last executing test programs: 6m3.422191942s ago: executing program 3 (id=1219): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400), 0x48) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='-'], 0x7) 6m3.322687493s ago: executing program 3 (id=1222): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7d) 6m3.198818035s ago: executing program 2 (id=1225): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) 6m3.145058826s ago: executing program 3 (id=1228): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x2}) 6m3.133010356s ago: executing program 2 (id=1229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 6m3.035384218s ago: executing program 2 (id=1231): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 6m2.966097299s ago: executing program 3 (id=1232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r0, 0x0, 0x0) 6m2.89195264s ago: executing program 2 (id=1235): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) 6m2.85534791s ago: executing program 3 (id=1237): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) 6m2.814676361s ago: executing program 2 (id=1238): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 6m2.774186682s ago: executing program 3 (id=1240): syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 6m2.714941372s ago: executing program 2 (id=1242): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020) 5m47.719612672s ago: executing program 32 (id=1240): syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 5m47.553870734s ago: executing program 33 (id=1242): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2020) 1m33.697939739s ago: executing program 4 (id=5519): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5fdd8d64f6c3e0dd22711f69a940ebdb4ab5ff6240da3160049d2047e6713d47ad0db40ec543c095ad67c8cbe438fb875927c98e265498b3da8d4ca54bac0e6efe759a2d4d4190e9fc8835599da8237f472411a71236bb930d28a26f49062d270f4087a6a709c005eebc9740ed54dd005c787c44badac9c720b0d424d0ded9bb8c24c0e842deedf386fc7714a31268292d3bcc53b1cf24b156445c8bf64336f742b1ba836eba0ae4a5aaa9a6f35d4f81734e16bce965795d5b1255609d1860fe11c9c536db078af94772830ba000c13e1d9383e3d862fa07f2199da148632c036bc19f6014eeb206a3654d390c78911deeabebf128def61122754e0a4696db82666a018f8d2f44b5aadc12809ade8bed1b1ba2adbb6e3e82180e26748dc30a8eda0edb21fcaa702632ed3fb4e89550c3e0e1fd2b5ecf1983d85bf9569b231e28155756bd97f1220cbc2b5b1c02dab88ee4a8970d4833b9e51529895afe5029823576297d4a917602fe08df57e1d7f63d050877ddf8e82a5383e15f313171b2d5618a1549f3dfced0732b887508ca5e134124d0ed0bd4b767115d1530f73504387e0364d73a2d3b114fcb49219b1c15e066c455b01672e49499995454a502236f5a5007895d3d1d8843007352a3ccc3f71d3e801efd0a6ef922bf39ead16e01ec20ebff2b1ce7cfd0984b26225cb1359b36efe9ad2ae1f6de4862c0faaa52f4d0eb4c13960ceb4aeaa10ae61a09a5abdb0c61661962a0aab14d465a8ae6f45826e1e66428cf8572eb53c98160df6613a62bb611c63f1ffb7a795a889fc16670f6302fd36ee4247bdd4282f1afb6042c832a4b0857cecae0a7090d9b11ae46d9186c710c8dd12911db573493329bea2c743734d86a577cf27aa01e4fc6c91f1fa34bba173d20b97ed8bb4bad43692df90bfd2b193b9e8b93a95ec0d0d42217395d89db511d2e9bbeb3ef47b7b2d81ab54b5c8faa760ef5c0493af13a9327c9432521ed6bfcb9d778d25031da41a983027fe7d794c26326053d38172444307d88501cdd26c3fdeafdf5f599d3dcfd39972f28ec3fb1fb40982615f5d71d6693a8774df072576834c69b89f209b458fad4671f0108fdfc8548a6fcf76a843369a3bca4d2974221ed9af224d151fa8aa73276ba65ca3d8bc98d6504f16bcac30c697f68cb1625b4f2259ee0c694951752845fa11c20fc4dda369d53918c3746918692ee2cda958612808b841b8d36ef3933f5340e1fc8fb10ac2ae97da921f6a67806831356d515c7a32468dfd3385c1ae2008448e5750c3a3d5733b4a2486788550e6353e9b12cc09750d5b9dcd2aedba61d0520e99a51e880d3dd78a2b502029deac1860cf50885f8bf5119491c6b1e06492e98ca64e5e32afbb3b0630cb35b58640afc2188a232f77968c18d2d0e8f91c974edcb3198b4520f530acacb12017216338cc479de3651e8f15f1672397c730e3ca2a189ca4cc85f35dd46aeb67b6a2eb7268a653b190d8ba670490d50f761c1fa25f1954d8fe6bcb15dbc23698c945262b991e6245b9a25b12b13c87bf8a8a06f51784007abd06e01a0c03ee80b236fabb5b22ce797c4d8a739ac96dcf16c93f454463d3631c4cdd2dea6732a486015dc9937ee4e6efbfff46bdd8887094ca4bd94d995f411421c7ef07f949fcc10132f58b7c99a871780d92464594c930b80596baab77b0d68a05d71ca8a1888f3128f12aebac362c4d80870ab3d9f2e77d51f9af16472faff98dda1e0133c8bc2510345d5eb1d64bce64761f4cc39ac6655902338bf1335dc55393995af4447ed1aa4c50bfacd576842560abca3e6c74dcea6dd03d36f9e7f8bda2cf33e3b7da195fba79f5a60421e19910f1fef31b9fa52064ce9ee8c415746a3cab47a8ad8477e9f21e9ee804a85dc568439b95c01bbbc3fa16a8c26bd81b01b8849795b2370f591e2a8e175cd465a600a541839bc734271b4b3afb2303dc1cf12bee00080ad10658c97672ad023e89f23d9301b5dbf1a7ba6d6c2b8dbd300f05f36a095f188b56fd3ba8e871aaf22e2128696e7232cb22f4f5404a3d1256a11665caaead326faad340031cafb99edbceba7bac44c7d2720aedba9cb708dae55b192a1e31835fae8756f062c151f6778b1d93c2d1f8b479ae9bbe1255abcef9beaa95b558fbbc9a979d46580aa85b10f160b438bea64f23b8e605ce34d2b46bbf8bfbfa683b10f55b3d30c58675dd1a524495e5d42c7d02dc60b853e8b3ed2caf41cd24a8a1d044e27d48b2184bac00730f7c20a1ba2bb6b6a5381a3d359d8e721504bbbce18ee49031b48c278a5730f31fb83f6cf32ac98326b722d3e2d7b38a7b80b94a3eb2b69fb1aefc8c0bbe431191f0ed76141a8365621e4f7118dd4465b4642bdb0af21d30c8cfb1d5201852c0428b1983d91f706e814c1395888b1c2a3516ea20a93d868e27c3c9b68a9cda4befc389b57661a4ff37137628ec96bcb625fd10324625ac1589c2918c66f811a323a19ab30bcf28fc20b64176e319d58f74578093e32ba9f51b255693dda9514ff43f6ef6010143554305073e94be322daa024cb7efcf405ea4924bfa72633b766365fee1d59d1a94717450657ff3b72853785e91f94ca1502b129eafa718633bec1557fb1e0ae2887e6e8c0fdd9f3f99de03c0af7364781766520d90c15b0e2a4c43613089dbecc4dd68be74204809f0270370097642d54388ccbb54b58be8b5796eac48ef5f17752eaa7301f075faee593aae71ee0e0ca1f45a22e7cede3597f14a344796ceec33e98b3b89e031c0d757e83d5093322d9afc9898f80b2e9bb17bc8b2b164d048c1b912f6cd92979df629efcb94968cca6e65b9b078677698fa4937a2ec23edd00971a5505ecc65fe150d3d00a34e52cc64951937fc79014b0df8d2c9c35f06209f45556278fa7ecfc70a92eca165bbd493686fb4c0cd607cec994657149a61da2e09414944c557be54908197724174247194d435b25bf78ec4cc164a574662eb4d1e4d784a6ea0c71dd1a16e53a7b8a27fcec679346afe90a05e06b276fe972d5e1d3486e0452d0a9a1636ab9c517f371a0592ef34513a9a4e961cd79c86891f460becb57f41e22b2a72ae175e29344184cde0b2beae00f90a6a79dc689da4b4b1da0e9758854d404a9cbcf725c68b6f2de865b2b5e12124d09f8745208b5cc544522f7c8bcfceb907422502f1641b600a60a5aef28be5a92ff71755efaf29e23c8ca52ad945bbdc4d6e7502adee312ea8d9338a80671f36309026c0d9c2ceb14da0b8beb087853b8014d30372f0d58448530f1bed15c4caaf8a844853030aab1ba6de9891678a16a2d9b9889d4a367753f0aacda03ce6fae1f62b34a3317a704527e65b18dc3186f32c5caa2d82f058066274e145f3cfe0bb5d40a77f54fb0de584d5f50de29d1c3aa29acea2363ef5c1e0592ef94370936df0152871396c13a89e56086f381862edb6f4bec0d937e94a689a8c5c87a51e073fdaa935591bbccff359e0805ded9ac71e3b295fdd05bc2b03d7af58a393778c9dfdfd8101b3503c86a6d9e2fdeb215be40f90bb7360a04e111d743207a8742275ee7df2508b909ea4d3a7af7886d3f26aa58943edbbcbd686bf9cf9a78b43dd9792bca97cda6508340"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0) 1m33.539552051s ago: executing program 4 (id=5520): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x4a) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 1m33.394039864s ago: executing program 4 (id=5522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x1f000000, 0x2000000000032, 0xffffffffffffffff, 0x0) 1m33.275688706s ago: executing program 4 (id=5524): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,st']) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000440)=""/190, 0x0, 0x3000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m33.072049449s ago: executing program 4 (id=5527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$TUNGETVNETBE(r3, 0x8927, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x10) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x103183, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0xe, 0x6, 0x7, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x8, 0x3, 0x6, 0x5, 0x10, '\x00', 0x28, 0x80000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m32.31264745s ago: executing program 4 (id=5534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.536317111s ago: executing program 34 (id=5534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.633573729s ago: executing program 6 (id=6664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x70300, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'hsr0\x00', 0x800}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'team_slave_0\x00', 0x4000}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) close(r1) 2.535745391s ago: executing program 6 (id=6667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x81}, {0x6}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000002c100000800000000000000000001b00"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, 0xffffffffffffffff, 0xfffff000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x226001, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000008009d000040"]) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x22c40, 0x0) r10 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000200)={'b', ' *:* ', 'wm\x00'}, 0x9) ioctl$KVM_SET_MSRS(r9, 0x5000aea5, &(0x7f0000000080)=ANY=[]) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_FPU(r7, 0x81a0ae8c, &(0x7f0000000500)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001780), 0x40200, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f00000000c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) ioctl$TUNSETLINK(r11, 0x400454cd, 0xffff) 2.534836911s ago: executing program 5 (id=6668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x8001, 0x7, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x2, 0x80, 0x9, 0x1}, {0x6, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x4}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0x6, 0x9, 0x8, 0x7f, 0x9, 0x56, 0xc, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x104000000000000) 2.257658355s ago: executing program 6 (id=6671): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a000, 0x0) mkdirat(r0, &(0x7f0000000940)='./file0\x00', 0x15) 2.230479445s ago: executing program 5 (id=6672): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKCLOSEZONE(r0, 0x40101287, &(0x7f0000000000)={0x7, 0x8000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0xe}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x4}, {0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x22052, r0, 0x2000) 2.127495567s ago: executing program 6 (id=6674): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYRES64=r0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e03"], 0xffdd) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4140aecd, &(0x7f0000000000)) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x210800, 0x0) ioctl$BLKSECTGET(r8, 0x1267, &(0x7f0000000280)) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) r13 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) openat$cgroup_freezer_state(r10, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r13, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 1.345909849s ago: executing program 6 (id=6679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000300)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000240)=""/29) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000e80)=ANY=[@ANYBLOB="0100000000000000210000d0510dbf0000000000f9ffffff010000807e0000020900"/48]) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r8, 0x4068aea3, &(0x7f0000000000)) ioctl$TCSETS(r2, 0x5406, 0xfffffffffffffffe) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) write$vga_arbiter(r9, &(0x7f0000001280)=ANY=[@ANYBLOB="6c6f636b00696f0093a015cdb611bea148e04619772ac0dd78915500143dcf744f1fecfea5b70166210f1aa0164b1d767876576c20b0a816f9f7aea94a983106e219183b1e48724cec599ca0b08a214d8ff86d50e3d5a00123080000009094cc7135144b1b363fd89df5fec7622e999f228d9bb1ee575e16fd351cda9e25cc2de61bd202d104e08cd4335c4587bc7df8fb3adb5c8630e9e8c89ece88e776812d7dc6016b35511254b4a821013671b792b763433d539a8671133ab5c17a207a"], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r10, &(0x7f0000000280)=""/4096, 0x1000) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2003014, 0x0) 1.327910339s ago: executing program 0 (id=6680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$vga_arbiter(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='trylock '], 0xc) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) write$vga_arbiter(r5, &(0x7f0000000180), 0xf) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x100}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="737ac3ec4e25a10879d42eb6bad27b74d5e92f3aaf0c48003e8c5f9513824757555f810985bcd85c2d97f6d73af74d55125e3dde12aa60063ec30c3d56bd441ee3405bc8851a5f7554eee6feaff3c3de7f141cd0081f16e1b7c1210b0b1eb2a12d0700a685f65a178d390c61f3102fd298a3405a3119d180035b6aea5fc2e89fc6b8102f2a2f173f6500996478c5a4dfc1c3234a2f93ab9f01b578ea7ca7590b433ff64605e44793ce31c9e84ab1ba691890619d40c16de77b6ab1f12fa207", @ANYRESDEC=r3, @ANYRESOCT=r4]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r6) 1.24936205s ago: executing program 1 (id=6681): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x141a82, 0x13) write(r0, &(0x7f0000001600), 0x0) 1.113852953s ago: executing program 1 (id=6682): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:printer_device_t:s0\x00', 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000d901000005000000ff"]) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x6, 0x4, 0x4, 0x2, 0x3ff, 0x870c, 0x6}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x90, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xd, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0xa, 0x3}, @fda={0x66646185, 0x7, 0x2, 0xa}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x5a, 0x0, &(0x7f0000000000)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 1.090981573s ago: executing program 5 (id=6683): mount$binderfs(&(0x7f00000021c0), &(0x7f0000002200)='./binderfs\x00', &(0x7f0000002240), 0x10, 0x0) (fail_nth: 39) 803.909137ms ago: executing program 5 (id=6684): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x400, 0x16) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x28f}]}) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='t'], 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {0x4000}, 0x28, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x41df1fd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x8, 0x0, 0xa107, 0x0, 0x0, 0x0, 0xc75, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000002c00)={'syz1\x00', {0x9, 0x33, 0x1, 0x5}, 0x11, [0x9, 0x7fffffff, 0x7, 0x7, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0xac8d, 0x9, 0xfffffeb4, 0xe6b5, 0x9, 0x8, 0x8, 0x1ff, 0xfffffff1, 0x7fff, 0x1, 0x0, 0xa, 0x3d, 0x7, 0x7ea79520, 0x7f, 0xb, 0x9, 0x0, 0xf, 0x0, 0x5, 0x3, 0x949, 0x2, 0x8, 0xf95f, 0x9, 0x101, 0x1000, 0x7, 0x1, 0x9, 0xd44, 0x3, 0x7f, 0x10001, 0x1ff, 0x0, 0x8, 0x6, 0x0, 0x7fff, 0x1d, 0x4, 0x8b, 0xffff0000, 0x1, 0x2, 0x7, 0x401, 0x4, 0x4, 0x7ff], [0x1, 0x6, 0x9, 0x3, 0x1, 0xffff, 0x1000, 0x9, 0x8, 0x6f, 0x4, 0x7, 0x5, 0x7fffffff, 0x8, 0x12f, 0x3, 0x1c765bd7, 0x273, 0x6, 0x9f, 0x448, 0x3, 0xb, 0x10000, 0x2, 0x5, 0x3, 0x3, 0x587, 0x100, 0x2, 0x80000000, 0x1, 0x2, 0x10000, 0x0, 0x80000001, 0x400, 0x6, 0x6, 0x1, 0x7fffffff, 0x9, 0x0, 0x3, 0x7, 0x5, 0x9, 0x2c824684, 0x838, 0xb, 0x1000, 0x4, 0x68d, 0x1, 0x5d3, 0x6, 0x55, 0xfffffffc, 0x2, 0x5, 0xffffffff, 0x4], [0x4, 0x1000, 0x6, 0x8, 0x2, 0x35344016, 0x8e, 0x7, 0x200, 0xd, 0x6, 0x80000001, 0x48, 0x6, 0x80000000, 0x9, 0x1, 0x2, 0x8, 0x3, 0x19ee, 0x51ed, 0x7fff, 0x9, 0x8, 0x6, 0x8, 0x8, 0xfff, 0x9, 0x38, 0x1, 0x1, 0x3, 0xfffffef5, 0x7, 0x9, 0x3, 0x5, 0xfffffffc, 0xaec0, 0x400, 0xf39, 0xfffff8f4, 0x3, 0x4, 0x39d, 0x200, 0x0, 0x1, 0x2, 0x2, 0x6, 0x8001, 0x7fff, 0x7, 0xfffffffd, 0x2a, 0xb0d, 0x6, 0x7f, 0x200, 0x52d, 0xc], [0x3, 0x35af, 0xffff, 0x8, 0x2, 0x0, 0xffffffff, 0x61, 0x8, 0x2, 0xff, 0x6, 0x5, 0x3fffc, 0x2, 0x1, 0x3, 0x19a, 0x9, 0x9, 0x9, 0x1000, 0xff, 0x4, 0x4812, 0x10, 0x5, 0x54e4, 0x6a, 0xb, 0xfffffffd, 0x5, 0xfffffffa, 0x8, 0x1, 0x40000, 0x6, 0x6, 0xffffffff, 0x0, 0x4, 0x7, 0x9, 0x400, 0x19d28fd2, 0x9, 0x0, 0x7fffffff, 0x6, 0x6, 0x9, 0x101, 0x4, 0x2, 0x800, 0xa0, 0x8, 0x401, 0x2, 0x2, 0x8100000, 0x3, 0x5eb, 0x4c0a]}, 0x45c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x7000)=nil, r6, 0x1000009, 0x80010, r2, 0x0) 803.531497ms ago: executing program 0 (id=6685): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x121642, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x121642, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000034d564b"]) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) write(r2, 0x0, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) (async) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0}) 681.334429ms ago: executing program 6 (id=6686): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x483, 0x0, 0xff}]}) mmap(&(0x7f0000910000/0x3000)=nil, 0x3000, 0x4, 0x1010, r0, 0xe08a2000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000080)={0x1, 0x0, [0x2, 0x7, 0x7acf, 0x4, 0x7, 0x1000, 0x1, 0x7]}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x22052, r0, 0x2000) 680.801319ms ago: executing program 1 (id=6687): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x5}]}) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) write(r3, &(0x7f00000000c0)="e35b815b963974b5247e8579d3613395994f05649a5506346ed768ca2ec310df503fb23df543d5e481d192a74c1d3b9219470738a375bb2762dd0c186938599ab5022a4f263f48b27bff3d159955eb01fb7e1486a5abcec8c0528428180e13372ba175e8bd5d136c91049fbd77882c3609128707934e5694f2b036ef3f8702cfcfdd1bd29b822d7db7de75afec8f8a573a4a7339db1bf1821563901be7f7", 0x9e) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xb7) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x45809000) read(r3, &(0x7f0000000040)=""/106, 0x6a) 617.94532ms ago: executing program 0 (id=6688): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x80) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x3, 0x1, 0x2d}, @flat=@binder={0x73622a85, 0x589638eb739cf225}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}, 0x10}], 0x0, 0x0, 0x0}) 459.217202ms ago: executing program 1 (id=6689): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat, @fda={0x66646185, 0x6, 0xfffffffffffffffd, 0x19}, @ptr={0x70742a85, 0x800, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 390.049703ms ago: executing program 0 (id=6690): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x141a82, 0x13) write(r0, &(0x7f0000001600), 0x0) 388.728673ms ago: executing program 5 (id=6691): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xaf) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$FICLONE(r0, 0x40049409, r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000940)={{0x4, 0x0, 0x3ff, 0xa}, 'syz1\x00', 0x2001b}) ioctl$UI_DEV_CREATE(r3, 0x5501) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r5, 0x40187013, &(0x7f0000000140)) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) write$cgroup_pressure(r6, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4c, 0x0, 0x1, 0x3}, {0x16, 0x0, 0x0, 0xfffffffd}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000180)={0x2, 0x2}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4b49, 0x2000000c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 313.364254ms ago: executing program 0 (id=6692): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4000000000008, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0'}, 0x2f) 298.293065ms ago: executing program 1 (id=6693): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000040)={r0}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[{0xd0c7, 0x2, 0x10, 0x3}, {0x3, 0xd, 0x1, 0x6}, {0xfff0, 0x7, 0x80, 0x4}, {0x5d, 0xc0, 0x1, 0x80}, {0x4, 0xbc, 0xc, 0x80}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x341800, 0x10c) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 229.920096ms ago: executing program 0 (id=6694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x178003, 0x0, [0x40, 0x4, 0x3, 0xe3, 0xfffffffffffffffc, 0x7236, 0x200000001, 0x9]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="25030f003fff94", @ANYRES16], 0xffdd) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb5, 0x5, 0x6, 0x0, 0x7fffffff, 0x4, 0xf, 0xc0, 0x40, 0x4, 0x60, 0x6, 0x0, 0x6e8, 0xffffbfc3, 0xf0, 0x4, 0x0, 0x7, '\x00', 0xcb, 0xffffffffffffff59}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {}, {0x0, 0x35}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {}, {0x2, 0x6}, {}, {0x73, 0x6, 0x2}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x40}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x10}]}}) ioctl$KVM_RUN(r2, 0x8004ae98, 0x20e10000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r6) 59.300569ms ago: executing program 1 (id=6695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xaea2) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x59) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x787006) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000040)={r2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$vga_arbiter(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='try'], 0xc) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x341800, 0x10c) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x505841, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@acquire, @decrefs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r9, 0x40046208, 0x0) 0s ago: executing program 5 (id=6696): r0 = getpid() mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r1, &(0x7f0000011b80)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0)=r0, 0x12) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) syz_clone(0x88009000, &(0x7f0000000240)="448cd46817da7622a1ff307a33aeab3f74bf6c70e61b9fb301b1be5a3bacd71d22db912ac944a3c89f8ecc510d5875f6659d78885879fa2af7fe0d0b14fb5750919a5900cc32e8c934bc2342aa2115cd8f044be16a406ffff7619fe8ba9291ddbe2021aa4851e680", 0x68, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d4b43cd023c5dcdd77bca340b8a8d555ab048460e933a1bcb7a5d1595437df279ebff4a9aad3d8e51ff21f90e9a13be0afbe395e6e3712aae9be26d87d0fdb60634824fdcac67b74643932fa52a36108da1cfdeaa88ebc8fa459c42a455b77f0") openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) openat$cgroup_ro(r3, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc004ae0a, &(0x7f0000000080)=""/1) mount$binderfs(&(0x7f0000000000), &(0x7f0000002200)='./binderfs\x00', 0x0, 0x2002004, 0x0) kernel console output (not intermixed with test programs): [ 385.992184][T15293] ? __se_sys_ioctl+0x114/0x1b0 [ 385.992216][T15293] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 385.992253][T15293] __se_sys_ioctl+0x132/0x1b0 [ 385.992286][T15293] __x64_sys_ioctl+0x7f/0xa0 [ 385.992317][T15293] x64_sys_call+0x1878/0x2ee0 [ 385.992349][T15293] do_syscall_64+0x58/0xf0 [ 385.992378][T15293] ? clear_bhb_loop+0x35/0x90 [ 385.992413][T15293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 385.992448][T15293] RIP: 0033:0x7fd4e798e929 [ 385.992468][T15293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.992492][T15293] RSP: 002b:00007fd4e8819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.992520][T15293] RAX: ffffffffffffffda RBX: 00007fd4e7bb5fa0 RCX: 00007fd4e798e929 [ 385.992539][T15293] RDX: 0000200000000380 RSI: 00000000c0306201 RDI: 0000000000000003 [ 385.992557][T15293] RBP: 00007fd4e8819090 R08: 0000000000000000 R09: 0000000000000000 [ 385.992574][T15293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.992590][T15293] R13: 0000000000000000 R14: 00007fd4e7bb5fa0 R15: 00007ffcc5a41d28 [ 385.992611][T15293] [ 385.992664][T15293] rust_binder: Write failure EFAULT in pid:1997 [ 386.045059][ T36] audit: type=1400 audit(1750354245.100:56104): avc: denied { set_context_mgr } for pid=15281 comm="syz.6.6211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 386.262323][T15300] audit: audit_backlog=65 > audit_backlog_limit=64 [ 386.336824][T15303] audit: audit_backlog=65 > audit_backlog_limit=64 [ 386.353844][T15300] audit: audit_lost=228 audit_rate_limit=0 audit_backlog_limit=64 [ 386.856636][T15310] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 386.856666][T15310] rust_binder: Error while translating object. [ 386.890382][T15310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 386.905219][T15310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:332 [ 387.103638][T15322] rust_binder: inc_ref_done called when no active inc_refs [ 387.231431][T15328] input: syz0 as /devices/virtual/input/input147 [ 387.396350][T15339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2009 [ 387.815192][T15350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:345 [ 388.291837][T15376] rust_binder: inc_ref_done called when no active inc_refs [ 388.319947][T15376] rust_binder: Write failure EINVAL in pid:2013 [ 388.433389][T15385] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 388.781028][T15402] rust_binder: Write failure EINVAL in pid:357 [ 388.797226][T15401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2020 [ 389.039368][T15415] FAULT_INJECTION: forcing a failure. [ 389.039368][T15415] name failslab, interval 1, probability 0, space 0, times 0 [ 389.091884][T15415] CPU: 0 UID: 0 PID: 15415 Comm: syz.6.6256 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 389.091919][T15415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.091933][T15415] Call Trace: [ 389.091941][T15415] [ 389.091951][T15415] __dump_stack+0x21/0x30 [ 389.091982][T15415] dump_stack_lvl+0x10c/0x190 [ 389.092006][T15415] ? __cfi_dump_stack_lvl+0x10/0x10 [ 389.092032][T15415] ? skb_put+0x112/0x1f0 [ 389.092060][T15415] dump_stack+0x19/0x20 [ 389.092083][T15415] should_fail_ex+0x3d9/0x530 [ 389.092107][T15415] should_failslab+0xac/0x100 [ 389.092135][T15415] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 389.092162][T15415] ? sidtab_sid2str_get+0x139/0x370 [ 389.092193][T15415] kmemdup_noprof+0x31/0x80 [ 389.092216][T15415] sidtab_sid2str_get+0x139/0x370 [ 389.092245][T15415] security_sid_to_context_core+0x30d/0x5d0 [ 389.092274][T15415] security_sid_to_context+0x2e/0x50 [ 389.092299][T15415] avc_audit_post_callback+0x198/0x780 [ 389.092322][T15415] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 389.092345][T15415] ? __cfi_audit_log_format+0x10/0x10 [ 389.092366][T15415] ? audit_log_untrustedstring+0xea/0x100 [ 389.092387][T15415] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 389.092408][T15415] common_lsm_audit+0x147a/0x1860 [ 389.092429][T15415] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 389.092458][T15415] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 389.092480][T15415] ? __cfi_common_lsm_audit+0x10/0x10 [ 389.092500][T15415] ? avc_denied+0x112/0x180 [ 389.092521][T15415] slow_avc_audit+0x18d/0x1f0 [ 389.092542][T15415] ? __cfi_slow_avc_audit+0x10/0x10 [ 389.092565][T15415] ? kasan_save_track+0x3e/0x80 [ 389.092592][T15415] ? avc_has_perm_noaudit+0x21c/0x360 [ 389.092615][T15415] avc_has_perm+0x1cd/0x220 [ 389.092636][T15415] ? __cfi_avc_has_perm+0x10/0x10 [ 389.092659][T15415] ? __asan_memcpy+0x5a/0x80 [ 389.092682][T15415] selinux_mount+0x39a/0x4e0 [ 389.092708][T15415] ? __cfi_selinux_mount+0x10/0x10 [ 389.092735][T15415] security_sb_mount+0x72/0x100 [ 389.092758][T15415] path_mount+0xca/0x1050 [ 389.092791][T15415] ? putname+0x113/0x150 [ 389.092818][T15415] __se_sys_mount+0x2bd/0x480 [ 389.092843][T15415] ? ksys_write+0x1ef/0x250 [ 389.092869][T15415] ? __x64_sys_mount+0xf0/0xf0 [ 389.092896][T15415] __x64_sys_mount+0xc3/0xf0 [ 389.092921][T15415] x64_sys_call+0x2021/0x2ee0 [ 389.092947][T15415] do_syscall_64+0x58/0xf0 [ 389.092974][T15415] ? clear_bhb_loop+0x35/0x90 [ 389.093005][T15415] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 389.093035][T15415] RIP: 0033:0x7fdbc5f8e929 [ 389.093053][T15415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.093072][T15415] RSP: 002b:00007fdbc6dbe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.093097][T15415] RAX: ffffffffffffffda RBX: 00007fdbc61b5fa0 RCX: 00007fdbc5f8e929 [ 389.093113][T15415] RDX: 0000200000002240 RSI: 0000200000002200 RDI: 00002000000021c0 [ 389.093129][T15415] RBP: 00007fdbc6dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 389.093142][T15415] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 389.093156][T15415] R13: 0000000000000001 R14: 00007fdbc61b5fa0 R15: 00007ffe92760d68 [ 389.093174][T15415] [ 389.260183][T15419] rust_binder: Write failure EFAULT in pid:3833 [ 389.516179][T15423] SELinux: failed to load policy [ 389.629325][T15423] rust_binder: Error in use_page_slow: ESRCH [ 389.629353][T15423] rust_binder: use_range failure ESRCH [ 389.635397][T15423] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 389.648054][T15423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 389.648728][T15429] rust_binder: Write failure EINVAL in pid:365 [ 389.657873][T15423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2027 [ 389.675236][T15423] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 389.694318][T15423] rust_binder: Read failure Err(EFAULT) in pid:2027 [ 389.711619][T15434] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 389.982212][T15445] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 389.995659][T15445] rust_binder: Error while translating object. [ 390.022466][T15445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 390.033437][T15445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:687 [ 390.082465][T15448] binder: Unknown parameter 'nXI' [ 390.336774][T15462] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 390.467362][T15467] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 390.517932][T15470] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 390.533952][T15470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:692 [ 390.592145][T15475] rust_binder: Write failure EINVAL in pid:2037 [ 390.632052][T15475] Restarting kernel threads ... [ 390.638440][ T36] kauditd_printk_skb: 735 callbacks suppressed [ 390.638459][ T36] audit: type=1400 audit(1750354250.050:56837): avc: denied { ioctl } for pid=15472 comm="syz.6.6280" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 390.692011][T15475] done. [ 390.706574][ T36] audit: type=1400 audit(1750354250.090:56838): avc: denied { read } for pid=15478 comm="syz.5.6283" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 390.755573][ T36] audit: type=1400 audit(1750354250.090:56839): avc: denied { read open } for pid=15478 comm="syz.5.6283" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 390.789752][ T36] audit: type=1400 audit(1750354250.090:56840): avc: denied { ioctl } for pid=15478 comm="syz.5.6283" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 390.845642][ T36] audit: type=1400 audit(1750354250.250:56841): avc: denied { read write } for pid=370 comm="syz-executor" name="loop0" dev="devtmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.907864][T15486] SELinux: policydb string does not match my string SE Linux [ 390.923023][ T36] audit: type=1400 audit(1750354250.250:56842): avc: denied { read write open } for pid=370 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 390.948514][T15486] SELinux: failed to load policy [ 390.959212][T15486] rust_binder: Write failure EFAULT in pid:3853 [ 390.978221][ T36] audit: type=1400 audit(1750354250.250:56843): avc: denied { ioctl } for pid=370 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=512 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.068261][ T36] audit: type=1400 audit(1750354250.260:56844): avc: denied { read write } for pid=12820 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.112104][T15493] rust_binder: Write failure EFAULT in pid:3855 [ 391.148901][ T36] audit: type=1400 audit(1750354250.260:56845): avc: denied { read write open } for pid=12820 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.213226][ T36] audit: type=1400 audit(1750354250.260:56846): avc: denied { ioctl } for pid=12820 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.502752][T15514] input: syz0 as /devices/virtual/input/input149 [ 391.913502][T15532] rust_binder: Error in use_page_slow: ESRCH [ 391.913522][T15532] rust_binder: use_range failure ESRCH [ 391.919687][T15532] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 391.956872][T15532] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 391.975638][T15532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:3868 [ 392.383665][T15555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 392.434649][T15555] rust_binder: Error in use_page_slow: ESRCH [ 392.434680][T15555] rust_binder: use_range failure ESRCH [ 392.442630][T15555] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 392.448254][T15555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 392.456407][T15555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2053 [ 392.677110][ T390] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 392.705332][ T390] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 392.904711][T15569] rust_binder: Error in use_page_slow: ESRCH [ 392.904740][T15569] rust_binder: use_range failure ESRCH [ 392.920934][T15569] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 392.934108][T15569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 392.954489][T15569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2057 [ 392.955419][T15576] rust_binder: Error in use_page_slow: ESRCH [ 392.989094][T15576] rust_binder: use_range failure ESRCH [ 392.995190][T15576] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 393.005303][T15576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 393.015085][T15576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2057 [ 393.028060][T15579] rust_binder: Error while translating object. [ 393.050719][T15579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 393.066770][T15579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:705 [ 393.278559][T15586] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 393.407134][T15588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:3877 [ 393.696885][ T390] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 393.739419][ T390] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 393.766375][ T390] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 393.784181][ T390] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 393.800378][ T390] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 393.818996][ T390] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 394.038388][T15612] fido_id[15612]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 394.076036][T15618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 394.076075][T15618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:717 [ 394.238604][T15622] input: syz0 as /devices/virtual/input/input151 [ 394.276098][T15624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.276502][T15624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:719 [ 394.285061][T15624] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 394.297350][T15622] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 394.386718][T15624] rust_binder: Error while translating object. [ 394.386763][T15624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 394.392973][T15624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:719 [ 394.726618][T15644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 394.740267][T15644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:2080 [ 394.877183][T15654] rust_binder: Error while translating object. [ 394.910768][T15654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 394.946267][T15654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:2082 [ 394.956394][T15657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2082 [ 395.071781][T15661] input: syz0 as /devices/virtual/input/input152 [ 395.095547][T15661] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 395.262870][T15673] binder: Unknown parameter 'fscontext?}' [ 395.482906][T15685] binder: Bad value for 'stats' [ 395.680127][ T36] kauditd_printk_skb: 780 callbacks suppressed [ 395.680147][ T36] audit: type=1400 audit(1750354255.090:57625): avc: denied { read write } for pid=13907 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.757802][T15695] input: syz0 as /devices/virtual/input/input153 [ 395.775640][ T36] audit: type=1400 audit(1750354255.100:57626): avc: denied { read } for pid=15694 comm="syz.0.6363" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 395.801517][T15695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 395.833309][ T36] audit: type=1400 audit(1750354255.100:57627): avc: denied { read open } for pid=15694 comm="syz.0.6363" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 395.870214][T15701] FAULT_INJECTION: forcing a failure. [ 395.870214][T15701] name failslab, interval 1, probability 0, space 0, times 0 [ 395.883618][ T36] audit: type=1400 audit(1750354255.100:57628): avc: denied { read write } for pid=15694 comm="syz.0.6363" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 395.898938][T15701] CPU: 0 UID: 0 PID: 15701 Comm: syz.5.6365 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 395.898986][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.899003][T15701] Call Trace: [ 395.899012][T15701] [ 395.899022][T15701] __dump_stack+0x21/0x30 [ 395.899061][T15701] dump_stack_lvl+0x10c/0x190 [ 395.899091][T15701] ? __cfi_dump_stack_lvl+0x10/0x10 [ 395.899124][T15701] ? pointer+0xdd0/0xdd0 [ 395.899155][T15701] dump_stack+0x19/0x20 [ 395.899182][T15701] should_fail_ex+0x3d9/0x530 [ 395.899207][T15701] should_failslab+0xac/0x100 [ 395.899241][T15701] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 395.899271][T15701] ? sidtab_sid2str_get+0x139/0x370 [ 395.899306][T15701] kmemdup_noprof+0x31/0x80 [ 395.899333][T15701] sidtab_sid2str_get+0x139/0x370 [ 395.899366][T15701] security_sid_to_context_core+0x30d/0x5d0 [ 395.899398][T15701] security_sid_to_context+0x2e/0x50 [ 395.899426][T15701] avc_audit_post_callback+0x107/0x780 [ 395.899453][T15701] ? audit_log_format+0xdb/0x140 [ 395.899475][T15701] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 395.899501][T15701] ? __cfi_audit_log_format+0x10/0x10 [ 395.899525][T15701] ? audit_log_untrustedstring+0xea/0x100 [ 395.899549][T15701] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 395.899574][T15701] common_lsm_audit+0x147a/0x1860 [ 395.899599][T15701] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 395.899624][T15701] ? __kasan_check_write+0x18/0x20 [ 395.899651][T15701] ? _raw_spin_lock+0x8c/0x120 [ 395.899681][T15701] ? __cfi_common_lsm_audit+0x10/0x10 [ 395.899706][T15701] ? __kasan_slab_free+0x6a/0x80 [ 395.899737][T15701] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 395.899771][T15701] slow_avc_audit+0x18d/0x1f0 [ 395.899795][T15701] ? __cfi_slow_avc_audit+0x10/0x10 [ 395.899821][T15701] ? avc_denied+0x112/0x180 [ 395.899844][T15701] avc_has_extended_perms+0x895/0xdd0 [ 395.899871][T15701] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 395.899896][T15701] ? unwind_get_return_address+0x51/0x90 [ 395.899921][T15701] ? arch_stack_walk+0x10b/0x170 [ 395.899966][T15701] ? _parse_integer+0x2e/0x40 [ 395.899994][T15701] ioctl_has_perm+0x384/0x4d0 [ 395.900028][T15701] ? has_cap_mac_admin+0xd0/0xd0 [ 395.900064][T15701] ? proc_fail_nth_write+0x17e/0x210 [ 395.900087][T15701] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 395.900112][T15701] selinux_file_ioctl+0x6e0/0x1360 [ 395.900146][T15701] ? vfs_write+0x8ba/0xe80 [ 395.900173][T15701] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 395.900207][T15701] ? __cfi_vfs_write+0x10/0x10 [ 395.900235][T15701] ? __kasan_check_write+0x18/0x20 [ 395.900261][T15701] ? mutex_unlock+0x8b/0x240 [ 395.900284][T15701] ? __cfi_mutex_unlock+0x10/0x10 [ 395.900305][T15701] ? __fget_files+0x2c5/0x340 [ 395.900340][T15701] ? __fget_files+0x2c5/0x340 [ 395.900373][T15701] security_file_ioctl+0x58/0xd0 [ 395.900407][T15701] __se_sys_ioctl+0x53/0x1b0 [ 395.900441][T15701] __x64_sys_ioctl+0x7f/0xa0 [ 395.900474][T15701] x64_sys_call+0x1878/0x2ee0 [ 395.900507][T15701] do_syscall_64+0x58/0xf0 [ 395.900539][T15701] ? clear_bhb_loop+0x35/0x90 [ 395.900575][T15701] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 395.900610][T15701] RIP: 0033:0x7fb58778e929 [ 395.900633][T15701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.900654][T15701] RSP: 002b:00007fb5875eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.900683][T15701] RAX: ffffffffffffffda RBX: 00007fb5879b5fa0 RCX: 00007fb58778e929 [ 395.900702][T15701] RDX: 0000200000000380 RSI: 00000000c0306201 RDI: 0000000000000003 [ 395.900720][T15701] RBP: 00007fb5875eb090 R08: 0000000000000000 R09: 0000000000000000 [ 395.900737][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.900753][T15701] R13: 0000000000000000 R14: 00007fb5879b5fa0 R15: 00007ffc01a6bde8 [ 395.900774][T15701] [ 396.219264][T15708] audit: audit_backlog=65 > audit_backlog_limit=64 [ 396.238390][T15706] audit: audit_backlog=65 > audit_backlog_limit=64 [ 396.282347][T15708] audit: audit_lost=231 audit_rate_limit=0 audit_backlog_limit=64 [ 396.286324][T15706] audit: audit_lost=232 audit_rate_limit=0 audit_backlog_limit=64 [ 396.291623][T15707] audit: audit_backlog=65 > audit_backlog_limit=64 [ 396.294886][T15706] audit: backlog limit exceeded [ 396.307109][T15707] random: crng reseeded on system resumption [ 396.370785][T15706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 396.372959][T15706] rust_binder: Write failure EFAULT in pid:445 [ 396.441701][T15714] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 396.891737][T15733] input: syz0 as /devices/virtual/input/input154 [ 396.932210][T15733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 397.129976][T15744] random: crng reseeded on system resumption [ 397.323298][T15753] rust_binder: inc_ref_done called when no active inc_refs [ 397.341444][T15752] rust_binder: Write failure EFAULT in pid:3921 [ 397.349596][T15752] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 397.363328][T15752] rust_binder: Write failure EINVAL in pid:3921 [ 397.460057][T15759] FAULT_INJECTION: forcing a failure. [ 397.460057][T15759] name failslab, interval 1, probability 0, space 0, times 0 [ 397.481923][T15759] CPU: 0 UID: 0 PID: 15759 Comm: syz.1.6388 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 397.481959][T15759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.481973][T15759] Call Trace: [ 397.481981][T15759] [ 397.481991][T15759] __dump_stack+0x21/0x30 [ 397.482021][T15759] dump_stack_lvl+0x10c/0x190 [ 397.482046][T15759] ? __cfi_dump_stack_lvl+0x10/0x10 [ 397.482072][T15759] ? __se_sys_ioctl+0x132/0x1b0 [ 397.482101][T15759] ? x64_sys_call+0x1878/0x2ee0 [ 397.482129][T15759] ? do_syscall_64+0x58/0xf0 [ 397.482157][T15759] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 397.482190][T15759] dump_stack+0x19/0x20 [ 397.482215][T15759] should_fail_ex+0x3d9/0x530 [ 397.482239][T15759] should_failslab+0xac/0x100 [ 397.482268][T15759] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 397.482296][T15759] ? rust_helper_krealloc+0x33/0xd0 [ 397.482321][T15759] krealloc_noprof+0x8d/0x130 [ 397.482350][T15759] rust_helper_krealloc+0x33/0xd0 [ 397.482372][T15759] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100 [ 397.482407][T15759] _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 397.482439][T15759] _RNvMs0_NtNtCs43vyB533jt3_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7context7ContextENtNtB7_9allocator7KmallocE7reserveB1g_+0x1c2/0x2c0 [ 397.482488][T15759] _RNvMNtCshgDM7dBCdno_11rust_binder7contextNtB2_7Context13get_all_procs+0x14b/0x430 [ 397.482528][T15759] ? __cfi__RNvMNtCshgDM7dBCdno_11rust_binder7contextNtB2_7Context13get_all_procs+0x10/0x10 [ 397.482565][T15759] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xbe/0x100 [ 397.482599][T15759] ? _RINvNtCs9jEwPDbx20M_4core3ptr13drop_in_placeINtNtNtCs43vyB533jt3_6kernel5alloc4kvec8IntoIterINtNtNtBN_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessENtNtBL_9allocator7KmallocEEB1T_+0x19c/0x1e0 [ 397.482647][T15759] _RNvMNtCshgDM7dBCdno_11rust_binder7contextNtB2_7Context18get_procs_with_pid+0x8a/0x650 [ 397.482685][T15759] ? krealloc_noprof+0xfa/0x130 [ 397.482710][T15759] ? rust_helper_krealloc+0x33/0xd0 [ 397.482731][T15759] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100 [ 397.482765][T15759] ? __cfi__RNvMNtCshgDM7dBCdno_11rust_binder7contextNtB2_7Context18get_procs_with_pid+0x10/0x10 [ 397.482811][T15759] ? __kasan_check_write+0x18/0x20 [ 397.482835][T15759] ? rust_helper_refcount_dec_and_test+0x57/0x80 [ 397.482860][T15759] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1509/0x2c20 [ 397.482892][T15759] ? avc_denied+0x112/0x180 [ 397.482915][T15759] ? avc_has_extended_perms+0x895/0xdd0 [ 397.482938][T15759] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 397.482967][T15759] ? do_vfs_ioctl+0xeda/0x1e30 [ 397.482995][T15759] ? arch_stack_walk+0x10b/0x170 [ 397.483024][T15759] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 397.483056][T15759] ? _parse_integer+0x2e/0x40 [ 397.483081][T15759] ? ioctl_has_perm+0x384/0x4d0 [ 397.483111][T15759] ? has_cap_mac_admin+0xd0/0xd0 [ 397.483142][T15759] ? proc_fail_nth_write+0x17e/0x210 [ 397.483163][T15759] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 397.483186][T15759] ? selinux_file_ioctl+0x6e0/0x1360 [ 397.483214][T15759] ? vfs_write+0x8ba/0xe80 [ 397.483238][T15759] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 397.483268][T15759] ? __cfi_vfs_write+0x10/0x10 [ 397.483293][T15759] ? __kasan_check_write+0x18/0x20 [ 397.483316][T15759] ? __cfi_mutex_unlock+0x10/0x10 [ 397.483336][T15759] ? __fget_files+0x2c5/0x340 [ 397.483366][T15759] ? __fget_files+0x2c5/0x340 [ 397.483396][T15759] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 397.483429][T15759] ? __se_sys_ioctl+0x114/0x1b0 [ 397.483458][T15759] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 397.483490][T15759] __se_sys_ioctl+0x132/0x1b0 [ 397.483525][T15759] __x64_sys_ioctl+0x7f/0xa0 [ 397.483553][T15759] x64_sys_call+0x1878/0x2ee0 [ 397.483584][T15759] do_syscall_64+0x58/0xf0 [ 397.483611][T15759] ? clear_bhb_loop+0x35/0x90 [ 397.483641][T15759] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 397.483677][T15759] RIP: 0033:0x7fd4e798e929 [ 397.483696][T15759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.483714][T15759] RSP: 002b:00007fd4e8819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.483737][T15759] RAX: ffffffffffffffda RBX: 00007fd4e7bb5fa0 RCX: 00007fd4e798e929 [ 397.483754][T15759] RDX: 00002000000002c0 RSI: 00000000400c620e RDI: 0000000000000003 [ 397.483769][T15759] RBP: 00007fd4e8819090 R08: 0000000000000000 R09: 0000000000000000 [ 397.483788][T15759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.483802][T15759] R13: 0000000000000000 R14: 00007fd4e7bb5fa0 R15: 00007ffcc5a41d28 [ 397.483820][T15759] [ 398.061197][T15764] input: syz1 as /devices/virtual/input/input155 [ 398.078711][T15763] input: syz0 as /devices/virtual/input/input156 [ 398.118353][T15763] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 398.159421][T15769] rust_binder: Write failure EINVAL in pid:3924 [ 398.385976][T15779] input: syz0 as /devices/virtual/input/input157 [ 398.462007][T15781] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 398.463789][T15781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:753 [ 398.483592][T15779] binder: Unknown parameter 'nXI' [ 398.821663][T15788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2116 [ 399.287302][T15804] input: syz0 as /devices/virtual/input/input158 [ 399.319519][T15804] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 399.377104][T15808] FAULT_INJECTION: forcing a failure. [ 399.377104][T15808] name failslab, interval 1, probability 0, space 0, times 0 [ 399.389923][T15808] CPU: 1 UID: 0 PID: 15808 Comm: syz.0.6407 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 399.389960][T15808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.389974][T15808] Call Trace: [ 399.389982][T15808] [ 399.389991][T15808] __dump_stack+0x21/0x30 [ 399.390021][T15808] dump_stack_lvl+0x10c/0x190 [ 399.390045][T15808] ? __cfi_dump_stack_lvl+0x10/0x10 [ 399.390071][T15808] dump_stack+0x19/0x20 [ 399.390093][T15808] should_fail_ex+0x3d9/0x530 [ 399.390118][T15808] should_failslab+0xac/0x100 [ 399.390147][T15808] __kmalloc_noprof+0x69/0x450 [ 399.390171][T15808] ? down_write+0xe9/0x2a0 [ 399.390193][T15808] ? security_sb_alloc+0x5b/0x200 [ 399.390217][T15808] security_sb_alloc+0x5b/0x200 [ 399.390238][T15808] ? __kasan_check_write+0x18/0x20 [ 399.390261][T15808] alloc_super+0x174/0x930 [ 399.390281][T15808] sget_fc+0x349/0xad0 [ 399.390299][T15808] ? __cfi_set_anon_super_fc+0x10/0x10 [ 399.390323][T15808] ? __cfi_binderfs_fill_super+0x10/0x10 [ 399.390344][T15808] get_tree_nodev+0x2e/0x170 [ 399.390364][T15808] ? binderfs_fs_context_get_tree+0x11/0x30 [ 399.390387][T15808] binderfs_fs_context_get_tree+0x20/0x30 [ 399.390408][T15808] vfs_get_tree+0x9e/0x290 [ 399.390432][T15808] do_new_mount+0x251/0xb40 [ 399.390457][T15808] path_mount+0x688/0x1050 [ 399.390482][T15808] ? putname+0x113/0x150 [ 399.390509][T15808] __se_sys_mount+0x2bd/0x480 [ 399.390535][T15808] ? ksys_write+0x1ef/0x250 [ 399.390572][T15808] ? __x64_sys_mount+0xf0/0xf0 [ 399.390599][T15808] __x64_sys_mount+0xc3/0xf0 [ 399.390625][T15808] x64_sys_call+0x2021/0x2ee0 [ 399.390653][T15808] do_syscall_64+0x58/0xf0 [ 399.390679][T15808] ? clear_bhb_loop+0x35/0x90 [ 399.390710][T15808] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 399.390740][T15808] RIP: 0033:0x7f8d41f8e929 [ 399.390758][T15808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.390776][T15808] RSP: 002b:00007f8d42de6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 399.390801][T15808] RAX: ffffffffffffffda RBX: 00007f8d421b5fa0 RCX: 00007f8d41f8e929 [ 399.390817][T15808] RDX: 0000200000002240 RSI: 0000200000002200 RDI: 00002000000021c0 [ 399.390833][T15808] RBP: 00007f8d42de6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.390847][T15808] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 399.390861][T15808] R13: 0000000000000001 R14: 00007f8d421b5fa0 R15: 00007ffe7c9a6718 [ 399.390879][T15808] [ 399.747507][T15814] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 399.975511][T15823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2119 [ 400.047857][T15827] FAULT_INJECTION: forcing a failure. [ 400.047857][T15827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.079385][T15827] CPU: 0 UID: 0 PID: 15827 Comm: syz.6.6415 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 400.079422][T15827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.079435][T15827] Call Trace: [ 400.079443][T15827] [ 400.079452][T15827] __dump_stack+0x21/0x30 [ 400.079483][T15827] dump_stack_lvl+0x10c/0x190 [ 400.079507][T15827] ? __cfi_dump_stack_lvl+0x10/0x10 [ 400.079534][T15827] dump_stack+0x19/0x20 [ 400.079563][T15827] should_fail_ex+0x3d9/0x530 [ 400.079586][T15827] should_fail+0xf/0x20 [ 400.079604][T15827] should_fail_usercopy+0x1e/0x30 [ 400.079627][T15827] _copy_from_user+0x22/0xb0 [ 400.079655][T15827] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process12inc_ref_done+0x2e0/0xc40 [ 400.079688][T15827] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process12inc_ref_done+0x10/0x10 [ 400.079719][T15827] ? __kasan_check_write+0x18/0x20 [ 400.079743][T15827] ? _raw_spin_lock+0x8c/0x120 [ 400.079770][T15827] ? __cfi__raw_spin_lock+0x10/0x10 [ 400.079797][T15827] ? __kasan_check_write+0x18/0x20 [ 400.079822][T15827] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x24c4/0x9d20 [ 400.079871][T15827] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 400.079935][T15827] ? is_bpf_text_address+0x17b/0x1a0 [ 400.079968][T15827] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 400.079997][T15827] ? is_bpf_text_address+0x17b/0x1a0 [ 400.080027][T15827] ? kernel_text_address+0xa9/0xe0 [ 400.080048][T15827] ? __kernel_text_address+0x11/0x40 [ 400.080069][T15827] ? unwind_get_return_address+0x51/0x90 [ 400.080089][T15827] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 400.080115][T15827] ? arch_stack_walk+0x10b/0x170 [ 400.080149][T15827] ? native_smp_send_reschedule+0x3d/0x60 [ 400.080179][T15827] ? update_curr+0x649/0xc60 [ 400.080206][T15827] ? resched_curr+0x1c3/0x430 [ 400.080232][T15827] ? __cfi_resched_curr+0x10/0x10 [ 400.080257][T15827] ? is_bpf_text_address+0x17b/0x1a0 [ 400.080289][T15827] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 400.080311][T15827] ? update_curr+0x649/0xc60 [ 400.080345][T15827] ? is_bpf_text_address+0x17b/0x1a0 [ 400.080375][T15827] ? kernel_text_address+0xa9/0xe0 [ 400.080395][T15827] ? __kernel_text_address+0x11/0x40 [ 400.080417][T15827] ? unwind_get_return_address+0x51/0x90 [ 400.080437][T15827] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 400.080463][T15827] ? arch_stack_walk+0x10b/0x170 [ 400.080511][T15827] ? stack_trace_save+0x9d/0xe0 [ 400.080536][T15827] ? stack_depot_save_flags+0x38/0x800 [ 400.080568][T15827] ? kasan_save_track+0x4f/0x80 [ 400.080594][T15827] ? kasan_save_track+0x3e/0x80 [ 400.080620][T15827] ? kasan_save_free_info+0x4a/0x60 [ 400.080642][T15827] ? __kasan_slab_free+0x5f/0x80 [ 400.080671][T15827] ? kmem_cache_free+0x1c1/0x4c0 [ 400.080695][T15827] ? audit_log_end+0x1f1/0x240 [ 400.080716][T15827] ? common_lsm_audit+0x148c/0x1860 [ 400.080737][T15827] ? slow_avc_audit+0x18d/0x1f0 [ 400.080758][T15827] ? avc_has_extended_perms+0x895/0xdd0 [ 400.080780][T15827] ? ioctl_has_perm+0x384/0x4d0 [ 400.080810][T15827] ? selinux_file_ioctl+0x6e0/0x1360 [ 400.080840][T15827] ? security_file_ioctl+0x58/0xd0 [ 400.080868][T15827] ? __se_sys_ioctl+0x53/0x1b0 [ 400.080898][T15827] ? __x64_sys_ioctl+0x7f/0xa0 [ 400.080925][T15827] ? x64_sys_call+0x1878/0x2ee0 [ 400.080952][T15827] ? do_syscall_64+0x58/0xf0 [ 400.080978][T15827] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 400.081010][T15827] ? __kasan_check_write+0x18/0x20 [ 400.081032][T15827] ? _raw_spin_lock+0x8c/0x120 [ 400.081059][T15827] ? __cfi__raw_spin_lock+0x10/0x10 [ 400.081087][T15827] ? _raw_spin_unlock+0x45/0x60 [ 400.081115][T15827] ? rust_helper_spin_unlock+0x19/0x30 [ 400.081137][T15827] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 400.081171][T15827] ? kmem_cache_free+0x1c1/0x4c0 [ 400.081196][T15827] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 400.081227][T15827] ? audit_log_end+0x1f1/0x240 [ 400.081247][T15827] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 400.081269][T15827] ? common_lsm_audit+0x148c/0x1860 [ 400.081290][T15827] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 400.081317][T15827] ? slow_avc_audit+0x18d/0x1f0 [ 400.081338][T15827] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 400.081369][T15827] ? avc_denied+0x112/0x180 [ 400.081391][T15827] ? avc_has_extended_perms+0x895/0xdd0 [ 400.081413][T15827] ? avc_has_extended_perms+0x91a/0xdd0 [ 400.081436][T15827] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 400.081467][T15827] ? do_vfs_ioctl+0xeda/0x1e30 [ 400.081495][T15827] ? arch_stack_walk+0x10b/0x170 [ 400.081523][T15827] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 400.081562][T15827] ? _parse_integer+0x2e/0x40 [ 400.081588][T15827] ? ioctl_has_perm+0x384/0x4d0 [ 400.081618][T15827] ? has_cap_mac_admin+0xd0/0xd0 [ 400.081649][T15827] ? proc_fail_nth_write+0x17e/0x210 [ 400.081670][T15827] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 400.081692][T15827] ? selinux_file_ioctl+0x6e0/0x1360 [ 400.081722][T15827] ? vfs_write+0x8ba/0xe80 [ 400.081746][T15827] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 400.081777][T15827] ? __cfi_vfs_write+0x10/0x10 [ 400.081802][T15827] ? __kasan_check_write+0x18/0x20 [ 400.081826][T15827] ? mutex_unlock+0x8b/0x240 [ 400.081845][T15827] ? __cfi_mutex_unlock+0x10/0x10 [ 400.081865][T15827] ? __fget_files+0x2c5/0x340 [ 400.081894][T15827] ? __fget_files+0x2c5/0x340 [ 400.081923][T15827] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 400.081954][T15827] ? __se_sys_ioctl+0x114/0x1b0 [ 400.081983][T15827] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 400.082014][T15827] __se_sys_ioctl+0x132/0x1b0 [ 400.082042][T15827] __x64_sys_ioctl+0x7f/0xa0 [ 400.082070][T15827] x64_sys_call+0x1878/0x2ee0 [ 400.082096][T15827] do_syscall_64+0x58/0xf0 [ 400.082123][T15827] ? clear_bhb_loop+0x35/0x90 [ 400.082155][T15827] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 400.082184][T15827] RIP: 0033:0x7fdbc5f8e929 [ 400.082202][T15827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.082222][T15827] RSP: 002b:00007fdbc6dbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.082246][T15827] RAX: ffffffffffffffda RBX: 00007fdbc61b5fa0 RCX: 00007fdbc5f8e929 [ 400.082262][T15827] RDX: 0000200000000240 RSI: 00000000c0306201 RDI: 0000000000000003 [ 400.082277][T15827] RBP: 00007fdbc6dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 400.082291][T15827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.082304][T15827] R13: 0000000000000000 R14: 00007fdbc61b5fa0 R15: 00007ffe92760d68 [ 400.082321][T15827] [ 400.082333][T15827] rust_binder: Write failure EFAULT in pid:477 [ 400.387530][T15841] input: syz0 as /devices/virtual/input/input159 [ 400.571119][T15837] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 400.631457][T15840] input: syz0 as /devices/virtual/input/input160 [ 400.704569][ T36] kauditd_printk_skb: 642 callbacks suppressed [ 400.704591][ T36] audit: type=1400 audit(1750354260.120:58260): avc: denied { read write } for pid=15833 comm="syz.0.6418" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 400.764871][T15848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 400.799481][ T36] audit: type=1400 audit(1750354260.130:58261): avc: denied { read write open } for pid=15833 comm="syz.0.6418" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 400.843740][ T36] audit: type=1400 audit(1750354260.130:58262): avc: denied { ioctl } for pid=15842 comm="syz.6.6420" path="/dev/binderfs/binder0" dev="binder" ino=124 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 400.870261][ T36] audit: type=1400 audit(1750354260.130:58263): avc: denied { call } for pid=15842 comm="syz.6.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 400.895750][ T36] audit: type=1400 audit(1750354260.130:58264): avc: denied { transfer } for pid=15842 comm="syz.6.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 400.916434][ T36] audit: type=1400 audit(1750354260.130:58265): avc: denied { ioctl } for pid=15842 comm="syz.6.6420" path="/dev/binderfs/binder0" dev="binder" ino=124 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 400.949694][ T36] audit: type=1400 audit(1750354260.130:58266): avc: denied { call } for pid=15842 comm="syz.6.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 400.970084][ T36] audit: type=1400 audit(1750354260.240:58267): avc: denied { ioctl } for pid=15833 comm="syz.0.6418" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 401.001405][ T36] audit: type=1400 audit(1750354260.250:58268): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=559 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.047560][ T36] audit: type=1400 audit(1750354260.250:58269): avc: denied { read open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=559 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.085151][T15854] binder: Bad value for 'max' [ 401.140043][T15857] SELinux: Context system_u:object_r:apt_lock_t:s0 is not valid (left unmapped). [ 401.159518][T15857] SELinux: Context Ń<Đ8Şf2“P^§Őń˛÷śáSň˘B 卅fľ…ÜĹăLî]jݲąľSe×?Őu‡ĂTččőŹÔűI\ě> »ţÚ>wďkČĘ8Ť<ýŘŁM=°zŢřw1ÚĎŔHä‹9Ţ®¶—ŞŚÖuCň> [ 401.159518][T15857] ’gĽßeEä(ËS˛Ä!ÉZźÝ6k2žXXŇůH0ň×Âj¦[ý]ŠÚ18x' is not valid (left unmapped). [ 401.372482][T15870] FAULT_INJECTION: forcing a failure. [ 401.372482][T15870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.427881][T15870] CPU: 0 UID: 0 PID: 15870 Comm: syz.6.6427 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 401.427918][T15870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.427932][T15870] Call Trace: [ 401.427940][T15870] [ 401.427950][T15870] __dump_stack+0x21/0x30 [ 401.427980][T15870] dump_stack_lvl+0x10c/0x190 [ 401.428006][T15870] ? __cfi_dump_stack_lvl+0x10/0x10 [ 401.428035][T15870] dump_stack+0x19/0x20 [ 401.428057][T15870] should_fail_ex+0x3d9/0x530 [ 401.428082][T15870] should_fail+0xf/0x20 [ 401.428104][T15870] should_fail_usercopy+0x1e/0x30 [ 401.428130][T15870] _copy_from_user+0x22/0xb0 [ 401.428160][T15870] memdup_user+0x81/0x180 [ 401.428183][T15870] ? strndup_user+0x40/0xd0 [ 401.428207][T15870] strndup_user+0x6c/0xd0 [ 401.428230][T15870] __se_sys_mount+0xe2/0x480 [ 401.428256][T15870] ? ksys_write+0x1ef/0x250 [ 401.428282][T15870] ? __x64_sys_mount+0xf0/0xf0 [ 401.428309][T15870] __x64_sys_mount+0xc3/0xf0 [ 401.428334][T15870] x64_sys_call+0x2021/0x2ee0 [ 401.428362][T15870] do_syscall_64+0x58/0xf0 [ 401.428391][T15870] ? clear_bhb_loop+0x35/0x90 [ 401.428421][T15870] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 401.428459][T15870] RIP: 0033:0x7fdbc5f8e929 [ 401.428475][T15870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.428493][T15870] RSP: 002b:00007fdbc6dbe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 401.428516][T15870] RAX: ffffffffffffffda RBX: 00007fdbc61b5fa0 RCX: 00007fdbc5f8e929 [ 401.428532][T15870] RDX: 0000000000000000 RSI: 0000200000002200 RDI: 0000200000000000 [ 401.428548][T15870] RBP: 00007fdbc6dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 401.428562][T15870] R10: 0000000002002004 R11: 0000000000000246 R12: 0000000000000001 [ 401.428576][T15870] R13: 0000000000000001 R14: 00007fdbc61b5fa0 R15: 00007ffe92760d68 [ 401.428594][T15870] [ 401.653696][T15878] input: syz0 as /devices/virtual/input/input161 [ 401.730998][T15876] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 401.927252][T15892] FAULT_INJECTION: forcing a failure. [ 401.927252][T15892] name failslab, interval 1, probability 0, space 0, times 0 [ 401.945708][T15892] CPU: 0 UID: 0 PID: 15892 Comm: syz.1.6436 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 401.945747][T15892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.945762][T15892] Call Trace: [ 401.945771][T15892] [ 401.945782][T15892] __dump_stack+0x21/0x30 [ 401.945813][T15892] dump_stack_lvl+0x10c/0x190 [ 401.945838][T15892] ? __cfi_dump_stack_lvl+0x10/0x10 [ 401.945863][T15892] ? stack_trace_save+0x9d/0xe0 [ 401.945888][T15892] dump_stack+0x19/0x20 [ 401.945911][T15892] should_fail_ex+0x3d9/0x530 [ 401.945934][T15892] should_failslab+0xac/0x100 [ 401.945963][T15892] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 401.945991][T15892] ? _RINvNtCs9jEwPDbx20M_4core3ptr13drop_in_placeINtNtNtCs43vyB533jt3_6kernel5alloc4kvec8IntoIterINtNtNtBN_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessENtNtBL_9allocator7KmallocEEB1T_+0x19c/0x1e0 [ 401.946042][T15892] ? rust_helper_krealloc+0x33/0xd0 [ 401.946064][T15892] ? __se_sys_ioctl+0x132/0x1b0 [ 401.946094][T15892] krealloc_noprof+0x8d/0x130 [ 401.946120][T15892] rust_helper_krealloc+0x33/0xd0 [ 401.946141][T15892] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100 [ 401.946176][T15892] _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 401.946208][T15892] _RNvMs0_NtNtCs43vyB533jt3_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7context7ContextENtNtB7_9allocator7KmallocE7reserveB1g_+0x1c2/0x2c0 [ 401.946257][T15892] _RNvMNtCshgDM7dBCdno_11rust_binder7contextNtB2_7Context13get_all_procs+0x14b/0x430 [ 401.946298][T15892] ? __cfi__RNvMNtCshgDM7dBCdno_11rust_binder7contextNtB2_7Context13get_all_procs+0x10/0x10 [ 401.946335][T15892] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xbe/0x100 [ 401.946394][T15892] ? _RINvNtCs9jEwPDbx20M_4core3ptr13drop_in_placeINtNtNtCs43vyB533jt3_6kernel5alloc4kvec8IntoIterINtNtNtBN_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessENtNtBL_9allocator7KmallocEEB1T_+0x19c/0x1e0 [ 401.946442][T15892] _RNvMNtCshgDM7dBCdno_11rust_binder7contextNtB2_7Context18get_procs_with_pid+0x8a/0x650 [ 401.946480][T15892] ? krealloc_noprof+0xfa/0x130 [ 401.946507][T15892] ? rust_helper_krealloc+0x33/0xd0 [ 401.946527][T15892] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100 [ 401.946558][T15892] ? __cfi__RNvMNtCshgDM7dBCdno_11rust_binder7contextNtB2_7Context18get_procs_with_pid+0x10/0x10 [ 401.946594][T15892] ? __kasan_check_write+0x18/0x20 [ 401.946620][T15892] ? rust_helper_refcount_dec_and_test+0x57/0x80 [ 401.946642][T15892] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1509/0x2c20 [ 401.946675][T15892] ? avc_denied+0x112/0x180 [ 401.946697][T15892] ? avc_has_extended_perms+0x895/0xdd0 [ 401.946720][T15892] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 401.946749][T15892] ? do_vfs_ioctl+0xeda/0x1e30 [ 401.946777][T15892] ? arch_stack_walk+0x10b/0x170 [ 401.946805][T15892] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 401.946837][T15892] ? _parse_integer+0x2e/0x40 [ 401.946863][T15892] ? ioctl_has_perm+0x384/0x4d0 [ 401.946892][T15892] ? has_cap_mac_admin+0xd0/0xd0 [ 401.946924][T15892] ? proc_fail_nth_write+0x17e/0x210 [ 401.946945][T15892] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 401.946966][T15892] ? selinux_file_ioctl+0x6e0/0x1360 [ 401.946994][T15892] ? vfs_write+0x8ba/0xe80 [ 401.947017][T15892] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 401.947047][T15892] ? __cfi_vfs_write+0x10/0x10 [ 401.947071][T15892] ? __kasan_check_write+0x18/0x20 [ 401.947095][T15892] ? __cfi_mutex_unlock+0x10/0x10 [ 401.947115][T15892] ? __fget_files+0x2c5/0x340 [ 401.947143][T15892] ? __fget_files+0x2c5/0x340 [ 401.947172][T15892] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 401.947206][T15892] ? __se_sys_ioctl+0x114/0x1b0 [ 401.947233][T15892] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 401.947276][T15892] __se_sys_ioctl+0x132/0x1b0 [ 401.947306][T15892] __x64_sys_ioctl+0x7f/0xa0 [ 401.947334][T15892] x64_sys_call+0x1878/0x2ee0 [ 401.947368][T15892] do_syscall_64+0x58/0xf0 [ 401.947395][T15892] ? clear_bhb_loop+0x35/0x90 [ 401.947428][T15892] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 401.947457][T15892] RIP: 0033:0x7fd4e798e929 [ 401.947476][T15892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.947495][T15892] RSP: 002b:00007fd4e8819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.947518][T15892] RAX: ffffffffffffffda RBX: 00007fd4e7bb5fa0 RCX: 00007fd4e798e929 [ 401.947534][T15892] RDX: 00002000000002c0 RSI: 00000000400c620e RDI: 0000000000000003 [ 401.947549][T15892] RBP: 00007fd4e8819090 R08: 0000000000000000 R09: 0000000000000000 [ 401.947562][T15892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.947575][T15892] R13: 0000000000000000 R14: 00007fd4e7bb5fa0 R15: 00007ffcc5a41d28 [ 401.947593][T15892] [ 402.613091][T15906] rust_binder: Write failure EFAULT in pid:2143 [ 402.838754][T15918] input: syz0 as /devices/virtual/input/input162 [ 402.897443][T15918] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 403.088264][T15929] random: crng reseeded on system resumption [ 403.194217][T15934] SELinux: Context çVSŠhŽ^J_’§ý°bFĆţ””xL_¨Öá6A_6ôaˇÍŻEkĄ&ůň´‚]MlkˇäÄwűŤ3XÝąŐRµ$GA vâéHtÝoęĽ˙4Ô›•c ş­Ś_—šˇ}—6Şťţ.5ŔE„Ź›‰ąÖÝňĐčćéî3Ę˝9žjbŻß)M<ÓPÚ”VJžé is not valid (left unmapped). [ 403.224662][T15938] binder: Unknown parameter '/dev/net/tun' [ 403.503355][T15947] SELinux: security policydb version 17 (MLS) not backwards compatible [ 403.529996][T15947] SELinux: failed to load policy [ 403.545521][T15947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:3965 [ 403.551851][T15947] binder: Unknown parameter 'rw'' [ 403.643363][T15953] FAULT_INJECTION: forcing a failure. [ 403.643363][T15953] name failslab, interval 1, probability 0, space 0, times 0 [ 403.709167][T15956] FAULT_INJECTION: forcing a failure. [ 403.709167][T15956] name failslab, interval 1, probability 0, space 0, times 0 [ 403.722393][T15957] input: syz0 as /devices/virtual/input/input163 [ 403.728855][T15953] CPU: 1 UID: 0 PID: 15953 Comm: syz.5.6456 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 403.728885][T15953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.728897][T15953] Call Trace: [ 403.728904][T15953] [ 403.728911][T15953] __dump_stack+0x21/0x30 [ 403.728943][T15953] dump_stack_lvl+0x10c/0x190 [ 403.728966][T15953] ? __cfi_dump_stack_lvl+0x10/0x10 [ 403.728992][T15953] dump_stack+0x19/0x20 [ 403.729016][T15953] should_fail_ex+0x3d9/0x530 [ 403.729041][T15953] should_failslab+0xac/0x100 [ 403.729069][T15953] __kmalloc_cache_noprof+0x41/0x3c0 [ 403.729093][T15953] ? __list_lru_init+0xc0/0x470 [ 403.729121][T15953] __list_lru_init+0xc0/0x470 [ 403.729148][T15953] alloc_super+0x751/0x930 [ 403.729169][T15953] sget_fc+0x349/0xad0 [ 403.729187][T15953] ? __cfi_set_anon_super_fc+0x10/0x10 [ 403.729210][T15953] ? __cfi_binderfs_fill_super+0x10/0x10 [ 403.729232][T15953] get_tree_nodev+0x2e/0x170 [ 403.729252][T15953] ? binderfs_fs_context_get_tree+0x11/0x30 [ 403.729274][T15953] binderfs_fs_context_get_tree+0x20/0x30 [ 403.729295][T15953] vfs_get_tree+0x9e/0x290 [ 403.729319][T15953] do_new_mount+0x251/0xb40 [ 403.729345][T15953] path_mount+0x688/0x1050 [ 403.729368][T15953] ? putname+0x113/0x150 [ 403.729395][T15953] __se_sys_mount+0x2bd/0x480 [ 403.729419][T15953] ? ksys_write+0x1ef/0x250 [ 403.729445][T15953] ? __x64_sys_mount+0xf0/0xf0 [ 403.729479][T15953] __x64_sys_mount+0xc3/0xf0 [ 403.729505][T15953] x64_sys_call+0x2021/0x2ee0 [ 403.729533][T15953] do_syscall_64+0x58/0xf0 [ 403.729561][T15953] ? clear_bhb_loop+0x35/0x90 [ 403.729592][T15953] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 403.729624][T15953] RIP: 0033:0x7fb58778e929 [ 403.729641][T15953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.729661][T15953] RSP: 002b:00007fb5875eb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 403.729685][T15953] RAX: ffffffffffffffda RBX: 00007fb5879b5fa0 RCX: 00007fb58778e929 [ 403.729701][T15953] RDX: 0000200000002240 RSI: 0000200000002200 RDI: 00002000000021c0 [ 403.729717][T15953] RBP: 00007fb5875eb090 R08: 0000000000000000 R09: 0000000000000000 [ 403.729731][T15953] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 403.729745][T15953] R13: 0000000000000001 R14: 00007fb5879b5fa0 R15: 00007ffc01a6bde8 [ 403.729763][T15953] [ 403.775697][T15956] CPU: 0 UID: 0 PID: 15956 Comm: syz.1.6457 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 403.775737][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.775754][T15956] Call Trace: [ 403.775763][T15956] [ 403.775773][T15956] __dump_stack+0x21/0x30 [ 403.775809][T15956] dump_stack_lvl+0x10c/0x190 [ 403.775836][T15956] ? __cfi_dump_stack_lvl+0x10/0x10 [ 403.775867][T15956] dump_stack+0x19/0x20 [ 403.775893][T15956] should_fail_ex+0x3d9/0x530 [ 403.775921][T15956] should_failslab+0xac/0x100 [ 403.775955][T15956] kmem_cache_alloc_noprof+0x42/0x3a0 [ 403.775984][T15956] ? getname_flags+0xc6/0x710 [ 403.776016][T15956] getname_flags+0xc6/0x710 [ 403.776048][T15956] user_path_at+0x2b/0x60 [ 403.776084][T15956] __se_sys_mount+0x288/0x480 [ 403.776113][T15956] ? ksys_write+0x1ef/0x250 [ 403.776144][T15956] ? __x64_sys_mount+0xf0/0xf0 [ 403.776174][T15956] __x64_sys_mount+0xc3/0xf0 [ 403.776202][T15956] x64_sys_call+0x2021/0x2ee0 [ 403.776243][T15956] do_syscall_64+0x58/0xf0 [ 403.776274][T15956] ? clear_bhb_loop+0x35/0x90 [ 403.776310][T15956] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 403.776345][T15956] RIP: 0033:0x7fd4e798e929 [ 403.776365][T15956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.776385][T15956] RSP: 002b:00007fd4e8819038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 403.776412][T15956] RAX: ffffffffffffffda RBX: 00007fd4e7bb5fa0 RCX: 00007fd4e798e929 [ 403.776431][T15956] RDX: 0000000000000000 RSI: 0000200000002200 RDI: 0000200000000000 [ 403.776448][T15956] RBP: 00007fd4e8819090 R08: 0000000000000000 R09: 0000000000000000 [ 403.776463][T15956] R10: 0000000002002004 R11: 0000000000000246 R12: 0000000000000001 [ 403.776479][T15956] R13: 0000000000000001 R14: 00007fd4e7bb5fa0 R15: 00007ffcc5a41d28 [ 403.776500][T15956] [ 404.182408][T15964] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 404.414114][T15969] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 404.423028][T15971] input: syz1 as /devices/virtual/input/input164 [ 404.660149][T15976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 404.660185][T15976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:514 [ 404.672419][T15976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 404.689242][T15976] rust_binder: Error while translating object. [ 404.705682][T15976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 404.712667][T15976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:514 [ 404.826413][T15988] rust_binder: inc_ref_done called when no active inc_refs [ 404.855210][T15988] FAULT_INJECTION: forcing a failure. [ 404.855210][T15988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.905568][T15988] CPU: 0 UID: 0 PID: 15988 Comm: syz.6.6468 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 404.905612][T15988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.905626][T15988] Call Trace: [ 404.905634][T15988] [ 404.905643][T15988] __dump_stack+0x21/0x30 [ 404.905673][T15988] dump_stack_lvl+0x10c/0x190 [ 404.905697][T15988] ? __cfi_dump_stack_lvl+0x10/0x10 [ 404.905723][T15988] dump_stack+0x19/0x20 [ 404.905747][T15988] should_fail_ex+0x3d9/0x530 [ 404.905771][T15988] should_fail+0xf/0x20 [ 404.905792][T15988] should_fail_usercopy+0x1e/0x30 [ 404.905817][T15988] _copy_to_user+0x24/0xa0 [ 404.905845][T15988] simple_read_from_buffer+0xed/0x160 [ 404.905880][T15988] proc_fail_nth_read+0x19e/0x210 [ 404.905900][T15988] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 404.905922][T15988] ? bpf_lsm_file_permission+0xd/0x20 [ 404.905945][T15988] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 404.905965][T15988] vfs_read+0x278/0xb60 [ 404.905989][T15988] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 404.906021][T15988] ? __cfi_vfs_read+0x10/0x10 [ 404.906045][T15988] ? __kasan_check_write+0x18/0x20 [ 404.906068][T15988] ? mutex_lock+0x92/0x1c0 [ 404.906088][T15988] ? __cfi_mutex_lock+0x10/0x10 [ 404.906107][T15988] ? __fget_files+0x2c5/0x340 [ 404.906138][T15988] ksys_read+0x141/0x250 [ 404.906161][T15988] ? xfd_validate_state+0x68/0x150 [ 404.906185][T15988] ? __cfi_ksys_read+0x10/0x10 [ 404.906210][T15988] ? __kasan_check_write+0x18/0x20 [ 404.906233][T15988] ? fpregs_restore_userregs+0x11d/0x260 [ 404.906266][T15988] __x64_sys_read+0x7f/0x90 [ 404.906290][T15988] x64_sys_call+0x2638/0x2ee0 [ 404.906318][T15988] do_syscall_64+0x58/0xf0 [ 404.906352][T15988] ? clear_bhb_loop+0x35/0x90 [ 404.906383][T15988] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 404.906415][T15988] RIP: 0033:0x7fdbc5f8d33c [ 404.906432][T15988] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 404.906452][T15988] RSP: 002b:00007fdbc6dbe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.906476][T15988] RAX: ffffffffffffffda RBX: 00007fdbc61b5fa0 RCX: 00007fdbc5f8d33c [ 404.906492][T15988] RDX: 000000000000000f RSI: 00007fdbc6dbe0a0 RDI: 0000000000000004 [ 404.906507][T15988] RBP: 00007fdbc6dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 404.906521][T15988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.906535][T15988] R13: 0000000000000000 R14: 00007fdbc61b5fa0 R15: 00007ffe92760d68 [ 404.906553][T15988] [ 405.512016][T16002] input: syz0 as /devices/virtual/input/input165 [ 405.538087][T16002] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 405.712872][ T36] kauditd_printk_skb: 561 callbacks suppressed [ 405.712892][ T36] audit: type=1400 audit(1750354265.120:58831): avc: denied { read } for pid=16018 comm="syz.6.6479" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 405.762774][ T36] audit: type=1400 audit(1750354265.160:58832): avc: denied { read open } for pid=16018 comm="syz.6.6479" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 405.767890][T16019] input: syz1 as /devices/virtual/input/input166 [ 405.817618][ T36] audit: type=1400 audit(1750354265.160:58833): avc: denied { ioctl } for pid=16018 comm="syz.6.6479" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 405.842433][ T36] audit: type=1400 audit(1750354265.170:58834): avc: denied { read } for pid=16018 comm="syz.6.6479" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 405.925781][ T36] audit: type=1400 audit(1750354265.170:58835): avc: denied { read open } for pid=16018 comm="syz.6.6479" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 405.951541][ T36] audit: type=1400 audit(1750354265.170:58836): avc: denied { read } for pid=16020 comm="syz.1.6480" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 405.994031][ T36] audit: type=1400 audit(1750354265.170:58837): avc: denied { read open } for pid=16020 comm="syz.1.6480" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 406.045663][ T36] audit: type=1400 audit(1750354265.180:58838): avc: denied { ioctl } for pid=16018 comm="syz.6.6479" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 406.115648][ T36] audit: type=1400 audit(1750354265.180:58839): avc: denied { ioctl } for pid=16018 comm="syz.6.6479" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 406.163860][T16029] rust_binder: Error while translating object. [ 406.163900][T16029] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 406.182292][T16029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:529 [ 406.192483][ T36] audit: type=1400 audit(1750354265.180:58840): avc: denied { ioctl } for pid=16018 comm="syz.6.6479" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x556a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 406.216814][T16037] rust_binder: Write failure EFAULT in pid:2179 [ 406.262789][T16039] FAULT_INJECTION: forcing a failure. [ 406.262789][T16039] name failslab, interval 1, probability 0, space 0, times 0 [ 406.283830][T16039] CPU: 0 UID: 0 PID: 16039 Comm: syz.0.6483 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 406.283865][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 406.283879][T16039] Call Trace: [ 406.283888][T16039] [ 406.283896][T16039] __dump_stack+0x21/0x30 [ 406.283926][T16039] dump_stack_lvl+0x10c/0x190 [ 406.283950][T16039] ? __cfi_dump_stack_lvl+0x10/0x10 [ 406.283975][T16039] dump_stack+0x19/0x20 [ 406.283997][T16039] should_fail_ex+0x3d9/0x530 [ 406.284020][T16039] should_failslab+0xac/0x100 [ 406.284050][T16039] __kmalloc_cache_noprof+0x41/0x3c0 [ 406.284075][T16039] ? __list_lru_init+0xc0/0x470 [ 406.284105][T16039] __list_lru_init+0xc0/0x470 [ 406.284132][T16039] alloc_super+0x751/0x930 [ 406.284153][T16039] sget_fc+0x349/0xad0 [ 406.284172][T16039] ? __cfi_set_anon_super_fc+0x10/0x10 [ 406.284196][T16039] ? __cfi_binderfs_fill_super+0x10/0x10 [ 406.284217][T16039] get_tree_nodev+0x2e/0x170 [ 406.284237][T16039] ? binderfs_fs_context_get_tree+0x11/0x30 [ 406.284260][T16039] binderfs_fs_context_get_tree+0x20/0x30 [ 406.284289][T16039] vfs_get_tree+0x9e/0x290 [ 406.284313][T16039] do_new_mount+0x251/0xb40 [ 406.284339][T16039] path_mount+0x688/0x1050 [ 406.284363][T16039] ? putname+0x113/0x150 [ 406.284390][T16039] __se_sys_mount+0x2bd/0x480 [ 406.284414][T16039] ? ksys_write+0x1ef/0x250 [ 406.284440][T16039] ? __x64_sys_mount+0xf0/0xf0 [ 406.284466][T16039] __x64_sys_mount+0xc3/0xf0 [ 406.284492][T16039] x64_sys_call+0x2021/0x2ee0 [ 406.284519][T16039] do_syscall_64+0x58/0xf0 [ 406.284547][T16039] ? clear_bhb_loop+0x35/0x90 [ 406.284579][T16039] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 406.284609][T16039] RIP: 0033:0x7f8d41f8e929 [ 406.284627][T16039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.284645][T16039] RSP: 002b:00007f8d42de6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 406.284668][T16039] RAX: ffffffffffffffda RBX: 00007f8d421b5fa0 RCX: 00007f8d41f8e929 [ 406.284684][T16039] RDX: 0000200000002240 RSI: 0000200000002200 RDI: 00002000000021c0 [ 406.284699][T16039] RBP: 00007f8d42de6090 R08: 0000000000000000 R09: 0000000000000000 [ 406.284713][T16039] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 406.284726][T16039] R13: 0000000000000001 R14: 00007f8d421b5fa0 R15: 00007ffe7c9a6718 [ 406.284745][T16039] [ 406.557130][T16040] FAULT_INJECTION: forcing a failure. [ 406.557130][T16040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.558506][T16037] rust_binder: Error while translating object. [ 406.570394][T16037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 406.576671][T16037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:2179 [ 406.603786][T16040] CPU: 1 UID: 0 PID: 16040 Comm: syz.5.6487 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 406.603824][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 406.603839][T16040] Call Trace: [ 406.603847][T16040] [ 406.603856][T16040] __dump_stack+0x21/0x30 [ 406.603887][T16040] dump_stack_lvl+0x10c/0x190 [ 406.603922][T16040] ? __cfi_dump_stack_lvl+0x10/0x10 [ 406.603949][T16040] dump_stack+0x19/0x20 [ 406.603972][T16040] should_fail_ex+0x3d9/0x530 [ 406.603997][T16040] should_fail+0xf/0x20 [ 406.604019][T16040] should_fail_usercopy+0x1e/0x30 [ 406.604045][T16040] _copy_to_user+0x24/0xa0 [ 406.604075][T16040] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x80df/0x9d20 [ 406.604111][T16040] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread14get_work_local+0x10/0x10 [ 406.604157][T16040] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 406.604216][T16040] ? is_bpf_text_address+0x17b/0x1a0 [ 406.604246][T16040] ? kernel_text_address+0xa9/0xe0 [ 406.604269][T16040] ? __kernel_text_address+0x11/0x40 [ 406.604291][T16040] ? unwind_get_return_address+0x51/0x90 [ 406.604311][T16040] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 406.604338][T16040] ? arch_stack_walk+0x10b/0x170 [ 406.604367][T16040] ? stack_trace_save+0x9d/0xe0 [ 406.604392][T16040] ? stack_depot_save_flags+0x38/0x800 [ 406.604418][T16040] ? kasan_save_stack+0x4d/0x60 [ 406.604445][T16040] ? kasan_save_stack+0x3e/0x60 [ 406.604471][T16040] ? __kasan_record_aux_stack+0xb2/0xd0 [ 406.604493][T16040] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 406.604517][T16040] ? __call_rcu_common+0xcc/0x6f0 [ 406.604543][T16040] ? call_rcu+0x14/0x20 [ 406.604572][T16040] ? is_bpf_text_address+0x17b/0x1a0 [ 406.604603][T16040] ? kernel_text_address+0xa9/0xe0 [ 406.604625][T16040] ? __kernel_text_address+0x11/0x40 [ 406.604646][T16040] ? unwind_get_return_address+0x51/0x90 [ 406.604666][T16040] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 406.604691][T16040] ? arch_stack_walk+0x10b/0x170 [ 406.604726][T16040] ? update_cfs_group+0x260/0x260 [ 406.604754][T16040] ? is_bpf_text_address+0x17b/0x1a0 [ 406.604785][T16040] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 406.604815][T16040] ? is_bpf_text_address+0x17b/0x1a0 [ 406.604844][T16040] ? kernel_text_address+0xa9/0xe0 [ 406.604865][T16040] ? __kernel_text_address+0x11/0x40 [ 406.604887][T16040] ? unwind_get_return_address+0x51/0x90 [ 406.604914][T16040] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 406.604940][T16040] ? arch_stack_walk+0x10b/0x170 [ 406.604970][T16040] ? stack_trace_save+0x9d/0xe0 [ 406.604995][T16040] ? stack_depot_save_flags+0x38/0x800 [ 406.605019][T16040] ? detach_entity_load_avg+0x7b0/0x7b0 [ 406.605047][T16040] ? kasan_save_track+0x4f/0x80 [ 406.605073][T16040] ? kasan_save_track+0x3e/0x80 [ 406.605100][T16040] ? kasan_save_free_info+0x4a/0x60 [ 406.605122][T16040] ? __kasan_slab_free+0x5f/0x80 [ 406.605149][T16040] ? kmem_cache_free+0x1c1/0x4c0 [ 406.605175][T16040] ? audit_log_end+0x1f1/0x240 [ 406.605197][T16040] ? common_lsm_audit+0x148c/0x1860 [ 406.605217][T16040] ? slow_avc_audit+0x18d/0x1f0 [ 406.605238][T16040] ? avc_has_extended_perms+0x895/0xdd0 [ 406.605260][T16040] ? ioctl_has_perm+0x384/0x4d0 [ 406.605290][T16040] ? selinux_file_ioctl+0x6e0/0x1360 [ 406.605320][T16040] ? security_file_ioctl+0x58/0xd0 [ 406.605348][T16040] ? __se_sys_ioctl+0x53/0x1b0 [ 406.605376][T16040] ? __x64_sys_ioctl+0x7f/0xa0 [ 406.605405][T16040] ? x64_sys_call+0x1878/0x2ee0 [ 406.605433][T16040] ? do_syscall_64+0x58/0xf0 [ 406.605459][T16040] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 406.605494][T16040] ? _raw_spin_unlock+0x45/0x60 [ 406.605521][T16040] ? rust_helper_spin_unlock+0x19/0x30 [ 406.605544][T16040] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 406.605577][T16040] ? kmem_cache_free+0x1c1/0x4c0 [ 406.605605][T16040] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 406.605633][T16040] ? audit_log_end+0x1f1/0x240 [ 406.605653][T16040] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 406.605675][T16040] ? common_lsm_audit+0x148c/0x1860 [ 406.605696][T16040] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 406.605723][T16040] ? slow_avc_audit+0x18d/0x1f0 [ 406.605744][T16040] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 406.605775][T16040] ? avc_denied+0x112/0x180 [ 406.605797][T16040] ? avc_has_extended_perms+0x895/0xdd0 [ 406.605820][T16040] ? avc_has_extended_perms+0x91a/0xdd0 [ 406.605842][T16040] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 406.605872][T16040] ? do_vfs_ioctl+0xeda/0x1e30 [ 406.605901][T16040] ? arch_stack_walk+0x10b/0x170 [ 406.605935][T16040] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 406.605967][T16040] ? _parse_integer+0x2e/0x40 [ 406.605991][T16040] ? ioctl_has_perm+0x384/0x4d0 [ 406.606023][T16040] ? has_cap_mac_admin+0xd0/0xd0 [ 406.606053][T16040] ? proc_fail_nth_write+0x17e/0x210 [ 406.606074][T16040] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 406.606095][T16040] ? selinux_file_ioctl+0x6e0/0x1360 [ 406.606125][T16040] ? vfs_write+0x8ba/0xe80 [ 406.606148][T16040] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 406.606181][T16040] ? __cfi_vfs_write+0x10/0x10 [ 406.606205][T16040] ? __kasan_check_write+0x18/0x20 [ 406.606229][T16040] ? mutex_unlock+0x8b/0x240 [ 406.606247][T16040] ? __cfi_mutex_unlock+0x10/0x10 [ 406.606264][T16040] ? __fget_files+0x2c5/0x340 [ 406.606293][T16040] ? __fget_files+0x2c5/0x340 [ 406.606321][T16040] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 406.606352][T16040] ? __se_sys_ioctl+0x114/0x1b0 [ 406.606381][T16040] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 406.606411][T16040] __se_sys_ioctl+0x132/0x1b0 [ 406.606439][T16040] __x64_sys_ioctl+0x7f/0xa0 [ 406.606466][T16040] x64_sys_call+0x1878/0x2ee0 [ 406.606494][T16040] do_syscall_64+0x58/0xf0 [ 406.606521][T16040] ? clear_bhb_loop+0x35/0x90 [ 406.606551][T16040] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 406.606580][T16040] RIP: 0033:0x7fb58778e929 [ 406.606597][T16040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.606616][T16040] RSP: 002b:00007fb5875eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.606640][T16040] RAX: ffffffffffffffda RBX: 00007fb5879b5fa0 RCX: 00007fb58778e929 [ 406.606656][T16040] RDX: 0000200000000380 RSI: 00000000c0306201 RDI: 0000000000000003 [ 406.606670][T16040] RBP: 00007fb5875eb090 R08: 0000000000000000 R09: 0000000000000000 [ 406.606684][T16040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.606696][T16040] R13: 0000000000000000 R14: 00007fb5879b5fa0 R15: 00007ffc01a6bde8 [ 406.606712][T16040] [ 406.699927][T16044] input: syz0 as /devices/virtual/input/input167 [ 406.856763][T16040] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 406.965732][T16049] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 407.032719][T16040] rust_binder: Read failure Err(EFAULT) in pid:812 [ 407.100502][T16046] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 407.131690][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 407.197067][T16046] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 407.426281][T16059] random: crng reseeded on system resumption [ 407.541508][T16066] FAULT_INJECTION: forcing a failure. [ 407.541508][T16066] name failslab, interval 1, probability 0, space 0, times 0 [ 407.576522][T16066] CPU: 1 UID: 0 PID: 16066 Comm: syz.5.6496 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 407.576557][T16066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 407.576572][T16066] Call Trace: [ 407.576580][T16066] [ 407.576589][T16066] __dump_stack+0x21/0x30 [ 407.576619][T16066] dump_stack_lvl+0x10c/0x190 [ 407.576644][T16066] ? __cfi_dump_stack_lvl+0x10/0x10 [ 407.576671][T16066] dump_stack+0x19/0x20 [ 407.576694][T16066] should_fail_ex+0x3d9/0x530 [ 407.576720][T16066] should_failslab+0xac/0x100 [ 407.576750][T16066] kmem_cache_alloc_noprof+0x42/0x3a0 [ 407.576773][T16066] ? security_inode_alloc+0x51/0x200 [ 407.576799][T16066] security_inode_alloc+0x51/0x200 [ 407.576823][T16066] inode_init_always_gfp+0x756/0x9e0 [ 407.576853][T16066] alloc_inode+0xc5/0x270 [ 407.576883][T16066] new_inode+0x25/0x1e0 [ 407.576913][T16066] ? binderfs_fill_super+0x1cd/0xef0 [ 407.576935][T16066] binderfs_fill_super+0x3c3/0xef0 [ 407.576958][T16066] ? __cfi_binderfs_fill_super+0x10/0x10 [ 407.576984][T16066] ? sget_fc+0x9ce/0xad0 [ 407.577003][T16066] ? __cfi_set_anon_super_fc+0x10/0x10 [ 407.577027][T16066] get_tree_nodev+0xcb/0x170 [ 407.577048][T16066] ? __cfi_binderfs_fill_super+0x10/0x10 [ 407.577069][T16066] binderfs_fs_context_get_tree+0x20/0x30 [ 407.577102][T16066] vfs_get_tree+0x9e/0x290 [ 407.577126][T16066] do_new_mount+0x251/0xb40 [ 407.577151][T16066] path_mount+0x688/0x1050 [ 407.577175][T16066] ? putname+0x113/0x150 [ 407.577202][T16066] __se_sys_mount+0x2bd/0x480 [ 407.577228][T16066] ? ksys_write+0x1ef/0x250 [ 407.577253][T16066] ? __x64_sys_mount+0xf0/0xf0 [ 407.577281][T16066] __x64_sys_mount+0xc3/0xf0 [ 407.577306][T16066] x64_sys_call+0x2021/0x2ee0 [ 407.577333][T16066] do_syscall_64+0x58/0xf0 [ 407.577362][T16066] ? clear_bhb_loop+0x35/0x90 [ 407.577395][T16066] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 407.577425][T16066] RIP: 0033:0x7fb58778e929 [ 407.577443][T16066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.577463][T16066] RSP: 002b:00007fb5875eb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 407.577486][T16066] RAX: ffffffffffffffda RBX: 00007fb5879b5fa0 RCX: 00007fb58778e929 [ 407.577502][T16066] RDX: 0000200000002240 RSI: 0000200000002200 RDI: 00002000000021c0 [ 407.577517][T16066] RBP: 00007fb5875eb090 R08: 0000000000000000 R09: 0000000000000000 [ 407.577530][T16066] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 407.577544][T16066] R13: 0000000000000001 R14: 00007fb5879b5fa0 R15: 00007ffc01a6bde8 [ 407.577562][T16066] [ 407.957046][T16067] random: crng reseeded on system resumption [ 408.104796][T16077] binder: Unknown parameter 'uid' [ 408.167422][T16079] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 408.218872][T16081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:829 [ 408.337645][T16090] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 408.352170][T16090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:832 [ 408.623212][T16108] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 408.663976][T16109] binder: Bad value for 'max' [ 408.739279][T16111] rust_binder: Error while translating object. [ 408.739317][T16111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 408.745506][T16111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2198 [ 409.058524][T16126] __vm_enough_memory: pid: 16126, comm: syz.0.6518, bytes: 281474976845824 not enough memory for the allocation [ 409.115636][ T3183] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 409.176437][T16128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 409.176472][T16128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:4008 [ 409.292745][T16132] FAULT_INJECTION: forcing a failure. [ 409.292745][T16132] name failslab, interval 1, probability 0, space 0, times 0 [ 409.333181][T16132] CPU: 0 UID: 0 PID: 16132 Comm: syz.0.6521 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 409.333219][T16132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.333234][T16132] Call Trace: [ 409.333242][T16132] [ 409.333251][T16132] __dump_stack+0x21/0x30 [ 409.333282][T16132] dump_stack_lvl+0x10c/0x190 [ 409.333307][T16132] ? __cfi_dump_stack_lvl+0x10/0x10 [ 409.333333][T16132] dump_stack+0x19/0x20 [ 409.333358][T16132] should_fail_ex+0x3d9/0x530 [ 409.333383][T16132] should_failslab+0xac/0x100 [ 409.333414][T16132] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 409.333439][T16132] ? alloc_inode+0xa9/0x270 [ 409.333470][T16132] alloc_inode+0xa9/0x270 [ 409.333500][T16132] new_inode+0x25/0x1e0 [ 409.333529][T16132] ? binderfs_fill_super+0x1cd/0xef0 [ 409.333552][T16132] binderfs_fill_super+0x3c3/0xef0 [ 409.333575][T16132] ? __cfi_binderfs_fill_super+0x10/0x10 [ 409.333603][T16132] ? sget_fc+0x9ce/0xad0 [ 409.333621][T16132] ? __cfi_set_anon_super_fc+0x10/0x10 [ 409.333645][T16132] get_tree_nodev+0xcb/0x170 [ 409.333666][T16132] ? __cfi_binderfs_fill_super+0x10/0x10 [ 409.333689][T16132] binderfs_fs_context_get_tree+0x20/0x30 [ 409.333711][T16132] vfs_get_tree+0x9e/0x290 [ 409.333736][T16132] do_new_mount+0x251/0xb40 [ 409.333771][T16132] path_mount+0x688/0x1050 [ 409.333794][T16132] ? putname+0x113/0x150 [ 409.333820][T16132] __se_sys_mount+0x2bd/0x480 [ 409.333844][T16132] ? ksys_write+0x1ef/0x250 [ 409.333869][T16132] ? __x64_sys_mount+0xf0/0xf0 [ 409.333896][T16132] __x64_sys_mount+0xc3/0xf0 [ 409.333920][T16132] x64_sys_call+0x2021/0x2ee0 [ 409.333949][T16132] do_syscall_64+0x58/0xf0 [ 409.333977][T16132] ? clear_bhb_loop+0x35/0x90 [ 409.334008][T16132] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 409.334038][T16132] RIP: 0033:0x7f8d41f8e929 [ 409.334056][T16132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.334075][T16132] RSP: 002b:00007f8d42de6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 409.334098][T16132] RAX: ffffffffffffffda RBX: 00007f8d421b5fa0 RCX: 00007f8d41f8e929 [ 409.334114][T16132] RDX: 0000200000002240 RSI: 0000200000002200 RDI: 00002000000021c0 [ 409.334129][T16132] RBP: 00007f8d42de6090 R08: 0000000000000000 R09: 0000000000000000 [ 409.334143][T16132] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 409.334157][T16132] R13: 0000000000000001 R14: 00007f8d421b5fa0 R15: 00007ffe7c9a6718 [ 409.334174][T16132] [ 409.678411][T16139] rust_binder: Write failure EINVAL in pid:4014 [ 409.850905][T16150] rust_binder: Write failure EINVAL in pid:542 [ 409.968171][T16155] rust_binder: Error while translating object. [ 409.968176][T16158] FAULT_INJECTION: forcing a failure. [ 409.968176][T16158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.968204][T16158] CPU: 0 UID: 0 PID: 16158 Comm: syz.1.6532 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 409.968228][T16158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.968242][T16158] Call Trace: [ 409.968249][T16158] [ 409.968259][T16158] __dump_stack+0x21/0x30 [ 409.968294][T16158] dump_stack_lvl+0x10c/0x190 [ 409.968324][T16158] ? __cfi_dump_stack_lvl+0x10/0x10 [ 409.968356][T16158] dump_stack+0x19/0x20 [ 409.968383][T16158] should_fail_ex+0x3d9/0x530 [ 409.968413][T16158] should_fail+0xf/0x20 [ 409.968436][T16158] should_fail_usercopy+0x1e/0x30 [ 409.968465][T16158] _copy_from_user+0x22/0xb0 [ 409.968498][T16158] bm_register_write+0x118/0x13f0 [ 409.968532][T16158] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 409.968555][T16158] ? bpf_lsm_file_permission+0xd/0x20 [ 409.968582][T16158] ? __cfi_bm_register_write+0x10/0x10 [ 409.968615][T16158] vfs_write+0x3c0/0xe80 [ 409.968645][T16158] ? __cfi_vfs_write+0x10/0x10 [ 409.968672][T16158] ? __kasan_check_write+0x18/0x20 [ 409.968698][T16158] ? mutex_lock+0x92/0x1c0 [ 409.968720][T16158] ? __cfi_mutex_lock+0x10/0x10 [ 409.968741][T16158] ? __fget_files+0x2c5/0x340 [ 409.968776][T16158] ksys_write+0x141/0x250 [ 409.968804][T16158] ? __cfi_ksys_write+0x10/0x10 [ 409.968835][T16158] ? __kasan_check_read+0x15/0x20 [ 409.968860][T16158] __x64_sys_write+0x7f/0x90 [ 409.968897][T16158] x64_sys_call+0x271c/0x2ee0 [ 409.968929][T16158] do_syscall_64+0x58/0xf0 [ 409.968959][T16158] ? clear_bhb_loop+0x35/0x90 [ 409.968994][T16158] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 409.969036][T16158] RIP: 0033:0x7fd4e798e929 [ 409.969055][T16158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.969076][T16158] RSP: 002b:00007fd4e8819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 409.969104][T16158] RAX: ffffffffffffffda RBX: 00007fd4e7bb5fa0 RCX: 00007fd4e798e929 [ 409.969125][T16158] RDX: 000000000000002f RSI: 0000200000000100 RDI: 0000000000000003 [ 409.969140][T16158] RBP: 00007fd4e8819090 R08: 0000000000000000 R09: 0000000000000000 [ 409.969157][T16158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.969173][T16158] R13: 0000000000000000 R14: 00007fd4e7bb5fa0 R15: 00007ffcc5a41d28 [ 409.969194][T16158] [ 410.231933][T16155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 410.231972][T16155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:545 [ 410.368460][T16170] rust_binder: Write failure EINVAL in pid:4023 [ 410.457685][T16174] SELinux: failed to load policy [ 410.716690][ T36] kauditd_printk_skb: 595 callbacks suppressed [ 410.716710][ T36] audit: type=1400 audit(1750354270.130:59436): avc: denied { read } for pid=16186 comm="syz.0.6544" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 410.806498][T16189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4030 [ 410.809322][ T36] audit: type=1400 audit(1750354270.160:59437): avc: denied { read open } for pid=16186 comm="syz.0.6544" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 410.875634][ T36] audit: type=1400 audit(1750354270.160:59438): avc: denied { mounton } for pid=16190 comm="syz.1.6545" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 410.935171][ T36] audit: type=1400 audit(1750354270.160:59439): avc: denied { read write } for pid=12820 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.990979][T16201] input: syz1 as /devices/virtual/input/input168 [ 411.002316][ T36] audit: type=1400 audit(1750354270.160:59440): avc: denied { read write open } for pid=12820 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 411.028500][ T36] audit: type=1400 audit(1750354270.160:59441): avc: denied { ioctl } for pid=12820 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 411.106374][ T36] audit: type=1400 audit(1750354270.170:59442): avc: denied { ioctl } for pid=16186 comm="syz.0.6544" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 411.182223][ T36] audit: type=1326 audit(1750354270.200:59443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16186 comm="syz.0.6544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d41f8e929 code=0x0 [ 411.222445][T16212] audit: audit_backlog=65 > audit_backlog_limit=64 [ 411.226934][ T36] audit: type=1400 audit(1750354270.220:59444): avc: denied { ioctl } for pid=16186 comm="syz.0.6544" path="/dev/binderfs/binder1" dev="binder" ino=122 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 411.229738][T16212] rust_binder: Write failure EINVAL in pid:2223 [ 411.377574][T16214] binder: Unknown parameter '0xffffffffffffffff000000000000000000000xffffffffffffffff˙˙˙˙˙˙˙˙cpuset.cpus' [ 411.481651][T16224] can0: slcan on ttyS3. [ 411.499427][T16224] rust_binder: Error while translating object. [ 411.499455][T16224] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 411.506346][T16224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:560 [ 411.557045][T16223] can0 (unregistered): slcan off ttyS3. [ 411.678297][T16232] binder: Unknown parameter 'fscontext?}' [ 411.695974][T16230] rust_binder: Write failure EFAULT in pid:2228 [ 411.774428][T16237] SELinux: failed to load policy [ 412.014382][T16253] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 412.309261][ T350] bridge_slave_1: left allmulticast mode [ 412.339436][ T350] bridge_slave_1: left promiscuous mode [ 412.350902][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.360926][ T350] bridge_slave_0: left allmulticast mode [ 412.373112][ T350] bridge_slave_0: left promiscuous mode [ 412.392190][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.490550][T16268] rust_binder: Error while translating object. [ 412.490587][T16268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 412.497802][T16268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2234 [ 412.551321][ T350] veth1_macvtap: left promiscuous mode [ 412.570355][ T350] veth0_vlan: left promiscuous mode [ 412.599646][ T355] Bluetooth: hci0: Frame reassembly failed (-84) [ 412.601030][T16272] random: crng reseeded on system resumption [ 412.729455][T16276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4046 [ 412.756584][T16272] Bluetooth: hci0: Frame reassembly failed (-84) [ 412.778736][T16272] Bluetooth: hci0: Frame reassembly failed (-84) [ 412.799078][T16272] Bluetooth: hci0: Frame reassembly failed (-84) [ 412.818469][T16272] rust_binder: Write failure EINVAL in pid:2236 [ 412.916826][T16269] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.930300][T16269] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.937485][T16269] bridge_slave_0: entered allmulticast mode [ 412.943967][T16269] bridge_slave_0: entered promiscuous mode [ 412.975445][T16269] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.025640][T16269] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.032766][T16269] bridge_slave_1: entered allmulticast mode [ 413.068711][T16269] bridge_slave_1: entered promiscuous mode [ 413.097036][T16300] binder: Bad value for 'max' [ 413.497974][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.505072][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.534484][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.541592][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.663571][T16269] veth0_vlan: entered promiscuous mode [ 413.711186][T16269] veth1_macvtap: entered promiscuous mode [ 414.027603][T16330] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 414.628405][T16332] SELinux: failed to load policy [ 414.635660][ T3183] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 414.647414][ T3312] Bluetooth: hci0: command 0x1003 tx timeout [ 414.700320][T16334] cgroup: fork rejected by pids controller in /syz6 [ 414.814692][T16338] random: crng reseeded on system resumption [ 414.820966][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 414.845681][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 414.853213][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 414.880097][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 414.892257][T16342] FAULT_INJECTION: forcing a failure. [ 414.892257][T16342] name failslab, interval 1, probability 0, space 0, times 0 [ 414.894133][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 414.913565][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 414.923088][T16342] CPU: 1 UID: 0 PID: 16342 Comm: syz.0.6587 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 414.923124][T16342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.923137][T16342] Call Trace: [ 414.923147][T16342] [ 414.923157][T16342] __dump_stack+0x21/0x30 [ 414.923188][T16342] dump_stack_lvl+0x10c/0x190 [ 414.923215][T16342] ? __cfi_dump_stack_lvl+0x10/0x10 [ 414.923241][T16342] ? __kasan_check_write+0x18/0x20 [ 414.923267][T16342] dump_stack+0x19/0x20 [ 414.923291][T16342] should_fail_ex+0x3d9/0x530 [ 414.923316][T16342] should_failslab+0xac/0x100 [ 414.923344][T16342] __kmalloc_cache_noprof+0x41/0x3c0 [ 414.923369][T16342] ? binderfs_fill_super+0x4fc/0xef0 [ 414.923391][T16342] binderfs_fill_super+0x4fc/0xef0 [ 414.923413][T16342] ? __cfi_binderfs_fill_super+0x10/0x10 [ 414.923443][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 414.923445][T16342] ? sget_fc+0x9ce/0xad0 [ 414.923464][T16342] ? __cfi_set_anon_super_fc+0x10/0x10 [ 414.923486][T16342] get_tree_nodev+0xcb/0x170 [ 414.923508][T16342] ? __cfi_binderfs_fill_super+0x10/0x10 [ 414.923533][T16342] binderfs_fs_context_get_tree+0x20/0x30 [ 414.923558][T16342] vfs_get_tree+0x9e/0x290 [ 414.923587][T16342] do_new_mount+0x251/0xb40 [ 414.923619][T16342] path_mount+0x688/0x1050 [ 414.923646][T16342] ? putname+0x113/0x150 [ 414.923678][T16342] __se_sys_mount+0x2bd/0x480 [ 414.923706][T16342] ? ksys_write+0x1ef/0x250 [ 414.923735][T16342] ? __x64_sys_mount+0xf0/0xf0 [ 414.923765][T16342] __x64_sys_mount+0xc3/0xf0 [ 414.923795][T16342] x64_sys_call+0x2021/0x2ee0 [ 414.923826][T16342] do_syscall_64+0x58/0xf0 [ 414.923858][T16342] ? clear_bhb_loop+0x35/0x90 [ 414.923893][T16342] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 414.923926][T16342] RIP: 0033:0x7f8d41f8e929 [ 414.923948][T16342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.923968][T16342] RSP: 002b:00007f8d42de6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 414.923995][T16342] RAX: ffffffffffffffda RBX: 00007f8d421b5fa0 RCX: 00007f8d41f8e929 [ 414.924014][T16342] RDX: 0000200000002240 RSI: 0000200000002200 RDI: 00002000000021c0 [ 414.924032][T16342] RBP: 00007f8d42de6090 R08: 0000000000000000 R09: 0000000000000000 [ 414.924048][T16342] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 414.924064][T16342] R13: 0000000000000001 R14: 00007f8d421b5fa0 R15: 00007ffe7c9a6718 [ 414.924085][T16342] [ 415.173027][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.180552][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.188040][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.195469][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.204554][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.212109][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.219555][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.227168][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.234610][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.242164][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.249633][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.257090][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.264538][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.272060][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.279546][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.287019][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.294489][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.301932][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.310127][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.318503][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.329163][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.337537][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.344968][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.353229][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.361342][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.369448][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.380722][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.388224][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.397073][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.410752][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.419044][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.427129][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.434561][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.443033][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.451087][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.459239][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.468147][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.475577][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.478170][ T350] bridge_slave_1: left allmulticast mode [ 415.492645][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.500755][ T350] bridge_slave_1: left promiscuous mode [ 415.507011][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.514316][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.524644][ T350] bridge_slave_0: left allmulticast mode [ 415.531069][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.536475][ T350] bridge_slave_0: left promiscuous mode [ 415.538565][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.551687][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.553356][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.567161][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.574636][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.582336][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.589874][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.601406][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.608882][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.616300][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.623713][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.631147][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.638580][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.645990][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.653389][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.660816][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.668233][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.675658][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.683091][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.690579][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.698202][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.705649][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.713045][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.720520][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.728174][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.735558][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.743026][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.750477][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.753184][ T36] kauditd_printk_skb: 908 callbacks suppressed [ 415.753202][ T36] audit: type=1400 audit(1750354275.170:60340): avc: denied { sys_module } for pid=16355 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 415.759859][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.774371][ T36] audit: type=1400 audit(1750354275.170:60341): avc: denied { sys_module } for pid=16355 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 415.785552][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.794272][ T36] audit: type=1400 audit(1750354275.170:60342): avc: denied { sys_module } for pid=16355 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 415.845645][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.853103][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.860603][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.873205][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.880752][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.888259][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.897696][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.905185][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.905263][ T350] veth1_macvtap: left promiscuous mode [ 415.912707][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.920264][ T350] veth0_vlan: left promiscuous mode [ 415.926513][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.938344][ T390] hid-generic 0582:0001:0008.000D: unknown main item tag 0x0 [ 415.955814][ T390] hid-generic 0582:0001:0008.000D: hidraw0: HID v0.09 Device [syz0] on syz1 [ 415.999179][ T36] audit: type=1400 audit(1750354275.410:60343): avc: denied { read write } for pid=16269 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.037241][ T36] audit: type=1400 audit(1750354275.410:60344): avc: denied { read write open } for pid=16269 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.076423][T16362] audit: audit_lost=242 audit_rate_limit=0 audit_backlog_limit=64 [ 416.095656][ T36] audit: type=1400 audit(1750354275.410:60345): avc: denied { ioctl } for pid=16269 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.105683][T16362] audit: out of memory in audit_log_start [ 416.137858][T16362] rust_binder: Error while translating object. [ 416.137890][T16362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 416.140824][ T36] audit: type=1400 audit(1750354275.480:60346): avc: denied { read } for pid=16361 comm="syz.5.6594" name="binder0" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 416.158219][T16362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:12 [ 416.193130][ T36] audit: type=1400 audit(1750354275.480:60347): avc: denied { read open } for pid=16361 comm="syz.5.6594" path="/dev/binderfs/binder0" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 416.197321][T16355] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.263184][T16355] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.305661][T16355] bridge_slave_0: entered allmulticast mode [ 416.312086][T16355] bridge_slave_0: entered promiscuous mode [ 416.337551][T16355] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.344602][T16367] fido_id[16367]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 416.417214][T16355] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.437782][T16355] bridge_slave_1: entered allmulticast mode [ 416.447573][T16372] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 416.448217][T16355] bridge_slave_1: entered promiscuous mode [ 416.483841][T16374] input: syz1 as /devices/virtual/input/input170 [ 416.845040][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.852173][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.878793][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.885916][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.030954][T16392] rust_binder: Error while translating object. [ 417.030993][T16392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 417.056831][T16392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2258 [ 417.085141][T16355] veth0_vlan: entered promiscuous mode [ 417.204656][T16355] veth1_macvtap: entered promiscuous mode [ 417.304174][T16401] input: syz0 as /devices/virtual/input/input173 [ 417.699683][T16417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 417.699721][T16417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2267 [ 417.710316][T16417] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 417.726013][T16417] rust_binder: Read failure Err(EFAULT) in pid:2267 [ 417.736775][T16417] rust_binder: Write failure EFAULT in pid:2267 [ 417.812707][T16420] rust_binder: Write failure EINVAL in pid:4094 [ 417.904755][T16422] kvm: kvm [16421]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 417.955701][T16422] serio: Serial port ttynull [ 417.995320][T16430] rust_binder: Write failure EINVAL in pid:6 [ 418.308032][T16445] FAULT_INJECTION: forcing a failure. [ 418.308032][T16445] name failslab, interval 1, probability 0, space 0, times 0 [ 418.354250][T16445] CPU: 1 UID: 0 PID: 16445 Comm: syz.1.6624 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 418.354288][T16445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.354303][T16445] Call Trace: [ 418.354311][T16445] [ 418.354320][T16445] __dump_stack+0x21/0x30 [ 418.354350][T16445] dump_stack_lvl+0x10c/0x190 [ 418.354374][T16445] ? __cfi_dump_stack_lvl+0x10/0x10 [ 418.354398][T16445] ? ida_alloc_range+0xa12/0xa50 [ 418.354423][T16445] ? kasan_save_alloc_info+0x40/0x50 [ 418.354446][T16445] dump_stack+0x19/0x20 [ 418.354469][T16445] should_fail_ex+0x3d9/0x530 [ 418.354490][T16445] should_failslab+0xac/0x100 [ 418.354517][T16445] __kmalloc_cache_noprof+0x41/0x3c0 [ 418.354542][T16445] ? binderfs_binder_device_create+0x15f/0xaf0 [ 418.354565][T16445] binderfs_binder_device_create+0x15f/0xaf0 [ 418.354587][T16445] ? __kasan_check_read+0x15/0x20 [ 418.354610][T16445] ? sized_strscpy+0x9f/0x2a0 [ 418.354632][T16445] binderfs_fill_super+0x886/0xef0 [ 418.354655][T16445] ? __cfi_binderfs_fill_super+0x10/0x10 [ 418.354682][T16445] ? sget_fc+0x9ce/0xad0 [ 418.354701][T16445] ? __cfi_set_anon_super_fc+0x10/0x10 [ 418.354724][T16445] get_tree_nodev+0xcb/0x170 [ 418.354745][T16445] ? __cfi_binderfs_fill_super+0x10/0x10 [ 418.354766][T16445] binderfs_fs_context_get_tree+0x20/0x30 [ 418.354787][T16445] vfs_get_tree+0x9e/0x290 [ 418.354812][T16445] do_new_mount+0x251/0xb40 [ 418.354838][T16445] path_mount+0x688/0x1050 [ 418.354863][T16445] ? putname+0x113/0x150 [ 418.354890][T16445] __se_sys_mount+0x2bd/0x480 [ 418.354915][T16445] ? ksys_write+0x1ef/0x250 [ 418.354941][T16445] ? __x64_sys_mount+0xf0/0xf0 [ 418.354967][T16445] __x64_sys_mount+0xc3/0xf0 [ 418.354992][T16445] x64_sys_call+0x2021/0x2ee0 [ 418.355020][T16445] do_syscall_64+0x58/0xf0 [ 418.355046][T16445] ? clear_bhb_loop+0x35/0x90 [ 418.355077][T16445] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 418.355107][T16445] RIP: 0033:0x7fd4e798e929 [ 418.355125][T16445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.355143][T16445] RSP: 002b:00007fd4e8819038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 418.355167][T16445] RAX: ffffffffffffffda RBX: 00007fd4e7bb5fa0 RCX: 00007fd4e798e929 [ 418.355190][T16445] RDX: 0000200000002240 RSI: 0000200000002200 RDI: 00002000000021c0 [ 418.355207][T16445] RBP: 00007fd4e8819090 R08: 0000000000000000 R09: 0000000000000000 [ 418.355221][T16445] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 418.355235][T16445] R13: 0000000000000001 R14: 00007fd4e7bb5fa0 R15: 00007ffcc5a41d28 [ 418.355252][T16445] [ 418.679437][T16448] random: crng reseeded on system resumption [ 418.991761][T16467] SELinux: security_context_str_to_sid () failed with errno=-22 [ 419.317889][T16484] rust_binder: Write failure EINVAL in pid:29 [ 420.041884][T16511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2286 [ 420.057503][T16511] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 420.108690][T16511] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 420.182874][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.256839][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.306865][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.323439][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.337848][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.362267][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.379139][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.399996][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.423715][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.451279][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.463097][T16526] random: crng reseeded on system resumption [ 420.476981][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.511355][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.545107][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.567142][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.587104][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.606104][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.618844][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.633675][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.643913][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.667065][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.676378][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.685466][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.695557][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.704699][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.714713][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.724469][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.743774][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.755318][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.761667][ T36] kauditd_printk_skb: 809 callbacks suppressed [ 420.761685][ T36] audit: type=1400 audit(1750354280.160:61155): avc: denied { remount } for pid=16515 comm="syz.6.6647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 420.778297][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.798613][ T36] audit: type=1400 audit(1750354280.190:61156): avc: denied { remount } for pid=16515 comm="syz.6.6647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 420.820911][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.830530][ T36] audit: type=1400 audit(1750354280.240:61157): avc: denied { remount } for pid=16515 comm="syz.6.6647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 420.852224][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.860854][ T36] audit: type=1400 audit(1750354280.240:61158): avc: denied { read } for pid=16537 comm="syz.1.6655" name="binder0" dev="binder" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 420.896651][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.905529][T16517] binder: Unknown parameter 'defcontext01777777777777777777777' [ 420.921263][ T36] audit: type=1400 audit(1750354280.240:61159): avc: denied { read open } for pid=16537 comm="syz.1.6655" path="/dev/binderfs/binder0" dev="binder" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 420.967322][ T36] audit: type=1400 audit(1750354280.250:61160): avc: denied { ioctl } for pid=16537 comm="syz.1.6655" path="/dev/binderfs/binder0" dev="binder" ino=133 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.004324][ T36] audit: type=1400 audit(1750354280.250:61161): avc: denied { set_context_mgr } for pid=16537 comm="syz.1.6655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 421.014172][T16547] FAULT_INJECTION: forcing a failure. [ 421.014172][T16547] name failslab, interval 1, probability 0, space 0, times 0 [ 421.045650][ T36] audit: type=1400 audit(1750354280.250:61162): avc: denied { ioctl } for pid=16537 comm="syz.1.6655" path="/dev/binderfs/binder0" dev="binder" ino=133 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.090164][T16547] CPU: 1 UID: 0 PID: 16547 Comm: syz.5.6659 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 421.090200][T16547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.090214][T16547] Call Trace: [ 421.090221][T16547] [ 421.090230][T16547] __dump_stack+0x21/0x30 [ 421.090261][T16547] dump_stack_lvl+0x10c/0x190 [ 421.090286][T16547] ? __cfi_dump_stack_lvl+0x10/0x10 [ 421.090311][T16547] ? pointer+0xdd0/0xdd0 [ 421.090338][T16547] dump_stack+0x19/0x20 [ 421.090361][T16547] should_fail_ex+0x3d9/0x530 [ 421.090385][T16547] should_failslab+0xac/0x100 [ 421.090415][T16547] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 421.090443][T16547] ? sidtab_sid2str_get+0x139/0x370 [ 421.090471][T16547] kmemdup_noprof+0x31/0x80 [ 421.090495][T16547] sidtab_sid2str_get+0x139/0x370 [ 421.090521][T16547] security_sid_to_context_core+0x30d/0x5d0 [ 421.090546][T16547] security_sid_to_context+0x2e/0x50 [ 421.090571][T16547] avc_audit_post_callback+0x107/0x780 [ 421.090592][T16547] ? audit_log_format+0xdb/0x140 [ 421.090612][T16547] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 421.090632][T16547] ? __cfi_audit_log_format+0x10/0x10 [ 421.090652][T16547] ? audit_log_untrustedstring+0xea/0x100 [ 421.090673][T16547] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 421.090693][T16547] common_lsm_audit+0x147a/0x1860 [ 421.090714][T16547] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 421.090737][T16547] ? __cfi_common_lsm_audit+0x10/0x10 [ 421.090759][T16547] ? __kasan_slab_free+0x6a/0x80 [ 421.090786][T16547] ? kmem_cache_free+0x1c1/0x4c0 [ 421.090811][T16547] ? avc_node_kill+0x29e/0x2f0 [ 421.090834][T16547] slow_avc_audit+0x18d/0x1f0 [ 421.090855][T16547] ? __cfi_slow_avc_audit+0x10/0x10 [ 421.090877][T16547] ? avc_denied+0x112/0x180 [ 421.090899][T16547] avc_has_extended_perms+0x895/0xdd0 [ 421.090923][T16547] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 421.090944][T16547] ? unwind_get_return_address+0x51/0x90 [ 421.090976][T16547] ? arch_stack_walk+0x10b/0x170 [ 421.091007][T16547] ? _parse_integer+0x2e/0x40 [ 421.091032][T16547] ioctl_has_perm+0x384/0x4d0 [ 421.091063][T16547] ? has_cap_mac_admin+0xd0/0xd0 [ 421.091091][T16547] ? proc_fail_nth_write+0x17e/0x210 [ 421.091109][T16547] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 421.091129][T16547] selinux_file_ioctl+0x6e0/0x1360 [ 421.091157][T16547] ? vfs_write+0x8ba/0xe80 [ 421.091182][T16547] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 421.091212][T16547] ? __cfi_vfs_write+0x10/0x10 [ 421.091236][T16547] ? __kasan_check_write+0x18/0x20 [ 421.091259][T16547] ? mutex_unlock+0x8b/0x240 [ 421.091279][T16547] ? __cfi_mutex_unlock+0x10/0x10 [ 421.091297][T16547] ? __fget_files+0x2c5/0x340 [ 421.091327][T16547] ? __fget_files+0x2c5/0x340 [ 421.091356][T16547] security_file_ioctl+0x58/0xd0 [ 421.091384][T16547] __se_sys_ioctl+0x53/0x1b0 [ 421.091414][T16547] __x64_sys_ioctl+0x7f/0xa0 [ 421.091447][T16547] x64_sys_call+0x1878/0x2ee0 [ 421.091475][T16547] do_syscall_64+0x58/0xf0 [ 421.091502][T16547] ? clear_bhb_loop+0x35/0x90 [ 421.091533][T16547] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 421.091563][T16547] RIP: 0033:0x7f4c3098e929 [ 421.091581][T16547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.091600][T16547] RSP: 002b:00007f4c31765038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.091623][T16547] RAX: ffffffffffffffda RBX: 00007f4c30bb5fa0 RCX: 00007f4c3098e929 [ 421.091639][T16547] RDX: 0000200000000380 RSI: 00000000c0306201 RDI: 0000000000000003 [ 421.091654][T16547] RBP: 00007f4c31765090 R08: 0000000000000000 R09: 0000000000000000 [ 421.091669][T16547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.091682][T16547] R13: 0000000000000000 R14: 00007f4c30bb5fa0 R15: 00007ffdcae13428 [ 421.091699][T16547] [ 421.475457][T16547] rust_binder: Error while translating object. [ 421.475492][T16547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 421.481738][T16547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:49 [ 421.488041][ T36] audit: type=1400 audit(1750354280.270:61163): avc: denied { remount } for pid=16515 comm="syz.6.6647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 421.568173][ T36] audit: type=1400 audit(1750354280.280:61164): avc: denied { read } for pid=16539 comm="syz.1.6656" name="binder0" dev="binder" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 422.315145][T16587] FAULT_INJECTION: forcing a failure. [ 422.315145][T16587] name failslab, interval 1, probability 0, space 0, times 0 [ 422.350185][T16587] CPU: 1 UID: 0 PID: 16587 Comm: syz.0.6675 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 422.350220][T16587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.350234][T16587] Call Trace: [ 422.350242][T16587] [ 422.350251][T16587] __dump_stack+0x21/0x30 [ 422.350282][T16587] dump_stack_lvl+0x10c/0x190 [ 422.350305][T16587] ? __cfi_dump_stack_lvl+0x10/0x10 [ 422.350329][T16587] ? skb_put+0x112/0x1f0 [ 422.350354][T16587] dump_stack+0x19/0x20 [ 422.350377][T16587] should_fail_ex+0x3d9/0x530 [ 422.350401][T16587] should_failslab+0xac/0x100 [ 422.350429][T16587] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 422.350456][T16587] ? sidtab_sid2str_get+0x139/0x370 [ 422.350485][T16587] kmemdup_noprof+0x31/0x80 [ 422.350508][T16587] sidtab_sid2str_get+0x139/0x370 [ 422.350536][T16587] security_sid_to_context_core+0x30d/0x5d0 [ 422.350564][T16587] security_sid_to_context+0x2e/0x50 [ 422.350587][T16587] avc_audit_post_callback+0x198/0x780 [ 422.350609][T16587] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 422.350630][T16587] ? __cfi_audit_log_format+0x10/0x10 [ 422.350651][T16587] ? audit_log_untrustedstring+0xea/0x100 [ 422.350672][T16587] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 422.350694][T16587] common_lsm_audit+0x147a/0x1860 [ 422.350714][T16587] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 422.350736][T16587] ? __kasan_check_write+0x18/0x20 [ 422.350778][T16587] ? _raw_spin_lock+0x8c/0x120 [ 422.350805][T16587] ? __cfi_common_lsm_audit+0x10/0x10 [ 422.350827][T16587] ? __kasan_slab_free+0x6a/0x80 [ 422.350864][T16587] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 422.350896][T16587] slow_avc_audit+0x18d/0x1f0 [ 422.350917][T16587] ? __cfi_slow_avc_audit+0x10/0x10 [ 422.350939][T16587] ? avc_denied+0x112/0x180 [ 422.350961][T16587] avc_has_extended_perms+0x895/0xdd0 [ 422.350985][T16587] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 422.351008][T16587] ? unwind_get_return_address+0x51/0x90 [ 422.351029][T16587] ? arch_stack_walk+0x10b/0x170 [ 422.351061][T16587] ? _parse_integer+0x2e/0x40 [ 422.351085][T16587] ioctl_has_perm+0x384/0x4d0 [ 422.351116][T16587] ? has_cap_mac_admin+0xd0/0xd0 [ 422.351147][T16587] ? proc_fail_nth_write+0x17e/0x210 [ 422.351188][T16587] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 422.351211][T16587] selinux_file_ioctl+0x6e0/0x1360 [ 422.351240][T16587] ? vfs_write+0x8ba/0xe80 [ 422.351264][T16587] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 422.351295][T16587] ? __cfi_vfs_write+0x10/0x10 [ 422.351319][T16587] ? __kasan_check_write+0x18/0x20 [ 422.351343][T16587] ? mutex_unlock+0x8b/0x240 [ 422.351362][T16587] ? __cfi_mutex_unlock+0x10/0x10 [ 422.351382][T16587] ? __fget_files+0x2c5/0x340 [ 422.351412][T16587] ? __fget_files+0x2c5/0x340 [ 422.351448][T16587] security_file_ioctl+0x58/0xd0 [ 422.351477][T16587] __se_sys_ioctl+0x53/0x1b0 [ 422.351508][T16587] __x64_sys_ioctl+0x7f/0xa0 [ 422.351537][T16587] x64_sys_call+0x1878/0x2ee0 [ 422.351565][T16587] do_syscall_64+0x58/0xf0 [ 422.351592][T16587] ? clear_bhb_loop+0x35/0x90 [ 422.351624][T16587] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 422.351656][T16587] RIP: 0033:0x7f8d41f8e929 [ 422.351675][T16587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.351694][T16587] RSP: 002b:00007f8d42de6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.351718][T16587] RAX: ffffffffffffffda RBX: 00007f8d421b5fa0 RCX: 00007f8d41f8e929 [ 422.351736][T16587] RDX: 0000200000000380 RSI: 00000000c0306201 RDI: 0000000000000003 [ 422.351751][T16587] RBP: 00007f8d42de6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.351765][T16587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.351779][T16587] R13: 0000000000000000 R14: 00007f8d421b5fa0 R15: 00007ffe7c9a6718 [ 422.351797][T16587] [ 422.353038][T16587] rust_binder: Error while translating object. [ 422.498344][T16589] rust_binder: Write failure EINVAL in pid:2307 [ 422.525697][T16587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 422.742124][T16587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4135 [ 423.162235][T16603] SELinux: Context system_u: is not valid (left unmapped). [ 423.197607][T16603] kvm_intel: kvm [16602]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 423.219509][T16605] FAULT_INJECTION: forcing a failure. [ 423.219509][T16605] name failslab, interval 1, probability 0, space 0, times 0 [ 423.238005][T16605] CPU: 1 UID: 0 PID: 16605 Comm: syz.5.6683 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 423.238042][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 423.238055][T16605] Call Trace: [ 423.238063][T16605] [ 423.238072][T16605] __dump_stack+0x21/0x30 [ 423.238102][T16605] dump_stack_lvl+0x10c/0x190 [ 423.238127][T16605] ? __cfi_dump_stack_lvl+0x10/0x10 [ 423.238152][T16605] ? __kasan_check_write+0x18/0x20 [ 423.238175][T16605] ? mutex_unlock+0x8b/0x240 [ 423.238195][T16605] dump_stack+0x19/0x20 [ 423.238218][T16605] should_fail_ex+0x3d9/0x530 [ 423.238238][T16605] should_failslab+0xac/0x100 [ 423.238261][T16605] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 423.238282][T16605] ? alloc_inode+0xa9/0x270 [ 423.238307][T16605] alloc_inode+0xa9/0x270 [ 423.238331][T16605] new_inode+0x25/0x1e0 [ 423.238354][T16605] ? binderfs_binder_device_create+0x15f/0xaf0 [ 423.238374][T16605] binderfs_binder_device_create+0x1af/0xaf0 [ 423.238391][T16605] ? __kasan_check_read+0x15/0x20 [ 423.238410][T16605] ? sized_strscpy+0x9f/0x2a0 [ 423.238429][T16605] binderfs_fill_super+0x886/0xef0 [ 423.238474][T16605] ? __cfi_binderfs_fill_super+0x10/0x10 [ 423.238495][T16605] ? sget_fc+0x9ce/0xad0 [ 423.238511][T16605] ? __cfi_set_anon_super_fc+0x10/0x10 [ 423.238540][T16605] get_tree_nodev+0xcb/0x170 [ 423.238557][T16605] ? __cfi_binderfs_fill_super+0x10/0x10 [ 423.238574][T16605] binderfs_fs_context_get_tree+0x20/0x30 [ 423.238591][T16605] vfs_get_tree+0x9e/0x290 [ 423.238611][T16605] do_new_mount+0x251/0xb40 [ 423.238633][T16605] path_mount+0x688/0x1050 [ 423.238653][T16605] ? putname+0x113/0x150 [ 423.238674][T16605] __se_sys_mount+0x2bd/0x480 [ 423.238695][T16605] ? ksys_write+0x1ef/0x250 [ 423.238716][T16605] ? __x64_sys_mount+0xf0/0xf0 [ 423.238738][T16605] __x64_sys_mount+0xc3/0xf0 [ 423.238759][T16605] x64_sys_call+0x2021/0x2ee0 [ 423.238783][T16605] do_syscall_64+0x58/0xf0 [ 423.238805][T16605] ? clear_bhb_loop+0x35/0x90 [ 423.238831][T16605] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 423.238856][T16605] RIP: 0033:0x7f4c3098e929 [ 423.238871][T16605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.238887][T16605] RSP: 002b:00007f4c31765038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 423.238907][T16605] RAX: ffffffffffffffda RBX: 00007f4c30bb5fa0 RCX: 00007f4c3098e929 [ 423.238921][T16605] RDX: 0000200000002240 RSI: 0000200000002200 RDI: 00002000000021c0 [ 423.238934][T16605] RBP: 00007f4c31765090 R08: 0000000000000000 R09: 0000000000000000 [ 423.238946][T16605] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000002 [ 423.238958][T16605] R13: 0000000000000001 R14: 00007f4c30bb5fa0 R15: 00007ffdcae13428 [ 423.238973][T16605] [ 423.686593][T16608] input: syz0 as /devices/virtual/input/input175 [ 423.692989][T16608] input: failed to attach handler leds to device input175, error: -6 [ 423.725746][T16621] rust_binder: Error while translating object. [ 423.725777][T16621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 423.763405][T16621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4147 [ 423.887535][T16623] rust_binder: Error while translating object. [ 423.913269][T16623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 423.936473][T16623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2318 [ 424.056645][T16630] input input176: cannot allocate more than FF_MAX_EFFECTS effects [ 424.119133][T16630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 424.119170][T16630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:66 [ 424.305399][T16637] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 424.305399][T16637] attempt to subtract with overflow [ 424.332516][T16637] ------------[ cut here ]------------ [ 424.338160][T16637] kernel BUG at rust/helpers/bug.c:7! [ 424.345639][T16637] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 424.352634][T16637] CPU: 1 UID: 0 PID: 16637 Comm: syz.1.6695 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 424.366206][T16637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.376298][T16637] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 424.381641][T16637] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 7f 49 4f 07 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 35 8d 06 8b 90 90 90 90 90 90 90 90 90 [ 424.401363][T16637] RSP: 0018:ffffc90002c25a90 EFLAGS: 00010246 [ 424.407458][T16637] RAX: 0000000000000061 RBX: 1ffff92000584b54 RCX: 62c3c2e80cd4d700 [ 424.415437][T16637] RDX: ffffc900067bd000 RSI: 0000000000005454 RDI: 0000000000005455 [ 424.423429][T16637] RBP: ffffc90002c25a90 R08: ffffc90002c25787 R09: 1ffff92000584af0 [ 424.431416][T16637] R10: dffffc0000000000 R11: fffff52000584af1 R12: 0000000000000000 [ 424.439399][T16637] R13: dffffc0000000000 R14: ffffc90002c25ac0 R15: ffffc90002c25af0 [ 424.447383][T16637] FS: 00007fd4e88196c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 424.456322][T16637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.462910][T16637] CR2: 00007ffdcae136a8 CR3: 0000000127790000 CR4: 00000000003526b0 [ 424.470890][T16637] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 424.478875][T16637] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 424.486871][T16637] Call Trace: [ 424.490245][T16637] [ 424.493194][T16637] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 424.500699][T16637] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 424.508704][T16637] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 424.518978][T16637] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 424.532540][T16637] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 424.543151][T16637] ? __kasan_check_write+0x18/0x20 [ 424.548277][T16637] ? _raw_spin_lock+0x8c/0x120 [ 424.553059][T16637] ? __cfi__raw_spin_lock+0x10/0x10 [ 424.558264][T16637] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 424.565488][T16637] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 424.573406][T16637] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 424.583311][T16637] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 424.593907][T16637] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 424.603638][T16637] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 424.613718][T16637] ? __kasan_check_write+0x18/0x20 [ 424.618842][T16637] ? _raw_spin_lock+0x8c/0x120 [ 424.623618][T16637] ? __cfi__raw_spin_lock+0x10/0x10 [ 424.628829][T16637] ? __kasan_check_write+0x18/0x20 [ 424.633953][T16637] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 424.643520][T16637] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 424.653435][T16637] ? unwind_next_frame+0x3c2/0x750 [ 424.658556][T16637] ? kvm_mmu_post_init_vm+0x1a6/0x310 [ 424.663937][T16637] ? kvm_mmu_post_init_vm+0x1a6/0x310 [ 424.669317][T16637] ? __kernel_text_address+0x11/0x40 [ 424.674609][T16637] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 424.680775][T16637] ? arch_stack_walk+0x12a/0x170 [ 424.685730][T16637] ? kvm_mmu_post_init_vm+0x1a6/0x310 [ 424.691116][T16637] ? vmx_vcpu_pi_put+0x17e/0x790 [ 424.696066][T16637] ? cgroup_rstat_updated+0x132/0x7f0 [ 424.701448][T16637] ? stack_depot_save_flags+0x38/0x800 [ 424.706939][T16637] ? __cfi_vmx_vcpu_pi_put+0x10/0x10 [ 424.712237][T16637] ? vmx_vcpu_pi_load+0x131/0x820 [ 424.717273][T16637] ? __kasan_check_read+0x15/0x20 [ 424.722309][T16637] ? resched_curr+0xaa/0x430 [ 424.726910][T16637] ? stack_depot_save+0x12/0x20 [ 424.731769][T16637] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 424.737243][T16637] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 424.742657][T16637] ? update_curr_dl_se+0x10c/0xb20 [ 424.747798][T16637] ? vmx_vcpu_load_vmcs+0x460/0x710 [ 424.753026][T16637] ? cgroup_rstat_updated+0x132/0x7f0 [ 424.758443][T16637] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 424.764192][T16637] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 424.769687][T16637] ? update_curr_dl_se+0x10c/0xb20 [ 424.774819][T16637] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 424.780898][T16637] ? update_curr+0x60d/0xc60 [ 424.785513][T16637] ? xfd_validate_state+0x68/0x150 [ 424.790637][T16637] ? save_fpregs_to_fpstate+0x196/0x230 [ 424.796201][T16637] ? __kasan_check_write+0x18/0x20 [ 424.801331][T16637] ? __switch_to+0xc7b/0x1310 [ 424.806018][T16637] ? __cfi___switch_to+0x10/0x10 [ 424.810962][T16637] ? pick_next_task_fair+0x870/0x900 [ 424.816265][T16637] ? _raw_spin_lock+0x8c/0x120 [ 424.821046][T16637] ? update_cfs_group+0x260/0x260 [ 424.826086][T16637] ? is_bpf_text_address+0x17b/0x1a0 [ 424.831398][T16637] ? cgroup_rstat_updated+0x132/0x7f0 [ 424.836780][T16637] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 424.842508][T16637] ? update_curr+0x949/0xc60 [ 424.847113][T16637] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 424.852592][T16637] ? is_bpf_text_address+0x17b/0x1a0 [ 424.857887][T16637] ? kernel_text_address+0xa9/0xe0 [ 424.863007][T16637] ? unwind_get_return_address+0x51/0x90 [ 424.868643][T16637] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 424.874814][T16637] ? arch_stack_walk+0x10b/0x170 [ 424.879765][T16637] ? stack_depot_save_flags+0x38/0x800 [ 424.885239][T16637] ? kasan_save_alloc_info+0x40/0x50 [ 424.890532][T16637] ? kasan_save_track+0x4f/0x80 [ 424.895397][T16637] ? kasan_save_track+0x3e/0x80 [ 424.900255][T16637] ? kasan_save_alloc_info+0x40/0x50 [ 424.905557][T16637] ? __kasan_kmalloc+0x96/0xb0 [ 424.910340][T16637] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 424.916936][T16637] ? krealloc_noprof+0x8d/0x130 [ 424.921798][T16637] ? rust_helper_krealloc+0x33/0xd0 [ 424.927000][T16637] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 424.936560][T16637] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 424.947067][T16637] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 424.956359][T16637] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 424.965046][T16637] ? __se_sys_ioctl+0x132/0x1b0 [ 424.969910][T16637] ? __x64_sys_ioctl+0x7f/0xa0 [ 424.974698][T16637] ? do_syscall_64+0x58/0xf0 [ 424.979299][T16637] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 424.985382][T16637] ? __kasan_kmalloc+0x96/0xb0 [ 424.990159][T16637] ? kasan_save_alloc_info+0x40/0x50 [ 424.995460][T16637] ? __kasan_kmalloc+0x96/0xb0 [ 425.000255][T16637] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 425.006867][T16637] ? __kasan_check_write+0x18/0x20 [ 425.011994][T16637] ? _raw_spin_lock+0x8c/0x120 [ 425.016773][T16637] ? __cfi__raw_spin_lock+0x10/0x10 [ 425.021981][T16637] ? __asan_memset+0x39/0x50 [ 425.026585][T16637] ? _raw_spin_unlock+0x45/0x60 [ 425.031446][T16637] ? rust_helper_spin_unlock+0x19/0x30 [ 425.036931][T16637] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 425.047440][T16637] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 425.058212][T16637] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 425.064197][T16637] ? common_lsm_audit+0x148c/0x1860 [ 425.069400][T16637] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 425.075387][T16637] ? __kasan_check_write+0x18/0x20 [ 425.080506][T16637] ? _raw_spin_lock+0x8c/0x120 [ 425.085283][T16637] ? slow_avc_audit+0x18d/0x1f0 [ 425.090140][T16637] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 425.099257][T16637] ? avc_denied+0x112/0x180 [ 425.103766][T16637] ? avc_has_extended_perms+0x895/0xdd0 [ 425.109336][T16637] ? avc_has_extended_perms+0x91a/0xdd0 [ 425.114891][T16637] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 425.124453][T16637] ? do_vfs_ioctl+0xeda/0x1e30 [ 425.129256][T16637] ? preempt_schedule_common+0x2d/0x60 [ 425.134750][T16637] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 425.140401][T16637] ? __cfi_preempt_schedule+0x10/0x10 [ 425.145792][T16637] ? preempt_schedule_thunk+0x1a/0x40 [ 425.151178][T16637] ? try_to_wake_up+0xe17/0x1aa0 [ 425.156134][T16637] ? ioctl_has_perm+0x384/0x4d0 [ 425.161002][T16637] ? has_cap_mac_admin+0xd0/0xd0 [ 425.165954][T16637] ? futex_wake+0x63a/0x900 [ 425.170461][T16637] ? __cfi_futex_wake+0x10/0x10 [ 425.175321][T16637] ? selinux_file_ioctl+0x6e0/0x1360 [ 425.180619][T16637] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 425.186190][T16637] ? do_futex+0x356/0x500 [ 425.190543][T16637] ? __cfi_do_futex+0x10/0x10 [ 425.195319][T16637] ? __fget_files+0x2c5/0x340 [ 425.200010][T16637] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 425.208520][T16637] ? __se_sys_ioctl+0x114/0x1b0 [ 425.213393][T16637] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 425.222528][T16637] __se_sys_ioctl+0x132/0x1b0 [ 425.227234][T16637] __x64_sys_ioctl+0x7f/0xa0 [ 425.231848][T16637] x64_sys_call+0x1878/0x2ee0 [ 425.236544][T16637] do_syscall_64+0x58/0xf0 [ 425.240974][T16637] ? clear_bhb_loop+0x35/0x90 [ 425.245674][T16637] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 425.251579][T16637] RIP: 0033:0x7fd4e798e929 [ 425.256000][T16637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.275617][T16637] RSP: 002b:00007fd4e8819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.284046][T16637] RAX: ffffffffffffffda RBX: 00007fd4e7bb5fa0 RCX: 00007fd4e798e929 [ 425.292031][T16637] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 000000000000000f [ 425.300008][T16637] RBP: 00007fd4e7a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 425.308070][T16637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.316042][T16637] R13: 0000000000000000 R14: 00007fd4e7bb5fa0 R15: 00007ffcc5a41d28 [ 425.324024][T16637] [ 425.327060][T16637] Modules linked in: [ 425.331291][T16637] ---[ end trace 0000000000000000 ]--- [ 425.361946][T16637] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 425.375159][T16637] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 7f 49 4f 07 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 35 8d 06 8b 90 90 90 90 90 90 90 90 90 [ 425.426845][T16637] RSP: 0018:ffffc90002c25a90 EFLAGS: 00010246 [ 425.444371][T16637] RAX: 0000000000000061 RBX: 1ffff92000584b54 RCX: 62c3c2e80cd4d700 [ 425.463659][T16637] RDX: ffffc900067bd000 RSI: 0000000000005454 RDI: 0000000000005455 [ 425.471991][T16637] RBP: ffffc90002c25a90 R08: ffffc90002c25787 R09: 1ffff92000584af0 [ 425.491295][T16637] R10: dffffc0000000000 R11: fffff52000584af1 R12: 0000000000000000 [ 425.507055][T16637] R13: dffffc0000000000 R14: ffffc90002c25ac0 R15: ffffc90002c25af0 [ 425.523237][T16637] FS: 00007fd4e88196c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 425.535614][T16637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.543422][T16637] CR2: 00007f4c30b81178 CR3: 0000000127790000 CR4: 00000000003526b0 [ 425.555108][T16637] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 425.563466][T16637] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 425.573844][T16637] Kernel panic - not syncing: Fatal exception [ 425.580281][T16637] Kernel Offset: disabled [ 425.584622][T16637] Rebooting in 86400 seconds..