last executing test programs: 34.583740978s ago: executing program 3 (id=142): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x30, r0, 0xf8da0000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r1, 0x400454de, 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007200)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00401707000905813a40000000000904010000020d00000904010102020d000009058202000200"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="010000000400"}) 32.822523348s ago: executing program 3 (id=161): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 31.931191709s ago: executing program 3 (id=166): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) r4 = syz_clone(0x40881c00, &(0x7f0000000380)="be8940077d8526384a9da9eab50aaf4acccbfcdc20e5dd25037f4eb881f1fde6d0f2805660da05c0cd1267649a03ee56b2af60551e59953146f1aeeca3d8c1c8c841c09c61d9160c0c7243ac5cb84f1d3a9ca00166e29c3af82423decf102187235cc93a7ff412e8d09848e86dc73b2b10ab0b22c33b5d822801f2a99298ab926a50f51b8ab79c493d3f4eb27569381858f571db2cf4c8df4dc28331679d67b182d2d8c13a3afcc8fbebedbf3bb6d639909d687cb32b8e28ebef846584da5263e4ef819505fe58b88a966addf655c1e1abf67b2e0c6468f2af4d94f919a004", 0xdf, &(0x7f00000002c0), &(0x7f0000000480), &(0x7f00000004c0)="743c84fb014ba8e656e0b1b0fb7172699c59ad4897a07ce70cec32f5e780032ec46d657ef9d17a542d3d2dd7a6b3e203cf500bd246562a1314c235ebd8077de76223b96822ddb8000c1b92ac9d36eae5b7b33284b76246") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@loopback, @in=@dev}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) r6 = getpgrp(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fstat(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r8) fstat(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780), &(0x7f00000007c0)=0xe, 0x800) r11 = syz_io_uring_setup(0x3248, &(0x7f0000000800)={0x0, 0xb574, 0x20, 0x2, 0x140}, &(0x7f0000000880), &(0x7f00000008c0)) r12 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000900)='memory.swap.high\x00', 0x2, 0x0) r13 = getpgid(r4) syz_pidfd_open(r13, 0x0) r14 = getuid() fstat(r3, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = gettid() rt_sigqueueinfo(r17, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) sendmmsg$unix(r3, &(0x7f0000000c40)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r4, r15, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}, @rights={{0x30, 0x1, 0x1, [r0, r10, r11, r12, r3, r0, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x30, 0x1, 0x1, [r2, r1, r2, r0, r3, r3, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17}}}], 0x128, 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffec7}, 0x0) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) r19 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r19, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 31.033093371s ago: executing program 3 (id=174): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0", 0x3a}], 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c00200003c0010002dbd7000fddbdf251f0000001af53059081e3dd093000d983074701c6e36f2c36fd99826e5718234612bb47f17f23053f2fdbdf5b44dce3ec57ac7a87c1a0adf5486ef902887feff1dbe6fa08dc5a23ba88e24261a4c9fa52fccb9953009498543f7f744d50c4d5cfa869bc9f4b4f732c282f3c8afe3f755a6e715292dc50dd4a249b3e7f05af1290ee66f07fde85b8bd8e06e7e7e7d566419b90052ac223eac05d09cf1f97c8ffc4e8b3c70aee25b3fda69dfe5a7735dbb54cbc87a411196c09f1306fed6f2dfadde0198bc1255b25685c5c3427b7dbde5767063ba85b008001400", @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="96f545186d38c8a708004e00", @ANYRES32, @ANYBLOB="7b0f00000000000000a16567c9"], 0x2c0}, 0x1, 0x0, 0x0, 0x4000050}, 0x40000) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeb9) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x10, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) unlinkat(r5, &(0x7f0000000140)='./file0/../file0\x00', 0x200) inotify_add_watch(r5, &(0x7f0000000280)='./file0\x00', 0x8) umount2(0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x40040b0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) 31.015326222s ago: executing program 3 (id=176): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) link(&(0x7f0000000000)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_usb_control_io(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="0f20e035000004000f22e0c462f992a4f00080000048b848470000000000000f23d00f21f835000000010f23f8660f09c4a2cd9c3666baf80cb81a73ec86ef66bafc0cb0d8ee65470f2086c744240000000000c7442402375c0000c7442406000000000f011c24b8010000000f01c1666466420f38829f93e50000", 0x7b}], 0x1, 0x73, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xc2d01, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000280)={0x4, r10}) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f00000002c0)={0x400002, r10}) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f00000004c0)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@x86={0x8, 0x81, 0x2, 0x0, 0x101, 0x3, 0x5, 0xff, 0x40, 0x9, 0x32, 0xfd, 0x0, 0x4, 0x8001, 0xe3, 0x2, 0xfc, 0x8, '\x00', 0xf4, 0x2}) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 30.861316694s ago: executing program 3 (id=178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}]) r4 = eventfd2(0x8000, 0x801) io_cancel(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f00000003c0)="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", 0x1000, 0x9, 0x0, 0x0, r4}, &(0x7f0000000080)) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000340)={0x18, 0x2, {0x0, @empty}}, 0x1e) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x14, 0x0, 0x101}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000001, 0x2010, r6, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @multicast}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x80000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 30.812668408s ago: executing program 32 (id=178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}]) r4 = eventfd2(0x8000, 0x801) io_cancel(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f00000003c0)="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", 0x1000, 0x9, 0x0, 0x0, r4}, &(0x7f0000000080)) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000340)={0x18, 0x2, {0x0, @empty}}, 0x1e) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x14, 0x0, 0x101}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000001, 0x2010, r6, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @multicast}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x80000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.77389149s ago: executing program 4 (id=309): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000b7, 0x0, 0x1}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1800, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000b7, 0x0, 0x1}]}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 15.52181386s ago: executing program 4 (id=310): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async) r3 = eventfd2(0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) (async) fsopen(&(0x7f0000000080)='msdos\x00', 0x1) (async) ioctl$FIOCLEX(r2, 0x5451) (async) close_range(r0, 0xffffffffffffffff, 0x0) 15.425819678s ago: executing program 4 (id=311): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) r3 = gettid() prctl$PR_MCE_KILL(0x35, 0x1, 0x2) capset(&(0x7f0000000000)={0x20080522, r3}, &(0x7f0000000040)={0x9, 0x7, 0x5, 0x44, 0x6, 0xffffffff}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a84f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x10001) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x4) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000002c0)=@x86={0xf, 0x5, 0x80, 0x0, 0x0, 0x18, 0x9, 0x0, 0x0, 0x9, 0xd, 0x9, 0x0, 0x40, 0xfffffffd, 0x11, 0x6, 0x46, 0x8, '\x00', 0x7, 0x9}) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xd000)=nil, r9, 0x3000007, 0x10011, r8, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r10, &(0x7f0000000080)="1c0000001a007f0214f9f4070009040803000000000000000002000008", 0x1d) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000005000/0x3000)=nil, r9, 0xf, 0x12, r8, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x30, r4, 0x22e7c000) 15.361404103s ago: executing program 4 (id=312): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x80800) pselect6(0x40, &(0x7f0000000300)={0x2, 0x8, 0x69, 0xc, 0x7, 0xfffffffffffffffa, 0xffffffffffffffff, 0x530}, 0x0, &(0x7f0000000380)={0x30, 0x62, 0x7e7a542d, 0xffffffffffffeabc, 0x2, 0x1, 0x6, 0x800}, 0x0, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 5.834749534s ago: executing program 4 (id=324): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f00006fd000/0x2000)=nil, 0x2000, 0x9, 0x810, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f00000000c0)=0x800, 0x0, 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x3ff) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x5, 0x2, 0x100000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) ppoll(&(0x7f00000000c0)=[{r3, 0x2001}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4044004, 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000040)={@private2, 0x60, r7}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', r7, 0x0, 0x6, 0x4, 0x9, 0x0, @local, @empty, 0x8000, 0x7, 0x66a, 0x8}}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {r9, r10+10000000}}, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(r5, 0x4068aea3, &(0x7f0000000380)) timer_settime(r8, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 2.61786755s ago: executing program 4 (id=354): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=',,\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x5, 0x590f, 0x2}) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) 2.092150502s ago: executing program 0 (id=363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000000bec0)={0x0, 0x0, &(0x7f000000be80)={&(0x7f0000000400)=ANY=[@ANYBLOB="c800000028000100"], 0xc8}, 0x1, 0x0, 0x0, 0x48090}, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x802, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='auxv\x00') exit(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000040)=0x5, 0x4) (async) r5 = socket(0x10, 0x3, 0x0) (async) exit(0x6) (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYRES8=r1]) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f0008", @ANYRESDEC=r3, @ANYRES16=r5, @ANYRES8=0x0], 0x24}}, 0x0) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xac}, 0x33) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) (async) r6 = socket$netlink(0x10, 0x3, 0x15) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) read(r7, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000580)={0x29808000, &(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x3b}, &(0x7f0000000300)=""/158, 0x9e, &(0x7f0000000640)=""/165, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r3}}, 0x58) capset(&(0x7f0000000440)={0x20080522, r8}, &(0x7f0000000600)={0x9f, 0xb, 0x6, 0x7, 0x10, 0x9}) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) gettid() 2.00132458s ago: executing program 0 (id=364): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001f00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40010}}], 0x1, 0x4) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r1, &(0x7f0000000200)="89", 0xffe3) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c06, 0x3) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000040)={{0x9, 0x7, 0x5, 0x6}, 'syz1\x00', 0x13}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.098659812s ago: executing program 0 (id=372): ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000001480)={0x5, &(0x7f00000013c0)=[{0x70ea, 0xd, &(0x7f0000000080)="ba6d5ef211a7a84299bf75155f"}, {0xc782, 0x58, &(0x7f0000000100)="ee560e7ff934ac8ac89acba5dbc760dbf92868254a4b00c58257ec6f364949803ab2f4c97ba5101deaae93fe0268f119b80e803ff5152cfc4cb58fa099e5629d3be27ddb479c44344b49dd91280cd77afc29b912ee625540", 0x1}, {0xe, 0x1000, &(0x7f00000002c0)="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", 0x0, 0x1}, {0x5, 0x3f, &(0x7f0000000200)="c2a9179c7d1af620d9eb6125bb3159777fba2ddcce30a586fd7c88e4bc745e47eb9da62bef04300393a4c8c6f7f37790193f3fd8028df602f07d9cfd365ee3", 0x1}, {0x2, 0xec, &(0x7f00000012c0)="100afce1c131b3886ac6ec610f2b1e626f6db9c3031a77fad92ecd38bb6a2c4e8a0f6ffdf375ddff75dce781de35f3db387926b584554556e66b26e9347c4f70f1d0106d1e83340a0de3142f854feef9ffcd0cba3d05501643ab799c819cf2e907f0e6627fe0ac8a8e502148bce2d2841c57c74e2df242397bca3b70e1931fd614310923ba2c7be327f253ea58d7922684652bc39dbc1027882ada831b985246ee9cd8a0654369e892c5ad5f2a119321b8435e6b8033f6a060dc08541372bf66c41c2a3bbf95787abc53fec1348c2b84c4b53677140f8633ec20e98d818151816d6215c96c51e8526eb3c81b", 0x1}]}) madvise(&(0x7f000062d000/0x2000)=nil, 0x2000, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) remap_file_pages(&(0x7f00005e4000/0x3000)=nil, 0x3000, 0x2, 0x8000000000000001, 0x1000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x60003, 0x0, [0x80000000000006, 0x800, 0x401, 0x6, 0x5, 0x200000000, 0x4003, 0x5]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000014c0)="81120e0064a50f009106000f3036640fc75e00f23e0f0f899079a4643625ac000f79d7b8080b8ec80f55985400", 0x2d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000001480)={0x5, &(0x7f00000013c0)=[{0x70ea, 0xd, &(0x7f0000000080)="ba6d5ef211a7a84299bf75155f"}, {0xc782, 0x58, &(0x7f0000000100)="ee560e7ff934ac8ac89acba5dbc760dbf92868254a4b00c58257ec6f364949803ab2f4c97ba5101deaae93fe0268f119b80e803ff5152cfc4cb58fa099e5629d3be27ddb479c44344b49dd91280cd77afc29b912ee625540", 0x1}, {0xe, 0x1000, &(0x7f00000002c0)="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", 0x0, 0x1}, {0x5, 0x3f, &(0x7f0000000200)="c2a9179c7d1af620d9eb6125bb3159777fba2ddcce30a586fd7c88e4bc745e47eb9da62bef04300393a4c8c6f7f37790193f3fd8028df602f07d9cfd365ee3", 0x1}, {0x2, 0xec, &(0x7f00000012c0)="100afce1c131b3886ac6ec610f2b1e626f6db9c3031a77fad92ecd38bb6a2c4e8a0f6ffdf375ddff75dce781de35f3db387926b584554556e66b26e9347c4f70f1d0106d1e83340a0de3142f854feef9ffcd0cba3d05501643ab799c819cf2e907f0e6627fe0ac8a8e502148bce2d2841c57c74e2df242397bca3b70e1931fd614310923ba2c7be327f253ea58d7922684652bc39dbc1027882ada831b985246ee9cd8a0654369e892c5ad5f2a119321b8435e6b8033f6a060dc08541372bf66c41c2a3bbf95787abc53fec1348c2b84c4b53677140f8633ec20e98d818151816d6215c96c51e8526eb3c81b", 0x1}]}) (async) madvise(&(0x7f000062d000/0x2000)=nil, 0x2000, 0xb) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) (async) remap_file_pages(&(0x7f00005e4000/0x3000)=nil, 0x3000, 0x2, 0x8000000000000001, 0x1000) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x60003, 0x0, [0x80000000000006, 0x800, 0x401, 0x6, 0x5, 0x200000000, 0x4003, 0x5]}) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000014c0)="81120e0064a50f009106000f3036640fc75e00f23e0f0f899079a4643625ac000f79d7b8080b8ec80f55985400", 0x2d}], 0x1, 0x21, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) 1.076492554s ago: executing program 0 (id=373): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x2, 0x10001, 0xfffffffe, 0x0, 0xcb}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14f343, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r1, &(0x7f0000002400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6798428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc000f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb68ec4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b330e7735bf1c7e0e26aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010", 0x1000) 1.061745544s ago: executing program 0 (id=374): clock_gettime(0x3, &(0x7f0000000040)) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000100)=0x1) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001500)=""/198, 0xc6}], 0x9}, 0x12}], 0x1, 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') preadv(r4, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/35, 0x23}], 0x1, 0x5, 0x3) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1790) setresgid(0xee00, 0xee01, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x12) openat(r6, &(0x7f00000000c0)='./file0\x00', 0x44800, 0x85) read$FUSE(r5, &(0x7f0000003800)={0x2020}, 0x2020) 985.298261ms ago: executing program 0 (id=375): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f00006fd000/0x2000)=nil, 0x2000, 0x9, 0x810, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f00000000c0)=0x800, 0x0, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socket$inet6(0xa, 0x2, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) fadvise64(r3, 0x6b, 0x4000000000f7c, 0x4) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}, {0x3, &(0x7f0000000140)=0x3, 0x2}], 0x2, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x12, r0, 0x4dd99000) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580300001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000f4020680f05e"], 0x358}, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x20000000, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r5, r6, 0x0) read$FUSE(r7, &(0x7f0000005600)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 825.608043ms ago: executing program 2 (id=381): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @remote, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xb, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2c32, 0x4) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2460cf4782a734649801d319bafbc635259b1466e91c886d832b19a016199327058bee4bee12e0a8", 0x28}], 0x1}}], 0x1, 0x24) r1 = syz_clone(0x80104000, &(0x7f00000000c0)="d3f9c226ff7325ac0d32e1d760dc62100b2f94922f61fb36db1eb8b2540daa49c70ee7", 0x23, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="96f3d636ead112cd60d7a98d1d149f7f998ef58964ec63c283fcbde4e1d908e615159dff67a9d9299cdae818e936ce14bef652674ab9a3f508cff1753c818523f7221e9c") r2 = syz_open_procfs(r1, &(0x7f0000000040)='comm\x00') pselect6(0x40, &(0x7f0000000100)={0x1200000000000, 0x9, 0x68cb, 0x4000000000000, 0x6, 0x8, 0x252b}, 0x0, 0xfffffffffffffffc, 0x0, 0x0) write$cgroup_subtree(r2, 0x0, 0x3e) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='pstore\x00', 0x200000, 0x0) 743.64494ms ago: executing program 1 (id=382): pipe2$9p(0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x138) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000340)=0x1, 0x4) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r2, r3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket(0x2, 0x2, 0x80000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000300)={0x0, 0x1000000, 0x1000, 0x1, 0x2}, 0x20) mkdir(&(0x7f0000000200)='./file0\x00', 0xdc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xe) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) 698.621524ms ago: executing program 1 (id=383): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 655.606577ms ago: executing program 1 (id=384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 517.359668ms ago: executing program 1 (id=385): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0xb, {{0xa, 0x4e22, 0x1, @mcast2, 0x8}}}, 0x88) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)={0x18, 0x11, 0x1, 0x0, 0x2, {0x7}, [@nested={0x4, 0xe3}]}, 0x18}}, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0xb, {{0xa, 0x4e22, 0x1, @mcast2, 0x8}}}, 0x88) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)={0x18, 0x11, 0x1, 0x0, 0x2, {0x7}, [@nested={0x4, 0xe3}]}, 0x18}}, 0x0) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 463.225483ms ago: executing program 1 (id=386): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r1, 0x9c, 0x0, 0x0, r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) read$FUSE(r3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r5, 0x5441, 0x1ff) (async) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x1ff) ioctl$TCXONC(r6, 0x540a, 0x2) (async) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000022c0)={'syztnl0\x00', &(0x7f0000002240)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x1, 0x1, 0x15, @local, @remote, 0x8, 0x7, 0x6, 0xffffffff}}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 366.21142ms ago: executing program 1 (id=387): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x9, 0x9, [0x81, 0x7762]}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@remote, 0x0, 0x4000, 0x10, 0x8004}, {@in6=@private0, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x327, 0x9, 0x0, 0x4, 0xfff, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x80000000000000}, {0x8f, 0x0, 0x4}, 0x70bd2d, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x100000}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x40) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x0, 0x7, "ff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0xffffef03, 0x6, 0x1e1, 0x4, 0x4, "65abe401feff800000000000006564db6600", 0x41, 0x1ff}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x1) sendto$inet6(r1, 0x0, 0xfe42, 0x8080, 0x0, 0xfd74) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) 213.370333ms ago: executing program 2 (id=388): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) 67.677774ms ago: executing program 2 (id=389): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESHEX=r1], 0x27) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0200001c0001"], 0x23c}}, 0x0) r6 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x7fff, 0x14, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x20, 0x20, 0x0, 0x40e820c5}}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f00000001c0)={@mcast1, 0x1a, r7}) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0x4) close_range(r4, r4, 0x0) 61.150644ms ago: executing program 2 (id=390): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) pwritev(r1, &(0x7f0000000540), 0x0, 0x4, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44004000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r2, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001540)=""/229, 0xd6}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000002f40)=""/233, 0xe9}, {&(0x7f0000001440)=""/238, 0x7d}], 0x6}, 0x6}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2cf}, {{0x0, 0x0, 0x0}, 0x4}], 0x5, 0x12040, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x311080, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x3, 0x13, r3, 0x85b83000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) pwritev(r1, &(0x7f0000000540), 0x0, 0x4, 0x1) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44004000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) (async) recvmmsg(r2, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001540)=""/229, 0xd6}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000002f40)=""/233, 0xe9}, {&(0x7f0000001440)=""/238, 0x7d}], 0x6}, 0x6}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2cf}, {{0x0, 0x0, 0x0}, 0x4}], 0x5, 0x12040, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x311080, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x3, 0x13, r3, 0x85b83000) (async) 34.837957ms ago: executing program 2 (id=391): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x30, r0, 0x22e7c000) 0s ago: executing program 2 (id=392): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$packet(0x11, 0x2, 0x300) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f0000000480)) r5 = dup3(r3, r2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newtaction={0x470, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x45c, 0x1, [@m_ipt={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x29, 0x6, "c599b052b46986c63a2fcaa8867279b3d9becec7ff3a71771dae23c4e6f45db1615121a291"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "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"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "e3a1aab3ec4f20b89bacf892280348de1ccb3ed9ab23e68fcd8a75698d6c1c7a9a5f07f61792dfd5c63c61c65f15abfc42547e1fcda33a0f49b8b354df15be94e464276ebd69fc270c7d8aaded60c06ea4a15357904f5383aea8684d76b64598ca8cc41999f871826bd4381c49c0274c0f3a504204c84e33714ab83a4ab77b75bcda16cf91e84a914f637940d38322271c6a1d2bc848abb563504cfaa289beb12a89e85edded3a3b5d7c801166fc427f155c4f542cafdf4eb6fb5c1e4bbfc3548e75395932727aef4cbf93e4b29d0aa9f0b351e8c0492823181457b312d80c1fcf585c49bd48d00ec6a81db42d87ded10dcb5afe226daed6733457f374092f83d5465e501431e7b781c35249165189a035a1df732c99e4846b8144c98ab2569c903a3d3b0b85b94845e3b86aa7269086ee6054ee93ca5a1ed7f9a497ed2ae64f87f2d574c28c58ea8f545ab4af0000000000000000"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x470}, 0x1, 0x0, 0x0, 0x80c0}, 0x9080) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r8, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x6, 0xfff, r8, 0x0}]) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000080)=0x7fffffff) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x2000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000080)=0x1a000, 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.226' (ED25519) to the list of known hosts. [ 24.101067][ T36] audit: type=1400 audit(1756177532.330:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.102132][ T281] cgroup: Unknown subsys name 'net' [ 24.123779][ T36] audit: type=1400 audit(1756177532.330:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.151125][ T36] audit: type=1400 audit(1756177532.360:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.151305][ T281] cgroup: Unknown subsys name 'devices' [ 24.335308][ T281] cgroup: Unknown subsys name 'hugetlb' [ 24.341006][ T281] cgroup: Unknown subsys name 'rlimit' [ 24.513649][ T36] audit: type=1400 audit(1756177532.750:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.537038][ T36] audit: type=1400 audit(1756177532.750:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.561734][ T36] audit: type=1400 audit(1756177532.750:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.636601][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.646095][ T36] audit: type=1400 audit(1756177532.880:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 24.671684][ T36] audit: type=1400 audit(1756177532.880:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.726176][ T36] audit: type=1400 audit(1756177532.960:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.726614][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.751867][ T36] audit: type=1400 audit(1756177532.960:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.985411][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.992471][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.999626][ T289] bridge_slave_0: entered allmulticast mode [ 26.006079][ T289] bridge_slave_0: entered promiscuous mode [ 26.017602][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.024746][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.031792][ T289] bridge_slave_1: entered allmulticast mode [ 26.038074][ T289] bridge_slave_1: entered promiscuous mode [ 26.070425][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.077531][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.084614][ T290] bridge_slave_0: entered allmulticast mode [ 26.090860][ T290] bridge_slave_0: entered promiscuous mode [ 26.098456][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.105608][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.112662][ T290] bridge_slave_1: entered allmulticast mode [ 26.118945][ T290] bridge_slave_1: entered promiscuous mode [ 26.155317][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.162361][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.169513][ T288] bridge_slave_0: entered allmulticast mode [ 26.175795][ T288] bridge_slave_0: entered promiscuous mode [ 26.194938][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.201969][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.209174][ T288] bridge_slave_1: entered allmulticast mode [ 26.215432][ T288] bridge_slave_1: entered promiscuous mode [ 26.287838][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.294951][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.302085][ T291] bridge_slave_0: entered allmulticast mode [ 26.308375][ T291] bridge_slave_0: entered promiscuous mode [ 26.314795][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.321854][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.328945][ T291] bridge_slave_1: entered allmulticast mode [ 26.335162][ T291] bridge_slave_1: entered promiscuous mode [ 26.390561][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.397718][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.405198][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.412225][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.438727][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.445900][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.453159][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.460214][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.503336][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.510518][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.517805][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.524867][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.552368][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.559444][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.566772][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.573893][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.596120][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.603658][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.611475][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.618888][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.627655][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.635296][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.655166][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.662352][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.669972][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.677023][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.699243][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.706422][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.714135][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.721231][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.751241][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.758425][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.766658][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.773721][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.782408][ T290] veth0_vlan: entered promiscuous mode [ 26.811214][ T290] veth1_macvtap: entered promiscuous mode [ 26.828853][ T291] veth0_vlan: entered promiscuous mode [ 26.836214][ T289] veth0_vlan: entered promiscuous mode [ 26.859263][ T291] veth1_macvtap: entered promiscuous mode [ 26.871353][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.871777][ T288] veth0_vlan: entered promiscuous mode [ 26.895732][ T289] veth1_macvtap: entered promiscuous mode [ 26.933020][ T288] veth1_macvtap: entered promiscuous mode [ 27.002952][ T344] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.125756][ T346] rust_binder: Error while translating object. [ 27.125832][ T346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 27.132066][ T346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 27.144097][ T346] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.165160][ T351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6'. [ 27.223393][ T335] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.233462][ T338] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.355760][ T365] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.367606][ T338] usb 3-1: device descriptor read/64, error -71 [ 27.373959][ T335] usb 1-1: Using ep0 maxpacket: 16 [ 27.380237][ T335] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 27.390381][ T335] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 27.401814][ T335] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 27.413517][ T335] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 27.427144][ T335] usb 1-1: config 7 interface 0 has no altsetting 0 [ 27.433782][ T335] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 27.442830][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.453599][ T339] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 27.538625][ T378] x_tables: duplicate underflow at hook 4 [ 27.548184][ T378] Zero length message leads to an empty skb [ 27.613424][ T338] usb 3-1: device descriptor read/64, error -71 [ 27.853380][ T338] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.866872][ T335] hid (null): invalid report_count 22626 [ 27.872590][ T335] hid (null): bogus close delimiter [ 27.877948][ T335] hid (null): global environment stack underflow [ 27.885362][ T335] hid (null): unknown global tag 0xd [ 27.893846][ T335] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0001/input/input4 [ 27.912303][ T335] kye 0003:0458:5010.0001: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 27.983655][ T338] usb 3-1: device descriptor read/64, error -71 [ 28.068355][ T339] rust_binder: Error while translating object. [ 28.068391][ T339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 28.076632][ T339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 28.087126][ T9] usb 1-1: USB disconnect, device number 2 [ 28.233395][ T338] usb 3-1: device descriptor read/64, error -71 [ 28.343726][ T338] usb usb3-port1: attempt power cycle [ 28.502623][ T403] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 28.520071][ T406] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 28.520093][ T406] rust_binder: Read failure Err(EFAULT) in pid:43 [ 28.520144][ T405] process 'syz.1.23' launched '/dev/fd/6' with NULL argv: empty string added [ 28.565633][ T415] rust_binder: Write failure EFAULT in pid:53 [ 28.674112][ T430] netlink: 'syz.1.31': attribute type 8 has an invalid length. [ 28.693392][ T338] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.714393][ T338] usb 3-1: device descriptor read/8, error -71 [ 28.844709][ T338] usb 3-1: device descriptor read/8, error -71 [ 28.855042][ T425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 28.989237][ T435] netlink: 393 bytes leftover after parsing attributes in process `syz.0.33'. [ 28.991539][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.005055][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.043458][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.083433][ T338] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.104443][ T338] usb 3-1: device descriptor read/8, error -71 [ 29.194503][ T9] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 29.203657][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.212232][ T9] usb 2-1: config 0 descriptor?? [ 29.244610][ T338] usb 3-1: device descriptor read/8, error -71 [ 29.353485][ T338] usb usb3-port1: unable to enumerate USB device [ 29.822813][ T432] __vm_enough_memory: pid: 432, comm: syz.1.32, bytes: 18014402804453376 not enough memory for the allocation [ 30.036959][ T444] rust_binder: Write failure EINVAL in pid:8 [ 30.347454][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 30.347472][ T36] audit: type=1400 audit(1756177538.580:167): avc: denied { create } for pid=447 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 30.376746][ T338] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 30.379675][ T36] audit: type=1400 audit(1756177538.580:168): avc: denied { write } for pid=447 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 30.470609][ T451] mmap: syz.1.38 (451) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.483157][ T36] audit: type=1400 audit(1756177538.710:169): avc: denied { write } for pid=450 comm="syz.1.38" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.484544][ T451] input: syz0 as /devices/virtual/input/input5 [ 30.513180][ T36] audit: type=1400 audit(1756177538.740:170): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=450 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.540583][ T36] audit: type=1400 audit(1756177538.740:171): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=450 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.564554][ T36] audit: type=1400 audit(1756177538.740:172): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=450 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.573672][ T338] usb 3-1: Using ep0 maxpacket: 16 [ 30.595610][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.609672][ T453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.613835][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.618713][ T453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.629034][ T338] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.648851][ T338] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.658362][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.667042][ T338] usb 3-1: config 0 descriptor?? [ 30.774937][ T36] audit: type=1400 audit(1756177539.010:173): avc: denied { write } for pid=454 comm="syz.3.40" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.811230][ T36] audit: type=1400 audit(1756177539.040:174): avc: denied { ioctl } for pid=454 comm="syz.3.40" path="socket:[4640]" dev="sockfs" ino=4640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.887547][ T36] audit: type=1400 audit(1756177539.120:175): avc: denied { append } for pid=457 comm="syz.3.41" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.023518][ T437] Bluetooth: hci0: command 0x1003 tx timeout [ 31.023887][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.074365][ T338] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 31.083524][ T338] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 31.092700][ T338] microsoft 0003:045E:07DA.0003: implement() called with n (152) > 32! (kworker/1:3) [ 31.123398][ T335] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.276444][ T338] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 31.285520][ T338] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 31.286588][ T463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.295048][ T335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.303361][ T463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.312556][ T338] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 31.331964][ T335] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 31.342082][ T338] microsoft 0003:045E:07DA.0003: no inputs found [ 31.348629][ T335] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.361614][ T338] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 31.377438][ T335] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.386681][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.394838][ T335] usb 4-1: Product: syz [ 31.399060][ T335] usb 4-1: Manufacturer: syz [ 31.403746][ T335] usb 4-1: SerialNumber: syz [ 31.409379][ T458] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 31.476988][ T446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.485770][ T446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.494004][ T446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.494026][ T446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:10 [ 31.504171][ T446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.522031][ T446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.535562][ T338] usb 3-1: USB disconnect, device number 6 [ 31.564260][ T36] audit: type=1400 audit(1756177539.800:176): avc: denied { ioctl } for pid=470 comm="syz.0.44" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 31.903562][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.913508][ T338] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 32.020715][ T335] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 32.026925][ T335] cdc_ncm 4-1:1.0: bind() failure [ 32.033072][ T335] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 32.040037][ T31] usb 1-1: device descriptor read/64, error -71 [ 32.046381][ T335] cdc_ncm 4-1:1.1: bind() failure [ 32.053373][ T338] usb 3-1: device descriptor read/64, error -71 [ 32.063455][ T335] usb 4-1: USB disconnect, device number 2 [ 32.293431][ T338] usb 3-1: device descriptor read/64, error -71 [ 32.299960][ T31] usb 1-1: device descriptor read/64, error -71 [ 32.543702][ T338] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 32.551270][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.683372][ T31] usb 1-1: device descriptor read/64, error -71 [ 32.689754][ T338] usb 3-1: device descriptor read/64, error -71 [ 32.903401][ T460] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 32.923557][ T31] usb 1-1: device descriptor read/64, error -71 [ 32.933399][ T338] usb 3-1: device descriptor read/64, error -71 [ 33.033565][ T31] usb usb1-port1: attempt power cycle [ 33.043402][ T460] usb 4-1: device descriptor read/64, error -71 [ 33.049854][ T338] usb usb3-port1: attempt power cycle [ 33.177281][ T503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.185891][ T503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.283410][ T460] usb 4-1: device descriptor read/64, error -71 [ 33.373413][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.393437][ T338] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 33.402080][ T31] usb 1-1: device descriptor read/8, error -71 [ 33.414634][ T338] usb 3-1: device descriptor read/8, error -71 [ 33.523386][ T460] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 33.534378][ T31] usb 1-1: device descriptor read/8, error -71 [ 33.544476][ T338] usb 3-1: device descriptor read/8, error -71 [ 33.653384][ T460] usb 4-1: device descriptor read/64, error -71 [ 33.773436][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.783432][ T338] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 33.794541][ T31] usb 1-1: device descriptor read/8, error -71 [ 33.804532][ T338] usb 3-1: device descriptor read/8, error -71 [ 33.893412][ T460] usb 4-1: device descriptor read/64, error -71 [ 33.924474][ T31] usb 1-1: device descriptor read/8, error -71 [ 33.934536][ T338] usb 3-1: device descriptor read/8, error -71 [ 34.003461][ T460] usb usb4-port1: attempt power cycle [ 34.033512][ T31] usb usb1-port1: unable to enumerate USB device [ 34.043623][ T338] usb usb3-port1: unable to enumerate USB device [ 34.343381][ T460] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 34.364579][ T460] usb 4-1: device descriptor read/8, error -71 [ 34.494793][ T460] usb 4-1: device descriptor read/8, error -71 [ 34.628887][ T9] usb 2-1: string descriptor 0 read error: -32 [ 34.636067][ T9] uclogic 0003:5543:004D.0002: interface is invalid, ignoring [ 34.743374][ T460] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 34.764499][ T460] usb 4-1: device descriptor read/8, error -71 [ 34.894529][ T460] usb 4-1: device descriptor read/8, error -71 [ 34.963396][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 35.003475][ T460] usb usb4-port1: unable to enumerate USB device [ 35.023377][ T65] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.113366][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 35.119559][ T31] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.130692][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 35.137322][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 35.146373][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.154923][ T31] usb 3-1: config 0 descriptor?? [ 35.184587][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.194808][ T65] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 35.204675][ T65] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.218860][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.227943][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.236041][ T65] usb 1-1: Product: syz [ 35.240374][ T65] usb 1-1: Manufacturer: syz [ 35.245202][ T65] usb 1-1: SerialNumber: syz [ 35.250920][ T517] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 35.561898][ T515] capability: warning: `syz.2.57' uses deprecated v2 capabilities in a way that may be insecure [ 35.574557][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 35.580668][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 35.589467][ T31] usb 3-1: USB disconnect, device number 11 [ 35.682949][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 35.682965][ T36] audit: type=1400 audit(1756177543.910:192): avc: denied { read write } for pid=518 comm="syz.3.59" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.712438][ T36] audit: type=1400 audit(1756177543.910:193): avc: denied { open } for pid=518 comm="syz.3.59" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.772284][ T36] audit: type=1400 audit(1756177544.000:194): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.794802][ T36] audit: type=1400 audit(1756177544.000:195): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.822886][ T36] audit: type=1400 audit(1756177544.050:196): avc: denied { execute } for pid=529 comm="syz.3.62" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.824519][ T530] netlink: 'syz.3.62': attribute type 11 has an invalid length. [ 35.846256][ T36] audit: type=1400 audit(1756177544.050:197): avc: denied { setopt } for pid=529 comm="syz.3.62" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.876502][ T65] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 35.882872][ T36] audit: type=1400 audit(1756177544.090:198): avc: denied { accept } for pid=526 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.883082][ T65] cdc_ncm 1-1:1.0: bind() failure [ 35.911079][ T65] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 35.918112][ T65] cdc_ncm 1-1:1.1: bind() failure [ 35.928053][ T65] usb 1-1: USB disconnect, device number 7 [ 35.951297][ T527] kvm: kvm [526]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 35.960380][ T527] kvm: kvm [526]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 35.971062][ T527] kvm: kvm [526]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 36.068852][ T36] audit: type=1400 audit(1756177544.300:199): avc: denied { read } for pid=537 comm="syz.3.64" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 36.093061][ T36] audit: type=1400 audit(1756177544.300:200): avc: denied { open } for pid=537 comm="syz.3.64" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 36.117958][ T36] audit: type=1400 audit(1756177544.300:201): avc: denied { write } for pid=537 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.159730][ T540] ======================================================= [ 36.159730][ T540] WARNING: The mand mount option has been deprecated and [ 36.159730][ T540] and is ignored by this kernel. Remove the mand [ 36.159730][ T540] option from the mount to silence this warning. [ 36.159730][ T540] ======================================================= [ 36.194963][ T540] binder: Unknown parameter 'contextÀ' [ 36.326006][ T548] rust_binder: 543 RLIMIT_NICE not set [ 36.473437][ T560] input: syz1 as /devices/virtual/input/input6 [ 36.536324][ T563] veth1_macvtap: left promiscuous mode [ 36.545182][ T563] veth1_macvtap: entered promiscuous mode [ 36.545773][ T543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.578856][ T543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.011857][ T585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.011891][ T585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 37.093033][ T65] rust_binder: 542: removing orphan mapping 0:1024 [ 37.181771][ T587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.188672][ T589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.192003][ T587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.253647][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 37.278635][ T594] 9pnet_fd: Insufficient options for proto=fd [ 37.403362][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 37.409585][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.421998][ T598] veth1_macvtap: left promiscuous mode [ 37.426420][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.429498][ T598] veth1_macvtap: entered promiscuous mode [ 37.437745][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 37.452821][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.461635][ T9] usb 4-1: config 0 descriptor?? [ 37.470094][ T9] hub 4-1:0.0: USB hub found [ 37.670869][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 37.885436][ T9] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 37.903609][ T9] hid-generic 0003:046D:C31C.0004: probe with driver hid-generic failed with error -22 [ 38.041032][ T646] __vm_enough_memory: pid: 646, comm: syz.2.95, bytes: 18014402804453376 not enough memory for the allocation [ 38.074434][ T650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.083260][ T650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.193479][ T9] usb 4-1: USB disconnect, device number 7 [ 38.613107][ T656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.622306][ T656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.804163][ T653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.817320][ T653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.995486][ T676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.009565][ T678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.091208][ T674] rust_binder: Write failure EFAULT in pid:75 [ 39.187413][ T685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.202062][ T685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.253398][ T491] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 39.313403][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 39.404383][ T491] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 39.412895][ T491] usb 1-1: config 0 has no interface number 0 [ 39.419070][ T491] usb 1-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 39.430034][ T491] usb 1-1: config 0 interface 214 has no altsetting 0 [ 39.438353][ T491] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 39.443383][ T9] usb 4-1: device descriptor read/64, error -71 [ 39.447404][ T491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.462073][ T491] usb 1-1: Product: syz [ 39.466276][ T491] usb 1-1: Manufacturer: syz [ 39.470860][ T491] usb 1-1: SerialNumber: syz [ 39.476043][ T491] usb 1-1: config 0 descriptor?? [ 39.481332][ T678] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 39.689073][ T678] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 39.696360][ T9] usb 4-1: device descriptor read/64, error -71 [ 39.728609][ T687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.737317][ T687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.766466][ T687] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1169731583 (18715705328 ns) > initial count (14827118032 ns). Using initial count to start timer. [ 39.788133][ T687] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2559158578 (81893074496 ns) > initial count (69438151136 ns). Using initial count to start timer. [ 39.943421][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.073421][ T9] usb 4-1: device descriptor read/64, error -71 [ 40.313432][ T9] usb 4-1: device descriptor read/64, error -71 [ 40.423435][ T9] usb usb4-port1: attempt power cycle [ 40.542636][ T699] overlay: Unknown parameter 'pcr' [ 40.572730][ T704] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.591447][ T708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.600188][ T708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.763421][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 40.784453][ T9] usb 4-1: device descriptor read/8, error -71 [ 40.824152][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 40.835650][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 40.846513][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 40.914475][ T9] usb 4-1: device descriptor read/8, error -71 [ 41.153437][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 41.174394][ T9] usb 4-1: device descriptor read/8, error -71 [ 41.271566][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 41.271584][ T36] audit: type=1400 audit(1756177549.500:235): avc: denied { write } for pid=720 comm="syz.1.120" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.272390][ T721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 41.301192][ T721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:165 [ 41.314457][ T9] usb 4-1: device descriptor read/8, error -71 [ 41.375765][ T723] FAULT_INJECTION: forcing a failure. [ 41.375765][ T723] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.388915][ T723] CPU: 1 UID: 0 PID: 723 Comm: syz.1.121 Not tainted syzkaller #0 6e51b6b85230f66418c68cf4df55f7a3259ed786 [ 41.388945][ T723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.388958][ T723] Call Trace: [ 41.388962][ T723] [ 41.388967][ T723] __dump_stack+0x21/0x30 [ 41.388991][ T723] dump_stack_lvl+0x10c/0x190 [ 41.389005][ T723] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.389022][ T723] dump_stack+0x19/0x20 [ 41.389034][ T723] should_fail_ex+0x3d9/0x530 [ 41.389050][ T723] should_fail+0xf/0x20 [ 41.389063][ T723] should_fail_usercopy+0x1e/0x30 [ 41.389072][ T723] _copy_from_user+0x22/0xb0 [ 41.389086][ T723] memdup_user+0x81/0x180 [ 41.389100][ T723] ? kvm_arch_vcpu_ioctl+0xc22/0x2e50 [ 41.389116][ T723] kvm_arch_vcpu_ioctl+0xc31/0x2e50 [ 41.389131][ T723] ? avc_has_perm+0x144/0x220 [ 41.389145][ T723] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 41.389160][ T723] ? irqentry_exit+0x4a/0x60 [ 41.389171][ T723] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 41.389181][ T723] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 41.389193][ T723] ? is_bpf_text_address+0x17b/0x1a0 [ 41.389205][ T723] ? kernel_text_address+0xa9/0xe0 [ 41.389217][ T723] ? __kernel_text_address+0x11/0x40 [ 41.389229][ T723] ? do_vfs_ioctl+0xeda/0x1e30 [ 41.389241][ T723] ? arch_stack_walk+0x10b/0x170 [ 41.389256][ T723] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 41.389267][ T723] ? _parse_integer_limit+0x195/0x1e0 [ 41.389281][ T723] ? _parse_integer+0x2e/0x40 [ 41.389294][ T723] ? kstrtoull+0x13b/0x1e0 [ 41.389307][ T723] ? kstrtouint+0x78/0xf0 [ 41.389320][ T723] ? ioctl_has_perm+0x1aa/0x4d0 [ 41.389331][ T723] ? __asan_memcpy+0x5a/0x80 [ 41.389346][ T723] ? ioctl_has_perm+0x3e0/0x4d0 [ 41.389357][ T723] ? has_cap_mac_admin+0xd0/0xd0 [ 41.389369][ T723] ? __kasan_check_write+0x18/0x20 [ 41.389382][ T723] ? mutex_lock_killable+0x92/0x1c0 [ 41.389397][ T723] ? __cfi_mutex_lock_killable+0x10/0x10 [ 41.389411][ T723] ? proc_fail_nth_write+0x17e/0x210 [ 41.389425][ T723] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 41.389438][ T723] kvm_vcpu_ioctl+0x77c/0xee0 [ 41.389453][ T723] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 41.389467][ T723] ? __cfi_vfs_write+0x10/0x10 [ 41.389477][ T723] ? __kasan_check_write+0x18/0x20 [ 41.389490][ T723] ? mutex_unlock+0x8b/0x240 [ 41.389504][ T723] ? __cfi_mutex_unlock+0x10/0x10 [ 41.389518][ T723] ? __fget_files+0x2c5/0x340 [ 41.389529][ T723] ? __fget_files+0x2c5/0x340 [ 41.389540][ T723] ? bpf_lsm_file_ioctl+0xd/0x20 [ 41.389553][ T723] ? security_file_ioctl+0x34/0xd0 [ 41.389564][ T723] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 41.389578][ T723] __se_sys_ioctl+0x132/0x1b0 [ 41.389588][ T723] __x64_sys_ioctl+0x7f/0xa0 [ 41.389599][ T723] x64_sys_call+0x1878/0x2ee0 [ 41.389613][ T723] do_syscall_64+0x58/0xf0 [ 41.389625][ T723] ? clear_bhb_loop+0x50/0xa0 [ 41.389635][ T723] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.389650][ T723] RIP: 0033:0x7f72dbd8ebe9 [ 41.389663][ T723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.389671][ T723] RSP: 002b:00007f72da7e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.389686][ T723] RAX: ffffffffffffffda RBX: 00007f72dbfb5fa0 RCX: 00007f72dbd8ebe9 [ 41.389694][ T723] RDX: 0000200000000300 RSI: 000000004400ae8f RDI: 0000000000000005 [ 41.389701][ T723] RBP: 00007f72da7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 41.389707][ T723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.389714][ T723] R13: 00007f72dbfb6038 R14: 00007f72dbfb5fa0 R15: 00007ffd5dfb23e8 [ 41.389722][ T723] [ 41.453547][ T9] usb usb4-port1: unable to enumerate USB device [ 41.799822][ T36] audit: type=1400 audit(1756177550.030:236): avc: denied { watch } for pid=726 comm="syz.1.123" path=2F35362FAA dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.830833][ T36] audit: type=1400 audit(1756177550.060:237): avc: denied { getopt } for pid=728 comm="syz.1.124" laddr=fe80::a8aa:aaff:feaa:aa16 lport=35765 faddr=ff02::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.831962][ T729] netlink: 72 bytes leftover after parsing attributes in process `syz.1.124'. [ 41.857420][ T36] audit: type=1400 audit(1756177550.060:238): avc: denied { mounton } for pid=728 comm="syz.1.124" path="mnt:[4026532295]" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.959512][ T733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.968801][ T733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.090958][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 42.102394][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 42.114789][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 42.126322][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 42.138939][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 42.150337][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 42.161735][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 42.173727][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 42.185483][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 42.203573][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 42.229579][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 42.240837][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 42.252928][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 42.263956][ T743] FAULT_INJECTION: forcing a failure. [ 42.263956][ T743] name failslab, interval 1, probability 0, space 0, times 1 [ 42.264625][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 42.279132][ T743] CPU: 0 UID: 0 PID: 743 Comm: syz.3.130 Not tainted syzkaller #0 6e51b6b85230f66418c68cf4df55f7a3259ed786 [ 42.279161][ T743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.279172][ T743] Call Trace: [ 42.279178][ T743] [ 42.279185][ T743] __dump_stack+0x21/0x30 [ 42.279213][ T743] dump_stack_lvl+0x10c/0x190 [ 42.279234][ T743] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.279257][ T743] dump_stack+0x19/0x20 [ 42.279277][ T743] should_fail_ex+0x3d9/0x530 [ 42.279308][ T743] should_failslab+0xac/0x100 [ 42.279326][ T743] __kmalloc_node_noprof+0x6c/0x450 [ 42.279351][ T743] ? __kvmalloc_node_noprof+0x11d/0x300 [ 42.279374][ T743] __kvmalloc_node_noprof+0x11d/0x300 [ 42.279397][ T743] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 42.279420][ T743] ? xa_find+0x11b/0x170 [ 42.279446][ T743] kvm_recalculate_apic_map+0x442/0x1590 [ 42.279464][ T743] ? __kasan_check_write+0x18/0x20 [ 42.279487][ T743] ? static_key_dec_not_one+0x148/0x1c0 [ 42.279510][ T743] ? __static_key_slow_dec_deferred+0x100/0x100 [ 42.279534][ T743] ? __cfi_kvm_recalculate_apic_map+0x10/0x10 [ 42.279552][ T743] kvm_apic_set_state+0x54b/0x1910 [ 42.279575][ T743] kvm_vcpu_ioctl_set_lapic+0x23/0x190 [ 42.279602][ T743] kvm_arch_vcpu_ioctl+0x1081/0x2e50 [ 42.279628][ T743] ? avc_has_perm+0x144/0x220 [ 42.279650][ T743] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 42.279676][ T743] ? selinux_file_open+0x457/0x610 [ 42.279696][ T743] ? __cfi_selinux_file_open+0x10/0x10 [ 42.279718][ T743] ? is_bpf_text_address+0x17b/0x1a0 [ 42.279736][ T743] ? kernel_text_address+0xa9/0xe0 [ 42.279763][ T743] ? __kernel_text_address+0x11/0x40 [ 42.279784][ T743] ? do_vfs_ioctl+0xeda/0x1e30 [ 42.279802][ T743] ? arch_stack_walk+0x10b/0x170 [ 42.279827][ T743] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 42.279846][ T743] ? _parse_integer_limit+0x195/0x1e0 [ 42.279869][ T743] ? _parse_integer+0x2e/0x40 [ 42.279891][ T743] ? kstrtoull+0x13b/0x1e0 [ 42.279912][ T743] ? kstrtouint+0x78/0xf0 [ 42.279934][ T743] ? ioctl_has_perm+0x1aa/0x4d0 [ 42.279952][ T743] ? __asan_memcpy+0x5a/0x80 [ 42.279976][ T743] ? ioctl_has_perm+0x3e0/0x4d0 [ 42.279994][ T743] ? has_cap_mac_admin+0xd0/0xd0 [ 42.280014][ T743] ? __kasan_check_write+0x18/0x20 [ 42.280036][ T743] ? mutex_lock_killable+0x92/0x1c0 [ 42.280070][ T743] ? __cfi_mutex_lock_killable+0x10/0x10 [ 42.280094][ T743] ? proc_fail_nth_write+0x17e/0x210 [ 42.280116][ T743] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 42.280138][ T743] kvm_vcpu_ioctl+0x77c/0xee0 [ 42.280163][ T743] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 42.280187][ T743] ? __cfi_vfs_write+0x10/0x10 [ 42.280202][ T743] ? __kasan_check_write+0x18/0x20 [ 42.280225][ T743] ? mutex_unlock+0x8b/0x240 [ 42.280248][ T743] ? __cfi_mutex_unlock+0x10/0x10 [ 42.280271][ T743] ? __fget_files+0x2c5/0x340 [ 42.280289][ T743] ? __fget_files+0x2c5/0x340 [ 42.280307][ T743] ? bpf_lsm_file_ioctl+0xd/0x20 [ 42.280329][ T743] ? security_file_ioctl+0x34/0xd0 [ 42.280347][ T743] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 42.280371][ T743] __se_sys_ioctl+0x132/0x1b0 [ 42.280389][ T743] __x64_sys_ioctl+0x7f/0xa0 [ 42.280407][ T743] x64_sys_call+0x1878/0x2ee0 [ 42.280430][ T743] do_syscall_64+0x58/0xf0 [ 42.280450][ T743] ? clear_bhb_loop+0x50/0xa0 [ 42.280467][ T743] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.280492][ T743] RIP: 0033:0x7f937218ebe9 [ 42.280507][ T743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.280521][ T743] RSP: 002b:00007f9372fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.280540][ T743] RAX: ffffffffffffffda RBX: 00007f93723b5fa0 RCX: 00007f937218ebe9 [ 42.280553][ T743] RDX: 0000200000000300 RSI: 000000004400ae8f RDI: 0000000000000005 [ 42.280565][ T743] RBP: 00007f9372fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 42.280577][ T743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.280588][ T743] R13: 00007f93723b6038 R14: 00007f93723b5fa0 R15: 00007ffe5b839b88 [ 42.280603][ T743] [ 42.311024][ T745] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 42.313069][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 42.337718][ T750] SELinux: security_context_str_to_sid () failed with errno=-22 [ 42.339869][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 42.532474][ T756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.535404][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 42.539981][ T758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:179 [ 42.553523][ T756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.574851][ T756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.579138][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 42.598678][ T756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.611260][ T491] ax88179_178a 1-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, b6:2c:f5:00:42:61 [ 42.631656][ T756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.657288][ T491] usb 1-1: USB disconnect, device number 8 [ 42.666364][ T764] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.693579][ T770] /dev/rnullb0: Can't open blockdev [ 42.714962][ T491] ax88179_178a 1-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 42.787301][ T36] audit: type=1400 audit(1756177551.000:239): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.806327][ T781] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 42.826590][ T36] audit: type=1400 audit(1756177551.000:240): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.904101][ T36] audit: type=1400 audit(1756177551.000:241): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=1146 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.937105][ T36] audit: type=1400 audit(1756177551.000:242): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1146 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.963799][ T36] audit: type=1400 audit(1756177551.000:243): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1146 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.987041][ T36] audit: type=1400 audit(1756177551.030:244): avc: denied { read } for pid=778 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.040553][ T803] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.203429][ T460] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 43.233397][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 43.323423][ T491] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 43.363377][ T460] usb 3-1: Using ep0 maxpacket: 32 [ 43.369862][ T460] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 43.378110][ T460] usb 3-1: config 0 has no interface number 0 [ 43.385776][ T460] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 43.394511][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.394975][ T460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.405426][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 43.413209][ T460] usb 3-1: Product: syz [ 43.423390][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.427241][ T460] usb 3-1: Manufacturer: syz [ 43.441798][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.444641][ T460] usb 3-1: SerialNumber: syz [ 43.445344][ T460] usb 3-1: config 0 descriptor?? [ 43.463362][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.464507][ T460] smsc95xx v2.0.0 [ 43.471567][ T9] usb 4-1: Product: syz [ 43.479255][ T9] usb 4-1: Manufacturer: syz [ 43.483973][ T9] usb 4-1: SerialNumber: syz [ 43.484605][ T491] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 43.489660][ T797] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 43.496872][ T491] usb 1-1: config 0 has no interface number 0 [ 43.510149][ T491] usb 1-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 43.521149][ T491] usb 1-1: config 0 interface 214 has no altsetting 0 [ 43.529385][ T491] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 43.538726][ T491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.546855][ T491] usb 1-1: Product: syz [ 43.551033][ T491] usb 1-1: Manufacturer: syz [ 43.555757][ T491] usb 1-1: SerialNumber: syz [ 43.561117][ T491] usb 1-1: config 0 descriptor?? [ 43.566649][ T803] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 43.605912][ T822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.605945][ T822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.774914][ T803] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 43.870026][ T835] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=16406 sclass=netlink_xfrm_socket pid=835 comm=syz.1.149 [ 44.067512][ T460] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 44.082434][ T460] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 44.092540][ T460] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 44.103725][ T460] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 44.111469][ T9] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 44.118102][ T460] usb 3-1: USB disconnect, device number 12 [ 44.119973][ T9] cdc_ncm 4-1:1.0: bind() failure [ 44.132206][ T840] capability: warning: `syz.1.150' uses 32-bit capabilities (legacy support in use) [ 44.146630][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 44.155832][ T9] cdc_ncm 4-1:1.1: bind() failure [ 44.165191][ T9] usb 4-1: USB disconnect, device number 12 [ 44.503034][ T857] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 44.510241][ T857] rust_binder: Write failure EINVAL in pid:225 [ 44.519503][ T860] overlay: Unknown parameter 'subj_user' [ 44.608608][ T869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.159'. [ 44.648286][ T870] 9pnet_fd: Insufficient options for proto=fd [ 44.726220][ T875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:98 [ 44.726374][ T875] rust_binder: Write failure EINVAL in pid:98 [ 44.903861][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 44.921328][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 44.932124][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 45.521586][ T886] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 45.525557][ T883] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096) [ 45.531107][ T883] rust_binder: Error while translating object. [ 45.535831][ T886] kvm: kvm [884]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000013) = 0x0 [ 45.543598][ T883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.561027][ T883] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 45.570905][ T883] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:242 [ 45.583628][ T888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.654066][ T896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 45.670929][ T896] netlink: 'syz.3.166': attribute type 3 has an invalid length. [ 45.851029][ T906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.859690][ T460] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 45.860444][ T906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.878848][ T906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.887454][ T906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.024528][ T460] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.035538][ T460] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.052976][ T460] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.062208][ T460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.070774][ T460] usb 3-1: Product: syz [ 46.075082][ T460] usb 3-1: Manufacturer: syz [ 46.079692][ T460] usb 3-1: SerialNumber: syz [ 46.086790][ T460] cdc_ncm 3-1:1.0: skipping garbage [ 46.092021][ T460] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 46.099463][ T460] cdc_ncm 3-1:1.0: bind() failure [ 46.105334][ T460] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 46.112133][ T460] cdc_ncm 3-1:1.1: bind() failure [ 46.162087][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 46.173225][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 46.184464][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 46.195567][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 46.206618][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 46.217630][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 46.228760][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 46.239968][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 46.251155][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 46.262414][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 46.273716][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 46.284820][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 46.287745][ T9] usb 3-1: USB disconnect, device number 13 [ 46.295936][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 46.313761][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 46.324942][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 46.336153][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 46.347331][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 46.358463][ T491] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 46.371152][ T491] ax88179_178a 1-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 7a:2a:d6:da:a4:52 [ 46.389332][ T491] usb 1-1: USB disconnect, device number 9 [ 46.395700][ T491] ax88179_178a 1-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 46.441943][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 46.441961][ T36] audit: type=1400 audit(1756177554.670:264): avc: denied { block_suspend } for pid=912 comm="syz.2.172" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.492368][ T36] audit: type=1400 audit(1756177554.720:265): avc: denied { module_load } for pid=912 comm="syz.2.172" path="/sys/power/wakeup_count" dev="sysfs" ino=1463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 46.591876][ T940] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 46.614008][ T46] bridge_slave_1: left allmulticast mode [ 46.619777][ T46] bridge_slave_1: left promiscuous mode [ 46.631305][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.644142][ T46] bridge_slave_0: left allmulticast mode [ 46.671072][ T46] bridge_slave_0: left promiscuous mode [ 46.680444][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.784764][ T954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.794281][ T954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.803339][ T36] audit: type=1400 audit(1756177555.030:266): avc: denied { mounton } for pid=961 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.804949][ T954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.839491][ T954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.847535][ T46] veth1_macvtap: left promiscuous mode [ 46.853097][ T46] veth0_vlan: left promiscuous mode [ 46.897619][ T961] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.904808][ T961] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.911954][ T961] bridge_slave_0: entered allmulticast mode [ 46.918336][ T961] bridge_slave_0: entered promiscuous mode [ 46.924742][ T961] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.931778][ T961] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.938864][ T961] bridge_slave_1: entered allmulticast mode [ 46.945395][ T961] bridge_slave_1: entered promiscuous mode [ 46.988158][ T961] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.995422][ T961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.002698][ T961] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.009835][ T961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.028034][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.035446][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.045221][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.052301][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.061603][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.068757][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.091906][ T961] veth0_vlan: entered promiscuous mode [ 47.102647][ T961] veth1_macvtap: entered promiscuous mode [ 47.120277][ T36] audit: type=1400 audit(1756177555.350:267): avc: denied { mounton } for pid=961 comm="syz-executor" path="/root/syzkaller.pX0khD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 47.158951][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.165361][ T36] audit: type=1400 audit(1756177555.390:268): avc: denied { read } for pid=971 comm="syz.4.186" path="socket:[8672]" dev="sockfs" ino=8672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.323856][ T36] audit: type=1400 audit(1756177555.560:269): avc: denied { write } for pid=975 comm="syz.0.182" name="file2" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.346242][ T36] audit: type=1400 audit(1756177555.560:270): avc: denied { open } for pid=975 comm="syz.0.182" path="/22/file2" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.369188][ T36] audit: type=1400 audit(1756177555.560:271): avc: denied { ioctl } for pid=975 comm="syz.0.182" path="/22/file2" dev="tmpfs" ino=134 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.405590][ T980] /dev/rnullb0: Can't open blockdev [ 47.440755][ T984] input: syz1 as /devices/virtual/input/input7 [ 47.536827][ T36] audit: type=1400 audit(1756177555.770:272): avc: denied { wake_alarm } for pid=987 comm="syz.2.187" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.943416][ T65] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 48.094386][ T65] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 48.102637][ T65] usb 3-1: config 0 has no interface number 0 [ 48.108883][ T65] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 48.119955][ T65] usb 3-1: config 0 interface 214 has no altsetting 0 [ 48.128800][ T65] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 48.137881][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.146066][ T65] usb 3-1: Product: syz [ 48.150239][ T65] usb 3-1: Manufacturer: syz [ 48.155025][ T65] usb 3-1: SerialNumber: syz [ 48.161534][ T65] usb 3-1: config 0 descriptor?? [ 48.166973][ T992] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.271203][ T997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.271272][ T998] rust_binder: Write failure EINVAL in pid:279 [ 48.279739][ T998] rust_binder: Write failure EINVAL in pid:279 [ 48.287201][ T998] rust_binder: Write failure EINVAL in pid:279 [ 48.293559][ T998] rust_binder: Write failure EINVAL in pid:279 [ 48.374811][ T992] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.408321][ T36] audit: type=1400 audit(1756177556.640:273): avc: denied { read write } for pid=1008 comm="syz.0.193" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.465879][ T1017] netlink: 'syz.0.195': attribute type 63 has an invalid length. [ 48.483362][ T1017] netlink: 5 bytes leftover after parsing attributes in process `syz.0.195'. [ 48.492408][ T1017] gretap0: entered allmulticast mode [ 48.498183][ T1017] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 48.575962][ T1021] netlink: 'syz.1.197': attribute type 2 has an invalid length. [ 48.954445][ T1019] SELinux: ebitmap: truncated map [ 48.982356][ T1019] SELinux: failed to load policy [ 48.988160][ T1023] overlayfs: failed to resolve './file1': -2 [ 49.026054][ T1038] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.032388][ T1040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.067703][ T1040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.184856][ T437] Bluetooth: hci0: command 0x1003 tx timeout [ 49.193010][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.343370][ T460] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 49.493375][ T460] usb 1-1: Using ep0 maxpacket: 16 [ 49.502897][ T460] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.523726][ T460] usb 1-1: config 0 has no interfaces? [ 49.523742][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 49.540373][ T460] usb 1-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice= 5.2b [ 49.541757][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 49.549538][ T460] usb 1-1: New USB device strings: Mfr=1, Product=199, SerialNumber=3 [ 49.568797][ T460] usb 1-1: Product: syz [ 49.572967][ T460] usb 1-1: Manufacturer: syz [ 49.577615][ T460] usb 1-1: SerialNumber: syz [ 49.584243][ T460] usb 1-1: config 0 descriptor?? [ 49.594060][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 49.797254][ T1044] rust_binder: 88: no such ref 1 [ 49.802255][ T1044] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 49.809396][ T1044] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 198) [ 49.809414][ T1044] rust_binder: Error while translating object. [ 49.820006][ T1044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.827453][ T1044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 49.838165][ T433] usb 1-1: USB disconnect, device number 10 [ 49.864271][ T1054] /dev/rnullb0: Can't open blockdev [ 49.883687][ T1056] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.891182][ T1056] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.898920][ T1056] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.906372][ T1056] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.913822][ T1056] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.921283][ T1056] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.928813][ T1056] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.974902][ T1064] mmap: syz.4.210 (1064): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 50.223955][ T338] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.380760][ T338] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.391146][ T338] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.395135][ T1068] syzkaller0: refused to change device tx_queue_len [ 50.401258][ T338] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 50.415860][ T338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 50.424134][ T338] usb 5-1: SerialNumber: syz [ 50.518028][ T1071] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 50.532455][ T1071] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 50.634427][ T338] usb 5-1: 0:2 : does not exist [ 50.642628][ T338] usb 5-1: USB disconnect, device number 2 [ 50.825367][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 50.836532][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 50.847894][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 50.859206][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 50.870460][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 50.881902][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 50.893243][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 50.906222][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 50.917758][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 50.929176][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 50.940614][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 50.952728][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 50.964229][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 50.975593][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 50.987234][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 50.998751][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 51.010642][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 51.022234][ T65] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 51.035491][ T65] ax88179_178a 3-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 9a:38:05:b9:f6:95 [ 51.054215][ T65] usb 3-1: USB disconnect, device number 14 [ 51.060657][ T65] ax88179_178a 3-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 51.400371][ T1111] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 51.400395][ T1111] rust_binder: Read failure Err(EFAULT) in pid:104 [ 51.408489][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.422949][ T1112] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.423055][ T1111] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.430815][ T1112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104 [ 51.583358][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 51.599034][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.609726][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.620266][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.629590][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.641758][ T9] usb 5-1: Product: syz [ 51.646295][ T9] usb 5-1: Manufacturer: syz [ 51.651066][ T9] usb 5-1: SerialNumber: syz [ 51.713848][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 51.713865][ T36] audit: type=1400 audit(1756177559.950:285): avc: denied { relabelfrom } for pid=1130 comm="syz.1.224" name="" dev="pipefs" ino=9518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 51.742518][ T65] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 51.769976][ T1135] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.787926][ T1137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.795304][ T1137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 51.801834][ T1137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:329 [ 51.812703][ T1138] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.837983][ T36] audit: type=1400 audit(1756177560.070:286): avc: denied { read } for pid=1141 comm="syz.1.227" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.868323][ T1083] rust_binder: Got transaction with invalid offset. [ 51.868418][ T1083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.875278][ T1083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 51.885011][ T36] audit: type=1400 audit(1756177560.070:287): avc: denied { open } for pid=1141 comm="syz.1.227" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.918139][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 51.924704][ T9] usb 5-1: 0:2 : does not exist [ 51.930470][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 51.939988][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 51.947929][ T65] usb 1-1: config 1 has an invalid interface number: 119 but max is 1 [ 51.956566][ T65] usb 1-1: config 1 has an invalid interface number: 12 but max is 1 [ 51.964952][ T65] usb 1-1: config 1 has no interface number 0 [ 51.971142][ T65] usb 1-1: config 1 has no interface number 1 [ 51.977635][ T65] usb 1-1: config 1 interface 119 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 51.988875][ T65] usb 1-1: config 1 interface 119 has no altsetting 0 [ 51.999142][ T9] usb 5-1: USB disconnect, device number 3 [ 52.006404][ T65] usb 1-1: New USB device found, idVendor=0582, idProduct=cb53, bcdDevice=39.17 [ 52.015885][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.019702][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.044882][ T65] usb 1-1: Product: syz [ 52.053493][ T65] usb 1-1: Manufacturer: syz [ 52.061059][ T65] usb 1-1: SerialNumber: syz [ 52.079511][ T1149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.272088][ T36] audit: type=1400 audit(1756177560.500:288): avc: denied { ioctl } for pid=1153 comm="syz.2.230" path="mnt:[4026532386]" dev="nsfs" ino=4026532386 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.274923][ T1117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.278738][ T36] audit: type=1400 audit(1756177560.510:289): avc: denied { write } for pid=1115 comm="syz.0.220" path="socket:[9543]" dev="sockfs" ino=9543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.304371][ T1117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.346990][ T36] audit: type=1400 audit(1756177560.580:290): avc: denied { getopt } for pid=1115 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.406044][ T65] usb 1-1: USB disconnect, device number 11 [ 52.411899][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.12/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.451930][ T36] audit: type=1400 audit(1756177560.680:291): avc: denied { map } for pid=1158 comm="syz.4.231" path="socket:[9556]" dev="sockfs" ino=9556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.475433][ T36] audit: type=1400 audit(1756177560.680:292): avc: denied { read } for pid=1158 comm="syz.4.231" path="socket:[9556]" dev="sockfs" ino=9556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.542937][ T36] audit: type=1400 audit(1756177560.770:293): avc: denied { create } for pid=1161 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 52.543108][ T1162] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 52.562518][ T1162] rust_binder: Error while translating object. [ 52.571363][ T1162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.577647][ T1162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 53.316591][ T36] audit: type=1400 audit(1756177561.550:294): avc: denied { getopt } for pid=1176 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.418522][ T1182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.427118][ T1182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.683471][ T338] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 53.743384][ T460] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 53.833367][ T338] usb 3-1: Using ep0 maxpacket: 32 [ 53.839604][ T338] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.850531][ T338] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.863539][ T338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 53.870136][ T338] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 53.879400][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.888108][ T338] usb 3-1: config 0 descriptor?? [ 53.904530][ T460] usb 5-1: config 0 has no interfaces? [ 53.911400][ T460] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.50 [ 53.920524][ T460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.928650][ T460] usb 5-1: Product: syz [ 53.932831][ T460] usb 5-1: Manufacturer: syz [ 53.937452][ T460] usb 5-1: SerialNumber: syz [ 53.942727][ T460] usb 5-1: config 0 descriptor?? [ 53.964295][ T460] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.976119][ T460] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.154186][ T65] usb 5-1: USB disconnect, device number 4 [ 54.288696][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.414272][ T338] cherry 0003:046A:0023.0006: item fetching failed at offset 0/3 [ 54.422411][ T338] cherry 0003:046A:0023.0006: probe with driver cherry failed with error -22 [ 54.601604][ T1222] input: syz0 as /devices/virtual/input/input10 [ 54.630637][ T1224] veth1_macvtap: left promiscuous mode [ 54.637649][ T1224] veth1_macvtap: entered promiscuous mode [ 54.883411][ T338] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 55.033364][ T338] usb 1-1: Using ep0 maxpacket: 32 [ 55.039590][ T338] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 55.047768][ T338] usb 1-1: config 0 has no interface number 0 [ 55.055210][ T338] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 55.064298][ T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.072384][ T338] usb 1-1: Product: syz [ 55.076597][ T338] usb 1-1: Manufacturer: syz [ 55.081185][ T338] usb 1-1: SerialNumber: syz [ 55.086453][ T338] usb 1-1: config 0 descriptor?? [ 55.092320][ T338] smsc95xx v2.0.0 [ 55.204596][ T460] usb 3-1: USB disconnect, device number 15 [ 55.492780][ T338] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 55.503697][ T338] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 55.547412][ T460] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 55.703390][ T460] usb 3-1: Using ep0 maxpacket: 16 [ 55.709648][ T460] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 55.717813][ T460] usb 3-1: config 0 has no interface number 0 [ 55.724100][ T460] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 55.734039][ T460] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 55.744145][ T460] usb 3-1: config 0 interface 41 has no altsetting 0 [ 55.752589][ T460] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 55.762045][ T460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.770102][ T460] usb 3-1: Product: syz [ 55.774298][ T460] usb 3-1: Manufacturer: syz [ 55.778928][ T460] usb 3-1: SerialNumber: syz [ 55.784235][ T460] usb 3-1: config 0 descriptor?? [ 55.789500][ T1226] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.796758][ T1226] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.803998][ T31] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 55.954417][ T31] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 55.965492][ T31] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.975247][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 55.981879][ T31] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 55.991092][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.999819][ T31] usb 5-1: config 0 descriptor?? [ 56.012278][ T1226] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 56.019558][ T1226] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 56.303395][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.303396][ T437] Bluetooth: hci0: command 0x1003 tx timeout [ 56.407825][ T31] uclogic 0003:5543:0042.0007: unknown main item tag 0x0 [ 56.415049][ T31] uclogic 0003:5543:0042.0007: unknown main item tag 0x0 [ 56.422094][ T31] uclogic 0003:5543:0042.0007: unknown main item tag 0x0 [ 56.429410][ T31] uclogic 0003:5543:0042.0007: No inputs registered, leaving [ 56.437701][ T31] uclogic 0003:5543:0042.0007: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 56.609181][ T31] usb 5-1: USB disconnect, device number 5 [ 56.629638][ T460] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 56.695000][ T1241] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.733769][ T1248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.748788][ T1248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.120838][ T338] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 57.131666][ T338] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 57.140827][ T338] usb 1-1: USB disconnect, device number 12 [ 57.270850][ T1255] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.633787][ T1261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.640359][ T1262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 57.647129][ T1262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:119 [ 57.654161][ T460] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 57.676875][ T460] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 57.686928][ T460] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 57.697167][ T460] usb 3-1: USB disconnect, device number 16 [ 57.728589][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 57.728606][ T36] audit: type=1326 audit(1756177565.960:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1265 comm="syz.0.263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f930d58ebe9 code=0x0 [ 58.213059][ T1274] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 58.221817][ T1274] rust_binder: Write failure EINVAL in pid:151 [ 58.233426][ T460] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 58.393410][ T460] usb 5-1: Using ep0 maxpacket: 16 [ 58.399822][ T460] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 58.410085][ T460] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.420976][ T460] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.430916][ T460] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 58.443905][ T460] usb 5-1: config 7 interface 0 has no altsetting 0 [ 58.450636][ T460] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 58.459718][ T460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.474818][ T461] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 58.541008][ T1281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.623376][ T461] usb 3-1: Using ep0 maxpacket: 8 [ 58.636524][ T461] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 58.644851][ T461] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 58.653404][ T461] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 58.662508][ T461] usb 3-1: config 250 has no interface number 0 [ 58.668922][ T461] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 58.680622][ T461] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 58.691366][ T461] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.701812][ T461] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 58.712306][ T461] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 58.725972][ T461] usb 3-1: config 250 interface 228 has no altsetting 0 [ 58.734216][ T461] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 58.743474][ T461] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 58.751835][ T461] usb 3-1: Product: syz [ 58.756313][ T461] usb 3-1: SerialNumber: syz [ 58.763245][ T461] hub 3-1:250.228: bad descriptor, ignoring hub [ 58.769604][ T461] hub 3-1:250.228: probe with driver hub failed with error -5 [ 58.788801][ T36] audit: type=1400 audit(1756177567.020:303): avc: denied { append } for pid=1289 comm="syz.1.272" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.811560][ T31] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 58.828650][ T1295] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.885273][ T1272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.901181][ T1272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.918459][ T460] hid (null): unknown global tag 0x70 [ 58.923998][ T460] hid (null): unknown global tag 0xb9 [ 58.933764][ T460] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0008/input/input11 [ 58.951386][ T460] kye 0003:0458:5010.0008: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 58.964168][ T36] audit: type=1400 audit(1756177567.200:304): avc: denied { connect } for pid=1276 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.966764][ T461] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 58.987569][ T31] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 59.010699][ T31] usb 1-1: config 0 has no interface number 0 [ 59.017132][ T31] usb 1-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 59.030555][ T31] usb 1-1: config 0 interface 214 has no altsetting 0 [ 59.038902][ T31] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 59.048640][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.049663][ T1307] rust_binder: Write failure EFAULT in pid:401 [ 59.056746][ T31] usb 1-1: Product: syz [ 59.067326][ T31] usb 1-1: Manufacturer: syz [ 59.072649][ T31] usb 1-1: SerialNumber: syz [ 59.078234][ T31] usb 1-1: config 0 descriptor?? [ 59.084981][ T1281] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 59.085844][ T1309] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 59.105350][ T1309] netlink: 'syz.1.277': attribute type 17 has an invalid length. [ 59.144016][ T460] usb 5-1: USB disconnect, device number 6 [ 59.157640][ T1314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.173148][ T36] audit: type=1400 audit(1756177567.400:305): avc: denied { read write } for pid=1276 comm="syz.2.267" name="lp0" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 59.203571][ T36] audit: type=1400 audit(1756177567.400:306): avc: denied { open } for pid=1276 comm="syz.2.267" path="/dev/usb/lp0" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 59.263544][ T338] usb 3-1: USB disconnect, device number 17 [ 59.270324][ T338] usblp0: removed [ 59.300899][ T1281] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 59.857784][ T36] audit: type=1400 audit(1756177568.090:307): avc: denied { ioctl } for pid=1319 comm="syz.2.280" path="socket:[10198]" dev="sockfs" ino=10198 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.935567][ T1324] rust_binder: 69: no such ref 2 [ 59.940703][ T1325] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 59.940992][ T1327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 59.948169][ T1325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:69 [ 60.041562][ T65] rust_binder: 1319: removing orphan mapping 0:24 [ 60.053419][ T36] audit: type=1400 audit(1756177568.290:308): avc: denied { map } for pid=1335 comm="syz.2.285" path="socket:[11335]" dev="sockfs" ino=11335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 60.087606][ T1338] /dev/rnullb0: Can't open blockdev [ 60.126684][ T1348] netlink: 5 bytes leftover after parsing attributes in process `syz.2.289'. [ 60.136588][ T1348] 0ªö»ôM: renamed from gretap0 (while UP) [ 60.144159][ T1348] 0ªö»ôM: entered allmulticast mode [ 60.149809][ T1348] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 60.151860][ T1352] rust_binder: Write failure EFAULT in pid:84 [ 60.166584][ T1348] binder: Unknown parameter 's' [ 60.185120][ T1354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.185151][ T1354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 60.203094][ T36] audit: type=1400 audit(1756177568.430:309): avc: denied { read write } for pid=1356 comm="syz.4.293" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 60.236796][ T36] audit: type=1400 audit(1756177568.430:310): avc: denied { open } for pid=1356 comm="syz.4.293" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 60.284485][ T1370] rust_binder: Fixups oob 164 166 363 196 [ 60.284513][ T1370] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 60.286553][ T1373] syz.2.295: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 60.290554][ T1370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.299647][ T1373] ,cpuset= [ 60.312891][ T1370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 60.321305][ T1373] syz2,mems_allowed=0 [ 60.336910][ T1373] CPU: 0 UID: 0 PID: 1373 Comm: syz.2.295 Not tainted syzkaller #0 6e51b6b85230f66418c68cf4df55f7a3259ed786 [ 60.336939][ T1373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.336950][ T1373] Call Trace: [ 60.336957][ T1373] [ 60.336964][ T1373] __dump_stack+0x21/0x30 [ 60.336993][ T1373] dump_stack_lvl+0x10c/0x190 [ 60.337014][ T1373] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.337034][ T1373] dump_stack+0x19/0x20 [ 60.337050][ T1373] warn_alloc+0x1bc/0x2a0 [ 60.337067][ T1373] ? stack_depot_save_flags+0x38/0x800 [ 60.337093][ T1373] ? __cfi_warn_alloc+0x10/0x10 [ 60.337115][ T1373] ? kasan_save_track+0x4f/0x80 [ 60.337134][ T1373] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 60.337162][ T1373] ? xskq_create+0x68/0x2a0 [ 60.337188][ T1373] ? xsk_init_queue+0xb6/0x120 [ 60.337211][ T1373] ? xsk_setsockopt+0x43f/0x6f0 [ 60.337230][ T1373] ? do_sock_setsockopt+0x26a/0x400 [ 60.337253][ T1373] ? __x64_sys_setsockopt+0x1b8/0x250 [ 60.337283][ T1373] ? x64_sys_call+0x2adc/0x2ee0 [ 60.337308][ T1373] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.337336][ T1373] __vmalloc_node_range_noprof+0x135/0x1420 [ 60.337364][ T1373] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 60.337387][ T1373] ? avc_has_perm+0x144/0x220 [ 60.337410][ T1373] ? kasan_save_alloc_info+0x40/0x50 [ 60.337434][ T1373] ? __kasan_kmalloc+0x96/0xb0 [ 60.337453][ T1373] vmalloc_user_noprof+0x77/0x90 [ 60.337476][ T1373] ? xskq_create+0xdb/0x2a0 [ 60.337498][ T1373] xskq_create+0xdb/0x2a0 [ 60.337523][ T1373] xsk_init_queue+0xb6/0x120 [ 60.337546][ T1373] xsk_setsockopt+0x43f/0x6f0 [ 60.337569][ T1373] ? __cfi_xsk_setsockopt+0x10/0x10 [ 60.337592][ T1373] ? do_futex+0x309/0x500 [ 60.337611][ T1373] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 60.337634][ T1373] ? security_socket_setsockopt+0x33/0xd0 [ 60.337651][ T1373] ? __cfi_xsk_setsockopt+0x10/0x10 [ 60.337674][ T1373] do_sock_setsockopt+0x26a/0x400 [ 60.337698][ T1373] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 60.337724][ T1373] __x64_sys_setsockopt+0x1b8/0x250 [ 60.337749][ T1373] x64_sys_call+0x2adc/0x2ee0 [ 60.337774][ T1373] do_syscall_64+0x58/0xf0 [ 60.337795][ T1373] ? clear_bhb_loop+0x50/0xa0 [ 60.337813][ T1373] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.337840][ T1373] RIP: 0033:0x7f3e5b98ebe9 [ 60.337857][ T1373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.337875][ T1373] RSP: 002b:00007f3e5a3d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.337896][ T1373] RAX: ffffffffffffffda RBX: 00007f3e5bbb6090 RCX: 00007f3e5b98ebe9 [ 60.337912][ T1373] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 60.337925][ T1373] RBP: 00007f3e5ba11e19 R08: 0000000000000004 R09: 0000000000000000 [ 60.337939][ T1373] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.337952][ T1373] R13: 00007f3e5bbb6128 R14: 00007f3e5bbb6090 R15: 00007ffd54281718 [ 60.337969][ T1373] [ 60.337997][ T1373] Mem-Info: [ 60.454022][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 60.459753][ T1373] active_anon:8908 inactive_anon:1 isolated_anon:0 [ 60.459753][ T1373] active_file:19088 inactive_file:2194 isolated_file:0 [ 60.459753][ T1373] unevictable:0 dirty:109 writeback:0 [ 60.459753][ T1373] slab_reclaimable:5769 slab_unreclaimable:70303 [ 60.459753][ T1373] mapped:24263 shmem:166 pagetables:937 [ 60.459753][ T1373] sec_pagetables:0 bounce:0 [ 60.459753][ T1373] kernel_misc_reclaimable:0 [ 60.459753][ T1373] free:1522507 free_pcp:2318 free_cma:0 [ 60.465522][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 60.469512][ T1373] Node 0 active_anon:35632kB inactive_anon:4kB active_file:76352kB inactive_file:8776kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97052kB dirty:436kB writeback:0kB shmem:664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5412kB pagetables:3748kB sec_pagetables:0kB all_unreclaimable? no [ 60.484495][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 60.488713][ T1373] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965964kB mlocked:0kB bounce:0kB free_pcp:5752kB local_pcp:5752kB free_cma:0kB [ 60.778757][ T1373] lowmem_reserve[]: 0 3921 3921 [ 60.783854][ T1373] Normal free:3127860kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35600kB inactive_anon:4kB active_file:76352kB inactive_file:8776kB unevictable:0kB writepending:436kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:3412kB free_cma:0kB [ 60.815269][ T1373] lowmem_reserve[]: 0 0 0 [ 60.819636][ T1373] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 60.835166][ T65] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 60.842804][ T1373] Normal: 340*4kB (UME) 934*8kB (UME) 1263*16kB (UME) 492*32kB (UME) 785*64kB (UME) 101*128kB (UME) 41*256kB (UME) 37*512kB (UME) 24*1024kB (UME) 9*2048kB (M) 719*4096kB (UM) = 3125424kB [ 60.861750][ T36] audit: type=1400 audit(1756177569.070:311): avc: denied { setopt } for pid=1378 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.881178][ T1373] 23995 total pagecache pages [ 60.885913][ T1373] 1 pages in swap cache [ 60.890140][ T1373] Free swap = 124668kB [ 60.894351][ T1373] Total swap = 124996kB [ 60.898536][ T1373] 2097051 pages RAM [ 60.902433][ T1373] 0 pages HighMem/MovableOnly [ 60.907159][ T1373] 351530 pages reserved [ 60.911336][ T1373] 0 pages cma reserved [ 60.914558][ T1383] rust_binder: Write failure EFAULT in pid:417 [ 60.917590][ T1373] Memory allocations: [ 60.927811][ T1373] 0 B 0 init/main.c:1370 func:do_initcalls [ 60.935157][ T1373] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 60.943239][ T1373] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 60.951007][ T1373] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 60.959099][ T1373] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 60.969110][ T1373] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 60.977832][ T1373] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 60.985887][ T1373] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 60.994023][ T1373] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 61.002007][ T1373] 0 B 0 init/initramfs.c:101 func:find_link [ 61.023902][ T1395] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.023926][ T1395] rust_binder: Read failure Err(EFAULT) in pid:179 [ 61.032856][ T1395] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 61.073033][ T1401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.085292][ T1405] netlink: 'syz.2.306': attribute type 27 has an invalid length. [ 61.100659][ T1405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:185 [ 61.253397][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 61.414618][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.426271][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.437781][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 61.447551][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.460537][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.469782][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.478512][ T9] usb 5-1: config 0 descriptor?? [ 61.563416][ T65] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 61.689254][ T9] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 61.703390][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 61.715597][ T9] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 61.727020][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 61.736213][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.744207][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 61.749524][ T9] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 61.772582][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 61.773335][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 61.795323][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 61.799698][ T9] usb 5-1: USB disconnect, device number 7 [ 61.812454][ T65] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 61.813593][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 61.826878][ T65] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 61.838332][ T1421] fido_id[1421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 61.859382][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 61.861885][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.873360][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 61.890353][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.898235][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 61.898890][ T65] usb 3-1: Product: syz [ 61.909843][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 61.914077][ T65] usb 3-1: Manufacturer: syz [ 61.926261][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 61.929420][ T65] usb 3-1: SerialNumber: syz [ 61.940649][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 61.949864][ T1407] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 61.956362][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 61.963841][ T65] cdc_mbim 3-1:1.0: skipping garbage [ 61.974548][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 61.992310][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 62.003878][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 62.015359][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 62.026705][ T31] ax88179_178a 1-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 62.040012][ T31] ax88179_178a 1-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, c2:de:4d:a7:fe:00 [ 62.058444][ T31] usb 1-1: USB disconnect, device number 13 [ 62.066425][ T31] ax88179_178a 1-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 62.179522][ T1407] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 62.186769][ T1407] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 62.353396][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 62.439962][ T1474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.461397][ T1481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.476574][ T1481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.504024][ T1487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.505386][ T1487] rust_binder: Error while translating object. [ 62.511936][ T1487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 62.513344][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 62.518370][ T1487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:447 [ 62.533209][ T45] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 62.552670][ T45] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.563742][ T45] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.573513][ T45] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 62.586412][ T45] usb 5-1: config 7 interface 0 has no altsetting 0 [ 62.593021][ T45] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 62.602260][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.795875][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 62.795892][ T36] audit: type=1400 audit(1756177571.030:315): avc: denied { setattr } for pid=1406 comm="syz.2.307" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.795978][ T1407] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 62.832359][ T1407] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 62.839785][ T65] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 63.042053][ T1407] rust_binder: Error while translating object. [ 63.042085][ T1407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.045882][ T45] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.000A/input/input12 [ 63.055147][ T1407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187 [ 63.059480][ T45] kye 0003:0458:5010.000A: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 63.078064][ T65] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 63.101502][ T65] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 63.108975][ T65] wwan wwan0: port wwan0mbim0 attached [ 63.116316][ T65] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 7e:52:d5:22:e8:39 [ 63.132526][ T65] usb 3-1: USB disconnect, device number 19 [ 63.143606][ T65] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 63.216615][ T65] wwan wwan0: port wwan0mbim0 disconnected [ 63.255582][ T36] audit: type=1400 audit(1756177571.490:316): avc: denied { listen } for pid=1436 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.275132][ T36] audit: type=1400 audit(1756177571.490:317): avc: denied { accept } for pid=1436 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.357897][ T461] usb 5-1: USB disconnect, device number 8 [ 71.685701][ T1527] netlink: 80 bytes leftover after parsing attributes in process `syz.0.321'. [ 71.701493][ T36] audit: type=1400 audit(1756177579.930:318): avc: denied { bind } for pid=1522 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.724588][ T36] audit: type=1400 audit(1756177579.950:319): avc: denied { ioctl } for pid=1520 comm="syz.0.321" path="socket:[12701]" dev="sockfs" ino=12701 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.765970][ T1535] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 71.820884][ T65] rust_binder: 1520: removing orphan mapping 0:112 [ 71.830598][ T65] rust_binder: 0: removing orphan mapping 112:1048 [ 71.863071][ T36] audit: type=1326 audit(1756177580.090:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1546 comm="syz.0.328" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f930d585ba7 code=0x0 [ 71.933342][ T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 72.083394][ T460] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 72.098315][ T45] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 72.111869][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.122430][ T45] usb 5-1: Product: syz [ 72.130600][ T45] usb 5-1: Manufacturer: syz [ 72.136255][ T45] usb 5-1: SerialNumber: syz [ 72.148559][ T45] usb 5-1: config 0 descriptor?? [ 72.757870][ T1562] __vm_enough_memory: pid: 1562, comm: syz.1.331, bytes: 18014402804453376 not enough memory for the allocation [ 72.842334][ T36] audit: type=1400 audit(1756177581.070:321): avc: denied { setopt } for pid=1568 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.842871][ T1569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.871212][ T1569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.885238][ T36] audit: type=1400 audit(1756177581.120:322): avc: denied { create } for pid=1568 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.333344][ T65] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 73.503391][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 73.512419][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 73.524028][ T65] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 73.535606][ T65] usb 3-1: config 0 has no interface number 0 [ 73.541805][ T65] usb 3-1: config 0 interface 253 has no altsetting 0 [ 73.573056][ T65] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=47.2a [ 73.589191][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.606542][ T65] usb 3-1: Product: syz [ 73.615234][ T65] usb 3-1: Manufacturer: syz [ 73.619944][ T65] usb 3-1: SerialNumber: syz [ 73.636735][ T65] usb 3-1: config 0 descriptor?? [ 73.658326][ T36] audit: type=1400 audit(1756177581.890:323): avc: denied { rename } for pid=1585 comm="syz.1.340" name="file0" dev="tmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 73.760985][ T1592] 9pnet_fd: Insufficient options for proto=fd [ 73.791170][ T1594] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.845307][ T65] usb_ehset_test 3-1:0.253: probe with driver usb_ehset_test failed with error -32 [ 73.864889][ T1595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:494 [ 73.869246][ T65] usb 3-1: USB disconnect, device number 20 [ 74.386119][ T1598] syz.2.344 uses obsolete (PF_INET,SOCK_PACKET) [ 74.431224][ T1607] rust_binder: Write failure EINVAL in pid:209 [ 74.450468][ T1609] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 74.469401][ T1609] binder: Unknown parameter 'fscontext?}' [ 74.664128][ T1616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.668301][ T1616] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 74.682191][ T1616] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 74.758430][ T1621] rust_binder: 1618 RLIMIT_NICE not set [ 74.878256][ T45] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 74.901437][ T45] asix 5-1:0.0: probe with driver asix failed with error -71 [ 74.913112][ T45] usb 5-1: USB disconnect, device number 9 [ 74.940315][ T1635] rust_binder: Write failure EFAULT in pid:156 [ 74.943648][ T1635] batadv_slave_1: entered promiscuous mode [ 74.968550][ T36] audit: type=1400 audit(1756177583.200:324): avc: denied { bind } for pid=1634 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.990740][ T1634] batadv_slave_1: left promiscuous mode [ 75.016790][ T1644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.034192][ T1644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.062702][ T36] audit: type=1400 audit(1756177583.290:325): avc: denied { accept } for pid=1649 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.095252][ T36] audit: type=1400 audit(1756177583.320:326): avc: denied { ioctl } for pid=1649 comm="syz.0.360" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.121161][ T36] audit: type=1400 audit(1756177583.320:327): avc: denied { map } for pid=1649 comm="syz.0.360" path="/proc/164/mounts" dev="proc" ino=13219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 75.223348][ T45] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 75.386233][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.399899][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.399979][ T1657] netlink: 180 bytes leftover after parsing attributes in process `syz.0.363'. [ 75.411075][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 75.430423][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.444287][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.453595][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.463628][ T45] usb 5-1: config 0 descriptor?? [ 75.604446][ T1667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.617934][ T1667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.876201][ T45] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 75.885496][ T45] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 75.894576][ T45] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 76.404312][ T1687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 76.464800][ T1699] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 76.472728][ T1699] SELinux: failed to load policy [ 76.528939][ T1703] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 76.534870][ T1703] syzkaller0: Linktype set failed because interface is up [ 76.761676][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 76.761694][ T36] audit: type=1400 audit(1756177584.990:332): avc: denied { mount } for pid=1721 comm="syz.2.381" name="/" dev="pstore" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 76.940381][ T45] rust_binder: 1729: removing orphan mapping 0:4224 [ 77.109111][ T1738] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 77.128321][ T1738] rust_binder: Write failure EINVAL in pid:553 [ 77.326306][ T1746] netlink: 552 bytes leftover after parsing attributes in process `syz.2.389'. [ 77.542190][ T1755] ------------[ cut here ]------------ [ 77.547741][ T1755] WARNING: CPU: 1 PID: 1755 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0 [ 77.557261][ T1755] Modules linked in: [ 77.561200][ T1755] CPU: 1 UID: 0 PID: 1755 Comm: syz.2.392 Not tainted syzkaller #0 6e51b6b85230f66418c68cf4df55f7a3259ed786 [ 77.572739][ T1755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.582847][ T1755] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 77.588797][ T1755] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 81 26 ee 05 00 0f 85 be 00 00 00 c6 05 74 26 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 77.608476][ T1755] RSP: 0018:ffffc9000faf7680 EFLAGS: 00010246 [ 77.614687][ T1755] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000000000000 [ 77.623019][ T1755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000faf7738 [ 77.631045][ T1755] RBP: ffffc9000faf77a8 R08: ffffc9000faf7737 R09: 0000000000000000 [ 77.639142][ T1755] R10: ffffc9000faf7720 R11: fffff52001f5eee7 R12: ffffc9000faf76c0 [ 77.647169][ T1755] R13: dffffc0000000000 R14: 1ffff92001f5eed4 R15: 0000000000000000 [ 77.655181][ T1755] FS: 00007f3e5a3f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 77.664880][ T1755] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.671490][ T1755] CR2: 0000200000001000 CR3: 000000011eed4000 CR4: 00000000003526b0 [ 77.679503][ T1755] DR0: 0080000000000006 DR1: 0000000000000800 DR2: 0000000000000401 [ 77.687504][ T1755] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 77.695525][ T1755] Call Trace: [ 77.698907][ T1755] [ 77.701927][ T1755] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 77.707697][ T1755] ? kasan_save_alloc_info+0x40/0x50 [ 77.713101][ T1755] ? __kasan_slab_alloc+0x73/0x90 [ 77.718163][ T1755] ? hashtab_init+0xdb/0x1f0 [ 77.722762][ T1755] ___kmalloc_large_node+0x9c/0x1d0 [ 77.728035][ T1755] ? ebitmap_read+0x21d/0x990 [ 77.732807][ T1755] ? hashtab_init+0xdb/0x1f0 [ 77.737441][ T1755] __kmalloc_large_node_noprof+0x1e/0xe0 [ 77.743090][ T1755] ? hashtab_init+0xdb/0x1f0 [ 77.747738][ T1755] __kmalloc_noprof+0x26d/0x450 [ 77.752608][ T1755] hashtab_init+0xdb/0x1f0 [ 77.757091][ T1755] ? policydb_read+0x86f/0x28c0 [ 77.762143][ T1755] symtab_init+0x44/0x70 [ 77.766432][ T1755] policydb_read+0x8fe/0x28c0 [ 77.771298][ T1755] ? kasan_save_alloc_info+0x40/0x50 [ 77.776633][ T1755] ? __cfi_policydb_read+0x10/0x10 [ 77.781771][ T1755] ? security_load_policy+0x128/0x12f0 [ 77.787280][ T1755] security_load_policy+0x162/0x12f0 [ 77.792579][ T1755] ? irqentry_exit+0x4a/0x60 [ 77.797210][ T1755] ? exc_page_fault+0x66/0xc0 [ 77.801907][ T1755] ? asm_exc_page_fault+0x2b/0x30 [ 77.807074][ T1755] ? __cfi_security_load_policy+0x10/0x10 [ 77.812812][ T1755] ? rep_movs_alternative+0x4a/0xa0 [ 77.818055][ T1755] sel_write_load+0x298/0x5e0 [ 77.822749][ T1755] ? __cfi_sel_write_load+0x10/0x10 [ 77.828003][ T1755] ? bpf_lsm_file_permission+0xd/0x20 [ 77.833422][ T1755] ? __cfi_sel_write_load+0x10/0x10 [ 77.838627][ T1755] vfs_write+0x3c3/0xe80 [ 77.842889][ T1755] ? __cfi_vfs_write+0x10/0x10 [ 77.847703][ T1755] ? __kasan_check_write+0x18/0x20 [ 77.852836][ T1755] ? mutex_lock+0x92/0x1c0 [ 77.857304][ T1755] ? __cfi_mutex_lock+0x10/0x10 [ 77.862166][ T1755] ? __fget_files+0x2c5/0x340 [ 77.866891][ T1755] ksys_write+0x141/0x250 [ 77.871225][ T1755] ? xfd_validate_state+0x68/0x150 [ 77.876408][ T1755] ? __cfi_ksys_write+0x10/0x10 [ 77.881279][ T1755] ? __kasan_check_write+0x18/0x20 [ 77.886441][ T1755] ? fpregs_restore_userregs+0x11d/0x260 [ 77.892185][ T1755] __x64_sys_write+0x7f/0x90 [ 77.896811][ T1755] x64_sys_call+0x271c/0x2ee0 [ 77.901513][ T1755] do_syscall_64+0x58/0xf0 [ 77.905989][ T1755] ? clear_bhb_loop+0x50/0xa0 [ 77.910686][ T1755] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.916638][ T1755] RIP: 0033:0x7f3e5b98ebe9 [ 77.921053][ T1755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.940800][ T1755] RSP: 002b:00007f3e5a3f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.949255][ T1755] RAX: ffffffffffffffda RBX: 00007f3e5bbb5fa0 RCX: 00007f3e5b98ebe9 [ 77.957351][ T1755] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000011 [ 77.965627][ T1755] RBP: 00007f3e5ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 77.973646][ T1755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.981705][ T1755] R13: 00007f3e5bbb6038 R14: 00007f3e5bbb5fa0 R15: 00007ffd54281718 [ 77.990153][ T1755] [ 77.993184][ T1755] ---[ end trace 0000000000000000 ]--- [ 77.999812][ T1755] SELinux: failed to load policy [ 78.203638][ T45] usb 5-1: USB disconnect, device number 10