last executing test programs: 9.831563393s ago: executing program 1 (id=1954): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x15c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x47}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x924e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8010}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f525aa2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x639abaf0}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x428}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4561182195"], 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x800) (async) accept4$inet6(r4, 0x0, 0x0, 0x800) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 8.071927676s ago: executing program 2 (id=2084): lseek(0xffffffffffffffff, 0x3, 0x4) truncate(&(0x7f0000000040)='./file0\x00', 0xffffffffffff7fff) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readahead(r0, 0x4, 0x4058) 8.044047959s ago: executing program 1 (id=1954): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x15c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x47}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x924e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8010}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f525aa2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x639abaf0}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x428}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4561182195"], 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x800) (async) accept4$inet6(r4, 0x0, 0x0, 0x800) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 6.266884484s ago: executing program 2 (id=2086): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x6, 0x0, 0x969, {0x0, 0x3ff, 0x0, 0x173, 0xe, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x200000, 0x0, 0x0, 0x2000}}, {0x0, 0x4, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.132940537s ago: executing program 1 (id=1954): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x15c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x47}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x924e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8010}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f525aa2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x639abaf0}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x428}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4561182195"], 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x800) (async) accept4$inet6(r4, 0x0, 0x0, 0x800) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 4.314706126s ago: executing program 2 (id=2093): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) (async) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000080)='\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003ea89109904028255f40000000109021b0001000000000904940001ffe5570009050413"], 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') (async) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0xadf6, 0xfffffffd, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x52) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x52) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00') 4.293561388s ago: executing program 0 (id=2095): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.213846496s ago: executing program 0 (id=2096): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) (async) syz_usb_control_io$uac1(r5, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000a40)={0x1c, &(0x7f0000000880)={0x20, 0x18, 0x6, "d8d655976537"}, &(0x7f0000000ac0)={0xa1, 0x1, 0x400, "1921da9d117e0bb1957f71dbed6788b530c44bf1efc04acb210118d2db7da9aeb87fbfae8cde9e4f27f6d3907a73322bc2c18d543c3971de7fe4aab1cccd42b53814da68cd1cba41765e701fb7dd35a2f460b0d50627f32a30e05f05f58717af52010643c782d58c147c894eda9d9322a1de3869cc1cfd7b28bdc5a8c8bbfa35c3d16bcf9fc4f61ed2eea8ad39b3f4ac8f41c3d3415d7964becd6ba0c3646a270b3fd5eb2635d6db1063d2604de2e902711798ef12bc0061affa3f20becc593d563e94fb562395806c7c7ba37ffc55469d2a307c69139f26d7bdb135dd540cfdd28ac2567e70f1e6f41b4b6461c064f2631344a6f969abf2163d6dbbe27c5d303838924250c5d555cffcaa96cf053465dd355d6eb3cb86d93b53157651c657a282c793aafeecc6f2dca98a754a94ad1ebf5803c1e39d38b9cd171c545e63681119174792f1a689f6c2695735cabaa5910665823e8a7df7deb165453f756012d908c86372af26041b37e8531b8f32c289116a60a523e8faf22a2f56ded0dab15b819a14dd4e13dc6442346739037c8ce1e7182c7b8850c42d9fcc248a92f59e20844e1fc421ce85ae066951dbf8232fad14be98d2ce1eedf133ae0cefdbfd580c2ab0343952ad97c6985e3f90786ee921f02f53e8e3977f02fb2f0cfef469467d2f0627447b0734d5b95d71a7a3cb4de6fde09d5afafbd66749f06706ab6552c35fbfc4ac8b24fc2129fd9945913713c3684b10e8730f895fbdcb462bb394bb2933f0eab7cb771891b69c146045bef685a2a7236d77ac9884f1c4dce8ca4eeda2fd40514bf55abfb486373ead176a09506ec6826e730e227cec5e2929f55360bfb2e00394bc962f8d5d234132a7fe15429d54b95232f9f2251c50bb2e9939e17b09d119ed83c23721e9fec0d1520305731d0eee5017c0f25c49ece533064631c4f5c280fa9843913b8b10ebdb68c8979380342426eb15f9b58f666f46620fd382ae1b026054a4aa016ebcfce68d6f1ff9eb621a00565029c0835e06084b73a3adf35cfff3add9b552f0a4dd45b1e915d5bff2d968a2f56bf3a225fd350b0ef35825d2ccc490d1d7e7ca1b50b4e89467c4daf7aed7688c86ac1b691d5811eb756901fc47670b088ff6dc396ec52709db5954646c53ca6a9df04f68d2f1b452bbc91064fda1dd69938c9f3d283ea92e4050b641e64bb5a14cd5f2f3f22029759b41880108d2344863f27997f5f82e29b83df40f4eb65f436f6be0739a92f9fea1980931ffb83ef9eccecfa7c505c24758a1d30d92fc8abc7c053805521f34ba141f8b64a1dff7a1b6b4c6a121b0edacd7372977000b788f2143a0d14f613c7aa2a05be3a7d34cf030319de281ff792599e4ec0ec026484e97d531c59bcdc13ecaa094ff40681433b56bf4eb970a84d8548bc520d888437107551e152f6f3a50099a"}, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r6, 0x1, 0x2b, 0x0, &(0x7f0000000580)) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x8000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x8000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) close_range(r2, r1, 0x0) (async) close_range(r2, r1, 0x0) exit(0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) 4.213428226s ago: executing program 1 (id=1954): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x15c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x47}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x924e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8010}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f525aa2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x639abaf0}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x428}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4561182195"], 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x800) (async) accept4$inet6(r4, 0x0, 0x0, 0x800) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 2.282113656s ago: executing program 0 (id=2097): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x802, &(0x7f00000000c0)={[{@name={'name', 0x3d, 'nofavordynmods'}}, {@name={'name', 0x3d, 'nofavordynmods'}}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000003080)) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2.274459637s ago: executing program 2 (id=2098): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f1, 0x0, 0xd2}]}) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x6) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') pwritev(r6, 0x0, 0x0, 0x7, 0x0) (async) pwritev(r6, 0x0, 0x0, 0x7, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 2.249554919s ago: executing program 2 (id=2100): r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000300)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xfffffffe) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 2.249351949s ago: executing program 3 (id=2101): r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000d00)={0x2, {{0xa, 0x2, 0x5, @mcast1}}, 0x0, 0x22, [{{0xa, 0x4e24, 0x1, @empty, 0x801}}, {{0xa, 0x4e22, 0x7fff, @empty, 0x9}}]}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f00000005c0)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x3, 0x80, 0x6}, @ipv6=@generic={0x4, 0x6, "84e437", 0x1e1, 0x0, 0x1, @mcast1, @mcast2, {[@hopopts={0x2f, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x134, 0xa, 0x4, 0x5, 0x33, 0x18, 0x3, [@loopback, @loopback, @private0, @loopback, @loopback]}, @hopopts={0xb3, 0x13, '\x00', [@pad1, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private1}, @generic={0xae, 0x7b, "9c94549e878f1216c17c4cf9039930af56727033a7c5698c611298542feaf1e266fbdfdb02fe22e8d858ab57c7c1e116759951be26ce63e180b91692bfdec7ab42dc08f9cc911e9d4aafca328b08b5f33f0549e40c8ad49638292f3c0eec311e671a90b8d300523ecfdda90d223cffba55349710e80f3076a36e7c"}]}], "f0db043c0bdd5fa862ab40e05a5dd2c234dc7773e3831178a890b2a83c13e6f5d1ec7ad9739f588cc88c83a9f836eb8045335fd06dd485c2446031e6847afe2d67d567703ef49b27e9e4936532e95fc00244b2e3f5d127b50a7c3001ae37c96c0439a96a7b7bb0faa0e55c71667c2db559cc4e3d9cf1faff99395ed6b589c8817d02dfc418f30a86847e7e66a207c98f445d1a31aee58cbb28d817dacd51e28a309a058f53135ee0bb9353b527460fca970e1ba5e0bbec8c4ac80fe5bbcfb8a3d84c993b85ed02e629"}}}, 0x217) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0}) 2.194084644s ago: executing program 3 (id=2102): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x6, 0x0, 0x969, {0x0, 0x3ff, 0x0, 0x173, 0xe, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x200000, 0x0, 0x0, 0x2000}}, {0x0, 0x4, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.182119976s ago: executing program 0 (id=2103): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket(0x1f, 0xe, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) exit(0xfe) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 2.163534307s ago: executing program 1 (id=1954): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x15c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x47}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x924e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8010}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f525aa2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x639abaf0}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x428}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4561182195"], 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x800) (async) accept4$inet6(r4, 0x0, 0x0, 0x800) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 123.710398ms ago: executing program 0 (id=2104): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x3}) 122.210178ms ago: executing program 2 (id=2105): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001200)=ANY=[@ANYBLOB="120150028d248320aa5503a1401d01020301090212000106bd400f0904d20800c828b8038bc4ead635b5461c0f0cf6460fc10f12fb46c2d046a9484d51b2d05fd74a9b4be66b4e979b5e1c1d763efc4e89490169f9afec10485c4d3550dfc20e892b85ebb40ab9ae306296288c9a069ebbe250b0444b2d83e2a8"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r1, 0x29, 0x1a, 0x0, &(0x7f0000003840)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001b40)=0x80003) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001600)=""/164, 0xa4}, {&(0x7f0000001440)=""/57, 0x39}, {&(0x7f00000016c0)=""/120, 0x78}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000001d80)=""/105, 0x69}, {&(0x7f0000001880)}, {&(0x7f00000018c0)=""/167, 0xa7}, {&(0x7f0000001980)=""/237, 0xed}], 0x8, &(0x7f0000001d40)=""/13, 0xd}, 0x400}, {{0x0, 0x0, &(0x7f0000001b40), 0x0, &(0x7f0000001b80)=""/253, 0xfd}, 0x4}], 0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000001280)=ANY=[@ANYBLOB="ad1c1f9380e9b919a373784547a5059f6538ef24f0508ce5e248d56cf48f8198ffa85cf15339792ff3a9a29d7378f4fc8526d21c6399a78727dba107a8ef5635a91565a7fef7b62703ea4bf66d4e80d77acadc598d040900000000000000ea2dcf49839c67d7439cb93223cac3dbc0d2a27b654e283e2f392e6849fdefdf42d270aa0ca152a619feb51b71e15f922023250baf8527408b63a6987523528400020efddc2ce63adf7562792e0f6ddf2009ffd8687c1beef15ffa0d82e0f478d0b7431695467aa218e0180ed09da4b8206e80d5799f"], 0xb0) r6 = socket(0x10, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6361636861686561642c003f04330ad30affdd791916064552fdd82108bda3dfd985ff93c1d9be1814adb403943b3b72a4780ddfb4fa8eecdb6659b0b20d36566a07e9f108238bb7e5830b52f2008dc1dd3ae2550eb301aac738af1e824141f0a522b42d7d775a6debc761a27f80c9be9ecae8e382"]) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000001d40)=ANY=[], 0xf0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="1d", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001e00)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000001d00)=ANY=[@ANYRES16=r0], 0x48}}, {{0x0, 0x0, &(0x7f0000000d80)}}, {{0x0, 0x0, 0x0}}], 0x6, 0x24004c41) pread64(r7, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 121.801268ms ago: executing program 3 (id=2106): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) (async, rerun: 32) r3 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) (rerun: 32) ftruncate(r3, 0x10000) fcntl$addseals(r3, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000440)={0x80, 0x6, 0x304, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 69.657863ms ago: executing program 0 (id=2107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000001c0)="66b9c00900000f32660f1b120f23d00f21f866350000000e0f23f80f0866b99608000066b80000000066ba000000000f300fbae10d440f20c066350c000000440f22c0670fc76801f4", 0x49}], 0x1, 0x0, 0x0, 0x53) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x7, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x7, 0x200000000006, 0x0, 0x800000032a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0x541080, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000080)={0x40, 0x10, 0x2, 0x5, 0x12, "1a709e3e47bae1de6429d22bcc6e8abeed9140"}) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4010aeeb, &(0x7f0000000000)={0x79}) 22.013528ms ago: executing program 3 (id=2108): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x80, 0x100021) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000004c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) ptrace$setregs(0xf, r1, 0x0, 0x0) (async) gettid() (async) ptrace$setopts(0x4206, r2, 0x80, 0x100021) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000004c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) (async) 21.556428ms ago: executing program 3 (id=2109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r1, 0x400, 0x1) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@known='user.incfs.id\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@getsadinfo={0xa8, 0x23, 0x400, 0x70bd28, 0x25dfdbfb, 0x0, [@mark={0xc, 0x15, {0x350759, 0x4}}, @offload={0xc, 0x1c, {0x0, 0x3}}, @policy_type={0xa}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in=@remote, 0x0, 0x2}}, @address_filter={0x28, 0x1a, {@in6=@empty, @in=@broadcast, 0xa, 0xca, 0x1}}, @replay_thresh={0x8, 0xb, 0x1}, @replay_thresh={0x8, 0xb, 0x10001}, @policy_type={0xa, 0x10, {0x1}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000004) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x3, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 13.527349ms ago: executing program 3 (id=2110): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x57d9, 0x100, 0x2, 0x1cd}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000150001c0"]) linkat(r0, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x23e, 0x0) r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x5864c31b6bca3e0e}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000840)={r6, 0x9, 0x4, 0x3eff31eaec27977e}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000000)={0x1}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x2000000000000003}) r10 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x2, 0x1, 0x28}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/86, 0x56, 0x2}, @fda={0x66646185, 0x4, 0x0, 0xa}}, &(0x7f0000000300)={0x0, 0x28, 0x17}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0xffffffffffffffff}, @free_buffer={0x40086303, r10}, @acquire_done={0x40106309, 0x1}, @dead_binder_done, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x2}, @acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x2}, @dead_binder_done], 0x20, 0x0, &(0x7f0000000240)="51ce5e3a2b7287d2cba51952934b2a11e2bd757c26fe596bdc16bdb270dd43d4"}) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) futimesat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000c80)={{r11, r12/1000+60000}, {0x0, 0x2710}}) setsockopt$inet_udp_int(r8, 0x11, 0xb, &(0x7f0000000040)=0x3, 0x4) 0s ago: executing program 1 (id=1954): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x15c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x47}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x924e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8010}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f525aa2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x639abaf0}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x428}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4561182195"], 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x800) (async) accept4$inet6(r4, 0x0, 0x0, 0x800) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.638632][ T10] usb 3-1: config 0 descriptor?? [ 52.751159][ T1433] 9pnet_fd: Insufficient options for proto=fd [ 52.796062][ T1439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:283 [ 52.853426][ T1452] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 52.869768][ T1452] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 52.925733][ T1459] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 52.934122][ T1460] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 52.942454][ T1461] rust_binder: 1454 RLIMIT_NICE not set [ 52.943251][ T1454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 52.976593][ T1471] rust_binder: 1460 RLIMIT_NICE not set [ 53.047364][ T10] logitech 0003:046D:C626.0006: unknown main item tag 0x4 [ 53.061671][ T10] logitech 0003:046D:C626.0006: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.2-1/input0 [ 53.073321][ T1485] cgroup: subsys name conflicts with all [ 53.094549][ T1489] rust_binder: Write failure EFAULT in pid:311 [ 53.249496][ T10] usb 3-1: USB disconnect, device number 15 [ 53.780754][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 53.780772][ T36] audit: type=1400 audit(1760076906.030:33784): avc: denied { getopt } for pid=1512 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.785015][ T1513] proc: Unknown parameter 'appraise_type' [ 53.787301][ T36] audit: type=1400 audit(1760076906.040:33785): avc: denied { remount } for pid=1512 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.845626][ T36] audit: type=1400 audit(1760076906.060:33786): avc: denied { read } for pid=1512 comm="syz.3.379" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.868437][ T36] audit: type=1400 audit(1760076906.060:33787): avc: denied { open } for pid=1512 comm="syz.3.379" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.975020][ T36] audit: type=1326 audit(1760076906.230:33788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101f98eec9 code=0x7ffc0000 [ 53.999567][ T36] audit: type=1326 audit(1760076906.250:33789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101f98eec9 code=0x7ffc0000 [ 54.006040][ T1522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 54.023689][ T1522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:229 [ 54.028406][ T36] audit: type=1326 audit(1760076906.250:33790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f101f98eec9 code=0x7ffc0000 [ 54.078465][ T36] audit: type=1326 audit(1760076906.250:33791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f101f9c1785 code=0x7ffc0000 [ 54.080419][ T1525] GUP no longer grows the stack in syz.2.383 (1525): 200000001000-200000c01000 (200000000000) [ 54.102136][ T36] audit: type=1326 audit(1760076906.250:33792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101f98eec9 code=0x7ffc0000 [ 54.102219][ T36] audit: type=1326 audit(1760076906.250:33793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101f98eec9 code=0x7ffc0000 [ 54.113054][ T1525] CPU: 0 UID: 0 PID: 1525 Comm: syz.2.383 Not tainted syzkaller #0 2560a8339b7509d4724a30b62cb6e32ef3b21627 [ 54.113093][ T1525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.113120][ T1525] Call Trace: [ 54.113129][ T1525] [ 54.113139][ T1525] __dump_stack+0x21/0x30 [ 54.113183][ T1525] dump_stack_lvl+0x10c/0x190 [ 54.113232][ T1525] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.113268][ T1525] ? find_vma+0xcd/0x110 [ 54.113296][ T1525] dump_stack+0x19/0x20 [ 54.113331][ T1525] __get_user_pages+0x1e34/0x22d0 [ 54.113364][ T1525] ? __kasan_check_write+0x18/0x20 [ 54.113409][ T1525] ? down_read_killable+0x79/0xf0 [ 54.113436][ T1525] ? populate_vma_page_range+0x230/0x230 [ 54.113468][ T1525] ? kernel_text_address+0xa9/0xe0 [ 54.113503][ T1525] ? unwind_get_return_address+0x51/0x90 [ 54.113536][ T1525] __gup_longterm_locked+0xcb1/0x1580 [ 54.113574][ T1525] ? stack_depot_save_flags+0x38/0x800 [ 54.113604][ T1525] gup_fast_fallback+0x12ae/0x14a0 [ 54.113638][ T1525] ? kasan_save_track+0x3e/0x80 [ 54.113665][ T1525] ? __kmalloc_cache_noprof+0x24c/0x490 [ 54.113691][ T1525] ? futex_lock_pi+0x77a/0xa10 [ 54.113727][ T1525] ? get_user_pages_fast_only+0xc0/0xc0 [ 54.113764][ T1525] get_user_pages_fast+0x73/0xb0 [ 54.113796][ T1525] get_futex_key+0x24d/0x930 [ 54.113821][ T1525] ? __cfi_get_futex_key+0x10/0x10 [ 54.113846][ T1525] ? futex_lock_pi+0x77a/0xa10 [ 54.113876][ T1525] ? futex_setup_timer+0xb4/0xd0 [ 54.113901][ T1525] futex_lock_pi+0x1c0/0xa10 [ 54.113933][ T1525] ? __cfi_futex_lock_pi+0x10/0x10 [ 54.113964][ T1525] ? __kasan_check_write+0x18/0x20 [ 54.114007][ T1525] ? wake_up_q+0x10f/0x1c0 [ 54.114050][ T1525] ? __cfi_futex_wake_mark+0x10/0x10 [ 54.114091][ T1525] ? down_read+0x79/0xe0 [ 54.114115][ T1525] ? __kasan_check_write+0x18/0x20 [ 54.114155][ T1525] ? up_read+0x26/0x1d0 [ 54.114208][ T1525] do_futex+0x25c/0x500 [ 54.114244][ T1525] ? __cfi_do_futex+0x10/0x10 [ 54.114271][ T1525] ? vm_mmap_pgoff+0x145/0x4e0 [ 54.114297][ T1525] __se_sys_futex+0x28f/0x300 [ 54.114325][ T1525] ? __x64_sys_futex+0x110/0x110 [ 54.114354][ T1525] ? __kasan_check_write+0x18/0x20 [ 54.114396][ T1525] __x64_sys_futex+0xe9/0x110 [ 54.114425][ T1525] x64_sys_call+0x227f/0x2ee0 [ 54.114464][ T1525] do_syscall_64+0x58/0xf0 [ 54.114497][ T1525] ? clear_bhb_loop+0x50/0xa0 [ 54.114525][ T1525] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.114567][ T1525] RIP: 0033:0x7f101f98eec9 [ 54.114602][ T1525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.114625][ T1525] RSP: 002b:00007f101e3f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 54.114659][ T1525] RAX: ffffffffffffffda RBX: 00007f101fbe5fa0 RCX: 00007f101f98eec9 [ 54.114683][ T1525] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 54.114701][ T1525] RBP: 00007f101fa11f91 R08: 0000000000000000 R09: 0000000000000002 [ 54.114719][ T1525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.114736][ T1525] R13: 00007f101fbe6038 R14: 00007f101fbe5fa0 R15: 00007ffe387a1108 [ 54.114760][ T1525] [ 54.444142][ T10] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 54.478717][ T1533] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 54.647839][ T10] usb 1-1: config 18 has an invalid interface number: 238 but max is 2 [ 54.656594][ T10] usb 1-1: config 18 contains an unexpected descriptor of type 0x2, skipping [ 54.665427][ T10] usb 1-1: config 18 has an invalid descriptor of length 1, skipping remainder of the config [ 54.678017][ T10] usb 1-1: config 18 has 1 interface, different from the descriptor's value: 3 [ 54.690396][ T10] usb 1-1: config 18 has no interface number 0 [ 54.703234][ T10] usb 1-1: config 18 interface 238 altsetting 81 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 54.729855][ T10] usb 1-1: config 18 interface 238 has no altsetting 0 [ 54.740363][ T10] usb 1-1: New USB device found, idVendor=152d, idProduct=0567, bcdDevice= 1.15 [ 54.752041][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.760289][ T10] usb 1-1: Product: ࡠ [ 54.764662][ T10] usb 1-1: Manufacturer: 갪⭧弥⃍ẑ麄⌯᝴智㶆靠滏亵鰥䠊褺먹뛢⺡阂ኮѓ颇쬕殰잡动䏜関ꪪ磀莳ד瘣쩺喉ྺ놗責먠⤆ء筫솆ພ鳸淞ᕳŊ뉝堤ꢑ茌浩֚ꘛãĊ럊졭俥軼㴵鄷㮇䰱⊄༓陡髷ۯ㵲퇇낞໓仄듾莈埖墐⏼쵰都箊떨ꤞ䒀蠬炆鿲膻ྱ齩뼟徂ⵘ [ 54.797786][ T10] usb 1-1: SerialNumber: ї [ 54.813079][ T1542] netlink: 'syz.2.389': attribute type 9 has an invalid length. [ 54.827341][ T1542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 54.850168][ T1545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.852103][ T1545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.388'. [ 54.884499][ T1545] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 55.217617][ T10] usb-storage 1-1:18.238: USB Mass Storage device detected [ 55.228689][ T10] usb-storage 1-1:18.238: Quirks match for vid 152d pid 0567: 1000000 [ 55.264981][ T10] usb 1-1: USB disconnect, device number 9 [ 55.685491][ T1565] rust_binder: Error in use_page_slow: ESRCH [ 55.685510][ T1565] rust_binder: use_range failure ESRCH [ 55.691551][ T1565] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 55.697080][ T1565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 55.705123][ T1565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:249 [ 55.715899][ T1565] rust_binder: 1565 RLIMIT_NICE not set [ 56.054152][ T430] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 56.214120][ T430] usb 1-1: Using ep0 maxpacket: 16 [ 56.220367][ T430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.231374][ T430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.241146][ T430] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.254025][ T430] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 56.263131][ T430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.272139][ T430] usb 1-1: config 0 descriptor?? [ 56.538495][ T1601] 9pnet_fd: Insufficient options for proto=fd [ 56.609786][ T1608] netlink: 76 bytes leftover after parsing attributes in process `syz.2.408'. [ 56.618817][ T1608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 56.629214][ T1608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 56.629247][ T1608] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 56.638485][ T1608] rust_binder: Read failure Err(EFAULT) in pid:254 [ 56.680128][ T430] microsoft 0003:045E:07DA.0007: unbalanced collection at end of report description [ 56.696672][ T430] microsoft 0003:045E:07DA.0007: parse failed [ 56.702820][ T430] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 56.888221][ T1576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 57.405226][ T1628] overlayfs: missing 'workdir' [ 57.564808][ T1637] syz.2.419 uses obsolete (PF_INET,SOCK_PACKET) [ 57.755911][ T1652] overlayfs: failed to clone upperpath [ 57.758650][ T1653] __vm_enough_memory: pid: 1653, comm: syz.2.422, bytes: 18014402804453376 not enough memory for the allocation [ 57.793231][ T1660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'. [ 57.802265][ T1659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'. [ 57.814343][ T9] usb 1-1: USB disconnect, device number 10 [ 57.931609][ T1686] overlayfs: failed to clone upperpath [ 58.048443][ T1711] overlayfs: failed to clone upperpath [ 58.266071][ T1720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=1720 comm=syz.2.450 [ 58.564124][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 58.714115][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 58.720457][ T10] usb 1-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 58.732439][ T10] usb 1-1: New USB device found, idVendor=053a, idProduct=a4a8, bcdDevice= 0.40 [ 58.741955][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.750155][ T10] usb 1-1: Product: syz [ 58.754643][ T10] usb 1-1: Manufacturer: syz [ 58.759422][ T10] usb 1-1: SerialNumber: syz [ 58.979755][ T10] usb 1-1: USB disconnect, device number 11 [ 59.131933][ T1735] __vm_enough_memory: pid: 1735, comm: syz.0.454, bytes: 18014402804453376 not enough memory for the allocation [ 59.184389][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 59.184419][ T36] audit: type=1326 audit(1760076911.440:33815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1743 comm="syz.2.457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101f98eec9 code=0x0 [ 59.244885][ T1753] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 59.476772][ T36] audit: type=1400 audit(1760076911.730:33816): avc: denied { mount } for pid=1767 comm="syz.3.464" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 59.524122][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 59.591436][ T36] audit: type=1400 audit(1760076911.840:33817): avc: denied { wake_alarm } for pid=1776 comm="syz.1.467" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.673400][ T1783] overlayfs: unescaped trailing colons in lowerdir mount option. [ 59.684110][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 59.691838][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 59.701009][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.702836][ T36] audit: type=1400 audit(1760076911.950:33818): avc: denied { mount } for pid=1785 comm="syz.1.470" name="/" dev="configfs" ino=1368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.709382][ T10] usb 1-1: Product: syz [ 59.736267][ T36] audit: type=1400 audit(1760076911.990:33819): avc: denied { search } for pid=1785 comm="syz.1.470" name="/" dev="configfs" ino=1368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.739002][ T10] usb 1-1: Manufacturer: syz [ 59.758757][ T36] audit: type=1400 audit(1760076911.990:33820): avc: denied { read } for pid=1785 comm="syz.1.470" name="/" dev="configfs" ino=1368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.767947][ T10] usb 1-1: SerialNumber: syz [ 59.785325][ T36] audit: type=1400 audit(1760076911.990:33821): avc: denied { open } for pid=1785 comm="syz.1.470" path="/" dev="configfs" ino=1368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.997274][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 60.028259][ T1796] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 60.028277][ T1796] rust_binder: Read failure Err(EFAULT) in pid:301 [ 60.047897][ T36] audit: type=1401 audit(1760076912.300:33822): op=fscreate invalid_context=CFA7AE [ 60.063849][ T36] audit: type=1400 audit(1760076912.310:33823): avc: denied { name_bind } for pid=1797 comm="syz.2.474" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 60.214540][ T382] usb 1-1: USB disconnect, device number 12 [ 60.221168][ T382] usblp0: removed [ 60.394107][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 60.446321][ T1803] tipc: Started in network mode [ 60.451229][ T1803] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 60.460301][ T1803] tipc: Enabling of bearer rejected, failed to enable media [ 60.544109][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 60.550466][ T45] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 60.558946][ T45] usb 3-1: config 0 has no interface number 0 [ 60.565234][ T45] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 60.577170][ T45] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 60.594147][ T45] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 60.605610][ T45] usb 3-1: config 0 interface 200 has no altsetting 0 [ 60.613869][ T45] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 60.623408][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.631640][ T45] usb 3-1: Product: syz [ 60.636065][ T45] usb 3-1: Manufacturer: syz [ 60.640723][ T45] usb 3-1: SerialNumber: syz [ 60.646569][ T45] usb 3-1: config 0 descriptor?? [ 60.653346][ T1801] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 60.715408][ T1828] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 60.734308][ T1829] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 60.742485][ T1834] binder: Bad value for 'max' [ 60.747604][ T36] audit: type=1400 audit(1760076912.990:33824): avc: denied { map } for pid=1815 comm="syz.3.482" path="socket:[11767]" dev="sockfs" ino=11767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 60.866481][ T1801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.876117][ T1801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.891605][ T1852] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 60.893257][ T45] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input13 [ 60.905290][ T1852] netlink: 104 bytes leftover after parsing attributes in process `syz.1.492'. [ 60.919670][ C0] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 60.919955][ T45] usb 3-1: USB disconnect, device number 16 [ 60.926828][ C0] usb 3-1: hanwang_irq - usb_submit_urb failed with result -19 [ 61.056532][ T1859] rust_binder: Error in use_page_slow: ESRCH [ 61.056553][ T1859] rust_binder: use_range failure ESRCH [ 61.062593][ T1859] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 61.068327][ T1859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.076602][ T1859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:355 [ 61.230130][ T1869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.499'. [ 61.375289][ T1876] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 61.395096][ T1880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 61.395133][ T1880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:372 [ 61.599223][ T737] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.615676][ T1896] 9pnet_fd: Insufficient options for proto=fd [ 61.654133][ T45] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 61.805257][ T45] usb 1-1: config 0 has an invalid interface number: 116 but max is 0 [ 61.813489][ T45] usb 1-1: config 0 has no interface number 0 [ 61.819678][ T45] usb 1-1: config 0 interface 116 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 61.833067][ T45] usb 1-1: config 0 interface 116 has no altsetting 0 [ 61.839901][ T45] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 61.848987][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.857694][ T45] usb 1-1: config 0 descriptor?? [ 62.010547][ T1901] /dev/sr0: Can't lookup blockdev [ 62.065678][ T45] usb 1-1: string descriptor 0 read error: -71 [ 62.074577][ T45] asix 1-1:0.116 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 62.085224][ T45] asix 1-1:0.116: probe with driver asix failed with error -71 [ 62.093855][ T45] usb 1-1: USB disconnect, device number 13 [ 62.456646][ T1916] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 62.884026][ T1968] binder: Unknown parameter 'posixacl' [ 62.890611][ T1968] binder: Unknown parameter 'posixacl' [ 62.892404][ T1972] overlay: Unknown parameter 'smackfsdef' [ 62.986633][ T1979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 63.070007][ T1984] random: crng reseeded on system resumption [ 63.162322][ T1992] input: syz1 as /devices/virtual/input/input14 [ 63.189408][ T1992] SELinux: ebitmap: truncated map [ 63.200926][ T1992] SELinux: failed to load policy [ 63.276653][ T2001] syzkaller0: entered allmulticast mode [ 63.282365][ T2001] syzkaller0: entered promiscuous mode [ 63.288464][ T2001] ip6gretap0: mtu less than device minimum [ 63.295098][ T2001] syzkaller0 (unregistering): left promiscuous mode [ 63.301700][ T2001] syzkaller0 (unregistering): left allmulticast mode [ 63.353885][ T2002] rust_binder: Error while translating object. [ 63.353926][ T2002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 63.360163][ T2002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:411 [ 63.634297][ T2040] rust_binder: 433: no such ref 3 [ 63.644211][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.648658][ T808] Bluetooth: hci0: command 0x1003 tx timeout [ 63.964140][ T360] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 63.971906][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 63.972257][ T2057] netlink: 'syz.1.559': attribute type 12 has an invalid length. [ 63.999494][ T2060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.560'. [ 64.019726][ T2064] netlink: 'syz.1.561': attribute type 27 has an invalid length. [ 64.028668][ T2064] gretap0: left promiscuous mode [ 64.124244][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 64.135266][ T360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 64.146324][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 64.155651][ T360] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 64.168703][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.177703][ T360] usb 1-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 64.187010][ T10] usb 3-1: Product: syz [ 64.191206][ T10] usb 3-1: Manufacturer: syz [ 64.196527][ T360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.204785][ T10] usb 3-1: SerialNumber: syz [ 64.211701][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 64.213273][ T2091] 9pnet_fd: Insufficient options for proto=fd [ 64.224661][ T360] usb 1-1: config 0 descriptor?? [ 64.225975][ T2090] 9pnet_fd: Insufficient options for proto=fd [ 64.234986][ T2047] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.246117][ T360] usbhid 1-1:0.0: can't add hid device: -22 [ 64.252304][ T360] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 64.422136][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 64.428673][ T10] r8152-cfgselector 3-1: bad CDC descriptors [ 64.438423][ T10] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 64.449351][ T9] usb 1-1: USB disconnect, device number 14 [ 64.811010][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 64.811029][ T36] audit: type=1401 audit(1760077173.054:33836): op=fscreate invalid_context=CFA7AE [ 65.054105][ T36] audit: type=1401 audit(1760077173.294:33837): op=fscreate invalid_context=CFA7AE [ 65.166819][ T36] audit: type=1400 audit(1760077173.414:33838): avc: denied { write } for pid=2137 comm="syz.0.590" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.168114][ T2138] 9pnet_fd: Insufficient options for proto=fd [ 65.197290][ T2143] binder: Bad value for 'max' [ 65.207471][ T36] audit: type=1400 audit(1760077173.414:33839): avc: denied { open } for pid=2137 comm="syz.0.590" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.252222][ T36] audit: type=1400 audit(1760077173.414:33840): avc: denied { read } for pid=2137 comm="syz.0.590" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.320416][ T36] audit: type=1400 audit(1760077173.564:33841): avc: denied { getopt } for pid=2156 comm="syz.0.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.504108][ T360] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 65.526716][ T36] audit: type=1401 audit(1760077173.774:33842): op=fscreate invalid_context=CFA7AE [ 65.664099][ T360] usb 3-1: Using ep0 maxpacket: 16 [ 65.674448][ T360] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 65.687041][ T360] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.707094][ T360] usb 3-1: config 0 has no interface number 0 [ 65.721177][ T360] usb 3-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 65.731494][ T360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.748286][ T360] usb 3-1: Product: syz [ 65.756923][ T360] usb 3-1: Manufacturer: syz [ 65.766997][ T360] usb 3-1: SerialNumber: syz [ 65.774992][ T360] usb 3-1: config 0 descriptor?? [ 65.949715][ T2172] overlayfs: failed to clone upperpath [ 65.980913][ T2149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.981036][ T2149] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 65.989220][ T360] rndis_host 3-1:0.109: More than one union descriptor, skipping ... [ 66.009290][ T360] usb 3-1: bad CDC descriptors [ 66.014751][ T360] cdc_acm 3-1:0.109: More than one union descriptor, skipping ... [ 66.024586][ T360] usb 3-1: USB disconnect, device number 18 [ 66.082187][ T2182] rust_binder: 467: no such ref 3 [ 66.089286][ T2182] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 66.096459][ T2182] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 66.103518][ T2182] rust_binder: Write failure EFAULT in pid:467 [ 66.147389][ T2198] netlink: 'syz.1.606': attribute type 4 has an invalid length. [ 66.161608][ T2198] netlink: 17 bytes leftover after parsing attributes in process `syz.1.606'. [ 66.727911][ T2215] rust_binder: Write failure EFAULT in pid:337 [ 66.743202][ T36] audit: type=1400 audit(1760077174.984:33843): avc: denied { create } for pid=2216 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 66.745303][ T2217] tipc: Started in network mode [ 66.773857][ T2217] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 66.783079][ T2217] tipc: Enabled bearer , priority 10 [ 67.086800][ T2221] netlink: 'syz.0.618': attribute type 4 has an invalid length. [ 67.096246][ T2221] netlink: 'syz.0.618': attribute type 4 has an invalid length. [ 67.105551][ T2221] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 35) [ 67.105567][ T2221] rust_binder: Error while translating object. [ 67.116040][ T2221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.122312][ T2221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:490 [ 67.132740][ T2223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.414126][ T360] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 67.574098][ T360] usb 1-1: Using ep0 maxpacket: 8 [ 67.581575][ T360] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 67.590788][ T360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.598833][ T360] usb 1-1: Product: syz [ 67.603003][ T360] usb 1-1: Manufacturer: syz [ 67.607629][ T360] usb 1-1: SerialNumber: syz [ 67.669643][ T2236] rust_binder: 348: no such ref 0 [ 67.724602][ T36] audit: type=1400 audit(1760077175.974:33844): avc: denied { create } for pid=2237 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.814517][ T2228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.823545][ T2228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.832020][ T360] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 67.834540][ T2228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.852445][ T2243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 67.863441][ T2228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.874387][ T2228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.879788][ T2245] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 67.883329][ T2228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.897141][ T382] tipc: Node number set to 4269801494 [ 67.898138][ T2228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.911114][ T2228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.913140][ T2247] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 67.919756][ T2228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.934412][ T2228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.042195][ T2258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 68.051041][ T2258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.629'. [ 68.887739][ T2261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 69.655770][ T36] audit: type=1400 audit(1760077177.904:33845): avc: denied { getopt } for pid=2296 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.861340][ T2315] overlayfs: failed to resolve './file1/file0': -2 [ 69.936128][ T2326] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 69.943967][ T2326] netlink: 'syz.3.652': attribute type 2 has an invalid length. [ 70.053104][ T2332] rust_binder: 393: no such ref 4294967293 [ 70.109432][ T2339] FAT-fs (rnullb0): bogus number of reserved sectors [ 70.116180][ T2339] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 70.123208][ T2340] FAT-fs (rnullb0): bogus number of reserved sectors [ 70.130419][ T2340] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 70.138143][ T2339] 9pnet_fd: Insufficient options for proto=fd [ 70.144483][ T2339] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.144793][ T2339] binder: Unknown parameter 'p' [ 70.156396][ T2339] rust_binder: Error while translating object. [ 70.156432][ T2339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.162607][ T2339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:400 [ 70.167987][ T67] usb 1-1: USB disconnect, device number 15 [ 70.195834][ T67] usblp0: removed [ 70.230208][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 70.230227][ T36] audit: type=1400 audit(1760077178.474:33848): avc: denied { read } for pid=2346 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.329495][ T36] audit: type=1400 audit(1760077178.574:33849): avc: denied { mounton } for pid=2358 comm="syz.0.666" path="/174/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 70.674148][ T67] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 70.824112][ T67] usb 1-1: Using ep0 maxpacket: 8 [ 70.832319][ T67] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 70.841602][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.849929][ T67] usb 1-1: Product: syz [ 70.854268][ T67] usb 1-1: Manufacturer: syz [ 70.859011][ T67] usb 1-1: SerialNumber: syz [ 70.884534][ T36] audit: type=1400 audit(1760077179.134:33850): avc: denied { getopt } for pid=2385 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.048062][ T36] audit: type=1400 audit(1760077179.294:33851): avc: denied { read } for pid=2410 comm="syz.3.682" path="socket:[14072]" dev="sockfs" ino=14072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.085839][ T67] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 71.334832][ C1] usblp0: nonzero write bulk status received: -71 [ 71.335034][ T67] usb 1-1: USB disconnect, device number 16 [ 71.350919][ T67] usblp0: removed [ 71.372908][ T36] audit: type=1400 audit(1760077179.614:33852): avc: denied { append } for pid=2454 comm="syz.2.700" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.405475][ T36] audit: type=1400 audit(1760077179.654:33853): avc: denied { setattr } for pid=2459 comm="syz.2.701" name="" dev="pipefs" ino=14930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 71.406182][ T2460] overlay: ./file0 is not a directory [ 71.859872][ T36] audit: type=1400 audit(1760077180.104:33854): avc: denied { bind } for pid=2496 comm="syz.0.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.184117][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 72.314162][ T9] usb 1-1: device descriptor read/64, error -71 [ 72.339579][ T2525] __vm_enough_memory: pid: 2525, comm: syz.2.721, bytes: 18014402804453376 not enough memory for the allocation [ 72.355113][ T2525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 72.554315][ T9] usb 1-1: device descriptor read/64, error -71 [ 72.589087][ T2540] __vm_enough_memory: pid: 2540, comm: syz.2.725, bytes: 18014402804453376 not enough memory for the allocation [ 72.763333][ T2553] overlayfs: failed to clone upperpath [ 72.794123][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 72.924096][ T9] usb 1-1: device descriptor read/64, error -71 [ 72.944100][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 73.094124][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 73.100217][ T45] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 73.108552][ T45] usb 3-1: config 179 has no interface number 0 [ 73.114865][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 73.125912][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 73.137140][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 73.148299][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 73.159735][ T45] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 73.173036][ T45] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 73.174130][ T9] usb 1-1: device descriptor read/64, error -71 [ 73.182118][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.197226][ T2549] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 73.286609][ T2556] overlayfs: failed to clone upperpath [ 73.298901][ T9] usb usb1-port1: attempt power cycle [ 73.644124][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 73.665182][ T9] usb 1-1: device descriptor read/8, error -71 [ 73.795154][ T9] usb 1-1: device descriptor read/8, error -71 [ 74.034146][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 74.055122][ T9] usb 1-1: device descriptor read/8, error -71 [ 74.185161][ T9] usb 1-1: device descriptor read/8, error -71 [ 74.294229][ T9] usb usb1-port1: unable to enumerate USB device [ 75.218846][ T36] audit: type=1400 audit(1760077183.464:33855): avc: denied { create } for pid=2603 comm="syz.0.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.248655][ T36] audit: type=1400 audit(1760077183.494:33856): avc: denied { read write } for pid=2605 comm="syz.0.752" name="file1" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.271710][ T36] audit: type=1400 audit(1760077183.494:33857): avc: denied { open } for pid=2605 comm="syz.0.752" path="/184/bus/file1" dev="overlay" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.303443][ T2608] rust_binder: Error while translating object. [ 75.303524][ T2608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.309822][ T2608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:543 [ 75.333786][ T36] audit: type=1400 audit(1760077183.574:33858): avc: denied { mounton } for pid=2609 comm="syz.0.754" path="/186/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 75.367517][ T36] audit: type=1400 audit(1760077183.614:33859): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.719517][ T45] usb 3-1: USB disconnect, device number 19 [ 75.725512][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 75.725554][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 76.044780][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 76.134097][ T2554] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 76.194127][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 76.200390][ T45] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 76.209453][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.217998][ T45] usb 3-1: config 0 descriptor?? [ 76.284277][ T2554] usb 1-1: Using ep0 maxpacket: 8 [ 76.290377][ T2554] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.304145][ T2554] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 76.313265][ T2554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.322065][ T2554] usb 1-1: config 0 descriptor?? [ 76.330091][ T36] audit: type=1400 audit(1760077184.574:33860): avc: denied { mounton } for pid=2637 comm="syz.1.768" path="/229/file0" dev="tmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.970881][ T36] audit: type=1400 audit(1760077186.214:33861): avc: denied { execute } for pid=2686 comm="syz.3.788" path="/212/cpuacct.usage_percpu" dev="tmpfs" ino=1187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.555466][ T2717] overlayfs: failed to clone upperpath [ 78.768686][ T45] usb 3-1: USB disconnect, device number 20 [ 78.954470][ T382] usb 1-1: USB disconnect, device number 21 [ 78.962699][ T36] audit: type=1400 audit(1760077187.204:33862): avc: denied { execute_no_trans } for pid=2727 comm="syz.2.807" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.304218][ T382] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 79.454135][ T382] usb 1-1: Using ep0 maxpacket: 8 [ 79.461869][ T382] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.470644][ T382] usb 1-1: config 0 has no interface number 0 [ 79.477212][ T382] usb 1-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.489207][ T382] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 79.500415][ T382] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.511703][ T382] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 79.520990][ T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.532557][ T382] usb 1-1: config 0 descriptor?? [ 79.539135][ T2742] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.706642][ T36] audit: type=1400 audit(1760077187.954:33863): avc: denied { create } for pid=2756 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.748514][ T2554] usb 1-1: USB disconnect, device number 22 [ 79.944134][ T382] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 80.007677][ T36] audit: type=1400 audit(1760077188.254:33864): avc: denied { create } for pid=2763 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.028036][ T36] audit: type=1400 audit(1760077188.254:33865): avc: denied { write } for pid=2763 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.111852][ T2776] overlayfs: failed to clone upperpath [ 80.125214][ T382] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 80.138202][ T382] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.146444][ T382] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.155618][ T382] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 80.163862][ T382] usb 3-1: Product: syz [ 80.168289][ T382] usb 3-1: Manufacturer: syz [ 80.172934][ T382] usb 3-1: SerialNumber: syz [ 80.178859][ T382] usb 3-1: config 0 descriptor?? [ 80.188447][ T382] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 80.228705][ T2790] tipc: Started in network mode [ 80.233671][ T2790] tipc: Node identity fe80000000000000000000000000002c, cluster identity 4711 [ 80.241657][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.242867][ T2790] tipc: Enabling of bearer rejected, failed to enable media [ 80.353279][ T2808] tmpfs: Unknown parameter 'usrquota' [ 80.381619][ T2813] overlayfs: failed to clone upperpath [ 80.429338][ T2821] overlayfs: failed to clone upperpath [ 80.541897][ T2554] usb 3-1: USB disconnect, device number 21 [ 81.114131][ T382] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 81.274137][ T382] usb 1-1: Using ep0 maxpacket: 16 [ 81.281583][ T382] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.291923][ T2839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.859'. [ 81.298721][ T382] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.316754][ T382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.328594][ T382] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 81.342247][ T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.351155][ T382] usb 1-1: config 0 descriptor?? [ 81.408235][ T2848] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 81.764859][ T382] hid-generic 0003:1E71:2009.0008: unknown main item tag 0x0 [ 81.776570][ T382] hid-generic 0003:1E71:2009.0008: unknown main item tag 0x0 [ 81.784015][ T382] hid-generic 0003:1E71:2009.0008: unknown main item tag 0x0 [ 81.793186][ T382] hid-generic 0003:1E71:2009.0008: unknown main item tag 0x0 [ 81.801546][ T382] hid-generic 0003:1E71:2009.0008: unknown main item tag 0x0 [ 81.814199][ T382] hid-generic 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 82.015245][ T382] usb 1-1: USB disconnect, device number 23 [ 82.070294][ T2948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 82.175970][ T2973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 82.539261][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 82.539281][ T36] audit: type=1401 audit(1760077190.784:33868): op=fscreate invalid_context=CFA7AE [ 82.561991][ T3017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:573 [ 82.650589][ T3026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.943'. [ 82.836581][ T3031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.836612][ T3031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:524 [ 82.850554][ T3031] netlink: 272 bytes leftover after parsing attributes in process `syz.2.945'. [ 82.869691][ T36] audit: type=1400 audit(1760077191.114:33869): avc: denied { read } for pid=3030 comm="syz.2.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.920801][ T36] audit: type=1401 audit(1760077191.144:33870): op=fscreate invalid_context=CFA7AE [ 83.172661][ T36] audit: type=1326 audit(1760077191.414:33871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3052 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14e78eec9 code=0x7fc00000 [ 83.220150][ T36] audit: type=1400 audit(1760077191.454:33872): avc: denied { accept } for pid=3058 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.823221][ T36] audit: type=1401 audit(1760077192.064:33873): op=fscreate invalid_context=CFA7AE [ 83.843571][ T3074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:533 [ 83.884177][ T382] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 83.989330][ T3089] cgroup: name respecified [ 84.013633][ T36] audit: type=1401 audit(1760077192.254:33874): op=fscreate invalid_context=CFA7AE [ 84.046436][ T382] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.057426][ T382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.064034][ T382] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 84.073144][ T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.081791][ T382] usb 1-1: config 0 descriptor?? [ 84.114127][ T2554] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 84.264125][ T2554] usb 3-1: Using ep0 maxpacket: 32 [ 84.270532][ T2554] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 84.278915][ T2554] usb 3-1: config 0 has no interface number 0 [ 84.285077][ T2554] usb 3-1: config 0 interface 184 has no altsetting 0 [ 84.295183][ T2554] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 84.304418][ T2554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.312454][ T2554] usb 3-1: Product: syz [ 84.316926][ T2554] usb 3-1: Manufacturer: syz [ 84.321781][ T2554] usb 3-1: SerialNumber: syz [ 84.329011][ T2554] usb 3-1: config 0 descriptor?? [ 84.344815][ T2554] smsc75xx v1.0.0 [ 84.495212][ T3038] netlink: 'syz.0.947': attribute type 4 has an invalid length. [ 84.503842][ T382] hid (null): invalid report_count 22533 [ 84.511472][ T382] nintendo 0003:057E:2009.0009: invalid report_count 22533 [ 84.518743][ T382] nintendo 0003:057E:2009.0009: item 0 2 1 9 parsing failed [ 84.526052][ T3128] netlink: 80 bytes leftover after parsing attributes in process `syz.1.978'. [ 84.526274][ T382] nintendo 0003:057E:2009.0009: HID parse failed [ 84.541417][ T382] nintendo 0003:057E:2009.0009: probe - fail = -22 [ 84.549983][ T382] nintendo 0003:057E:2009.0009: probe with driver nintendo failed with error -22 [ 84.555985][ T3130] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 84.570774][ T3130] overlayfs: missing 'lowerdir' [ 84.710746][ T382] usb 1-1: USB disconnect, device number 24 [ 84.773709][ T3134] overlayfs: failed to clone upperpath [ 85.126778][ T36] audit: type=1400 audit(1760077193.374:33875): avc: denied { ioctl } for pid=3143 comm="syz.1.984" path="/355/file2" dev="tmpfs" ino=1931 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.226348][ T3149] x_tables: unsorted entry at hook 2 [ 85.234912][ T3149] rust_binder: Error while translating object. [ 85.234954][ T3149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 85.241166][ T3149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:594 [ 85.333189][ T3151] rust_binder: Error while translating object. [ 85.343831][ T3151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.350801][ T3151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:596 [ 85.765010][ T2554] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 85.791832][ T2554] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 85.804458][ T2554] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 85.815596][ T2554] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 85.834115][ T2554] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 85.844700][ T2554] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 85.854365][ T2554] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 85.864219][ T2554] usb 3-1: USB disconnect, device number 22 [ 86.116409][ T3209] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1004'. [ 86.154655][ T3217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1006'. [ 86.283207][ T3230] binder: Unknown parameter 'fsname' [ 86.421478][ T3241] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.554124][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 86.714142][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 86.720529][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.731471][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.741253][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.754103][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.763158][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.771829][ T45] usb 3-1: config 0 descriptor?? [ 87.014136][ T36] audit: type=1400 audit(1760077195.254:33876): avc: denied { write } for pid=3231 comm="syz.2.1012" name="/" dev="incremental-fs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.064097][ T36] audit: type=1400 audit(1760077195.254:33877): avc: denied { remove_name } for pid=3231 comm="syz.2.1012" name="file0" dev="incremental-fs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.108581][ T3235] rust_binder: Write failure EFAULT in pid:539 [ 87.112634][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 87.127130][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 87.144372][ T45] usb 3-1: USB disconnect, device number 23 [ 96.895565][ T3250] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 96.895595][ T3250] rust_binder: Error while translating object. [ 96.907199][ T3250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.913582][ T3250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:618 [ 96.928907][ T3253] SELinux: failed to load policy [ 96.949277][ T3262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.953269][ T3261] 9pnet_fd: Insufficient options for proto=fd [ 96.967941][ T3267] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1021'. [ 96.971493][ T3262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.991256][ T3261] netlink: 'syz.1.1019': attribute type 2 has an invalid length. [ 97.014636][ T3262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.025313][ T3262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.025576][ T3261] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1019'. [ 97.110382][ T3292] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 97.118368][ T3292] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 97.126974][ T3292] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 97.134908][ T3292] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 97.157179][ T3306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 97.167074][ T3306] binder: Unknown parameter 'defcontext01777777777777777777777' [ 97.188180][ T3311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 97.217262][ T3319] netlink: 'syz.3.1039': attribute type 27 has an invalid length. [ 97.302013][ T3326] rust_binder: 637: no such ref 0 [ 97.318176][ T3328] fuse: Unknown parameter 'f' [ 97.638195][ T3335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 97.647873][ T3335] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1045'. [ 97.693826][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 97.693866][ T36] audit: type=1400 audit(1760077205.934:33879): avc: denied { listen } for pid=3346 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.725703][ T3352] netlink: 'syz.1.1049': attribute type 27 has an invalid length. [ 97.762258][ T3352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3352 comm=syz.1.1049 [ 97.779587][ T3352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3352 comm=syz.1.1049 [ 97.792476][ T3352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3352 comm=syz.1.1049 [ 97.806310][ T3352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3352 comm=syz.1.1049 [ 97.819079][ T3352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3352 comm=syz.1.1049 [ 97.832762][ T3352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3352 comm=syz.1.1049 [ 97.853421][ T3352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3352 comm=syz.1.1049 [ 97.866241][ T3352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3352 comm=syz.1.1049 [ 97.879362][ T3352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3352 comm=syz.1.1049 [ 97.893830][ T3352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3352 comm=syz.1.1049 [ 97.912499][ T3363] netlink: 'syz.3.1053': attribute type 4 has an invalid length. [ 97.920344][ T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 98.075146][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.094374][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.110237][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.130657][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.140093][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.149094][ T45] usb 1-1: config 0 descriptor?? [ 98.270144][ T3377] rust_binder: Error in use_page_slow: ESRCH [ 98.270190][ T3377] rust_binder: use_range failure ESRCH [ 98.276514][ T3377] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 98.282146][ T3377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 98.291582][ T3377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:555 [ 98.301863][ T3377] rust_binder: 555: no such ref 0 [ 98.357245][ T3330] netlink: 'syz.0.1044': attribute type 11 has an invalid length. [ 98.429125][ T3380] batadv_slave_0: entered promiscuous mode [ 98.435558][ T3379] batadv_slave_0: left promiscuous mode [ 98.454777][ T3382] overlayfs: failed to clone upperpath [ 98.475035][ T3384] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 98.568645][ T45] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 98.576141][ T45] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 98.583592][ T45] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 98.591047][ T45] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 98.598474][ T45] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 98.605896][ T45] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 98.613497][ T45] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 98.622512][ T45] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 98.872969][ T36] audit: type=1326 audit(1760077207.114:33880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3392 comm="syz.3.1064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa14e78eec9 code=0x0 [ 99.004672][ T3397] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1066'. [ 99.013948][ T3397] gretap0: entered promiscuous mode [ 99.082089][ T3404] overlayfs: failed to clone upperpath [ 99.099028][ T3406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1070'. [ 99.409473][ T3431] rust_binder: Write failure EFAULT in pid:583 [ 99.467056][ T3434] netlink: 'syz.2.1079': attribute type 19 has an invalid length. [ 99.481256][ T3434] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1079'. [ 99.535055][ T3440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.545856][ T3440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.857938][ T3466] overlayfs: failed to clone upperpath [ 100.014103][ T45] usb 1-1: reset high-speed USB device number 25 using dummy_hcd [ 100.024793][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 100.174143][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 100.181675][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.190950][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.199009][ T9] usb 3-1: Product: syz [ 100.203192][ T9] usb 3-1: Manufacturer: syz [ 100.207851][ T9] usb 3-1: SerialNumber: syz [ 100.384112][ T36] audit: type=1400 audit(1760077208.624:33881): avc: denied { create } for pid=3504 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 100.416327][ T3445] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1083'. [ 100.426132][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 100.626708][ T3445] syz.2.1083: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 100.641544][ T3445] CPU: 0 UID: 0 PID: 3445 Comm: syz.2.1083 Not tainted syzkaller #0 2560a8339b7509d4724a30b62cb6e32ef3b21627 [ 100.641577][ T3445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 100.641592][ T3445] Call Trace: [ 100.641599][ T3445] [ 100.641608][ T3445] __dump_stack+0x21/0x30 [ 100.641648][ T3445] dump_stack_lvl+0x10c/0x190 [ 100.641683][ T3445] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.641719][ T3445] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 100.641754][ T3445] dump_stack+0x19/0x20 [ 100.641786][ T3445] warn_alloc+0x1bc/0x2a0 [ 100.641820][ T3445] ? __cfi_warn_alloc+0x10/0x10 [ 100.641851][ T3445] ? kasan_save_track+0x4f/0x80 [ 100.641875][ T3445] ? __kasan_kmalloc+0x96/0xb0 [ 100.641913][ T3445] ? __kmalloc_cache_noprof+0x24c/0x490 [ 100.641939][ T3445] ? do_sock_setsockopt+0x26d/0x400 [ 100.641975][ T3445] ? __x64_sys_setsockopt+0x1b8/0x250 [ 100.642008][ T3445] ? x64_sys_call+0x2adc/0x2ee0 [ 100.642043][ T3445] ? do_syscall_64+0x58/0xf0 [ 100.642072][ T3445] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.642112][ T3445] __vmalloc_node_range_noprof+0x135/0x1420 [ 100.642155][ T3445] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 100.642191][ T3445] ? kasan_save_alloc_info+0x40/0x50 [ 100.642226][ T3445] ? __kasan_kmalloc+0x96/0xb0 [ 100.642253][ T3445] ? __kmalloc_cache_noprof+0x24c/0x490 [ 100.642276][ T3445] ? futex_setup_timer+0xb4/0xd0 [ 100.642300][ T3445] vmalloc_user_noprof+0x77/0x90 [ 100.642335][ T3445] ? xskq_create+0xdb/0x2a0 [ 100.642369][ T3445] xskq_create+0xdb/0x2a0 [ 100.642404][ T3445] xsk_init_queue+0xb6/0x120 [ 100.642438][ T3445] xsk_setsockopt+0x43f/0x6f0 [ 100.642472][ T3445] ? __cfi_xsk_setsockopt+0x10/0x10 [ 100.642506][ T3445] ? do_futex+0x309/0x500 [ 100.642533][ T3445] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 100.642565][ T3445] ? security_socket_setsockopt+0x33/0xd0 [ 100.642590][ T3445] ? __cfi_xsk_setsockopt+0x10/0x10 [ 100.642623][ T3445] do_sock_setsockopt+0x26d/0x400 [ 100.642658][ T3445] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 100.642694][ T3445] __x64_sys_setsockopt+0x1b8/0x250 [ 100.642729][ T3445] x64_sys_call+0x2adc/0x2ee0 [ 100.642766][ T3445] do_syscall_64+0x58/0xf0 [ 100.642795][ T3445] ? clear_bhb_loop+0x50/0xa0 [ 100.642820][ T3445] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.642859][ T3445] RIP: 0033:0x7f101f98eec9 [ 100.642879][ T3445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.642911][ T3445] RSP: 002b:00007f101e3f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.642938][ T3445] RAX: ffffffffffffffda RBX: 00007f101fbe5fa0 RCX: 00007f101f98eec9 [ 100.642957][ T3445] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 100.642974][ T3445] RBP: 00007f101fa11f91 R08: 0000000000000004 R09: 0000000000000000 [ 100.642990][ T3445] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.643007][ T3445] R13: 00007f101fbe6038 R14: 00007f101fbe5fa0 R15: 00007ffe387a1108 [ 100.643028][ T3445] [ 100.643045][ T3445] Mem-Info: [ 100.677726][ T3509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.679935][ T3445] active_anon:46671 inactive_anon:741 isolated_anon:0 [ 100.679935][ T3445] active_file:11770 inactive_file:12496 isolated_file:0 [ 100.679935][ T3445] unevictable:0 dirty:43 writeback:0 [ 100.679935][ T3445] slab_reclaimable:6027 slab_unreclaimable:70748 [ 100.679935][ T3445] mapped:24103 shmem:36341 pagetables:1197 [ 100.679935][ T3445] sec_pagetables:0 bounce:0 [ 100.679935][ T3445] kernel_misc_reclaimable:0 [ 100.679935][ T3445] free:1481005 free_pcp:6225 free_cma:0 [ 100.797513][ T3511] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.801637][ T3445] Node 0 active_anon:186684kB inactive_anon:2964kB active_file:47080kB inactive_file:49984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100412kB dirty:172kB writeback:0kB shmem:145364kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5912kB pagetables:4788kB sec_pagetables:0kB all_unreclaimable? no [ 100.808022][ T3509] rust_binder: Error in use_page_slow: ESRCH [ 100.811172][ T3445] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965940kB mlocked:0kB bounce:0kB free_pcp:5728kB local_pcp:68kB free_cma:0kB [ 100.817143][ T3509] rust_binder: use_range failure ESRCH [ 100.822440][ T3445] lowmem_reserve[]: [ 100.836319][ T3509] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 100.838244][ T3445] 0 [ 100.846437][ T3509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 100.848383][ T3445] 3921 [ 100.858171][ T3509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:597 [ 100.866238][ T3445] 3921 [ 100.872299][ T430] usb 3-1: USB disconnect, device number 24 [ 100.888170][ T3445] [ 100.905202][ T430] usblp0: removed [ 100.912112][ T3445] Normal free:2963136kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:186784kB inactive_anon:2964kB active_file:47080kB inactive_file:49984kB unevictable:0kB writepending:172kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:18652kB local_pcp:6280kB free_cma:0kB [ 101.156549][ T3445] lowmem_reserve[]: 0 0 0 [ 101.161058][ T3445] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 101.177231][ T382] usb 1-1: USB disconnect, device number 25 [ 101.184809][ T3520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.192044][ T3520] IPv6: NLM_F_CREATE should be set when creating new route [ 101.199286][ T3520] IPv6: NLM_F_CREATE should be set when creating new route [ 101.203582][ T3445] Normal: [ 101.207995][ T36] audit: type=1400 audit(1760077209.464:33882): avc: denied { create } for pid=3519 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 101.210529][ T3445] 902*4kB (UME) 1199*8kB (U) 566*16kB (UM) 306*32kB (UME) 340*64kB (UME) 21*128kB (UME) 157*256kB (UME) 100*512kB (UME) 41*1024kB (UME) 26*2048kB (UME) 668*4096kB (UM) = 2979248kB [ 101.263198][ T3445] 61375 total pagecache pages [ 101.268111][ T3525] netlink: 'syz.0.1108': attribute type 1 has an invalid length. [ 101.270228][ T3445] 774 pages in swap cache [ 101.280497][ T3445] Free swap = 121216kB [ 101.285355][ T3445] Total swap = 124996kB [ 101.289798][ T3445] 2097051 pages RAM [ 101.293790][ T3445] 0 pages HighMem/MovableOnly [ 101.298925][ T3445] 351536 pages reserved [ 101.303112][ T3445] 0 pages cma reserved [ 101.319818][ T3445] Memory allocations: [ 101.323858][ T3445] 0 B 0 init/main.c:1370 func:do_initcalls [ 101.331166][ T3445] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 101.339312][ T3445] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 101.347081][ T3445] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 101.355045][ T3445] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 101.362959][ T3445] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 101.371578][ T3445] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 101.379621][ T3445] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 101.387650][ T3445] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 101.395611][ T3445] 0 B 0 init/initramfs.c:101 func:find_link [ 101.939369][ T3544] rust_binder: Error while translating object. [ 101.939417][ T3544] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 101.945863][ T3544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:603 [ 102.069454][ T3569] overlayfs: failed to clone upperpath [ 102.267878][ T3580] binder: Unknown parameter '0xffffffffffffffff' [ 102.274594][ T3580] erspan0: entered promiscuous mode [ 102.284276][ T67] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 102.377701][ T3591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 102.377728][ T3591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:668 [ 102.382892][ T3592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 102.396335][ T3592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:668 [ 102.416205][ T3594] netlink: 'syz.0.1132': attribute type 63 has an invalid length. [ 102.433232][ T3594] __nla_validate_parse: 1 callbacks suppressed [ 102.433244][ T3594] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1132'. [ 102.448390][ T67] usb 3-1: Using ep0 maxpacket: 32 [ 102.454728][ T67] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.465756][ T67] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.466760][ T3599] binder: Bad value for 'max' [ 102.475710][ T67] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 102.480552][ T3600] binder: Bad value for 'max' [ 102.489415][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.504185][ T67] usb 3-1: config 0 descriptor?? [ 102.511811][ T67] hub 3-1:0.0: USB hub found [ 102.641196][ T3609] tmpfs: Too small a size for current use [ 102.712250][ T67] hub 3-1:0.0: 1 port detected [ 102.719363][ T67] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 102.726101][ T67] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 102.736741][ T67] usbhid 3-1:0.0: can't add hid device: -71 [ 102.742734][ T67] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 102.764702][ T36] audit: type=1400 audit(1760077211.014:33883): avc: denied { ioctl } for pid=3614 comm="syz.0.1139" path="mnt:[4026532479]" dev="nsfs" ino=4026532479 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 102.775556][ T3622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1141'. [ 102.794380][ T67] usb 3-1: USB disconnect, device number 25 [ 102.809294][ T3622] rust_binder: 618: no such ref 3 [ 102.814419][ T3622] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 102.821537][ T3622] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 102.828670][ T3622] rust_binder: Write failure EFAULT in pid:618 [ 103.254125][ T67] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 103.414094][ T67] usb 3-1: Using ep0 maxpacket: 8 [ 103.421654][ T67] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 103.430798][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.438843][ T67] usb 3-1: Product: syz [ 103.443044][ T67] usb 3-1: Manufacturer: syz [ 103.447673][ T67] usb 3-1: SerialNumber: syz [ 103.453088][ T67] usb 3-1: config 0 descriptor?? [ 103.461419][ T67] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 103.660940][ T3633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:623 [ 103.661569][ T382] usb 3-1: USB disconnect, device number 26 [ 103.834142][ T67] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 103.994224][ T67] usb 1-1: Using ep0 maxpacket: 8 [ 104.001648][ T67] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.010762][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.018960][ T67] usb 1-1: Product: syz [ 104.023244][ T67] usb 1-1: Manufacturer: syz [ 104.027899][ T67] usb 1-1: SerialNumber: syz [ 104.236682][ T67] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 104.324098][ T3676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'. [ 104.486588][ C0] usblp0: nonzero write bulk status received: -71 [ 104.493323][ T67] usb 1-1: USB disconnect, device number 26 [ 104.500059][ T67] usblp0: removed [ 104.805827][ T3690] netlink: 'syz.2.1166': attribute type 7 has an invalid length. [ 104.813704][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 104.841237][ T3697] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 104.876037][ T3710] netlink: 'syz.2.1172': attribute type 4 has an invalid length. [ 104.883876][ T3710] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1172'. [ 105.214159][ T3722] 9pnet_fd: Insufficient options for proto=fd [ 105.277847][ T3734] overlayfs: failed to clone upperpath [ 105.387075][ T3753] netlink: 'syz.3.1188': attribute type 46 has an invalid length. [ 105.405871][ T3755] selinux_netlink_send: 23 callbacks suppressed [ 105.405887][ T3755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=3755 comm=syz.1.1189 [ 105.412561][ T3758] overlayfs: failed to clone upperpath [ 105.424781][ T3755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=3755 comm=syz.1.1189 [ 105.493373][ T3772] netlink: 'syz.1.1195': attribute type 2 has an invalid length. [ 105.501245][ T3772] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1195'. [ 105.508536][ T3774] devpts: called with bogus options [ 105.544000][ T3781] overlayfs: failed to clone upperpath [ 106.071286][ T36] audit: type=1326 audit(1760077214.314:33884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.2.1223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f101f98eec9 code=0x0 [ 106.558174][ T3859] rust_binder: Error while translating object. [ 106.558197][ T3859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 106.564464][ T3859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:695 [ 106.700607][ T3879] rust_binder: 705: no such ref 0 [ 107.034100][ T382] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 107.184105][ T382] usb 1-1: Using ep0 maxpacket: 8 [ 107.191874][ T382] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.200990][ T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.209046][ T382] usb 1-1: Product: syz [ 107.213215][ T382] usb 1-1: Manufacturer: syz [ 107.217856][ T382] usb 1-1: SerialNumber: syz [ 107.424934][ T382] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 107.666118][ T3928] overlayfs: failed to clone upperpath [ 107.703925][ T36] audit: type=1400 audit(1760077215.944:33885): avc: denied { name_bind } for pid=3932 comm="syz.3.1249" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 107.730886][ C0] usblp0: nonzero write bulk status received: -71 [ 107.731452][ T45] usb 1-1: USB disconnect, device number 27 [ 107.744071][ T45] usblp0: removed [ 108.504104][ T45] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 108.655196][ T45] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 108.664307][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.672998][ T45] usb 1-1: config 0 descriptor?? [ 108.678843][ T45] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 108.687165][ T45] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 108.748401][ T36] audit: type=1400 audit(1760077216.994:33886): avc: denied { listen } for pid=3951 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.768054][ T36] audit: type=1400 audit(1760077216.994:33887): avc: denied { accept } for pid=3951 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.958700][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'. [ 108.984064][ T36] audit: type=1326 audit(1760077217.224:33888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.3.1259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa14e78eec9 code=0x0 [ 109.107155][ T3969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3969 comm=syz.2.1262 [ 109.135946][ T3971] overlayfs: failed to clone upperpath [ 109.159279][ T67] usb 1-1: USB disconnect, device number 28 [ 109.165590][ T67] ftdi_sio 1-1:0.0: device disconnected [ 109.698483][ T3989] tipc: Started in network mode [ 109.703456][ T3989] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 109.712456][ T3989] tipc: Enabling of bearer rejected, failed to enable media [ 109.721135][ T3989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:715 [ 109.721797][ T3989] rust_binder: 715: no such ref 1 [ 109.748322][ T3999] rust_binder: Read failure Err(EAGAIN) in pid:717 [ 109.772589][ T36] audit: type=1326 audit(1760077218.014:33889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 109.803117][ T36] audit: type=1326 audit(1760077218.014:33890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 109.826868][ T36] audit: type=1326 audit(1760077218.024:33891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 109.850584][ T36] audit: type=1326 audit(1760077218.024:33892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 109.874371][ T36] audit: type=1326 audit(1760077218.024:33893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 109.898062][ T36] audit: type=1326 audit(1760077218.024:33894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 109.922345][ T36] audit: type=1326 audit(1760077218.024:33895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4003 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 110.332088][ T4049] overlayfs: failed to clone upperpath [ 110.411556][ T4043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1289'. [ 110.429023][ T382] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 110.571181][ T4087] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1300'. [ 110.595144][ T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.611049][ T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.630601][ T382] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 110.641670][ T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.652098][ T382] usb 1-1: config 0 descriptor?? [ 111.074109][ T382] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 111.081017][ T382] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 111.088060][ T382] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 111.094958][ T382] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 111.101750][ T382] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 111.108600][ T382] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 111.115504][ T382] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 111.127425][ T382] isku 0003:1E7D:319C.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 111.141803][ T4113] netlink: 'syz.2.1310': attribute type 15 has an invalid length. [ 111.150045][ T4113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1310'. [ 111.280009][ T382] isku 0003:1E7D:319C.000B: couldn't init struct isku_device [ 111.287553][ T382] isku 0003:1E7D:319C.000B: couldn't install keyboard [ 111.294989][ T382] isku 0003:1E7D:319C.000B: probe with driver isku failed with error -71 [ 111.304751][ T382] usb 1-1: USB disconnect, device number 29 [ 111.697035][ T4136] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 111.796870][ T4145] overlayfs: workdir and upperdir must reside under the same mount [ 111.842520][ T4142] fuseblk: Bad value for 'fd' [ 111.910280][ T4152] 9pnet_fd: Insufficient options for proto=fd [ 112.557154][ T4174] 9pnet_fd: Insufficient options for proto=fd [ 112.575630][ T4179] overlayfs: failed to clone upperpath [ 112.780094][ T4209] overlayfs: failed to clone upperpath [ 112.818516][ T4214] 9pnet: Could not find request transport: f[rfdno=0x0000000000000003 [ 113.233275][ T4237] overlayfs: failed to clone upperpath [ 113.425495][ T4264] overlayfs: failed to clone upperpath [ 113.833508][ T4273] rust_binder: Error while translating object. [ 113.833557][ T4273] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.839844][ T4273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:763 [ 113.850474][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 113.850490][ T36] audit: type=1400 audit(1760077222.104:33927): avc: denied { audit_read } for pid=4272 comm="syz.0.1366" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.895971][ T4275] binder: Unknown parameter 'seel' [ 114.038328][ T4303] rust_binder: 789: no such ref 0 [ 114.043824][ T4303] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 114.051117][ T4303] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 114.069109][ T4306] rust_binder: 4305 RLIMIT_NICE not set [ 114.080310][ T4308] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 114.095083][ T4308] rust_binder: Write failure EINVAL in pid:794 [ 114.121758][ T4312] overlayfs: failed to clone upperpath [ 114.354209][ T67] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 114.429537][ T36] audit: type=1400 audit(1760077222.674:33928): avc: denied { setopt } for pid=4317 comm="syz.3.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.501739][ T4331] netlink: 'syz.3.1389': attribute type 4 has an invalid length. [ 114.509610][ T67] usb 1-1: Using ep0 maxpacket: 16 [ 114.515292][ T4331] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1389'. [ 114.516983][ T67] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.537298][ T67] usb 1-1: config 0 has no interfaces? [ 114.544955][ T67] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 114.555705][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.563739][ T67] usb 1-1: Product: syz [ 114.568195][ T67] usb 1-1: Manufacturer: syz [ 114.572814][ T67] usb 1-1: SerialNumber: syz [ 114.579875][ T67] usb 1-1: config 0 descriptor?? [ 114.665890][ T4346] tipc: New replicast peer: 139.255.255.255 [ 114.671994][ T4346] tipc: Enabled bearer , priority 10 [ 114.679151][ T36] audit: type=1400 audit(1760077222.934:33929): avc: denied { write } for pid=4345 comm="syz.2.1394" name="file0" dev="tmpfs" ino=1440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.701940][ T36] audit: type=1400 audit(1760077222.934:33930): avc: denied { open } for pid=4345 comm="syz.2.1394" path="/258/file0" dev="tmpfs" ino=1440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.724839][ T36] audit: type=1326 audit(1760077222.954:33931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4347 comm="syz.2.1395" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f101f98eec9 code=0x0 [ 114.787754][ T4310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.797231][ T335] usb 1-1: USB disconnect, device number 30 [ 115.584122][ T382] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 115.647039][ T4365] overlayfs: failed to clone lowerpath [ 115.667853][ T4371] netlink: 'syz.3.1404': attribute type 13 has an invalid length. [ 115.736154][ T382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 115.747205][ T382] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 115.760178][ T382] usb 1-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 115.769307][ T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.778014][ T382] usb 1-1: config 0 descriptor?? [ 115.783291][ T4359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.785635][ T4386] fuse: Unknown parameter 'fd?0x0000000000000005' [ 115.800105][ T382] usbhid 1-1:0.0: can't add hid device: -22 [ 115.806282][ T382] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 115.999023][ T382] usb 1-1: USB disconnect, device number 31 [ 116.259936][ T4388] tipc: Enabling of bearer rejected, failed to enable media [ 116.280455][ T4388] netlink: 'syz.3.1409': attribute type 2 has an invalid length. [ 116.514017][ T4392] @: renamed from vlan0 (while UP) [ 116.514438][ T36] audit: type=1400 audit(1760077224.754:33932): avc: denied { create } for pid=4391 comm="syz.1.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 116.585399][ T4402] 9pnet: Could not find request transport: f [ 116.591870][ T36] audit: type=1400 audit(1760077224.834:33933): avc: denied { connect } for pid=4401 comm="syz.1.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.612427][ T4402] fuse: Bad value for 'fd' [ 116.650170][ T4404] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 116.657449][ T4404] rust_binder: Write failure EINVAL in pid:805 [ 116.735727][ T4415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 116.741941][ T4415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:812 [ 117.154386][ T36] audit: type=1400 audit(1760077225.404:33934): avc: denied { shutdown } for pid=4429 comm="syz.1.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.556547][ T4443] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 117.997352][ T36] audit: type=1400 audit(1760077226.244:33935): avc: denied { mount } for pid=4472 comm="syz.1.1440" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 118.001536][ T4473] raw_sendmsg: syz.1.1440 forgot to set AF_INET. Fix it! [ 118.019886][ T36] audit: type=1400 audit(1760077226.244:33936): avc: denied { search } for pid=4472 comm="syz.1.1440" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 118.107465][ T4482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=4482 comm=syz.1.1444 [ 118.120439][ T4482] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 118.129244][ T4482] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 118.137599][ T4482] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 118.146665][ T4482] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 118.158263][ T4482] overlayfs: missing 'lowerdir' [ 118.164999][ T4482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1444'. [ 118.623934][ T4494] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1449'. [ 118.982636][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 118.982655][ T36] audit: type=1400 audit(1760077227.224:33939): avc: denied { mounton } for pid=4539 comm="syz.1.1463" path="/" dev="configfs" ino=1368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.322746][ T36] audit: type=1326 audit(1760077227.564:33940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4489 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa14e78eec9 code=0x7fc00000 [ 119.695531][ T4568] 9pnet: Could not find request transport: Fd [ 119.734794][ T4577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4577 comm=syz.1.1476 [ 119.760678][ T36] audit: type=1400 audit(1760077228.010:33941): avc: denied { read } for pid=4580 comm="syz.1.1477" name="file0" dev="tmpfs" ino=2710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.867317][ T36] audit: type=1400 audit(1760077228.120:33942): avc: denied { map } for pid=4583 comm="syz.3.1478" path="socket:[21977]" dev="sockfs" ino=21977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.891401][ T36] audit: type=1400 audit(1760077228.120:33943): avc: denied { accept } for pid=4583 comm="syz.3.1478" path="socket:[21977]" dev="sockfs" ino=21977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.116125][ T36] audit: type=1400 audit(1760077228.370:33944): avc: denied { shutdown } for pid=4606 comm="syz.2.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.664656][ T4630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4630 comm=syz.2.1496 [ 120.765933][ T4641] overlayfs: failed to clone upperpath [ 120.773246][ T4641] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 121.054130][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 121.069165][ T4660] overlayfs: failed to clone upperpath [ 121.204094][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 121.210180][ T9] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 121.218304][ T9] usb 1-1: config 0 has no interface number 0 [ 121.224455][ T9] usb 1-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 121.235688][ T9] usb 1-1: config 0 interface 96 has no altsetting 0 [ 121.243750][ T9] usb 1-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 121.252865][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.261258][ T9] usb 1-1: Product: syz [ 121.265470][ T9] usb 1-1: Manufacturer: syz [ 121.270074][ T9] usb 1-1: SerialNumber: syz [ 121.275673][ T9] usb 1-1: config 0 descriptor?? [ 121.397026][ T4673] incfs: Options parsing error. -22 [ 121.402362][ T4673] incfs: mount failed -22 [ 121.402418][ T4672] incfs: Options parsing error. -22 [ 121.412326][ T4672] incfs: mount failed -22 [ 121.431370][ T36] audit: type=1400 audit(1760077236.681:33945): avc: denied { watch watch_reads } for pid=4674 comm="syz.1.1513" path="/503/file0" dev="tmpfs" ino=2755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.486027][ T9] usb 1-1: USB disconnect, device number 32 [ 121.611394][ T4684] overlayfs: failed to clone upperpath [ 122.013889][ T36] audit: type=1400 audit(1760077237.261:33946): avc: denied { append } for pid=4713 comm="syz.0.1529" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.014313][ T4714] __vm_enough_memory: pid: 4714, comm: syz.0.1529, bytes: 18014402804453376 not enough memory for the allocation [ 122.067888][ T4718] __vm_enough_memory: pid: 4718, comm: syz.0.1530, bytes: 18014402804453376 not enough memory for the allocation [ 122.384124][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 122.545177][ T9] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 122.556224][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 122.564397][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.573471][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.581706][ T9] usb 1-1: Product: syz [ 122.585926][ T9] usb 1-1: Manufacturer: syz [ 122.590518][ T9] usb 1-1: SerialNumber: syz [ 122.596140][ T9] usb 1-1: config 0 descriptor?? [ 122.603529][ T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 122.617798][ T3265] udevd[3265]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.741811][ T4763] netlink: 'syz.3.1546': attribute type 2 has an invalid length. [ 123.446204][ T36] audit: type=1400 audit(1760077238.701:33947): avc: denied { read } for pid=4809 comm="syz.3.1561" path="socket:[22279]" dev="sockfs" ino=22279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.497718][ T4811] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1561'. [ 123.506937][ T4811] gretap0: entered promiscuous mode [ 123.618400][ T4816] netlink: 'syz.2.1563': attribute type 46 has an invalid length. [ 123.626409][ T4815] netlink: 'syz.2.1563': attribute type 46 has an invalid length. [ 124.042112][ T4819] overlayfs: failed to clone upperpath [ 124.174578][ T4841] fuse: Bad value for 'group_id' [ 124.179554][ T4841] fuse: Bad value for 'group_id' [ 124.186356][ T4841] netlink: 'syz.2.1571': attribute type 58 has an invalid length. [ 124.195845][ T4841] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 124.303077][ T4865] incfs: Can't find or create .index dir in ./bus [ 124.309713][ T4865] incfs: mount failed -1 [ 124.316531][ T4865] incfs: Can't find or create .index dir in ./bus [ 124.323060][ T4865] incfs: mount failed -1 [ 124.948157][ T4886] netlink: 'syz.1.1586': attribute type 4 has an invalid length. [ 124.963852][ T4886] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1586'. [ 124.974191][ T4887] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1586'. [ 124.983674][ T4886] netlink: 'syz.1.1586': attribute type 4 has an invalid length. [ 125.144420][ T2554] usb 1-1: USB disconnect, device number 33 [ 125.183707][ T4914] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 125.445243][ T4946] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 125.473436][ T36] audit: type=1400 audit(1760077240.721:33948): avc: denied { getopt } for pid=4950 comm="syz.0.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 125.511083][ T36] audit: type=1400 audit(1760077240.761:33949): avc: denied { read } for pid=4953 comm="syz.0.1607" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.533947][ T36] audit: type=1400 audit(1760077240.761:33950): avc: denied { open } for pid=4953 comm="syz.0.1607" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.557446][ T36] audit: type=1400 audit(1760077240.771:33951): avc: denied { ioctl } for pid=4953 comm="syz.0.1607" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.586232][ T36] audit: type=1400 audit(1760077240.841:33952): avc: denied { map } for pid=4959 comm="syz.0.1609" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.609436][ T36] audit: type=1400 audit(1760077240.841:33953): avc: denied { execute } for pid=4959 comm="syz.0.1609" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.700596][ T4965] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 125.708392][ T4965] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1610'. [ 125.717953][ T4965] binder: Bad value for 'max' [ 125.856739][ T4983] fuse: Unknown parameter 'grop_id' [ 125.860803][ T4984] fuse: Unknown parameter 'grop_id' [ 125.902588][ T4991] overlayfs: failed to clone upperpath [ 126.655386][ T5021] binder: Bad value for 'stats' [ 126.786124][ T5027] netlink: 'syz.0.1634': attribute type 12 has an invalid length. [ 127.342901][ T36] audit: type=1326 audit(1760077242.591:33954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.1.1641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ed838eec9 code=0x0 [ 127.541283][ T36] audit: type=1326 audit(1760077242.791:33955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101f98eec9 code=0x7ffc0000 [ 127.565098][ T36] audit: type=1326 audit(1760077242.791:33956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101f98eec9 code=0x7ffc0000 [ 127.588712][ T36] audit: type=1326 audit(1760077242.791:33957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5048 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f101f98eec9 code=0x7ffc0000 [ 127.638542][ T5055] netlink: 'syz.0.1644': attribute type 4 has an invalid length. [ 128.208079][ T5081] veth1: entered allmulticast mode [ 128.214554][ T5080] veth1: left allmulticast mode [ 128.764392][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 128.926999][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.938000][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.948326][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.953413][ T5136] x_tables: duplicate underflow at hook 1 [ 128.961483][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.976599][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.985629][ T9] usb 1-1: config 0 descriptor?? [ 129.262125][ T5158] tc_dump_action: action bad kind [ 129.279410][ T5160] lo: entered allmulticast mode [ 129.284869][ T5160] lo: left allmulticast mode [ 129.324879][ T5169] overlayfs: failed to clone upperpath [ 129.393309][ T9] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 129.397637][ T5172] overlayfs: failed to clone upperpath [ 129.402910][ T9] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 129.695549][ T5182] rust_binder: Write failure EFAULT in pid:903 [ 129.739497][ T5190] overlayfs: failed to clone upperpath [ 129.764970][ T5192] overlayfs: failed to clone upperpath [ 130.164580][ T5215] overlayfs: failed to clone upperpath [ 130.221602][ T5224] overlayfs: failed to clone upperpath [ 130.369573][ T5241] overlayfs: failed to clone upperpath [ 130.370862][ T5239] bridge0: port 3(veth1_macvtap) entered blocking state [ 130.382118][ T5239] bridge0: port 3(veth1_macvtap) entered disabled state [ 130.391468][ T5239] veth1_macvtap: entered allmulticast mode [ 130.404261][ T5239] veth1_macvtap: left allmulticast mode [ 130.434808][ T5251] overlayfs: failed to clone upperpath [ 130.512011][ T5277] overlayfs: failed to clone upperpath [ 130.540419][ T5286] overlayfs: failed to clone upperpath [ 130.549754][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 130.549770][ T36] audit: type=1400 audit(1776854690.801:34002): avc: denied { bind } for pid=5287 comm="syz.1.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.558749][ T5288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1731'. [ 131.155798][ T5309] overlayfs: failed to clone upperpath [ 131.330958][ T5328] netlink: 'syz.2.1747': attribute type 4 has an invalid length. [ 131.338901][ T5328] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1747'. [ 131.360129][ T5330] overlayfs: failed to clone upperpath [ 131.464381][ T9] usb 1-1: USB disconnect, device number 34 [ 131.889691][ T36] audit: type=1400 audit(1776854692.141:34003): avc: denied { create } for pid=5336 comm="syz.2.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 132.091976][ T5345] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1754'. [ 132.103618][ T5345] rust_binder: Write failure EFAULT in pid:912 [ 132.855853][ T5367] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 132.870081][ T5367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1762'. [ 133.096120][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 133.105062][ T5385] erspan0: default FDB implementation only supports local addresses [ 133.113634][ T5385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.113659][ T5385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:939 [ 133.123660][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 133.141770][ T5385] erspan0: default FDB implementation only supports local addresses [ 133.161507][ T5390] input: syz1 as /devices/virtual/input/input19 [ 133.350366][ T5400] fuseblk: Unknown parameter '' [ 133.420316][ T5402] overlayfs: failed to clone upperpath [ 133.558624][ T5427] overlayfs: failed to clone upperpath [ 134.123139][ T5445] overlayfs: failed to clone upperpath [ 134.287697][ T5453] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 134.287725][ T5453] rust_binder: Error while translating object. [ 134.296592][ T5453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 134.302787][ T5453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:962 [ 134.570798][ T5460] rust_binder: 967: no such ref 1 [ 134.585063][ T5460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:967 [ 134.598190][ T36] audit: type=1400 audit(1776854695.848:34004): avc: denied { ioctl } for pid=5461 comm="syz.0.1794" path="socket:[24970]" dev="sockfs" ino=24970 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.649271][ T5466] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.649567][ T5466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:974 [ 134.659890][ T5466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:974 [ 134.673478][ T5470] netlink: 'syz.3.1798': attribute type 14 has an invalid length. [ 134.698144][ T5474] netlink: 'syz.3.1798': attribute type 14 has an invalid length. [ 134.751044][ T36] audit: type=1326 audit(1776854695.998:34005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 134.776995][ T36] audit: type=1326 audit(1776854695.998:34006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 134.801166][ T36] audit: type=1326 audit(1776854696.028:34007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43a4d8d710 code=0x7ffc0000 [ 134.825010][ T36] audit: type=1326 audit(1776854696.028:34008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 134.849377][ T36] audit: type=1326 audit(1776854696.028:34009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 134.873775][ T36] audit: type=1326 audit(1776854696.028:34010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 134.897894][ T36] audit: type=1326 audit(1776854696.028:34011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43a4d8eec9 code=0x7ffc0000 [ 134.921285][ T5502] overlayfs: failed to clone upperpath [ 134.939833][ T5504] 9pnet_fd: Insufficient options for proto=fd [ 135.024091][ T2554] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 135.175948][ T5485] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1802'. [ 135.189441][ T2554] usb 1-1: unable to get BOS descriptor or descriptor too short [ 135.197777][ T2554] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 135.205406][ T2554] usb 1-1: can't read configurations, error -71 [ 135.260457][ T5508] syz.3.1810 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 135.312279][ T5517] overlayfs: failed to clone upperpath [ 135.428977][ T5538] overlayfs: failed to clone upperpath [ 135.464310][ T5542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1824'. [ 135.485664][ T5550] 9pnet_fd: Insufficient options for proto=fd [ 135.764193][ T67] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 135.879494][ T5569] netlink: 'syz.1.1835': attribute type 27 has an invalid length. [ 136.037911][ T5583] cgroup: Invalid name [ 136.050776][ T5588] overlayfs: failed to clone upperpath [ 136.086584][ T5599] overlayfs: failed to clone upperpath [ 136.630158][ T5609] binder: Unknown parameter 'defcontext01777777777777777777777' [ 136.659039][ T5611] can0: slcan on ptm0. [ 136.668501][ T5613] overlayfs: failed to clone upperpath [ 136.679205][ T5611] syz.0.1852 (5611): /proc/5610/oom_adj is deprecated, please use /proc/5610/oom_score_adj instead. [ 136.692231][ T5617] netlink: 'syz.1.1854': attribute type 5 has an invalid length. [ 136.710525][ T5617] netlink: 'syz.1.1854': attribute type 5 has an invalid length. [ 136.724117][ T5617] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1854'. [ 136.875730][ T5653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1862'. [ 136.944096][ T382] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 137.094110][ T382] usb 1-1: Using ep0 maxpacket: 8 [ 137.100293][ T382] usb 1-1: config index 0 descriptor too short (expected 59, got 27) [ 137.109886][ T382] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 137.118963][ T382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.126991][ T382] usb 1-1: Product: syz [ 137.131163][ T382] usb 1-1: Manufacturer: syz [ 137.135779][ T382] usb 1-1: SerialNumber: syz [ 137.342910][ T382] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 137.416058][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 137.416076][ T36] audit: type=1400 audit(1776854698.668:34064): avc: denied { listen } for pid=5663 comm="syz.1.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 137.443587][ T36] audit: type=1400 audit(1776854698.668:34065): avc: denied { create } for pid=5663 comm="syz.1.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.477706][ T5673] netlink: 'syz.1.1870': attribute type 10 has an invalid length. [ 137.485889][ T5673] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1870'. [ 137.495001][ T5673] bridge_slave_1: left promiscuous mode [ 137.500639][ T5673] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.508286][ T5675] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1865'. [ 137.546530][ T5611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.555115][ T5611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.614736][ T67] usb 1-1: USB disconnect, device number 37 [ 137.630609][ T67] usblp0: removed [ 137.667110][ T5610] can0 (unregistered): slcan off ptm0. [ 138.255883][ T5746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'. [ 138.272493][ T5753] EXT4-fs: Conflicting test_dummy_encryption options [ 138.385220][ T36] audit: type=1326 audit(1776854699.638:34066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5763 comm="syz.3.1890" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa14e78eec9 code=0x0 [ 138.419904][ T36] audit: type=1400 audit(1776854699.668:34067): avc: denied { mounton } for pid=5772 comm="syz.0.1893" path="/syzcgroup/unified/syz0" dev="ramfs" ino=20193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 138.419993][ T5774] /dev/rnullb0: Can't open blockdev [ 138.475819][ T36] audit: type=1400 audit(1776854699.728:34068): avc: denied { setattr } for pid=5778 comm="syz.0.1895" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.481821][ T5779] loop6: detected capacity change from 0 to 5 [ 138.499104][ T36] audit: type=1400 audit(1776854699.728:34069): avc: denied { write } for pid=5778 comm="syz.0.1895" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.839205][ T5794] netlink: 'syz.1.1901': attribute type 4 has an invalid length. [ 138.869287][ T5801] overlayfs: failed to clone upperpath [ 138.896405][ T5807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1905'. [ 138.933341][ T5813] SELinux: Context system_u:object_r:insmod_exec_t:s0 is not valid (left unmapped). [ 138.943537][ T36] audit: type=1400 audit(1776854700.198:34070): avc: denied { relabelto } for pid=5812 comm="syz.2.1907" name="fuse" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:insmod_exec_t:s0" [ 138.982453][ T36] audit: type=1400 audit(1776854700.198:34071): avc: denied { associate } for pid=5812 comm="syz.2.1907" name="fuse" dev="tmpfs" ino=1453 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:insmod_exec_t:s0" [ 139.016687][ T382] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 139.069389][ T5824] overlayfs: failed to clone upperpath [ 139.135558][ T5830] netlink: 'syz.2.1914': attribute type 5 has an invalid length. [ 139.175125][ T382] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.186166][ T382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.192858][ T382] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 139.202023][ T382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.214288][ T382] usb 1-1: config 0 descriptor?? [ 139.241992][ T5850] overlayfs: failed to clone upperpath [ 139.248575][ T5852] overlayfs: failed to resolve './file1/file0': -2 [ 139.301411][ T5860] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1927'. [ 139.311553][ T5860] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1927'. [ 139.624860][ T382] hid (null): invalid report_count 22533 [ 139.644286][ T382] nintendo 0003:057E:2009.000D: invalid report_count 22533 [ 139.658111][ T382] nintendo 0003:057E:2009.000D: item 0 2 1 9 parsing failed [ 139.670054][ T382] nintendo 0003:057E:2009.000D: HID parse failed [ 139.682231][ T382] nintendo 0003:057E:2009.000D: probe - fail = -22 [ 139.693553][ T382] nintendo 0003:057E:2009.000D: probe with driver nintendo failed with error -22 [ 139.872007][ T5901] /dev/loop0: Can't lookup blockdev [ 139.930960][ T45] usb 1-1: USB disconnect, device number 38 [ 140.038942][ T5924] tipc: Enabling of bearer rejected, failed to enable media [ 140.325420][ T5934] /dev/loop0: Can't lookup blockdev [ 140.431387][ T36] audit: type=1400 audit(1776854701.678:34072): avc: denied { mounton } for pid=5938 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 140.487362][ T36] audit: type=1400 audit(1776854701.738:34073): avc: denied { setattr } for pid=5939 comm="syz.0.1955" name="NETLINK" dev="sockfs" ino=26001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.531077][ T5942] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1956'. [ 140.540750][ T5942] gretap0: entered promiscuous mode [ 140.554368][ T5942] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1956'. [ 140.563287][ T5942] 0{X: renamed from gretap0 [ 140.579161][ T5942] 0{X: left promiscuous mode [ 140.584270][ T5942] 0{X: entered allmulticast mode [ 140.591407][ T5942] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 140.614829][ T46] bridge_slave_0: left allmulticast mode [ 140.620668][ T46] bridge_slave_0: left promiscuous mode [ 140.630636][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.733952][ T5955] __vm_enough_memory: pid: 5955, comm: syz.0.1959, bytes: 18014402804453376 not enough memory for the allocation [ 140.772215][ T46] tipc: Left network mode [ 140.783789][ T46] veth0_vlan: left promiscuous mode [ 140.827931][ T5965] rust_binder: Failed copying remainder into alloc: EFAULT [ 140.827958][ T5965] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 140.845681][ T5965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 140.853986][ T5965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1037 [ 140.878297][ T5965] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.910452][ T5969] rust_binder: Failed copying remainder into alloc: EFAULT [ 140.910478][ T5969] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 140.918368][ T5969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 140.927282][ T5969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1037 [ 141.050209][ T5986] 9pnet_fd: Insufficient options for proto=fd [ 141.102477][ T5976] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 141.136066][ T5998] tipc: New replicast peer: 139.255.255.255 [ 141.142079][ T5998] tipc: Enabled bearer , priority 10 [ 141.690978][ T6021] overlayfs: failed to clone upperpath [ 142.254176][ T45] tipc: Node number set to 4278321153 [ 143.158183][ T6056] overlayfs: failed to clone upperpath [ 143.253279][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 143.253297][ T36] audit: type=1400 audit(1776854704.498:34075): avc: denied { create } for pid=6074 comm="syz.2.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 144.061310][ T6091] overlayfs: failed to clone upperpath [ 144.080692][ T6087] rust_binder: Error while translating object. [ 144.080739][ T6087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.104084][ T6087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1063 [ 144.135422][ T6095] overlayfs: failed to resolve './file1': -2 [ 144.165106][ T6095] __nla_validate_parse: 1 callbacks suppressed [ 144.165127][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2006'. [ 144.181627][ T6095] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 145.077806][ T6109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6109 comm=syz.2.2010 [ 145.077808][ T6110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6110 comm=syz.2.2010 [ 145.077845][ T6109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6109 comm=syz.2.2010 [ 145.111087][ T6110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6110 comm=syz.2.2010 [ 145.120528][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2010'. [ 145.140164][ T6113] netlink: 'syz.0.2012': attribute type 1 has an invalid length. [ 145.146194][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2010'. [ 145.151953][ T6117] overlayfs: failed to clone upperpath [ 145.162310][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2012'. [ 145.204124][ T6124] 9pnet_fd: Insufficient options for proto=fd [ 145.223457][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 146.200304][ T6132] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 146.245530][ T6140] overlayfs: failed to clone upperpath [ 146.454106][ T45] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 146.604117][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 146.610310][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.621863][ T45] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 146.630944][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.638969][ T45] usb 1-1: Product: syz [ 146.643137][ T45] usb 1-1: Manufacturer: syz [ 146.647791][ T45] usb 1-1: SerialNumber: syz [ 146.653019][ T45] usb 1-1: config 0 descriptor?? [ 146.658817][ T45] usb 1-1: bad CDC descriptors [ 146.663750][ T45] usb 1-1: unsupported MDLM descriptors [ 146.860534][ T45] usb 1-1: USB disconnect, device number 39 [ 147.456904][ T6159] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.456943][ T6159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1075 [ 147.513574][ T6168] overlayfs: failed to clone upperpath [ 148.785171][ T6197] overlayfs: failed to clone upperpath [ 148.804525][ T6194] binder: Bad value for 'stats' [ 149.054183][ T45] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 149.204213][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 149.210455][ T45] usb 1-1: config 4 has an invalid interface number: 215 but max is 0 [ 149.218694][ T45] usb 1-1: config 4 has no interface number 0 [ 149.226215][ T45] usb 1-1: New USB device found, idVendor=76da, idProduct=6a4e, bcdDevice=8c.0b [ 149.235347][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.243381][ T45] usb 1-1: Product: syz [ 149.252265][ T45] usb 1-1: Manufacturer: syz [ 149.256917][ T45] usb 1-1: SerialNumber: syz [ 149.466072][ T45] hub 1-1:4.215: bad descriptor, ignoring hub [ 149.472183][ T45] hub 1-1:4.215: probe with driver hub failed with error -5 [ 149.479655][ T45] usb 1-1: bad CDC descriptors [ 149.504459][ T45] usb 1-1: USB disconnect, device number 40 [ 150.077157][ T36] audit: type=1400 audit(1776854711.328:34076): avc: denied { map } for pid=6207 comm="syz.0.2045" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 151.619017][ T6252] overlayfs: failed to clone upperpath [ 153.243318][ T6288] overlayfs: failed to clone upperpath [ 153.404311][ T360] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 153.554062][ T360] usb 1-1: Using ep0 maxpacket: 8 [ 153.560132][ T360] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.568568][ T360] usb 1-1: config 179 has no interface number 0 [ 153.574865][ T360] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 153.586119][ T360] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 153.597626][ T360] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 153.607725][ T360] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.621069][ T360] usb 1-1: config 179 interface 65 has no altsetting 0 [ 153.627956][ T360] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 153.637090][ T360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.846539][ T45] usb 1-1: USB disconnect, device number 41 [ 154.804327][ T6293] fuse: Bad value for 'fd' [ 154.814822][ T6294] netlink: 'syz.3.2075': attribute type 4 has an invalid length. [ 154.822656][ T6294] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2075'. [ 156.536711][ T6305] netlink: 328 bytes leftover after parsing attributes in process `syz.2.2079'. [ 156.549084][ T36] audit: type=1400 audit(1776854717.798:34077): avc: denied { accept } for pid=6303 comm="syz.3.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 156.599011][ T6309] 9pnet_fd: Insufficient options for proto=fd [ 156.609997][ T6309] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2081'. [ 156.738544][ T6321] rust_binder: Failed copying into alloc: EFAULT [ 156.738573][ T6321] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 156.760665][ T6321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 156.769696][ T6321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1114 [ 158.484792][ T6327] fuse: Bad value for 'fd' [ 158.500591][ T36] audit: type=1400 audit(1776854719.748:34078): avc: denied { accept } for pid=6325 comm="syz.0.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.450875][ T36] audit: type=1400 audit(1776854721.698:34079): avc: denied { unlink } for pid=6355 comm="syz.0.2095" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.724067][ T2554] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 160.874059][ T2554] usb 1-1: Using ep0 maxpacket: 32 [ 160.880450][ T2554] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 160.888660][ T2554] usb 1-1: config 0 has no interface number 0 [ 160.894785][ T2554] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 160.904798][ T2554] usb 1-1: config 0 interface 196 has no altsetting 0 [ 160.912981][ T2554] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 160.922065][ T2554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.930238][ T2554] usb 1-1: Product: syz [ 160.934448][ T2554] usb 1-1: Manufacturer: syz [ 160.939113][ T2554] usb 1-1: SerialNumber: syz [ 160.945900][ T2554] usb 1-1: config 0 descriptor?? [ 160.951172][ T6358] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 161.159778][ T2554] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -32 [ 161.167446][ T2554] ipheth 1-1:0.196: probe with driver ipheth failed with error -32 [ 161.866506][ T382] usb 1-1: USB disconnect, device number 42 [ 162.507555][ T6380] fuse: Bad value for 'fd' [ 162.612542][ T6384] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 164.623167][ T36] audit: type=1400 audit(1776854725.868:34080): avc: denied { setattr } for pid=6388 comm="syz.0.2104" name="/" dev="configfs" ino=1368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=1 req=1954 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 164.778870][ T36] audit: type=1400 audit(1776854726.028:34081): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[1750]" dev="pipefs" ino=1750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1