007f87fe59e159
[  124.902621][ T2876] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[  124.902635][ T2876] RBP: 00007f87ff4f4090 R08: 0000000000000000 R09: 0000000000000000
[  124.902649][ T2876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.902662][ T2876] R13: 00007f87fe826038 R14: 00007f87fe825fa0 R15: 00007fff75d8e8a8
[  124.902679][ T2876]  </TASK>
[  125.131710][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  125.134492][ T2857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.765'.
[  125.137279][ T2876] Mem-Info:
[  125.356218][ T2876] active_anon:38778 inactive_anon:72 isolated_anon:0
[  125.356218][ T2876]  active_file:26941 inactive_file:2120 isolated_file:0
[  125.356218][ T2876]  unevictable:0 dirty:368 writeback:0
[  125.356218][ T2876]  slab_reclaimable:6010 slab_unreclaimable:71223
[  125.356218][ T2876]  mapped:24927 shmem:32072 pagetables:897
[  125.356218][ T2876]  sec_pagetables:0 bounce:0
[  125.356218][ T2876]  kernel_misc_reclaimable:0
[  125.356218][ T2876]  free:1483673 free_pcp:1359 free_cma:0
[  125.402094][ T2876] Node 0 active_anon:155112kB inactive_anon:288kB active_file:107764kB inactive_file:8480kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99708kB dirty:1472kB writeback:0kB shmem:128288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4576kB pagetables:3488kB sec_pagetables:0kB all_unreclaimable? no
[  125.434817][ T2876] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:5144kB free_cma:0kB
[  125.465012][ T2876] lowmem_reserve[]: 0 3921 3921
[  125.470096][ T2876] Normal free:2976288kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:155112kB inactive_anon:288kB active_file:107764kB inactive_file:8480kB unevictable:0kB writepending:1472kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:604kB local_pcp:172kB free_cma:0kB
[  125.502070][ T2876] lowmem_reserve[]: 0 0 0
[  125.506458][ T2876] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB
[  125.522100][ T2876] Normal: 890*4kB (UM) 471*8kB (UME) 360*16kB (UME) 160*32kB (UME) 118*64kB (UME) 47*128kB (UME) 36*256kB (UME) 15*512kB (UME) 37*1024kB (UME) 23*2048kB (UM) 694*4096kB (UM) = 2976288kB
[  125.540754][ T2876] 61150 total pagecache pages
[  125.545474][ T2876] 21 pages in swap cache
[  125.546959][  T400] usb 2-1: Cannot set autoneg
[  125.549724][ T2876] Free swap  = 124204kB
[  125.549736][ T2876] Total swap = 124996kB
[  125.549746][ T2876] 2097051 pages RAM
[  125.554530][  T400] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  125.558706][ T2876] 0 pages HighMem/MovableOnly
[  125.558716][ T2876] 352241 pages reserved
[  125.558730][ T2876] 0 pages cma reserved
[  125.560603][ T2876] Memory allocations:
[  125.563325][    T9] usb 6-1: Using ep0 maxpacket: 32
[  125.566818][ T2876]          0 B        0 init/main.c:1477 func:do_initcalls
[  125.579788][  T400] usb 2-1: USB disconnect, device number 31
[  125.583432][ T2876]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  125.594801][    T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  125.596628][ T2876]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  125.600341][    T9] usb 6-1: config 0 has no interface number 0
[  125.607717][ T2876]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  125.615057][    T9] usb 6-1: config 0 interface 184 has no altsetting 0
[  125.622055][ T2876]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  125.633868][    T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  125.637672][ T2876]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  125.643976][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.651803][ T2876]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  125.658633][    T9] usb 6-1: Product: syz
[  125.666582][ T2876]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  125.675847][    T9] usb 6-1: Manufacturer: syz
[  125.684247][ T2876]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  125.692453][    T9] usb 6-1: SerialNumber: syz
[  125.700409][ T2876]          0 B        0 init/initramfs.c:101 func:find_link
[  125.709625][    T9] usb 6-1: config 0 descriptor??
[  125.743298][    T9] smsc75xx v1.0.0
[  126.198761][ T2897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'.
[  126.345213][    T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  126.364782][    T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  126.435050][  T310] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  126.452043][  T310] asix 5-1:0.34: probe with driver asix failed with error -71
[  126.473749][  T310] usb 5-1: USB disconnect, device number 5
[  126.582971][    T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  126.607293][    T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  126.621662][    T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  126.641646][    T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  126.660217][    T9] usb 6-1: USB disconnect, device number 4
[  126.694896][   T36] kauditd_printk_skb: 6 callbacks suppressed
[  126.694916][   T36] audit: type=1400 audit(1789791194.610:294): avc:  denied  { bpf } for  pid=2916 comm="syz.3.790" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  126.766556][ T2926] input: syz0 as /devices/virtual/input/input6
[  126.773681][   T36] audit: type=1400 audit(1789791194.690:295): avc:  denied  { read } for  pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=614 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  126.796142][   T36] audit: type=1400 audit(1789791194.690:296): avc:  denied  { open } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=614 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  126.820889][   T36] audit: type=1400 audit(1789791194.690:297): avc:  denied  { ioctl } for  pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=614 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  126.845787][   T36] audit: type=1400 audit(1789791194.690:298): avc:  denied  { append } for  pid=2925 comm="syz.3.793" name="event3" dev="devtmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  127.261153][   T36] audit: type=1400 audit(1789791195.170:299): avc:  denied  { getopt } for  pid=2954 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  127.551706][ T1351] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  127.701720][ T1351] usb 4-1: Using ep0 maxpacket: 16
[  127.708140][ T1351] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  127.716409][   T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  127.724201][ T1351] usb 4-1: config 0 has no interface number 0
[  127.730388][ T1351] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  127.740459][ T1351] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 6992, setting to 1024
[  127.751753][ T1351] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  127.763411][ T1351] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  127.772493][ T1351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.780535][ T1351] usb 4-1: Product: syz
[  127.784751][ T1351] usb 4-1: Manufacturer: syz
[  127.789356][ T1351] usb 4-1: SerialNumber: syz
[  127.795037][ T1351] usb 4-1: config 0 descriptor??
[  127.800381][ T2960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  127.807834][ T2960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  127.911696][   T31] usb 6-1: Using ep0 maxpacket: 16
[  127.918189][   T31] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  127.926424][   T31] usb 6-1: config 0 has no interface number 0
[  127.932655][   T31] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  127.942804][   T31] usb 6-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  127.955196][   T31] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  127.964397][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.973768][   T31] usb 6-1: Product: syz
[  127.978041][   T31] usb 6-1: Manufacturer: syz
[  127.982695][   T31] usb 6-1: SerialNumber: syz
[  127.992116][   T31] usb 6-1: config 0 descriptor??
[  127.997421][ T2970] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  128.007438][   T31] asix 6-1:0.34: probe with driver asix failed with error -22
[  128.016011][ T2960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  128.028755][ T2960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  128.247770][ T1351] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  128.301736][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  128.452862][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.463497][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  128.473307][    T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  128.482425][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  128.490445][    T9] usb 5-1: SerialNumber: syz
[  128.648780][ T2960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.807'.
[  128.698039][    T9] usb 5-1: 0:2 : does not exist
[  128.705034][    T9] usb 5-1: USB disconnect, device number 6
[  128.726244][  T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  128.807050][ T2994] SELinux: security_context_str_to_sid (syt|v\{�) failed with errno=-22
[  129.531702][   T65] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  129.681681][   T65] usb 5-1: Using ep0 maxpacket: 16
[  129.687943][   T65] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  129.696236][   T65] usb 5-1: config 0 has no interface number 0
[  129.702455][   T65] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  129.712527][   T65] usb 5-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  129.722406][   T65] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  129.733773][   T65] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  129.742972][   T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.750992][   T65] usb 5-1: Product: syz
[  129.755204][   T65] usb 5-1: Manufacturer: syz
[  129.759833][   T65] usb 5-1: SerialNumber: syz
[  129.768530][   T65] usb 5-1: config 0 descriptor??
[  129.773802][ T3000] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  129.781562][   T65] asix 5-1:0.34: probe with driver asix failed with error -22
[  129.861859][ T1351] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  129.871692][  T310] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  129.872105][ T1351] asix 4-1:0.34: probe with driver asix failed with error -71
[  129.888521][ T1351] usb 4-1: USB disconnect, device number 43
[  130.032973][  T310] usb 2-1: unable to get BOS descriptor or descriptor too short
[  130.041097][  T310] usb 2-1: not running at top speed; connect to a high speed hub
[  130.051225][  T310] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  130.060538][  T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.068667][  T310] usb 2-1: Product: syz
[  130.072877][  T310] usb 2-1: Manufacturer: syz
[  130.077488][  T310] usb 2-1: SerialNumber: syz
[  130.335429][  T310] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  130.343165][  T310] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  130.351961][  T310] usb 2-1: USB disconnect, device number 32
[  130.361516][  T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  130.384434][ T3013] FAULT_INJECTION: forcing a failure.
[  130.384434][ T3013] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.397656][ T3013] CPU: 1 UID: 0 PID: 3013 Comm: syz.3.825 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[  130.397691][ T3013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  130.397704][ T3013] Call Trace:
[  130.397710][ T3013]  <TASK>
[  130.397718][ T3013]  __dump_stack+0x21/0x30
[  130.397750][ T3013]  dump_stack_lvl+0x140/0x1c0
[  130.397777][ T3013]  ? __cfi_dump_stack_lvl+0x10/0x10
[  130.397805][ T3013]  dump_stack+0x19/0x20
[  130.397831][ T3013]  should_fail_ex+0x3c2/0x510
[  130.397854][ T3013]  should_fail+0xf/0x20
[  130.397877][ T3013]  should_fail_usercopy+0x1e/0x30
[  130.397900][ T3013]  _copy_from_user+0x20/0xa0
[  130.397928][ T3013]  kstrtoul_from_user+0xe7/0x190
[  130.397951][ T3013]  ? kstrtouint+0x78/0xf0
[  130.397971][ T3013]  ? __cfi_kstrtoul_from_user+0x10/0x10
[  130.397993][ T3013]  ? kstrtouint_from_user+0x117/0x170
[  130.398019][ T3013]  buffer_subbuf_size_write+0xeb/0x4b0
[  130.398040][ T3013]  ? __kasan_check_write+0x18/0x20
[  130.398061][ T3013]  ? __cfi_buffer_subbuf_size_write+0x10/0x10
[  130.398083][ T3013]  ? bpf_lsm_file_permission+0xd/0x20
[  130.398109][ T3013]  ? __cfi_buffer_subbuf_size_write+0x10/0x10
[  130.398129][ T3013]  vfs_write+0x3c1/0xfd0
[  130.398152][ T3013]  ? __cfi_vfs_write+0x10/0x10
[  130.398172][ T3013]  ? __kasan_check_write+0x18/0x20
[  130.398192][ T3013]  ? mutex_lock+0x97/0x1d0
[  130.398215][ T3013]  ? __cfi_mutex_lock+0x10/0x10
[  130.398239][ T3013]  ksys_write+0x145/0x260
[  130.398261][ T3013]  ? __cfi_ksys_write+0x10/0x10
[  130.398291][ T3013]  ? __kasan_check_read+0x15/0x20
[  130.398311][ T3013]  __x64_sys_write+0x7f/0x90
[  130.398331][ T3013]  x64_sys_call+0x271c/0x2ee0
[  130.398350][ T3013]  do_syscall_64+0x57/0xf0
[  130.398369][ T3013]  ? clear_bhb_loop+0x50/0xa0
[  130.398393][ T3013]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  130.398417][ T3013] RIP: 0033:0x7f87fe59e159
[  130.398434][ T3013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.398451][ T3013] RSP: 002b:00007f87ff4f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  130.398475][ T3013] RAX: ffffffffffffffda RBX: 00007f87fe825fa0 RCX: 00007f87fe59e159
[  130.398491][ T3013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  130.398504][ T3013] RBP: 00007f87ff4f4090 R08: 0000000000000000 R09: 0000000000000000
[  130.398518][ T3013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.398532][ T3013] R13: 00007f87fe826038 R14: 00007f87fe825fa0 R15: 00007fff75d8e8a8
[  130.398548][ T3013]  </TASK>
[  130.665244][   T65] usb 6-1: USB disconnect, device number 5
[  130.699643][ T3020] FAULT_INJECTION: forcing a failure.
[  130.699643][ T3020] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  130.713060][ T3020] CPU: 1 UID: 0 PID: 3020 Comm: syz.5.828 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[  130.713098][ T3020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  130.713113][ T3020] Call Trace:
[  130.713121][ T3020]  <TASK>
[  130.713130][ T3020]  __dump_stack+0x21/0x30
[  130.713164][ T3020]  dump_stack_lvl+0x140/0x1c0
[  130.713192][ T3020]  ? __cfi_dump_stack_lvl+0x10/0x10
[  130.713220][ T3020]  ? stack_trace_save+0xaa/0x100
[  130.713246][ T3020]  ? stack_depot_save_flags+0x38/0x800
[  130.713274][ T3020]  dump_stack+0x19/0x20
[  130.713300][ T3020]  should_fail_ex+0x3c2/0x510
[  130.713325][ T3020]  should_fail_alloc_page+0xec/0x110
[  130.713351][ T3020]  __alloc_pages_noprof+0x1c0/0x7e0
[  130.713379][ T3020]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  130.713410][ T3020]  ? io_alloc_hash_table+0x52/0x160
[  130.713431][ T3020]  ___kmalloc_large_node+0x81/0x220
[  130.713452][ T3020]  ? io_alloc_hash_table+0x52/0x160
[  130.713471][ T3020]  __kmalloc_large_node_noprof+0x1e/0xd0
[  130.713493][ T3020]  ? io_alloc_hash_table+0x52/0x160
[  130.713513][ T3020]  __kmalloc_noprof+0x326/0x510
[  130.713533][ T3020]  ? __kasan_kmalloc+0x96/0xb0
[  130.713557][ T3020]  io_alloc_hash_table+0x52/0x160
[  130.713577][ T3020]  io_ring_ctx_alloc+0xd1/0x1dc0
[  130.713597][ T3020]  ? do_futex+0x32a/0x510
[  130.713624][ T3020]  io_uring_create+0x2e0/0x13f0
[  130.713643][ T3020]  ? __kasan_check_write+0x18/0x20
[  130.713664][ T3020]  __se_sys_io_uring_setup+0x2a4/0x2b0
[  130.713692][ T3020]  ? __se_sys_futex+0x13c/0x320
[  130.713717][ T3020]  ? __x64_sys_io_uring_setup+0x80/0x80
[  130.713746][ T3020]  ? __kasan_check_write+0x18/0x20
[  130.713767][ T3020]  __x64_sys_io_uring_setup+0x5f/0x80
[  130.713794][ T3020]  x64_sys_call+0x22c0/0x2ee0
[  130.713813][ T3020]  do_syscall_64+0x57/0xf0
[  130.713832][ T3020]  ? clear_bhb_loop+0x50/0xa0
[  130.713856][ T3020]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  130.713879][ T3020] RIP: 0033:0x7fe4b899e159
[  130.713897][ T3020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.713916][ T3020] RSP: 002b:00007fe4b991ffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  130.713939][ T3020] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007fe4b899e159
[  130.713955][ T3020] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000007cc6
[  130.713969][ T3020] RBP: 00007fe4b8a3506b R08: 0000000000000000 R09: 0000000000000000
[  130.713992][ T3020] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  130.714006][ T3020] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd62105018
[  130.714022][ T3020]  </TASK>
[  130.718146][ T3020] syzkaller1: entered promiscuous mode
[  130.911684][  T950] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  130.928531][ T3020] syzkaller1: entered allmulticast mode
[  131.101683][  T950] usb 4-1: Using ep0 maxpacket: 32
[  131.114631][  T950] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40
[  131.127214][  T950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.136033][  T950] usb 4-1: Product: syz
[  131.141280][  T950] usb 4-1: Manufacturer: syz
[  131.146005][  T950] usb 4-1: SerialNumber: syz
[  131.354139][ T3043] FAULT_INJECTION: forcing a failure.
[  131.354139][ T3043] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.357957][ T3015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.368275][ T3043] CPU: 1 UID: 0 PID: 3043 Comm: syz.1.837 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[  131.368308][ T3043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  131.368321][ T3043] Call Trace:
[  131.368328][ T3043]  <TASK>
[  131.368336][ T3043]  __dump_stack+0x21/0x30
[  131.368368][ T3043]  dump_stack_lvl+0x140/0x1c0
[  131.368395][ T3043]  ? __cfi_dump_stack_lvl+0x10/0x10
[  131.368422][ T3043]  ? check_stack_object+0x138/0x150
[  131.368446][ T3043]  dump_stack+0x19/0x20
[  131.368472][ T3043]  should_fail_ex+0x3c2/0x510
[  131.368497][ T3043]  should_fail+0xf/0x20
[  131.368519][ T3043]  should_fail_usercopy+0x1e/0x30
[  131.368545][ T3043]  _copy_to_user+0x24/0xa0
[  131.368573][ T3043]  simple_read_from_buffer+0xed/0x160
[  131.368601][ T3043]  proc_fail_nth_read+0x1aa/0x220
[  131.368630][ T3043]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  131.368658][ T3043]  ? bpf_lsm_file_permission+0xd/0x20
[  131.368684][ T3043]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  131.368711][ T3043]  vfs_read+0x288/0xc70
[  131.368740][ T3043]  ? __cfi_vfs_read+0x10/0x10
[  131.368760][ T3043]  ? __kasan_check_write+0x18/0x20
[  131.368781][ T3043]  ? mutex_lock+0x97/0x1d0
[  131.368804][ T3043]  ? __cfi_mutex_lock+0x10/0x10
[  131.368829][ T3043]  ksys_read+0x145/0x260
[  131.368850][ T3043]  ? __cfi_ksys_read+0x10/0x10
[  131.368872][ T3043]  ? __kasan_check_read+0x15/0x20
[  131.368893][ T3043]  __x64_sys_read+0x7f/0x90
[  131.368914][ T3043]  x64_sys_call+0x2638/0x2ee0
[  131.368933][ T3043]  do_syscall_64+0x57/0xf0
[  131.368952][ T3043]  ? clear_bhb_loop+0x50/0xa0
[  131.368985][ T3043]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  131.369008][ T3043] RIP: 0033:0x7f2c3d55e98e
[  131.369026][ T3043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  131.369043][ T3043] RSP: 002b:00007f2c3bff6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  131.369067][ T3043] RAX: ffffffffffffffda RBX: 00007f2c3bff76c0 RCX: 00007f2c3d55e98e
[  131.369082][ T3043] RDX: 000000000000000f RSI: 00007f2c3bff70a0 RDI: 0000000000000004
[  131.369096][ T3043] RBP: 00007f2c3bff7090 R08: 0000000000000000 R09: 0000000000000000
[  131.369110][ T3043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.369123][ T3043] R13: 00007f2c3d826038 R14: 00007f2c3d825fa0 R15: 00007ffec6c58e88
[  131.369140][ T3043]  </TASK>
[  131.611402][ T3015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.640542][  T950] usb 4-1: USB disconnect, device number 44
[  131.731859][  T310] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  131.751058][ T3049] fuse: Bad value for 'fd'
[  131.881725][  T310] usb 6-1: Using ep0 maxpacket: 16
[  131.888366][  T310] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  131.896690][  T310] usb 6-1: config 0 has no interface number 0
[  131.902926][  T310] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  131.913000][  T310] usb 6-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  131.925252][  T310] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  131.934358][  T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.942409][  T310] usb 6-1: Product: syz
[  131.946575][  T310] usb 6-1: Manufacturer: syz
[  131.951160][  T310] usb 6-1: SerialNumber: syz
[  131.956631][  T310] usb 6-1: config 0 descriptor??
[  131.961962][ T3041] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  131.969788][  T310] asix 6-1:0.34: probe with driver asix failed with error -22
[  132.817498][  T310] usb 5-1: USB disconnect, device number 7
[  133.126897][ T3073] fuse: Bad value for 'fd'
[  133.153088][  T310] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  133.314286][  T310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.331735][   T36] audit: type=1326 audit(1789791201.250:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3079 comm="syz.3.850" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87fe59e159 code=0x0
[  133.338293][  T310] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  133.365521][  T310] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  133.385855][  T310] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  133.395005][  T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.403059][  T310] usb 5-1: Product: 䩣鄜Ᾰ캗蔖밹儐ⲟ⇢攆昻똛⹌ꞅ鐦벂鴘䈜◐Ǔꃗ﫦刃◲ᵮ奺㘻秋睬ܗ㋪ở婪랾溾皞쭶ꨲ붗긞㹴厃➫伯暞蝮罸ꌆ訸敾G戏嫹卨ሩ뾉ହ鋤矂꿃쬊ꌋ皋捲횩휃ل씍鱧烐╿趟ᑅ
[  133.427849][  T310] usb 5-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈￫Ⓩ蟸맏᯻쌲钧욢
[  133.444097][  T310] usb 5-1: SerialNumber: syz
[  133.658262][  T310] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  133.667063][  T310] cdc_ncm 5-1:1.0: bind() failure
[  133.674055][  T310] usb 5-1: USB disconnect, device number 8
[  133.768309][ T3100] netlink: 'syz.3.856': attribute type 7 has an invalid length.
[  133.776093][ T3100] netlink: 'syz.3.856': attribute type 32 has an invalid length.
[  133.960941][ T3103] SELinux: security_context_str_to_sid (sytem_u�G�����) failed with errno=-22
[  134.037401][   T36] audit: type=1400 audit(1789791201.950:301): avc:  denied  { setopt } for  pid=3104 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  134.071665][   T36] audit: type=1400 audit(1789791201.980:302): avc:  denied  { write } for  pid=3104 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  134.123011][   T36] audit: type=1400 audit(1789791202.040:303): avc:  denied  { bind } for  pid=3104 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  134.151873][   T36] audit: type=1400 audit(1789791202.040:304): avc:  denied  { getopt } for  pid=3104 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  134.188421][   T36] audit: type=1400 audit(1789791202.100:305): avc:  denied  { write } for  pid=3108 comm="syz.4.859" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  134.188612][ T3109] rust_binder: 3108:3109 BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  134.220923][ T3109] rust_binder: Write failure EINVAL in pid:116
[  134.283139][  T950] usb 6-1: USB disconnect, device number 6
[  134.313621][   T36] audit: type=1400 audit(1789791202.230:306): avc:  denied  { getopt } for  pid=3110 comm="syz.5.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  134.355173][   T36] audit: type=1400 audit(1789791202.250:307): avc:  denied  { map } for  pid=3110 comm="syz.5.860" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  134.410654][   T36] audit: type=1400 audit(1789791202.260:308): avc:  denied  { ioctl } for  pid=3110 comm="syz.5.860" path="socket:[36909]" dev="sockfs" ino=36909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  134.489292][ T3124] FAULT_INJECTION: forcing a failure.
[  134.489292][ T3124] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.502994][ T3124] CPU: 1 UID: 0 PID: 3124 Comm: syz.4.865 Not tainted syzkaller #0 2db523747cf1beec8353ecf3fbcf651dac8dc83d
[  134.503033][ T3124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.503048][ T3124] Call Trace:
[  134.503057][ T3124]  <TASK>
[  134.503066][ T3124]  __dump_stack+0x21/0x30
[  134.503103][ T3124]  dump_stack_lvl+0x140/0x1c0
[  134.503134][ T3124]  ? __cfi_dump_stack_lvl+0x10/0x10
[  134.503165][ T3124]  ? __kasan_check_write+0x18/0x20
[  134.503190][ T3124]  ? check_stack_object+0x10f/0x150
[  134.503215][ T3124]  dump_stack+0x19/0x20
[  134.503243][ T3124]  should_fail_ex+0x3c2/0x510
[  134.503270][ T3124]  should_fail+0xf/0x20
[  134.503295][ T3124]  should_fail_usercopy+0x1e/0x30
[  134.503322][ T3124]  _copy_from_user+0x20/0xa0
[  134.503351][ T3124]  __sys_sendto+0x2aa/0x6e0
[  134.503380][ T3124]  ? __cfi___sys_sendto+0x10/0x10
[  134.503410][ T3124]  ? __kasan_check_write+0x18/0x20
[  134.503444][ T3124]  ? __cfi_ksys_write+0x10/0x10
[  134.503470][ T3124]  __x64_sys_sendto+0xe9/0x100
[  134.503498][ T3124]  x64_sys_call+0x2c2c/0x2ee0
[  134.503519][ T3124]  do_syscall_64+0x57/0xf0
[  134.503540][ T3124]  ? clear_bhb_loop+0x50/0xa0
[  134.503568][ T3124]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  134.503593][ T3124] RIP: 0033:0x7fdc8839e159
[  134.503613][ T3124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.503634][ T3124] RSP: 002b:00007fdc892fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  134.503661][ T3124] RAX: ffffffffffffffda RBX: 00007fdc88625fa0 RCX: 00007fdc8839e159
[  134.503678][ T3124] RDX: 0000000000000031 RSI: 00002000000001c0 RDI: 0000000000000003
[  134.503694][ T3124] RBP: 00007fdc892fb090 R08: 0000200000000080 R09: 0000000000000014
[  134.503710][ T3124] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001
[  134.503725][ T3124] R13: 00007fdc88626038 R14: 00007fdc88625fa0 R15: 00007ffd225e40f8
[  134.503745][ T3124]  </TASK>
[  134.820100][   T36] audit: type=1400 audit(1789791202.730:309): avc:  denied  { connect } for  pid=3127 comm="syz.4.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  134.911730][  T950] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  135.062821][  T950] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.072958][  T950] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.082857][  T950] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  135.091962][  T950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  135.099990][  T950] usb 6-1: SerialNumber: syz
[  135.121715][  T310] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  135.211710][   T31] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  135.271724][  T310] usb 4-1: Using ep0 maxpacket: 16
[  135.277932][  T310] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  135.286143][  T310] usb 4-1: config 0 has no interface number 0
[  135.292309][  T310] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  135.302450][  T310] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  135.312322][  T310] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  135.313897][ T3144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.325016][  T310] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  135.331030][ T3144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.340881][  T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.356308][  T310] usb 4-1: Product: syz
[  135.378258][   T31] usb 2-1: not running at top speed; connect to a high speed hub
[  135.383999][  T950] usb 6-1: 0:2 : does not exist
[  135.389573][   T31] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  135.391770][  T310] usb 4-1: Manufacturer: syz
[  135.400194][   T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.414663][   T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  135.421431][ T3146] printk: legacy console [ttyS0] disabled
[  135.424297][   T31] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  135.430993][  T950] usb 6-1: USB disconnect, device number 7
[  135.439804][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.448621][  T310] usb 4-1: SerialNumber: syz
[  135.458127][   T31] uvcvideo 2-1:1.0: Found multiple Units with ID 1

syzkaller
SYZFAIL: SIGBUS
pc-offset:0xfffffffffffe334d pc:0x7f34840701e3 addr:0x7f347e5ffffc code=2 (errno 11: Resource temporarily unavailable)