last executing test programs: 16.929768966s ago: executing program 0 (id=778): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x101a42, 0x57) copy_file_range(r0, 0x0, r0, 0x0, 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, r0) setns(0xc9, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000120001030000000000000000020000000000000000000000000000000000000600000000000000000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffff"], 0x60}}, 0x0) pipe(0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) 16.877971112s ago: executing program 0 (id=781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x30, r1, 0x1, 0x70bd28, 0x0, {{}, {}, {0x14, 0x19, {0xfffffff7, 0xff, 0x1, 0xfffffffc}}}}, 0x30}, 0x1, 0x100000000000000, 0x0, 0x2000c8d3}, 0x8) 16.877479272s ago: executing program 0 (id=783): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000200)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x4000002}, 0x0) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0xfeffffff}], 0x1, 0x0) 16.873671382s ago: executing program 0 (id=784): openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x105141, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x0, {{0xa, 0x4e20, 0x7, @mcast2, 0x4}}, 0x1}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000a40)=0x6, 0x4) sendto$inet(r2, 0x0, 0xffe5, 0xe000, &(0x7f0000000a80)={0x2, 0x4e20}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000480)) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000005c0)={'dummy0\x00', 0x47e}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000004c0)=0x1f, 0x4) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000280)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24040084}}, {{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000500)={0x28, 0x0, 0x2710, @host}, 0x10) execveat$binfmt(r4, 0x0, &(0x7f0000000900)={[&(0x7f0000000800)='[\x00', &(0x7f0000000840)='[\x00', &(0x7f0000000880)='![-\'\x00', &(0x7f00000008c0)='/dev/syzrnull']}, &(0x7f0000000a00), 0x400) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000540)=0x33, 0x8) listen(r4, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000580)={0x28, 0x0, 0x2710}, 0x10) accept4(r4, 0x0, 0x0, 0x0) 16.026277428s ago: executing program 0 (id=789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x5, 0x3, 0x4000, 0x2000, &(0x7f0000002000/0x2000)=nil}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/mtrr\x00', 0x4002, 0x0) ioctl(r2, 0x400c4d09, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000500)={&(0x7f0000000540)=""/32, 0x20}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a00)="fe7d9ad23d3389b5d66337d18dbc0495eb16162f781772b20de75c9b04721ec2c8447e2ca17df85341d44a7b352a3f25365bb370f3f4526cae95a8f3faac784b24aec7ed7fb46b3fef6b46eb3ad8206a3fe5fd69576dcf61a59bfd56d5b2ace25608c8c76628b7645c0e93762d6df06eae51f673d6a68a02aac765b951822da11e1f3318a369ab41d7aebd5dbebf83eeb1eb707a9ef2385c73b5b0bb47af867ea3c4e94a9130565429007d2933c8bb75bb52f9ad3be341caf35b8791a1d849edb18168373f6b5d8dcfad88f0208add9f2ce666b2c0e34610ff5d8df9624ce2c3228c97cafa3a0d2e6230ef25b1b38726f287389f6ae3cf369521d67ab69084ac91b4840a2e1695c8cbdbf2a2e4d0ec146e3d7eafbdcc7aed0f1ec6cb435ca230e63836f92af1b984f6f8e33d7d8ea82b8c4c775ea9fa98d7c37079278e53696efaef151472081fe31eee067fbd46b0e0aeaf1d35b0d010e61ae6bc25615aa0a3145817cf2f05aee7af69fa8fcbc062cb2265f0e44ed854152cf0e58887c323a2d9847f0fc86d777bd9ccd2061258760fb2c737f7bd17f437a7614768f581255b79360fe37b510483eca4e876d6b26a7ebad42f32d9c820f34471d1f6c37dc60d50cc7bd55db5561eb95f56d75222db88f59adf4563607746eb317b3f581def60a7894784fd00168b1e1b0f367bac82bed4934e754daa41117efc3f1d467418307f7bf7064177ad59f7f9da4b653e3a1617b1b884998575bd4342f3e45b1b1af0d3645f449e764f65e18e82804d586203fb83ed8316827e21d95d9196e38016e76b0c5229d484417b9d35c355328997425f9426cba4f7ca131cabbe0da1f0dfaf5d48815a683a85e74a52b849e265f08cb92b8890e7a1b8bccf0c05ff02ea832b10a0919161472b95ea766c1bb3c6e85afe8cf573031bd9261081c0ccb38aa49bbe7ab4b6ac2957e3a3ed4d824115ec644076a067514ab2aa1feafbbd288395c087829b965b912c7d01d7e7ff63b4ec745e463f517ce8b700e51f19a75a7fc4faa829b283af0ea24ef5a98e39fedb0ca04c1803e576355d8940cfd656e6012a2683bedee0a6a4fe6a11fc2573e602ead483792933e98341a0b57e8a7b24af2beb987fe8f8eff613446bcb32136f38ba46d63a162028e5874ec26e87e5cc301c848f934ee7bd24b0e052c882424a6aa7086fa4abbd0ca4bad69d74af7ae6b73529f6e49e54e13abf96ee0f4da2de8d054eecdcf73f27e3279506101dfba68496d7c4f025b382a026aeb4b34a838daa150f7788ff3a8bf91eef05649efa6e1c34e34914a1677c23fef71517017e12646b524adcaf6587bd0f72c95f13aedce2b901bc5846cf6c003261141a79c67e8b4fb7257767e96eafa6586de75f6ec38756c5f9de5608bef36391cdb7252b00d08f76c1df21709aa34649af3c1284bb233686d75bfc7f367ab9492e2845ad095080e4fab3f0b7a8c69842dbe3f2e9f0ac0f3aa0fe4e86e840a1fb000b56dd9eff37218578c54c58663dfe75e60b8a315e9962d01dbe13213e71a66ad1a502924feff117de099c91ff352fdd91e6c9b7639b268467aaed34bafdb2d077c015b820ce4cdaaf6837da56f802d8e1f3a8bdf87dd8b24c2196b67648082388906b540888925ab1743b3500c2ff0b46492d03a392811ccab1d4becd74bc25c9b9d083065e947770df455e46361ba2d324a26ff213c99bcc37189f0ca459c481a9f614cc6e722d44e82d7124bc016e19197bb101b66058b709c8309a4590cfda021335abe25552ee515924971a73128e84d9b6a46b4df07595ce9af286e936fdbe5399a88877fc77c24dc9e825d83329e66e319e11076796494c48d5439a19c3e3569ddd206e81e04fca6ea040871a1ab3b05c62f9df4b38fb745bfab532a8041f09663effe57bd40334487fc8b17540288c04bd7672aff5beaf40906a472b0305cccba2371e9fad9a9470765bb2305bf2e4c4e40c66ccc3a7582eee9b63ce0bf563e1783f5412c86d497c3dc50b77ab6e5d9c708c1825a9983260e5e114c78e899498abac0225c787be7879a41230d543a087b82f557815c5c1801edd242bf0760230744100a6930c5efcc6a2aa6ae27d4f7aaaa3336352f86ace98d371b5b89da626c6102ee858f295c24f8a4bf46dd4702f6a8e2b6af356cd7d228f308a140d973d22f7b62a9fda1d8baa6450494aab9a3652a944cf43472f4dfb4a39f2adf064fa8055377fce7fb8fcef2eb1827931a6def4a3194cd7e80ebed2310e3f4046b481ecd8bbbf6da99618a144656eba89da2d9dc4d64177533aaf02c8f6dabbee31dc84a27025a0ad6676d9d2452b1eecf678dbdcd81dee3483d412715cbe873890e3fb0692de920f00be6bed1149d99626c17adb1071d0db8e88ede32fdc1cae00ad8b61a4f62e452a319514bea6ae5741f734d13169d0b5bb78762b7489f0eafcc055050904e14da0187820b5051e9834fbad4df34dc72ac2d544cfc533fa4dd158033cfee4d78e2d6b9097dfb8fee5a14ab9482cf89a2cb062370baf15ae3e58768efe069c4939b514b43e3203afb77c8a50eb938361b87a29300428d2f240bf67a4c5d689b871b9540afdb8530c28a165b0e0aeee8897b053417ffd8b848c6752c049f5089e310ca5d845449dc319fd58ec3ac830553b44889f8b7a622d0e2282b615c14d04c41d23d4dbfc1fc1291fcfee8b09076fecf63bba74ec080e7489d399495eb86cb9a324159a8c77723895f3dddb52cada076afb749d951668e3fd65c06056e57504240d509f597004a8b2bd23fe119ab4de86ba9bdd40c1ab7a22e32f5371de04642631d4295ccf7cd5aee1cdbcd1cdab397c8eb3dbeec1fb8279ad3b025fbbba11a6009a504671a258e942e51b61a77d09ee134ca45f6d41937e4cf7bb6df47f58a52a07493b85594ec511a6e3771b610bbad3f1d869227ab2e7f1cb5191268fbfb440cbdb6e0a4f42bb690bd7282982223f51287bb271f0b34f6876dec906e11d5900dd8d746a60f5bcd1e1ecb4e95e6caf2f3508d058aa5a561f50a364680b72c7eeedefd4c50dc744752cfae404953312186d0ecdaa0f2523a025250bd88627e8e5696bf6663ab4527d76b39535a17a77755624d9cdbd26b981cb989abf74701f0c3fd90c509f43119b2997a1ce39afb427d6467a145f3585365f9423b2481a545f8de1085eada1f3febf07705f13883939a330e8e3080db9aae75f9b64dcabf8e77bc424c8572243f4884b732f97489a94e4ca2c631fa30575a489118feca83b84280b4b0dc4828ab21d28253eaa3ad11b557cd22c6f550f1b16b0e85869012333f3a7de88baaead953ebe9e59505294f910910f6958219abea50abc00b7af8dd0e80734b15791fe08b0a3d663329180900b8da223a8b96c4acfe788fd231380636e670c801026e5a70ae326c520859cf7f315c2c705cd2fe93b03849c754e881c152662dad3b18bd481d4149370377a2a6467f77bf3a10613c76cbb3467ae2050ba9bc19ce7ba7fa6bb94c9effbb8f9be98ba3b395ec2c6c7b0eae4a59256d28902d3663b3d7e0573c2699b929e3e560ed37aea16d337748c471dbfdd18b6ac4fd330a75a1b9d0096863a2a756b47a76c8510db8dab54870454df30e934bc56ea333d3b310bd2602873b524c56e7263d66168ccf687e765ba058f072aa2d06ca545b14c4f021e36dcd8e87d9492e590d60ee268d90a345be8979d7a586bf7522f495703b1c142637fd907b1390aa5c2da7547747544d5def5c41d9856bbd8bc87da4712fb716eca122e4703ea09dee7723bd8898732f718b0f89c0ab585d5c667d262201209c1373bc0642c06bfb59fb097c897538d221902b34adaf5b1c93758b8d9d15870af72e7ff7b561aa016dd56598bf46bf73edad04920fdd462c3a7e6ae6d7f4901a338f2c294ef7ad9a46e4097d07d7661611f2b98cd4222ba8723c07acae025ca26b5eb3fdd536058902b0373acfd6581d51ecb2f21f99ee68a54e64692607ad0bcefb09bf6ad6999e8e32c31ae529a679009c0bd97676cdfc2d2f0b869c77a977ae525c176ee1bb2dc0a10d62d95545cbbc91e3c734d5a408acd0b9b33abc0fb4e29e4340bcd11a0058b37fa76ba2354c7b70709eb979ee2452aeae6c05538f8cf88fb1eea5c43918df31104ac748251818ae1c2169f6ceb2c11da191a614435df8c576f96f65a081aced6f9e1cb7833a37fdd457c64e3b64d8588b8cb79eee58b2bc9a689ad0d87315a43e55afc7a11dcfa42ce8779792d20794cbd650b0492dce5e5b36fe61e59feba9afc70348517318c73f5463164c862c18467faaa5127ed35a0ffad61b25934b288277245d3c6d1397c57fa12bb0e78e0e69e3549e420007bda60f811f557df49eca081cbbf3d97839f9b809c40c06c71e50098e990186c04cb2a582a06aa36d1a66ba2809bb20c072d43815307d15f2bdd407d88b1f15c51505866e9b8a2e7f7521c76c1561582527dc464f401cef7efbf7535a7c6f5b5f02bbd2db00511451c8b53b3b6dd205e898e8a2614ff14fd3239c350fc76a1885e62ca40ab32517b0320bd82f36b7991c824f5e9ee61515b4a172efd928dbb972359e4f7b66f897828fad02c41bec4c381f0e73ee069e543b9348af8566ee9dbef2889d17182581493b52447ec3dfbab8ddd82be256bf320668dfc1c833e464e6c4cd7224df01a6813584dff4d377340efe9ead9a2127b918c6a61f9cab58339b938f8ad14b2d1eccf397292a04023fad1c4fa5dcd73b8fec6f75a1fcbcd62758945348afa76e52fad09b67d0e4bf137979d996c7ae48ecef64c704bc74bc167f7460b97e2ab97fd629f893ee20986102881715205cf43f6cd3de47df192130533ee7472ce8eeab223216dc7cf0e56fe76adc2249a90c8e436d4f41a2d4e5805834b047941c6db1e0e096658a458316aa69ad6179aebbd1f879f546843efbaa276fc2fc2fb8f66dd92448de820e755739e2c447c9598b4b3630ebb2565398e4cbea0da438171f6d955bde1fe7ba8f073bdb23f293e5daf69efadcf868c221d8802fc7478182e86c1f75f6fc895b6e1c52cb1c93c06033e9ff1cb24c7ed32c29f09957297e72a44d6d472c55e74db927d7c87c0712742d34b398d9f7d96331d08df8534e17c27717399c2688ea4e3feefe87f8c65efc3d8a6b4140460cf353827d8974afa1fd41840561ebeb51f8e1cfbe44e411d52f12478e401d4d223020a02ea887983485caf8ce36dbfb03c2e2996a5ce6f10b28ffa5c9723b95757e87b5bcaa006ec2b45c69a8aa17675b5e05b5f33c7cc5781132607fb4e86ef0a96b483baff00bfd03cd2b471a31615bf59720d203a6124c4c986569c087a34ae159c459e5b5af481a7ded13fb7c17102859717da49c6ef42956f2912180edd741c304ed587f2ea5c90d9b28aad30c3f105b4e5acf7e563d96a89d0d9255d0256504e041e10a880ab907c669ac1f86685b1f5448ff0d45300cc6dfe0b5f6b1ccc5db782a6065931f47f5766005ed48cbb92deaae661435a4c6f47d70196dfebcceb316a3bc0a1da56092cecff0113519743762810c271ed0d9b66a5abb817886ba2c8d533dcfc56cf23ddf3b15694751346fddbc7e5e647f6015b75833e8d8b7d9fa4b2dcda59698698bea7664ea1c8a2492012f8630d81d1ba13bde6fbec3ec0774752a63e5eae03191189a7858d69f991a6dd042c52058f13339ff2562007a7d25ea6fb94ac30b2af7baa770acf4943051412f36080f4854a8b14a534d2efc05a8b1b63dec308b51eb47d327871b336a687d7e9ac9e8cd519af6051de1673b3aca82ae2dcb9e0f340471c15660e7de9abc3ec31638d3e196044e07455e65da013feb4e46a3456c4f6a5c2bcec5de6c4bdd07434e630988fa3e94713d0e461afd91be0a65bd95b88d3313e37705f74a1aeb05e1b05fda7dd94a91db724c801835ae27fbe8359581752713a1770178b64fd1f445df34e2399a26f178151d42ba8314edd60fcc6626e6874f538ebcc326e7b8e8d326940482d5f3e72bb6aae70fddb70f8aa425e2c55eafa6adba5b00cccdc722ba1e85bb09f2791f58a7b58b06c039391667eaf9a623f9f170db2065d36d16904746aa55fbfac0b13ce31622632be60deb3fa4dac394be416b51ca988cf1cbabee22f36441cdc25afcbb8677b49eb2942d7e96c6ec9a8cd200467f4d5cd25b9c86543007ea97a96e4248f9bbd9386f162488b580fe6f731839736c7e9e3382bd8fdaa5976ec331fb7dacacad203f40ba6fb26d18c28695673f44393d66763bec7d78cbeb3c512a40a649472b5c5efb3cf6fc485a9375afb43deaf8b4eb3799e727092d65a2484507c9a828ce4e81b7fc54bb72543a2f1086f7556dd90bd87db353ea35613d2b640768b17d7991da0e5ca4ed3439652594c3e74cfbc45b3740381ba1b2f6cc7bb8fa623f22e1cae95b2a6079d3e2bd47d1b434c1ef16bf66adf5a774cc5a69bbdb523559b3d84fddb8446deced42cf77e5472616ff9056f52d15942c07b1f664d09cb11a25a69ff166e60fc41de395d2d65cd345822610cf0c82e6e29effb82fc47c077256f9ba72bcbb45d1273b32d25240eeff3d9dec3a798e5c3c97fdd59720bd7b7692588446e538eb7c1b30f94a0b051304c7d00788accf4529ab3a7a5d7c9a7510ab746820f8ea0a4916cb2f30d2eb97073125b6189dce432fc029e097b3b6f99c50d2b62b12d82dda4e99b51ca470c69f76951a1b98fb4ac7b4fb5e68b381c3f59b78d69d867829018ffdfe703f477e6ea8c7848cefe01cf4b7b212bfb7603623dd1409f96f3c105147347be39f6a7173a7e921aceda0f9a56c1d8cd43949c9420499a9d454740563eaf340e10b2ed0f21ceacff8c68b6af1e16018b36f010dc0fe0f7e0e04a7b9ba0edd00961b8e470c2ae27467242104858f27e61ef22ef498d098f64a0822eac1ec3523a221355727e82a66d1130401f027233603838f33f511a0b9d24854cdf1175b9293e88c0f361f1f4a4fe2c36beed05cfebba4f7c0a98c8c7eba2cca3debe087c4f73f8ce0f45e0846c3bd8f4e4a50f162c8af253490c30a5e152ec256f8a0be9953bffd2a560aff0638e8a2b2d361bd5ce708121d734ca6c46ac5f8ada7d07771e3cff2d5fd32f1ef027a03f0e4fccc5f28b0d590c58a05268fb9e6dc655f4b37c263e55b3ed8b84b93e096454db6f98cb0eb6902aa41e67ad9a9425c6c09964c9d6b30af272b00721787b85e4ad5281ea4e863e05e6bbec4ce556b68af2b5695bd77465df9855946be3620596cb0cb58c9907dbd79ede5dbcf8184aae8783c6fc7c326f0e3af900f944faf97b72c45e10ef4568f0af028081f1570e0ff42e69b1b4aa9a6238568a5d6e7dc80c5a30dc06320999634dcaf10b135f29779d2763fc508784d52df9d5b7b3d03bccceba8b7996336ff37ee188b038f0350758583c3b5198e14622ebf34c7a37afeeee68655ba112b63ccbe8f35fb71c42ece046af757fc2b26e553443f612a1b2258e24ac4ee8e45038171ab22e7fc845d07b01bfd321447ecc1fb301dc45dfd069c8f3fe2fb796d71ac118ee36e6c0e6093d77c062121b1f8893f5bf203c4e40a0167580f002f2f263aa001ae088fb0b9ee38d3985dfc66c29925f04ba4be726010614e064d2dbd6a2b0d8f42b5fa5671a0a13caee83401f165530f82b9608b2a07060500a9119c78f58d49646408451382ba7d36fc3dd558abe5b020ce9a8062d25f5baa0a2c587a94330366ba8ea1968fa2b393dbf167a5c117510634e23a781691c88521f40d012debc5e753ae27d5a8f20f5ad8deca5ee76244e99e0791037798bb9757444d833612d8817d2c617c064a891a3e36205172ec08cf28ceddb30f1b0326ac5fccd4a361c20e5c3b580712d0b731f47b6f396189b86ee0673adeae0912d4ac5748d8bfcc49554c86a4f5b75b189392e893c38cab17c7cc112ee1d24124531e434f35353ff3b6c80c729bda88d94bcef2f52c693c9f04281c8095b6ba97fc59338d3c5c9e4c8ff58b8ad7bf6b99007a3278fc42e35923334c3f94389a2ded9a4146ac334bcde92bfbcce7339d42927be9b0c3a4060f50fc1c669ff8bad9122f601e23c46aba8e863a032f9e38f51911407a420fed89b1acdae80e575afb8d2459aed183a6e31087c98d22f04301905848e4f0b0bdfb6a270345df01fee31e5f3f6dc54f1f6a540f0ef880466e33c6e200ea71189eb8bf7959ad371f041afc3ad7dc553e220cc9f51b564795755ac83f24ad1fa440bd4d3b6ff824e2bb9850a52b7aa7178a04cbfdf3c7b05431dcd7ee2a7bbb076f0110f8b78593ec3da0d2a4ce5c60720bd11339903fece63d488c5f396a3488896f64d0e32ecb7e254dc7da13f686ae046f8700ac798845c2a7ca10a1105f279cbc10ddf2922766ff4e9479e7b4250dd1c6b79f31acc36ba4904f1f5c49cfeb8f4dd1be0005de5e8bac42c1ab0ffb73a5b417e0acd654c8cc43271e8632b759c4a65f3cf89a2380dc4f3236debaa55f8f303fac034c88bf8409d3b1364b04249329ac8102f39428f553baa1f4c1ea8dfa125f727c16c8997f25ef4c248819bb0f3038fe8f61daefa2083df33a8b8ea41c05633e1ae03cd9d2a7f6ed927d9d6c8f2841ac3f836ce96e0a7ccc3c35cb0b7a2800eb63459126f206612f6f8a52196c63a2c38ef74f490fc9342c2bada1cddff08e4d6a338bee6557df08c51fdf5c7adaf9d207533f07e953e4dc1c1e1d965a87cba038ea31ac35574233494d680066734fee4b8b1791689754115979d01b70e1f8a782f859728f92e18d1dab30c0259992c8be138f149007ae926e918f0fef4615de20abe05727d76b35c6c7792802b9dc2461328d0f50c89c5a9bc28f55a644abeac7d0598f29ecb964afcafd88b8b2638beb977522dd71a42507d28e5ff28c55984dfa27316b97cf9462c865f08d5b0e6bd91c0f736291454f5a585c74658db66301bf0003d4bb297e6d8c8b6c3dcdb23e26293797c55fdc408c6401345fafb00b396273bfeafe62c5b13ce678f6e45f14314247901a0055908d34c96183c072a1cc0f3dad7cd6ab35069cb640768f69d7fa91429ff95182a6e52a5e015934d015385ee8b452b18319793bc25e53a7c32b986ddcfd34860c7dade064e215226133b5fbdf597e40857e9d04813f2c81eab02d26d497235237afe98e1d4c9138c322f89b09bc5d1c66e7fc931a086f4426f8fcfc1a0594ffa18f3c4d757d8789ba889df9884fb72ad93d7aeafa1c01b722ae8cef3748ddce569128c4d8cf5f6041a538bf0329b32c81006ed7ce1dadc43a55ae1c48a2ddbe596aa45e3c1bb4a53bab323de4dbc689afdb7211a2112ac4cabefd253fec4306e1f82912ec1aac7d79b58aaed8cb91a911029b9098a46dfc20c2fecd8b790395a06787abcae09b4656db2b09dbc6b5f95c8a28a6ffd8a1bccef21396feefa5bac9e5c09540c255e9cd74c8376b2547e03f15247296dd399ad11f98a53856cedf8dcf4f44373c86649326713984df0395a57bf7fff9d155b7f5f02af534df22a26cb12c3ec2513fbadf44e3a91539ef026b0ccfb8da88279b1ada8637a2f31041e872f61a3974902af46fe33ea85f6ce722eadca45ddbf0d777f603b59af0e70b3c32b74b066afe0a5eb596d661c6dbcf4b743c5984fe58f238ffc8b7c3933161beff91edd7ad53b3a26af18e73708a48e420321d864ec580c9acedcf3d35a462e44bae01674865c6bf829f46b469c8fc7b91c326ab94cd1ff9655d0fd1a63d45ce28e529f09b20b3947ecd15fef700c32a032ffdac483b99b23fe73a7d3e580b48a6e2751b6566581fc0a1139ac39acf3937624c017e900827e3ae0fcf30751430cb8925b6e67ce9a61a721c55234521953f0c35bd3e10d578c478b8c99eef693632a0c1617d91c869b20f6892b1b5dde7734dd27f48d09992c9d636490e9b61b940272dca23cd07a043396efc05a4a35b61aeb8688d1c53568ccdc02bdcd56964d0cb318662fe520b2de1d31f09416c89c937388a32fce8ba7bec6b7d8519137f24f259a626372c15319ad27420af9859ab82abf636e18aac9f571b8418602bc8206da79b1dc870096796760ef4508da06f36981d690f98753c61d69f92282f9d94569be5fb050ec52224502984d2ce463cf0a3379e6f5b19329b15c8dca56a3dce515c0950ed7744f46dcc1643c807e6cab88496463a21171cf5e10fedda8cc7524a4e56adfc19cda29276cb50d99626dc6c21da24e2adbc94d80d9568c8e5891ceac716588477b0a3ce448f8f883be35ed9a09a033a50ca7d58fe58386c7fb3a8089ea4d532ae1e5af1415b80feca86ddc2bdfaf3ce9e1748e871c5bad53272aab5e5f4fee1af89c7c642af2f727ad55cd0c512dc2ae452362326b231abbe1da6080999b9eddc2dae24f1a56c8784204eedccd1cdc142069b794dc59462980b4fb5cc108661d5ea9fddff6ae0ff930694c4bb738be540761d2d2176e5ff9cb067aa3d031b636e5e0c12d39d7b516393d9fdeb9a4eed3dfe8dd9f7e35af681bdd82ac8509b4201b61ac10e865315998a6febe79aced1b72432b3ab01caa6bc4384cc2fdd0c1ce9a3a663aa5ac8da561e8a88e5d313cde57f1aa2642d08a6a7bf1bf65cbcfae8772c79bad6f4962bf2f8a91a971f51f236a7a7ee4b82d79ac0e2c5c3f516006b5a217b90f3b1e30795b715e40a1d44dd5a81bc6ab071d0a53f96100389a477dd64a899654d950aec6a717ed0631415d46a63f2809fd18e88a8bd862e3242a4a484a651aeb5e8680f93216b8887527a537095f3d47e0030de40d4576ca7f09ec57185300a65437a37ce09ba082e492cd9c862a85ff9dc305a5463d1d65b2e61edf07e67e03c3ab8528965f79034700ff42dda3a778058b68ed09886239411c16b027f99505e1892e3403d4084110f4215fea11d265516f67eedb9e80776f5634eeb2ecab8c2af6248571b7a1cd988ec948226157d034c72f877ea75266ee0d8228307936adbf8ffc6ecd4afcf3dfb1c55f1b9c78f83a399f069b15a0513e80cd9473b1574048f5aef718bab5a6a3b40217277175c90d19c7fcef7f1544ab8095e9b0d243326114b76dc1bf231ddae87258a098096faa66df065875c45e6cb989d850e2247002f69ca7c078726c8358d056f01ff5ff6fe44e7b33b3a0a2d5c851871db97353ffeff0b551e9715679bcf3cecba7da1c01018acba78bf900d1d3adc639038faff295ebb2fb134a6e92749563026919ea26dd666702f6df139fe6ddc11cc0f2c1cece03aaf1f76530551d30371ade8d725e28b3afe9ff30c94a77118008e7f0c9146168985828ea38af2eaa3c4f85bfc2fb89f0ef8bec5b72ff4fc4ae29e38e91a7eade68c41e860b0bdde162110e18b5e36ef7184b50f781fc93d1e0c0c7ad615d6c9338ac9ad31afe2c9c3fd79fec075cf361722f657cb37665839c528dac1a769bbe29e4980e7376e75fedda5bf88503eb7f335f8025efed8970e5203c4679b90c250f91e91f35548bddf352cfc7dd9e7ba3abd31cb7c4cc8a0d726eaa2f311ea05ea9ed92", 0x2000, 0x0) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x220, 0x138, 0x1, 0x0, 0xa8208, 0x0, 0x0, @by_dev, [@verity={0x0, 0x40, 0x0, 0xe8, 'verity\x00', {'1', 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, '4096', 0x20, '4096', 0x20, 0x255, 0x20, 0x364, 0x20, 'blake2b-256', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, @none, ' 1 ignore_zero_blocks'}}]}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000003a00)=[@text16={0x10, &(0x7f0000000240)="dad7baf80c66b897d2ce8966efbafc0cec660f38813036360f181e000066b8010000000f01c1c081ff000a66b9800000c00f326635004000000f300f780736d8c60fc72b", 0x44}], 0x1, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r5, &(0x7f0000000080)='6', 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x20d49, 0x1800008, 0x84, 0x4, 0xfff8, 0x0, 0x1000, 0x4000000000b, 0x4bfb, 0x4, 0x7ff, 0xffffffffffff0000, 0x20003, 0x5, 0x9, 0x100000090], 0xa000, 0x28657}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000400)) ptrace$cont(0x21, r6, 0x5, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x2b, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x804) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000003a40)=[@text16={0x10, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.824347609s ago: executing program 0 (id=794): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="500000001000010401000000c3ffffffffffffff0000000000000000000000000c0003006d6163736563300008000500020000001c0012800b0001006d616373656300000c00028015000f0002000000", 0x50) 2.370825591s ago: executing program 3 (id=866): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x4000, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffe) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x3f, &(0x7f0000002a40)={&(0x7f0000002a80)={0x20, r0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002ac0)={0x4f8, r0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xff81}, @NL80211_ATTR_SCAN_SUPP_RATES={0x240, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x83, 0x2, "dc55d80647c4b9183d61fc8f19bf08f9c6cd5d1748e730fda40dd258fcfdab6b57e0cedb91ea8afe8298e0d3da5310ede9bc7878226086282b6b8b54e18203a4c680d65f8e205cec7344a8a3298cfd52eb009ee1e707d7cc900ca5ed2f364e3faa696eacb95f038a727774db6e7d7bdeb3feb94645be21d745d3dcfd02bad2"}, @NL80211_BAND_60GHZ={0x24, 0x2, "afcbce5c79ed0967ffb7dc1cdd516419e020cc594a4658643a4ac594a9aeea11"}, @NL80211_BAND_6GHZ={0xba, 0x3, "665bba0fe28bbd357bd150fbcf82cebd9fa91e10ea36e78c386868410d7cc7019d323a395823bbf104f93a70bcd61ccf827f694cfd023506d68cf46d29d5833ee8fd73f038277af543c1863aa8595d06b9a20200789cbd180622336c68b6382a2c1dfb4a5312c3b601a14f0f2852b3a121cbccf3dc096eb5a1e1b7e300f677c4090e518505cdc29804bbb72747eec0898770bd769cb5d96bf938c86fff6f2e976b2a9f802b7f20492a88e820343682027a6bc142e994"}, @NL80211_BAND_2GHZ={0xd6, 0x0, "be67a5ae8d1193111e76ef41755d22a54475d98e029260f525dd67e62c7c7a565dbc0caa91929a97e7d684c6b0ad83f5828cd9e25f0071c6a5ebc974ae08af293ce87a1f3c3e57336176cbba86c60bb70365f31f1ff7e071c3f6c6a55b768fc2411947f9a2b77ee81948ad29f58bd2ab92afb8c61f9c446fe76bbfe6f689eb7ff4435d5be3d2dc509ac9d8b4d119b1998cf2867f510bd52f15523b6b0cdeb2450318a3ca4446463283daa6993c53885041ba01d385f137c63c33bfe195aeefc41ddc14db4cf29bc7810c59308ab5fcae7353"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x230, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xcd, 0x1, "8ddcf300a59eba0e4254bd151356627d465e276f3ba16ffb524c1f5c80582690ef41005d9632121c3974bb08b7f12937bb4cda76cb39fdaa8bbdff69ff45cad260e72127dd56ac6855a34edfe156e0098d02a382c848618b14963f5e68ade455d0096f68c6357c0cebfdc4b1a589aa5cb5df7bba488e684e728d97ddcae47874e5ca96297bd9cf8e9c73be25c1b00cea1997660714f545fb5c89c1cae496ed4aa456a1080c9dc22e1f53208bc4bd2300d7aab8d83f8ab6c01e1ca2e44377c3c5310de4d5eea8ecda0b"}, @NL80211_BAND_6GHZ={0xbb, 0x3, "3c5dda81c7d1d64273635730686b66df02a59596cd09bb9f05c02a90e9f825c3dad01fac9b39ab975bb63e98cab7122fbc7e222583f691fbccea86183cd09ec9e24fc8844c5eab575c1142cd59d22b5c84b1b2c7dea765cd8df79c9f311f3759c7dffe6a53113754dde82d50c4766c930aee9f4dd1ee90420cfc11c2cc2b9749868a872e10e867dd1c26cb3f03b94c4f18d1fd0112b160b38b2b94c1bf7eb1d86c3df03ea6ebc9afe7ce2ee758c3945ec73a889ee25ff6"}, @NL80211_BAND_2GHZ={0x12, 0x0, "cd0c5ad5968b0e0c0209dc61ee92"}, @NL80211_BAND_2GHZ={0x8c, 0x0, "6570f42314be87d896f471984eaa469acd99d92ee1effcc3a0e5f80c54386b2bb000e6a0535ec6f518527d18affefd8ad1e8104ac80ec7e4ba7ddeae8178e32dcb1f1b9a0ecb79f9f24b717816955c6ad451284586d0da3b4a2f12fca9df1c4dc64f14eff9948f693807d961a36be3486e18af180975e206a21a9b6b783baba89494cb9df028f09e"}]}, @NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x24, 0x0, @random="4668ed844678b0af5d1ea7f748079c12a0e5be07d8ec11666c524c61d6627d88"}]}]}, 0x4f8}}, 0x804) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='27', 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f00000008c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002900)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x2d, 0x8, 0x11900726, 0x1, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, 0x0, 0x4000) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x559, 0xffffffffffffffff) 2.335538204s ago: executing program 3 (id=867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x11d342, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000300)=0x4) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000040)={0xa, {0x4, 0x9, 0x20}}, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f00000000c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockname$unix(r4, &(0x7f0000000100)=@abs, &(0x7f00000001c0)=0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x120, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 2.241839874s ago: executing program 3 (id=868): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x499, 0x17f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x3, 0x0, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x7, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa3, 0x9, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0x1, 0x6, {0x8, 0x25, 0x1, 0x2, 0x3c, 0xab, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x5, {0x8, 0x25, 0x1, 0x3, 0xf, 0xd, 0xb}}}}}}}}]}}, 0x0) write$UHID_CREATE2(r0, 0x0, 0x3000000) 2.214016196s ago: executing program 1 (id=869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) 1.97818258s ago: executing program 1 (id=870): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x2b, 0x800, 0x0) unshare(0x40000) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, &(0x7f0000000380)) 1.897523069s ago: executing program 1 (id=871): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x10}) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x328}}], 0x1, 0x4014080) socket(0x2a, 0x800, 0x81) timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000440)=0x0) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, 0x0) shutdown(0xffffffffffffffff, 0x2000000) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r4, 0xc138fd0e, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_dev={r5}, {0x8, @core='@stats_print 1'}}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1000, 0x2}, 0xe) timer_settime(r3, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000fffeff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c", @ANYRES32], 0x1ac}}, 0x40890) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.897155619s ago: executing program 2 (id=872): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000700)=""/4099, 0x1003}, {&(0x7f0000001740)=""/256, 0x100}, {&(0x7f0000001840)=""/292, 0x124}, {&(0x7f0000001980)=""/73, 0x49}, {&(0x7f0000001a00)=""/231, 0x140}, {&(0x7f0000001b00)=""/131, 0x83}], 0x8}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x0, 0x0) 1.805808388s ago: executing program 2 (id=873): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x101a42, 0x57) copy_file_range(r0, 0x0, r0, 0x0, 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, r0) setns(0xc9, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000120001030000000000000000020000000000000000000000feffffffffffffff00000000000000000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffff"], 0x60}}, 0x0) pipe(0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) 1.743437774s ago: executing program 2 (id=874): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f00000003c0)={'syz0\x00', {0x6, 0x0, 0x5, 0x7}, 0x23, [0x2, 0x6, 0x95d, 0xfd5, 0x10002, 0x0, 0x5, 0x10, 0x100, 0x6, 0x8, 0x8a8e, 0x200, 0x10001, 0x3, 0xfffffffe, 0x10000, 0x97, 0x59, 0x2, 0x8, 0x8, 0x5, 0x2, 0x1, 0x8001, 0x4, 0x7ffc, 0xd9, 0x8, 0x6, 0x9, 0x6, 0x7, 0x6, 0x2, 0xd, 0x4, 0x80000001, 0x14f2, 0x7, 0x80000000, 0x6, 0x7fffffff, 0x7, 0x2a040, 0x414d, 0x5, 0x2, 0x10001, 0xfffffffe, 0x7, 0x2f93c063, 0xffffffff, 0x80000000, 0x6, 0x101, 0x3, 0x7f, 0x8, 0xa35, 0x8, 0x20000, 0x5], [0x210, 0xf999, 0x2, 0xc20e, 0x6, 0xe, 0x2000007, 0x20000009, 0x2, 0x6, 0x10001, 0x0, 0xd72, 0x6, 0x3, 0x1, 0x0, 0x8129, 0x7ffb, 0x4, 0x3, 0x2, 0x3, 0x3, 0x7f, 0xff, 0x6, 0x9, 0x101, 0x4e8, 0x1, 0xd540, 0x1, 0x94, 0x7, 0x2, 0x8, 0x56, 0x0, 0x0, 0x0, 0xff7ffff7, 0x8, 0x7, 0x1, 0x3c33, 0x5, 0x3, 0x1ff, 0xf, 0x5, 0x0, 0x2, 0xfffffffd, 0x4, 0xfffffff9, 0x6, 0x6, 0x4, 0x1, 0x40000001, 0x4d6, 0x1, 0x3], [0x20000005, 0x9, 0x8001, 0xd08d, 0xfffffffd, 0x1, 0x4000029, 0x4, 0x0, 0x100, 0x3f, 0x513, 0x5, 0x1, 0x6, 0x4, 0x4, 0x5, 0x8, 0x1, 0x1, 0x5620, 0x103, 0x9, 0xfffffff7, 0x0, 0x40, 0x1, 0x5, 0x0, 0x1, 0x7fffffff, 0x1, 0x8, 0xd3, 0xcbc, 0xfffffffd, 0x0, 0xf, 0x7, 0x8, 0x81, 0xc8, 0x2, 0x6, 0x7, 0x0, 0x9, 0x6, 0x101, 0x10001, 0x7, 0x8000, 0xf1c, 0x4, 0xb3, 0xee6, 0x9, 0x4, 0x0, 0x7, 0x3, 0x8, 0x2], [0x9, 0x7, 0x401, 0x1, 0x2, 0x5, 0x4, 0x2, 0x92, 0x14000000, 0x3, 0x55, 0x3, 0x6d, 0x3, 0xffffffff, 0xfffffffe, 0xfe, 0x6, 0x3, 0x7, 0xd, 0x4, 0xfffffffe, 0x7, 0x800, 0x1, 0x1, 0x3, 0x1c, 0x4, 0xa87, 0x2, 0x78b, 0x7, 0xffffffff, 0x80c3, 0x2, 0x9, 0x871, 0x3, 0x65da, 0xfffffff8, 0x4, 0x3, 0x0, 0x100, 0x0, 0x1, 0x8, 0x2, 0x6, 0x3c8, 0x5db, 0x6, 0x73, 0x5c, 0x9, 0x7, 0xff, 0x3d, 0x3, 0x400, 0x81]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000240)={0x0, &(0x7f0000000340)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x480c, 0xa, 0x0, 0x4}}], 0x68}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x10c) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/console\x00', 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x6000)=nil, 0x6000, &(0x7f00000001c0)='\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') read$FUSE(r6, &(0x7f0000000840)={0x2020}, 0x2020) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0xf5, 0x0, 0x4, 0xbb19, 0x4, "388d673f5a5f4fa501000100"}) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0xb8) (async) io_setup(0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.58899927s ago: executing program 2 (id=875): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000ac0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c02000019000100fdffffffffdbdf25ff010000000000000000000000000001ac1414bb0000000000000000000000004e200000f7ff00030a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20002884}, 0x800) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x19, {[@global=@item_012={0x1, 0x1, 0x7, 'v'}, @main=@item_4={0x3, 0x0, 0x2, '\x00\x00a\x00'}, @global=@item_012={0x2, 0x1, 0x3, "1db8"}, @local=@item_4={0x3, 0x2, 0x9, "c3e2aa47"}, @global=@item_4={0x3, 0x1, 0x5, "7b4a0e65"}, @local=@item_4={0x3, 0x2, 0x8, "dde77e80"}]}}, 0x0}, 0x0) 1.056674384s ago: executing program 1 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x53564d41, 0x0, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='attr\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001d80)=ANY=[@ANYBLOB="240000000001050500000000000000000a000005100001f9b5514f606e8997f2e2f43f28329e2ad55a1675254ab7fbed8e06a8ae9c5549f0206a802131569b91ef8fc4ca34acb13bb5bf1cd0d714973a2024de53ce7b53f866bd72"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001a00)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=ANY=[@ANYBLOB="20000000010301510000000400000000010000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000015c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x1e8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "143f1eb01740dab84e99766c534e74b46eb7f8197066c46abc861251a2f9"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x39}, @broadcast, 0x0, 0xff000000, 0x9, 0xf, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0xe06, 0x0, 0xe0, 0x8, 0x0, 0xd, 'pim6reg1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x0, 0x1a1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @loopback, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r9 = signalfd(0xffffffffffffffff, &(0x7f0000001b00)={[0x8000000000000000]}, 0x8) fcntl$setstatus(r9, 0x4, 0x400) fcntl$setstatus(r9, 0x4, 0x4000) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001540)=ANY=[@ANYRES64=r2, @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f0000001e00)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2000041}, 0x8c0) getdents64(r2, &(0x7f0000000340)=""/4098, 0x1002) getdents64(r2, 0x0, 0x607a9e0a432a4785) fgetxattr(r0, &(0x7f0000000000)=@known='user.incfs.id\x00', &(0x7f0000000040)=""/249, 0xf9) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1000000000000) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000300)=0x4) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x10882) ioctl$SNDRV_TIMER_IOCTL_SELECT(r12, 0x40345410, &(0x7f00000001c0)={{0x0, 0x3, 0xf56, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r12, 0x54a0) 977.231432ms ago: executing program 3 (id=877): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x5b4}, {{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x7080000, @remote, 0x7, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 829.893237ms ago: executing program 1 (id=878): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0xb00, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x108}}], 0x2, 0xc040) 829.631907ms ago: executing program 3 (id=879): fchmodat(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0xfffffffb) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000bc0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./proc/mtrr\x00', 0x0, 0x0) ioctl(r1, 0x40104d05, &(0x7f0000000c40)="00000d0000000000000001") setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000c80)=0x4, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x0, 0x0, 0xf0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@uncond, 0xffffff99, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @local, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private=0xa010100, 0xd, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0xff9b) io_setup(0x82, &(0x7f00000001c0)) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/arp\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000280)=""/119, 0x77}, {&(0x7f0000000880)=""/236, 0xec}, {&(0x7f0000000980)=""/207, 0xcf}, {&(0x7f0000000a80)=""/230, 0xe6}], 0x4, 0x4000ffe, 0x0) 828.819957ms ago: executing program 1 (id=880): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0xc, &(0x7f0000000380)=""/210, &(0x7f0000000480)=0xd2) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000002c0)={0x10, 0x1}) (async) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000100)=0x9) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) mremap(&(0x7f0000ffe000/0x2000)=nil, 0xf7ff, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async, rerun: 64) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) (async, rerun: 64) sendmmsg$unix(r5, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r4, &(0x7f00000002c0), 0x10106, 0x2, 0x0) (async) fsopen(&(0x7f0000000300)='pipefs\x00', 0x1) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) (async, rerun: 32) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) get_robust_list(r6, &(0x7f0000000000)=0x0, &(0x7f0000000040)) (async) syz_usb_connect(0x0, 0x6b, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403fb020303"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 828.718937ms ago: executing program 2 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x10083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0xef) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000001c0)='./mnt\x00') setxattr$system_posix_acl(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x4}], {0x4, 0x0, 0x4f050000}}, 0x2c, 0x0) 828.555277ms ago: executing program 2 (id=882): setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x17d, &(0x7f00000046c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='gid', &(0x7f0000000500)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 828.323717ms ago: executing program 3 (id=883): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000100)) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) r5 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, 0x0) splice(r3, 0x0, r2, 0x0, 0x2, 0x5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000180)={0x1f, 0x0, 0x4}, 0x6) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000080)) io_setup(0x8f0, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000340)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000380)="0200ffff", 0x4, 0x0, 0x0, 0x2}]) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 0s ago: executing program 32 (id=794): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="500000001000010401000000c3ffffffffffffff0000000000000000000000000c0003006d6163736563300008000500020000001c0012800b0001006d616373656300000c00028015000f0002000000", 0x50) kernel console output (not intermixed with test programs): 46384][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.858983][ T314] hub 1-1:4.0: USB hub found [ 81.059978][ T1637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.068639][ T1637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.081647][ T314] hub 1-1:4.0: config failed, can't read hub descriptor (err -90) [ 81.106411][ T376] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 81.137542][ T376] usb 3-1: device descriptor read/8, error -71 [ 81.267601][ T376] usb 3-1: device descriptor read/8, error -71 [ 81.377222][ T376] usb usb3-port1: unable to enumerate USB device [ 81.386458][ T1080] usb 1-1: USB disconnect, device number 28 [ 81.663939][ T310] usb 2-1: USB disconnect, device number 15 [ 82.066400][ T66] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 82.226357][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 82.232791][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.243158][ T66] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.253535][ T66] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.262739][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.270803][ T66] usb 3-1: Product: syz [ 82.275003][ T66] usb 3-1: Manufacturer: syz [ 82.280101][ T66] usb 3-1: SerialNumber: syz [ 82.489642][ T66] usb 3-1: 0:2 : does not exist [ 82.497511][ T66] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 82.521211][ T66] usb 3-1: USB disconnect, device number 22 [ 82.688938][ T1681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 82.709742][ T36] audit: type=1400 audit(1793868537.355:1689): avc: denied { append } for pid=1682 comm="syz.0.459" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 82.719593][ T1683] device-mapper: table: 252:2: raid: unknown target type [ 82.740455][ T1683] device-mapper: ioctl: error adding target to table [ 83.362838][ T1705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 83.536423][ T66] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 83.640777][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.648754][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.656199][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.663683][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.666430][ T376] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 83.678819][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.686269][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.694315][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.701765][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.707924][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.718753][ T66] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.719092][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.728459][ T66] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.730652][ T66] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 83.758007][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.758015][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.758042][ T66] usb 4-1: Product: syz [ 83.777597][ T66] usb 4-1: Manufacturer: syz [ 83.778158][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.782221][ T66] usb 4-1: SerialNumber: syz [ 83.794541][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.801180][ T66] hub 4-1:1.0: bad descriptor, ignoring hub [ 83.807887][ T66] hub 4-1:1.0: probe with driver hub failed with error -5 [ 83.808353][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.822653][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.830303][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.837873][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.838289][ T376] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 83.853380][ T376] usb 2-1: config 0 has no interface number 0 [ 83.853906][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.861402][ T376] usb 2-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.876666][ T376] usb 2-1: config 0 interface 41 has no altsetting 0 [ 83.877633][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.886129][ T376] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 83.899967][ T376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.900491][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.908048][ T376] usb 2-1: Product: syz [ 83.919584][ T376] usb 2-1: Manufacturer: syz [ 83.920080][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.924238][ T376] usb 2-1: SerialNumber: syz [ 83.936411][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.944229][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.944254][ T376] usb 2-1: config 0 descriptor?? [ 83.956773][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.964810][ T376] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 83.973475][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.984459][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 83.998397][ T66] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 84.009820][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.026497][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.027590][ T66] usb 4-1: USB disconnect, device number 11 [ 84.040319][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.049386][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.052317][ T66] usblp0: removed [ 84.062488][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.072971][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.081211][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.088896][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.096618][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.106853][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.114376][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.121867][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.129503][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.136989][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.144437][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.152332][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.160199][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.170290][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.182270][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.190177][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.194350][ T310] usb 2-1: USB disconnect, device number 16 [ 84.205171][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.215235][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.222907][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.230533][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.238008][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.245487][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.252975][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.260405][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.267873][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.275301][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.282831][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.290242][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.297679][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.305057][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.312466][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.319930][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.327417][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.334838][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.342286][ T1714] overlay: filesystem on ./file0 not supported as upperdir [ 84.597633][ T1728] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 84.732268][ T1734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=1734 comm=syz.1.482 [ 85.197480][ T1750] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 85.577377][ T1773] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 86.120870][ T1786] PM: Enabling pm_trace changes system date and time during resume. [ 86.120870][ T1786] PM: Correct system time has to be restored manually after resume. [ 86.179271][ T1792] overlayfs: failed to resolve './file2': -2 [ 86.242195][ T1797] FAULT_INJECTION: forcing a failure. [ 86.242195][ T1797] name failslab, interval 1, probability 0, space 0, times 0 [ 86.255145][ T1797] CPU: 0 UID: 0 PID: 1797 Comm: syz.0.508 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 86.255187][ T1797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.255203][ T1797] Call Trace: [ 86.255212][ T1797] [ 86.255223][ T1797] __dump_stack+0x21/0x30 [ 86.255255][ T1797] dump_stack_lvl+0x140/0x1c0 [ 86.255279][ T1797] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.255307][ T1797] dump_stack+0x19/0x20 [ 86.255340][ T1797] should_fail_ex+0x3c2/0x510 [ 86.255364][ T1797] ? x509_fabricate_name+0x61b/0xcb0 [ 86.255401][ T1797] should_failslab+0xac/0x100 [ 86.255429][ T1797] __kmalloc_noprof+0x69/0x510 [ 86.255464][ T1797] ? x509_fabricate_name+0x61b/0xcb0 [ 86.255500][ T1797] ? x509_note_OID+0x12a/0x190 [ 86.255535][ T1797] x509_fabricate_name+0x61b/0xcb0 [ 86.255573][ T1797] x509_note_subject+0x8b/0xc0 [ 86.255609][ T1797] asn1_ber_decoder+0x1974/0x1ff0 [ 86.255642][ T1797] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 86.255671][ T1797] ? kasan_save_alloc_info+0x3a/0x50 [ 86.255705][ T1797] ? __kasan_kmalloc+0x96/0xb0 [ 86.255731][ T1797] ? memblock_clear_nomap+0x90/0x2b0 [ 86.255760][ T1797] x509_cert_parse+0x1e3/0xbd0 [ 86.255803][ T1797] x509_key_preparse+0x6a/0x880 [ 86.255842][ T1797] ? __cfi_down_read+0x10/0x10 [ 86.255878][ T1797] asymmetric_key_preparse+0xb6/0x100 [ 86.255910][ T1797] __key_create_or_update+0x433/0xa90 [ 86.255945][ T1797] ? security_key_permission+0x3d/0x100 [ 86.255984][ T1797] ? key_create_or_update+0x70/0x70 [ 86.256018][ T1797] ? __kasan_kmalloc+0x96/0xb0 [ 86.256057][ T1797] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 86.256095][ T1797] key_create_or_update+0x47/0x70 [ 86.256130][ T1797] __se_sys_add_key+0x355/0x4b0 [ 86.256156][ T1797] ? __x64_sys_add_key+0xf0/0xf0 [ 86.256182][ T1797] ? __kasan_check_write+0x18/0x20 [ 86.256218][ T1797] ? fpregs_restore_userregs+0x11c/0x260 [ 86.256255][ T1797] __x64_sys_add_key+0xc3/0xf0 [ 86.256279][ T1797] x64_sys_call+0x195f/0x2ee0 [ 86.256316][ T1797] do_syscall_64+0x57/0xf0 [ 86.256342][ T1797] ? clear_bhb_loop+0x50/0xa0 [ 86.256379][ T1797] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.256414][ T1797] RIP: 0033:0x7f0bb299fb19 [ 86.256436][ T1797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.256458][ T1797] RSP: 002b:00007f0bb3923028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 86.256485][ T1797] RAX: ffffffffffffffda RBX: 00007f0bb2c25fa0 RCX: 00007f0bb299fb19 [ 86.256506][ T1797] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000200 [ 86.256523][ T1797] RBP: 00007f0bb2a37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 86.256541][ T1797] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 86.256558][ T1797] R13: 00007f0bb2c26038 R14: 00007f0bb2c25fa0 R15: 00007fff43ac4338 [ 86.256580][ T1797] [ 86.330018][ T1799] netlink: 'syz.2.509': attribute type 27 has an invalid length. [ 86.605847][ T1813] netlink: 'syz.3.515': attribute type 25 has an invalid length. [ 86.729046][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 86.729069][ T36] audit: type=1400 audit(1793868541.375:1692): avc: denied { audit_read } for pid=1819 comm="syz.1.518" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.836334][ T310] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 86.996472][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 87.003166][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.011778][ T310] usb 1-1: config index 0 descriptor too short (expected 575, got 63) [ 87.020299][ T310] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 87.028662][ T310] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.039105][ T310] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 87.048072][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 87.062424][ T310] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 87.071560][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.079683][ T310] usb 1-1: Product: syz [ 87.083869][ T310] usb 1-1: Manufacturer: syz [ 87.088512][ T310] usb 1-1: SerialNumber: syz [ 87.094010][ T310] usb 1-1: config 0 descriptor?? [ 87.103371][ T310] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 87.119077][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.226435][ T66] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 87.303618][ T310] usb 1-1: USB disconnect, device number 29 [ 87.376357][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 87.382952][ T66] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.394197][ T66] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.404776][ T66] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 87.418006][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 87.424666][ T66] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 87.433794][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.443011][ T66] usb 2-1: config 0 descriptor?? [ 87.497366][ T1828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 87.565362][ T1832] netlink: 'syz.3.523': attribute type 27 has an invalid length. [ 87.583231][ T1832] syztnl0: entered promiscuous mode [ 87.588595][ T1832] syztnl0: entered allmulticast mode [ 87.594751][ T1832] ): entered promiscuous mode [ 87.599716][ T1832] ): entered allmulticast mode [ 87.657360][ T1824] 9pnet_fd: Insufficient options for proto=fd [ 87.664336][ T1824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.673349][ T1824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.843324][ T1846] FAULT_INJECTION: forcing a failure. [ 87.843324][ T1846] name failslab, interval 1, probability 0, space 0, times 0 [ 87.856658][ T1846] CPU: 0 UID: 0 PID: 1846 Comm: syz.0.528 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 87.856692][ T1846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.856706][ T1846] Call Trace: [ 87.856712][ T1846] [ 87.856733][ T1846] __dump_stack+0x21/0x30 [ 87.856758][ T1846] dump_stack_lvl+0x140/0x1c0 [ 87.856777][ T1846] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.856798][ T1846] dump_stack+0x19/0x20 [ 87.856816][ T1846] should_fail_ex+0x3c2/0x510 [ 87.856835][ T1846] ? asymmetric_key_generate_id+0x86/0x220 [ 87.856890][ T1846] should_failslab+0xac/0x100 [ 87.856914][ T1846] __kmalloc_noprof+0x69/0x510 [ 87.856945][ T1846] ? asymmetric_key_generate_id+0x86/0x220 [ 87.856980][ T1846] ? x509_note_OID+0x12a/0x190 [ 87.857008][ T1846] ? __asan_memcpy+0x5a/0x80 [ 87.857039][ T1846] asymmetric_key_generate_id+0x86/0x220 [ 87.857064][ T1846] ? __cfi_x509_extract_key_data+0x10/0x10 [ 87.857096][ T1846] x509_akid_note_kid+0x9f/0x120 [ 87.857127][ T1846] asn1_ber_decoder+0x14e2/0x1ff0 [ 87.857149][ T1846] ? asn1_ber_decoder+0x7c2/0x1ff0 [ 87.857172][ T1846] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 87.857194][ T1846] ? kasan_save_alloc_info+0x3a/0x50 [ 87.857221][ T1846] ? __kasan_kmalloc+0x96/0xb0 [ 87.857242][ T1846] ? memblock_clear_nomap+0x90/0x2b0 [ 87.857265][ T1846] x509_cert_parse+0x251/0xbd0 [ 87.857292][ T1846] x509_key_preparse+0x6a/0x880 [ 87.857322][ T1846] ? __cfi_down_read+0x10/0x10 [ 87.857351][ T1846] asymmetric_key_preparse+0xb6/0x100 [ 87.857376][ T1846] __key_create_or_update+0x433/0xa90 [ 87.857404][ T1846] ? security_key_permission+0x3d/0x100 [ 87.857435][ T1846] ? key_create_or_update+0x70/0x70 [ 87.857462][ T1846] ? __kasan_kmalloc+0x96/0xb0 [ 87.857485][ T1846] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 87.857510][ T1846] key_create_or_update+0x47/0x70 [ 87.857537][ T1846] __se_sys_add_key+0x355/0x4b0 [ 87.857556][ T1846] ? __x64_sys_add_key+0xf0/0xf0 [ 87.857575][ T1846] ? __kasan_check_write+0x18/0x20 [ 87.857603][ T1846] ? fpregs_restore_userregs+0x11c/0x260 [ 87.857632][ T1846] __x64_sys_add_key+0xc3/0xf0 [ 87.857653][ T1846] x64_sys_call+0x195f/0x2ee0 [ 87.857680][ T1846] do_syscall_64+0x57/0xf0 [ 87.857701][ T1846] ? clear_bhb_loop+0x50/0xa0 [ 87.857732][ T1846] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.857760][ T1846] RIP: 0033:0x7f0bb299fb19 [ 87.857782][ T1846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.857801][ T1846] RSP: 002b:00007f0bb3923028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 87.857824][ T1846] RAX: ffffffffffffffda RBX: 00007f0bb2c25fa0 RCX: 00007f0bb299fb19 [ 87.857839][ T1846] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000200 [ 87.857854][ T1846] RBP: 00007f0bb2a37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 87.857867][ T1846] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 87.857880][ T1846] R13: 00007f0bb2c26038 R14: 00007f0bb2c25fa0 R15: 00007fff43ac4338 [ 87.857897][ T1846] [ 87.857907][ T1846] X.509: Couldn't decode AuthKeyIdentifier [ 88.170086][ T10] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 88.202152][ T36] audit: type=1400 audit(1793868542.845:1693): avc: denied { write } for pid=1847 comm="syz.0.529" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.226640][ T310] usb 2-1: USB disconnect, device number 17 [ 88.233650][ T36] audit: type=1400 audit(1793868542.845:1694): avc: denied { create } for pid=1847 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 88.327711][ T10] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.340634][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.347309][ T10] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 88.356923][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.365685][ T10] usb 4-1: config 0 descriptor?? [ 88.567930][ T1855] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 88.589052][ T1839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.599130][ T1839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.735273][ T1863] netlink: 'syz.2.533': attribute type 27 has an invalid length. [ 88.822644][ T10] input: HID 0810:0001 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0810:0001.0007/input/input6 [ 88.853881][ T10] pantherlord 0003:0810:0001.0007: input,hidraw0: USB HID v80.00 Joystick [HID 0810:0001] on usb-dummy_hcd.3-1/input0 [ 88.879686][ T10] pantherlord 0003:0810:0001.0007: no output reports found [ 88.887821][ T1869] udevd[1869]: open /dev/null failed: No such file or directory [ 89.078069][ T1877] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 89.222652][ T10] usb 4-1: USB disconnect, device number 12 [ 89.467407][ T1892] rust_binder: 1891:1892 error while translating object: ENOENT [ 89.475276][ T1892] rust_binder: 1891:1892 transaction async to 1891:0 failed ENOENT, code 0 size 72-24 line thread.rs:878 [ 89.488882][ T1892] capability: warning: `syz.2.546' uses 32-bit capabilities (legacy support in use) [ 89.596380][ T310] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 89.637616][ T1900] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 89.756403][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 89.756403][ T1080] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 89.770742][ T310] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.781815][ T310] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.791701][ T310] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 89.805130][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.811828][ T310] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 89.821239][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.832793][ T310] usb 1-1: config 0 descriptor?? [ 89.907439][ T1080] usb 3-1: LPM exit latency is zeroed, disabling LPM. [ 89.923744][ T1080] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 89.942687][ T1911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 89.953623][ T1080] usb 3-1: string descriptor 0 read error: -22 [ 89.960933][ T1080] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.981222][ T1080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.991886][ T1894] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.002696][ T1080] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 90.012432][ T36] audit: type=1400 audit(1793868544.655:1695): avc: denied { lock } for pid=1916 comm="syz.3.558" path="socket:[18366]" dev="sockfs" ino=18366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 90.036762][ T36] audit: type=1400 audit(1793868544.655:1696): avc: denied { write } for pid=1916 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.070957][ T1920] netlink: 'syz.1.559': attribute type 27 has an invalid length. [ 90.103882][ T1922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 90.129222][ T1924] x_tables: duplicate underflow at hook 1 [ 90.177870][ T1925] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3276594798 (26212758384 ns) > initial count (15403876168 ns). Using initial count to start timer. [ 90.203179][ T1080] usb 3-1: USB disconnect, device number 23 [ 90.266342][ T66] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 90.417498][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.427781][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 90.440666][ T66] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 90.449853][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.458010][ T66] usb 4-1: Product: syz [ 90.462241][ T66] usb 4-1: Manufacturer: syz [ 90.466910][ T66] usb 4-1: SerialNumber: syz [ 90.467217][ T1080] usb 1-1: USB disconnect, device number 30 [ 90.479812][ T1918] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 90.689327][ T66] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 90.699412][ T66] usb 4-1: USB disconnect, device number 13 [ 90.722573][ T1940] FAULT_INJECTION: forcing a failure. [ 90.722573][ T1940] name failslab, interval 1, probability 0, space 0, times 0 [ 90.735343][ T1940] CPU: 1 UID: 0 PID: 1940 Comm: syz.2.565 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 90.735384][ T1940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.735395][ T1940] Call Trace: [ 90.735401][ T1940] [ 90.735408][ T1940] __dump_stack+0x21/0x30 [ 90.735428][ T1940] dump_stack_lvl+0x140/0x1c0 [ 90.735444][ T1940] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.735461][ T1940] dump_stack+0x19/0x20 [ 90.735476][ T1940] should_fail_ex+0x3c2/0x510 [ 90.735492][ T1940] should_failslab+0xac/0x100 [ 90.735513][ T1940] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 90.735543][ T1940] ? x509_cert_parse+0x412/0xbd0 [ 90.735576][ T1940] ? kmemdup_noprof+0x5b/0x80 [ 90.735602][ T1940] kmemdup_noprof+0x31/0x80 [ 90.735623][ T1940] x509_cert_parse+0x412/0xbd0 [ 90.735646][ T1940] x509_key_preparse+0x6a/0x880 [ 90.735671][ T1940] ? __cfi_down_read+0x10/0x10 [ 90.735694][ T1940] asymmetric_key_preparse+0xb6/0x100 [ 90.735715][ T1940] __key_create_or_update+0x433/0xa90 [ 90.735739][ T1940] ? security_key_permission+0x3d/0x100 [ 90.735765][ T1940] ? key_create_or_update+0x70/0x70 [ 90.735787][ T1940] ? __kasan_kmalloc+0x96/0xb0 [ 90.735805][ T1940] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 90.735827][ T1940] key_create_or_update+0x47/0x70 [ 90.735848][ T1940] __se_sys_add_key+0x355/0x4b0 [ 90.735864][ T1940] ? __x64_sys_add_key+0xf0/0xf0 [ 90.735880][ T1940] ? __kasan_check_write+0x18/0x20 [ 90.735902][ T1940] ? fpregs_restore_userregs+0x11c/0x260 [ 90.735925][ T1940] __x64_sys_add_key+0xc3/0xf0 [ 90.735941][ T1940] x64_sys_call+0x195f/0x2ee0 [ 90.735958][ T1940] do_syscall_64+0x57/0xf0 [ 90.735974][ T1940] ? clear_bhb_loop+0x50/0xa0 [ 90.735996][ T1940] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.736017][ T1940] RIP: 0033:0x7f1c8479fb19 [ 90.736071][ T1940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.736091][ T1940] RSP: 002b:00007f1c855d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 90.736116][ T1940] RAX: ffffffffffffffda RBX: 00007f1c84a25fa0 RCX: 00007f1c8479fb19 [ 90.736129][ T1940] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000200 [ 90.736141][ T1940] RBP: 00007f1c84837b70 R08: ffffffffffffffff R09: 0000000000000000 [ 90.736153][ T1940] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 90.736164][ T1940] R13: 00007f1c84a26038 R14: 00007f1c84a25fa0 R15: 00007ffd1d7a4ea8 [ 90.736179][ T1940] [ 91.031748][ T1948] netlink: 'syz.2.569': attribute type 27 has an invalid length. [ 91.247751][ T1963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 91.259610][ T1961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 91.289662][ T36] audit: type=1400 audit(1793868545.935:1697): avc: denied { mount } for pid=1965 comm="syz.1.576" name="/" dev="configfs" ino=2579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 91.313111][ T36] audit: type=1400 audit(1793868545.935:1698): avc: denied { search } for pid=1965 comm="syz.1.576" name="/" dev="configfs" ino=2579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.337225][ T36] audit: type=1400 audit(1793868545.935:1699): avc: denied { write } for pid=1965 comm="syz.1.576" name="usb_gadget" dev="configfs" ino=2580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.366327][ T36] audit: type=1400 audit(1793868545.935:1700): avc: denied { add_name } for pid=1965 comm="syz.1.576" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.387846][ T36] audit: type=1400 audit(1793868545.935:1701): avc: denied { create } for pid=1965 comm="syz.1.576" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 91.646407][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 91.676406][ T1080] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 91.797904][ T9] usb 1-1: config 15 has an invalid interface number: 10 but max is 0 [ 91.806204][ T9] usb 1-1: config 15 has no interface number 0 [ 91.812583][ T9] usb 1-1: config 15 interface 10 has no altsetting 0 [ 91.821037][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=dd.83 [ 91.830168][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.838262][ T1080] usb 2-1: Using ep0 maxpacket: 16 [ 91.843479][ T9] usb 1-1: Product: syz [ 91.847719][ T9] usb 1-1: Manufacturer: syz [ 91.852479][ T9] usb 1-1: SerialNumber: syz [ 91.857685][ T1080] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.868785][ T1080] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.880311][ T1080] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 91.893742][ T1080] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.901689][ T1080] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 91.910943][ T1080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.922013][ T1080] usb 2-1: config 0 descriptor?? [ 92.008867][ T1984] tap0: tun_chr_ioctl cmd 1074025676 [ 92.014251][ T1984] tap0: owner set to 0 [ 92.018899][ T1984] FAULT_INJECTION: forcing a failure. [ 92.018899][ T1984] name failslab, interval 1, probability 0, space 0, times 0 [ 92.031674][ T1984] CPU: 1 UID: 0 PID: 1984 Comm: syz.2.583 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 92.031712][ T1984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 92.031730][ T1984] Call Trace: [ 92.031737][ T1984] [ 92.031745][ T1984] __dump_stack+0x21/0x30 [ 92.031765][ T1984] dump_stack_lvl+0x140/0x1c0 [ 92.031795][ T1984] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.031818][ T1984] ? __cfi___switch_to+0x10/0x10 [ 92.031879][ T1984] dump_stack+0x19/0x20 [ 92.031900][ T1984] should_fail_ex+0x3c2/0x510 [ 92.031926][ T1984] should_failslab+0xac/0x100 [ 92.031960][ T1984] kmem_cache_alloc_noprof+0x42/0x410 [ 92.031996][ T1984] ? vm_area_dup+0x3f/0x560 [ 92.032023][ T1984] vm_area_dup+0x3f/0x560 [ 92.032051][ T1984] ? __split_vma+0x1b8/0xc10 [ 92.032066][ T1984] __split_vma+0x1ce/0xc10 [ 92.032082][ T1984] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 92.032115][ T1984] ? __cfi___futex_queue+0x10/0x10 [ 92.032140][ T1984] ? can_vma_merge_left+0x184/0x4b0 [ 92.032173][ T1984] vma_modify+0x60c/0x1540 [ 92.032198][ T1984] vma_modify_flags+0x182/0x1c0 [ 92.032215][ T1984] mprotect_fixup+0x432/0x8d0 [ 92.032234][ T1984] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 92.032280][ T1984] ? __cfi_mprotect_fixup+0x10/0x10 [ 92.032318][ T1984] ? bpf_lsm_file_mprotect+0xd/0x20 [ 92.032346][ T1984] do_mprotect_pkey+0xa85/0xe50 [ 92.032375][ T1984] ? prot_none_test+0x30/0x30 [ 92.032406][ T1984] ? mutex_unlock+0x90/0x240 [ 92.032449][ T1984] ? fput+0x1a4/0x230 [ 92.032483][ T1984] ? __cfi_ksys_write+0x10/0x10 [ 92.032499][ T1984] ? __kasan_check_write+0x18/0x20 [ 92.032523][ T1984] ? __kasan_check_write+0x18/0x20 [ 92.032562][ T1984] ? fpregs_restore_userregs+0x11c/0x260 [ 92.032595][ T1984] __x64_sys_mprotect+0x84/0xa0 [ 92.032619][ T1984] x64_sys_call+0x2590/0x2ee0 [ 92.032646][ T1984] do_syscall_64+0x57/0xf0 [ 92.032663][ T1984] ? clear_bhb_loop+0x50/0xa0 [ 92.032686][ T1984] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.032735][ T1984] RIP: 0033:0x7f1c8479fb19 [ 92.032755][ T1984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.032773][ T1984] RSP: 002b:00007f1c855d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 92.032799][ T1984] RAX: ffffffffffffffda RBX: 00007f1c84a25fa0 RCX: 00007f1c8479fb19 [ 92.032825][ T1984] RDX: 0000000000000009 RSI: 000000000000f000 RDI: 0000200000000000 [ 92.032840][ T1984] RBP: 00007f1c84837b70 R08: 0000000000000000 R09: 0000000000000000 [ 92.032853][ T1984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.032867][ T1984] R13: 00007f1c84a26038 R14: 00007f1c84a25fa0 R15: 00007ffd1d7a4ea8 [ 92.032886][ T1984] [ 92.349990][ T1988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 92.508472][ T1080] hid (null): unknown global tag 0xd [ 92.560891][ T1999] syz.2.589 uses obsolete (PF_INET,SOCK_PACKET) [ 92.569314][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 92.569333][ T36] audit: type=1400 audit(1793868547.215:1703): avc: denied { read } for pid=1998 comm="syz.2.589" path="socket:[19818]" dev="sockfs" ino=19818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.606372][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 92.709824][ T1080] usb 2-1: USB disconnect, device number 18 [ 92.766365][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 92.772647][ T10] usb 4-1: config index 0 descriptor too short (expected 1060, got 36) [ 92.781062][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.792279][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.802387][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.815379][ T10] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 92.824600][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.833541][ T10] usb 4-1: config 0 descriptor?? [ 93.244108][ T1991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.253223][ T1991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.279616][ T36] audit: type=1400 audit(1793868547.925:1704): avc: denied { ioctl } for pid=2009 comm="syz.1.593" path="socket:[20778]" dev="sockfs" ino=20778 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.380175][ T36] audit: type=1400 audit(1793868548.025:1705): avc: denied { read } for pid=2011 comm="syz.1.594" name="/" dev="configfs" ino=2579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.403475][ T36] audit: type=1400 audit(1793868548.025:1706): avc: denied { open } for pid=2011 comm="syz.1.594" path="/" dev="configfs" ino=2579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.542195][ T2025] FAULT_INJECTION: forcing a failure. [ 93.542195][ T2025] name failslab, interval 1, probability 0, space 0, times 0 [ 93.555124][ T2025] CPU: 0 UID: 0 PID: 2025 Comm: syz.1.600 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 93.555151][ T2025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.555162][ T2025] Call Trace: [ 93.555171][ T2025] [ 93.555177][ T2025] __dump_stack+0x21/0x30 [ 93.555197][ T2025] dump_stack_lvl+0x140/0x1c0 [ 93.555212][ T2025] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.555227][ T2025] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 93.555252][ T2025] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 93.555277][ T2025] dump_stack+0x19/0x20 [ 93.555325][ T2025] should_fail_ex+0x3c2/0x510 [ 93.555341][ T2025] should_failslab+0xac/0x100 [ 93.555358][ T2025] __kmalloc_node_noprof+0x69/0x500 [ 93.555383][ T2025] ? crypto_create_tfm_node+0xa0/0x4d0 [ 93.555408][ T2025] ? __kasan_check_write+0x18/0x20 [ 93.555431][ T2025] ? up_read+0x26/0x1c0 [ 93.555450][ T2025] crypto_create_tfm_node+0xa0/0x4d0 [ 93.555475][ T2025] crypto_alloc_tfm_node+0x166/0x350 [ 93.555499][ T2025] ? kmemdup_noprof+0x5b/0x80 [ 93.555521][ T2025] crypto_alloc_shash+0x34/0x40 [ 93.555543][ T2025] x509_get_sig_params+0x110/0x6a0 [ 93.555568][ T2025] x509_cert_parse+0x53e/0xbd0 [ 93.555591][ T2025] x509_key_preparse+0x6a/0x880 [ 93.555615][ T2025] ? __cfi_down_read+0x10/0x10 [ 93.555638][ T2025] asymmetric_key_preparse+0xb6/0x100 [ 93.555659][ T2025] __key_create_or_update+0x433/0xa90 [ 93.555681][ T2025] ? security_key_permission+0x3d/0x100 [ 93.555706][ T2025] ? key_create_or_update+0x70/0x70 [ 93.555728][ T2025] ? __kasan_kmalloc+0x96/0xb0 [ 93.555747][ T2025] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 93.555768][ T2025] key_create_or_update+0x47/0x70 [ 93.555793][ T2025] __se_sys_add_key+0x355/0x4b0 [ 93.555809][ T2025] ? __x64_sys_add_key+0xf0/0xf0 [ 93.555825][ T2025] ? __kasan_check_write+0x18/0x20 [ 93.555848][ T2025] ? fpregs_restore_userregs+0x11c/0x260 [ 93.555871][ T2025] __x64_sys_add_key+0xc3/0xf0 [ 93.555887][ T2025] x64_sys_call+0x195f/0x2ee0 [ 93.555931][ T2025] do_syscall_64+0x57/0xf0 [ 93.555955][ T2025] ? clear_bhb_loop+0x50/0xa0 [ 93.555998][ T2025] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.556021][ T2025] RIP: 0033:0x7f955b99fb19 [ 93.556036][ T2025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.556050][ T2025] RSP: 002b:00007f955c794028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 93.556067][ T2025] RAX: ffffffffffffffda RBX: 00007f955bc25fa0 RCX: 00007f955b99fb19 [ 93.556080][ T2025] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000200 [ 93.556092][ T2025] RBP: 00007f955ba37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 93.556104][ T2025] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 93.556115][ T2025] R13: 00007f955bc26038 R14: 00007f955bc25fa0 R15: 00007ffc51f2e6b8 [ 93.556129][ T2025] [ 93.850306][ T10] sony 0003:1345:3008.000A: can't set operational mode: step 1 [ 93.858346][ T10] sony 0003:1345:3008.000A: Failed to set controller into operational mode [ 93.874106][ T10] sony 0003:1345:3008.000A: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 93.874918][ T2028] udevd[2028]: open /dev/null failed: No such file or directory [ 93.904955][ T10] sony 0003:1345:3008.000A: failed to claim input [ 93.915995][ T10] usb 4-1: USB disconnect, device number 14 [ 93.966391][ T1471] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 94.126357][ T1471] usb 3-1: Using ep0 maxpacket: 32 [ 94.133015][ T1471] usb 3-1: config index 0 descriptor too short (expected 58651, got 27) [ 94.141489][ T1471] usb 3-1: config 192 has an invalid interface number: 231 but max is -1 [ 94.150068][ T1471] usb 3-1: config 192 has 1 interface, different from the descriptor's value: 0 [ 94.159196][ T1471] usb 3-1: config 192 has no interface number 0 [ 94.165558][ T1471] usb 3-1: config 192 interface 231 altsetting 2 endpoint 0x8 has invalid wMaxPacketSize 0 [ 94.175651][ T1471] usb 3-1: config 192 interface 231 has no altsetting 0 [ 94.184338][ T1471] usb 3-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=e8.cb [ 94.193575][ T1471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.201670][ T1471] usb 3-1: Product: syz [ 94.205907][ T1471] usb 3-1: Manufacturer: syz [ 94.210586][ T1471] usb 3-1: SerialNumber: syz [ 94.422950][ T9] usb 1-1: Found UVC 0.00 device syz (05ac:8501) [ 94.429443][ T9] usb 1-1: No valid video chain found. [ 94.438094][ T9] usb 1-1: USB disconnect, device number 31 [ 94.530303][ T1471] usb 3-1: Found UVC 0.00 device syz (05ac:8600) [ 94.536786][ T1471] usb 3-1: No valid video chain found. [ 94.543967][ T1471] usb 3-1: USB disconnect, device number 24 [ 94.736356][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 94.797888][ T2050] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 94.887960][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 94.896404][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.907651][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 94.916756][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.924761][ T10] usb 4-1: Product: syz [ 94.928972][ T10] usb 4-1: Manufacturer: syz [ 94.933610][ T10] usb 4-1: SerialNumber: syz [ 95.044349][ T2055] FAULT_INJECTION: forcing a failure. [ 95.044349][ T2055] name failslab, interval 1, probability 0, space 0, times 0 [ 95.057114][ T2055] CPU: 0 UID: 0 PID: 2055 Comm: syz.2.610 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 95.057156][ T2055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.057179][ T2055] Call Trace: [ 95.057187][ T2055] [ 95.057195][ T2055] __dump_stack+0x21/0x30 [ 95.057223][ T2055] dump_stack_lvl+0x140/0x1c0 [ 95.057245][ T2055] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.057268][ T2055] ? __kasan_check_write+0x18/0x20 [ 95.057302][ T2055] ? rwsem_read_trylock+0x275/0x5a0 [ 95.057331][ T2055] dump_stack+0x19/0x20 [ 95.057350][ T2055] should_fail_ex+0x3c2/0x510 [ 95.057371][ T2055] should_failslab+0xac/0x100 [ 95.057397][ T2055] __kmalloc_node_noprof+0x69/0x500 [ 95.057424][ T2055] ? crypto_create_tfm_node+0xa0/0x4d0 [ 95.057449][ T2055] ? __kasan_check_write+0x18/0x20 [ 95.057472][ T2055] ? up_read+0x26/0x1c0 [ 95.057491][ T2055] crypto_create_tfm_node+0xa0/0x4d0 [ 95.057516][ T2055] crypto_alloc_tfm_node+0x166/0x350 [ 95.057541][ T2055] ? kmemdup_noprof+0x5b/0x80 [ 95.057563][ T2055] crypto_alloc_shash+0x34/0x40 [ 95.057587][ T2055] x509_get_sig_params+0x110/0x6a0 [ 95.057614][ T2055] x509_cert_parse+0x53e/0xbd0 [ 95.057639][ T2055] x509_key_preparse+0x6a/0x880 [ 95.057664][ T2055] ? __cfi_down_read+0x10/0x10 [ 95.057690][ T2055] asymmetric_key_preparse+0xb6/0x100 [ 95.057711][ T2055] __key_create_or_update+0x433/0xa90 [ 95.057733][ T2055] ? security_key_permission+0x3d/0x100 [ 95.057759][ T2055] ? key_create_or_update+0x70/0x70 [ 95.057781][ T2055] ? __kasan_kmalloc+0x96/0xb0 [ 95.057799][ T2055] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 95.057822][ T2055] key_create_or_update+0x47/0x70 [ 95.057844][ T2055] __se_sys_add_key+0x355/0x4b0 [ 95.057860][ T2055] ? __x64_sys_add_key+0xf0/0xf0 [ 95.057876][ T2055] ? __kasan_check_write+0x18/0x20 [ 95.057899][ T2055] ? fpregs_restore_userregs+0x11c/0x260 [ 95.057922][ T2055] __x64_sys_add_key+0xc3/0xf0 [ 95.057937][ T2055] x64_sys_call+0x195f/0x2ee0 [ 95.057955][ T2055] do_syscall_64+0x57/0xf0 [ 95.057971][ T2055] ? clear_bhb_loop+0x50/0xa0 [ 95.057994][ T2055] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.058018][ T2055] RIP: 0033:0x7f1c8479fb19 [ 95.058033][ T2055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.058047][ T2055] RSP: 002b:00007f1c855d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 95.058065][ T2055] RAX: ffffffffffffffda RBX: 00007f1c84a25fa0 RCX: 00007f1c8479fb19 [ 95.058077][ T2055] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000200 [ 95.058088][ T2055] RBP: 00007f1c84837b70 R08: ffffffffffffffff R09: 0000000000000000 [ 95.058099][ T2055] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 95.058109][ T2055] R13: 00007f1c84a26038 R14: 00007f1c84a25fa0 R15: 00007ffd1d7a4ea8 [ 95.058123][ T2055] [ 95.116537][ T310] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 95.149806][ T10] usb 4-1: 1:1 : no cluster descriptor [ 95.308353][ T310] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 95.320405][ T10] usb 4-1: USB disconnect, device number 15 [ 95.344419][ T310] usb 2-1: config 127 has no interface number 0 [ 95.379977][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.393021][ T310] usb 2-1: too many endpoints for config 127 interface 57 altsetting 0: 232, using maximum allowed: 30 [ 95.419098][ T310] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 95.430667][ T310] usb 2-1: config 127 interface 57 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 95.446092][ T310] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 95.455555][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.463818][ T310] usb 2-1: Product: syz [ 95.468327][ T310] usb 2-1: Manufacturer: syz [ 95.472968][ T310] usb 2-1: SerialNumber: syz [ 95.482551][ T2053] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.495486][ T36] audit: type=1400 audit(1793868550.135:1707): avc: denied { accept } for pid=2060 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.552156][ T2071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 95.576817][ T2073] overlayfs: missing 'lowerdir' [ 95.600008][ T36] audit: type=1326 audit(1793868550.245:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2074 comm="syz.2.619" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f1c8479fb19 code=0x0 [ 95.625445][ T36] audit: type=1400 audit(1793868550.255:1709): avc: denied { cmd } for pid=2074 comm="syz.2.619" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 95.651605][ T2077] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0 [ 95.661665][ T2077] rust_binder: 2074:2077 error while translating object: EINVAL [ 95.669624][ T2077] rust_binder: 2074:2077 transaction call to 2074:0 failed EINVAL, code 0 size 112-24 line thread.rs:955 [ 95.688796][ T2084] netlink: 'syz.0.620': attribute type 46 has an invalid length. [ 95.755760][ T36] audit: type=1400 audit(1793868550.395:1710): avc: denied { create } for pid=2085 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 95.989354][ T310] asix 2-1:127.57: probe with driver asix failed with error -71 [ 95.999228][ T310] usb 2-1: USB disconnect, device number 19 [ 96.106353][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 96.236364][ T10] usb 1-1: device descriptor read/64, error -71 [ 96.433306][ T1471] rust_binder: 2074: undelivered TRANSACTION_ERROR: 29201 [ 96.476472][ T10] usb 1-1: device descriptor read/64, error -71 [ 96.487794][ T2101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 96.562873][ T36] audit: type=1326 audit(1793868551.205:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2108 comm="syz.2.630" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c8479fb19 code=0x0 [ 96.614136][ T2111] netlink: 'syz.2.630': attribute type 7 has an invalid length. [ 96.622447][ T2111] netlink: 'syz.2.630': attribute type 5 has an invalid length. [ 96.630368][ T2111] netlink: 17 bytes leftover after parsing attributes in process `syz.2.630'. [ 96.643435][ T2113] incfs_lookup_dentry err:-13 [ 96.643447][ T2114] incfs_lookup_dentry err:-13 [ 96.643460][ T2114] incfs: Can't find or create .index dir in ./file0 [ 96.648644][ T2113] incfs: Can't find or create .index dir in ./file0 [ 96.653589][ T2114] incfs: mount failed -13 [ 96.660316][ T2113] incfs: mount failed -13 [ 96.726346][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 96.856357][ T10] usb 1-1: device descriptor read/64, error -71 [ 96.906387][ T1080] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 97.036423][ T1080] usb 4-1: device descriptor read/64, error -71 [ 97.096401][ T10] usb 1-1: device descriptor read/64, error -71 [ 97.206450][ T10] usb usb1-port1: attempt power cycle [ 97.286365][ T1080] usb 4-1: device descriptor read/64, error -71 [ 97.526371][ T1080] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 97.546373][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 97.567490][ T10] usb 1-1: device descriptor read/8, error -71 [ 97.608009][ T1305] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.656414][ T1080] usb 4-1: device descriptor read/64, error -71 [ 97.697504][ T10] usb 1-1: device descriptor read/8, error -71 [ 97.896416][ T1080] usb 4-1: device descriptor read/64, error -71 [ 97.936449][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 97.957569][ T10] usb 1-1: device descriptor read/8, error -71 [ 98.006477][ T1080] usb usb4-port1: attempt power cycle [ 98.087532][ T10] usb 1-1: device descriptor read/8, error -71 [ 98.206500][ T10] usb usb1-port1: unable to enumerate USB device [ 98.276403][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 98.346388][ T1080] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 98.367604][ T1080] usb 4-1: device descriptor read/8, error -71 [ 98.410091][ T2147] tipc: Enabled bearer , priority 0 [ 98.416922][ T2147] tipc: Disabling bearer [ 98.497605][ T1080] usb 4-1: device descriptor read/8, error -71 [ 98.676370][ T310] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 98.736408][ T1080] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 98.757561][ T1080] usb 4-1: device descriptor read/8, error -71 [ 98.827531][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.837342][ T310] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.847062][ T310] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.861479][ T310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 98.870604][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.878676][ T310] usb 3-1: Product: syz [ 98.882871][ T310] usb 3-1: Manufacturer: syz [ 98.887536][ T310] usb 3-1: SerialNumber: syz [ 98.898868][ T1080] usb 4-1: device descriptor read/8, error -71 [ 98.901227][ T310] hub 3-1:1.0: bad descriptor, ignoring hub [ 98.911152][ T310] hub 3-1:1.0: probe with driver hub failed with error -5 [ 98.938936][ T2151] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 99.016449][ T1080] usb usb4-port1: unable to enumerate USB device [ 99.102263][ T310] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 99.406498][ T1080] usb 3-1: USB disconnect, device number 25 [ 99.413132][ T1080] usblp0: removed [ 99.636413][ T2138] Bluetooth: hci0: command 0x1003 tx timeout [ 99.636433][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.818280][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 99.871728][ T2172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 100.016371][ T1080] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 100.166452][ T1080] usb 2-1: Using ep0 maxpacket: 8 [ 100.176346][ T1080] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.184794][ T1080] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 100.195939][ T1080] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.206446][ T1080] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 100.206816][ T310] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 100.217698][ T1080] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 100.235540][ T1080] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 100.245315][ T1080] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 200 [ 100.257156][ T1080] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 100.266367][ T1080] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.274400][ T1080] usb 2-1: Product: syz [ 100.279225][ T1080] usb 2-1: Manufacturer: syz [ 100.283871][ T1080] usb 2-1: SerialNumber: syz [ 100.296637][ T1080] usb 2-1: config 0 descriptor?? [ 100.302013][ T2166] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.309438][ T2166] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.356383][ T310] usb 1-1: device descriptor read/64, error -71 [ 100.571827][ T2192] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 100.582185][ T36] audit: type=1400 audit(1793868555.225:1712): avc: denied { relabelto } for pid=2190 comm="syz.3.663" name="file0" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 100.586610][ T1080] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 100.614344][ T36] audit: type=1400 audit(1793868555.225:1713): avc: denied { associate } for pid=2190 comm="syz.3.663" name="file0" dev="tmpfs" ino=945 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 100.645095][ T310] usb 1-1: device descriptor read/64, error -71 [ 100.652870][ T10] usb 2-1: USB disconnect, device number 20 [ 100.683827][ T36] audit: type=1400 audit(1793868555.325:1714): avc: denied { unlink } for pid=297 comm="syz-executor" name="file0" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hald_keymap_exec_t:s0" [ 100.763851][ T2201] FAULT_INJECTION: forcing a failure. [ 100.763851][ T2201] name failslab, interval 1, probability 0, space 0, times 0 [ 100.776667][ T2201] CPU: 1 UID: 0 PID: 2201 Comm: syz.3.666 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 100.776707][ T2201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.776718][ T2201] Call Trace: [ 100.776724][ T2201] [ 100.776730][ T2201] __dump_stack+0x21/0x30 [ 100.776752][ T2201] dump_stack_lvl+0x140/0x1c0 [ 100.776789][ T2201] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.776814][ T2201] dump_stack+0x19/0x20 [ 100.776834][ T2201] should_fail_ex+0x3c2/0x510 [ 100.776858][ T2201] should_failslab+0xac/0x100 [ 100.776889][ T2201] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 100.776917][ T2201] ? xfrm4_net_init+0xa5/0x210 [ 100.776945][ T2201] ? __percpu_counter_init_many+0x47e/0x570 [ 100.776972][ T2201] kmemdup_noprof+0x31/0x80 [ 100.776993][ T2201] xfrm4_net_init+0xa5/0x210 [ 100.777017][ T2201] ops_init+0x2ff/0x5d0 [ 100.777032][ T2201] ? __kasan_check_write+0x18/0x20 [ 100.777055][ T2201] ? rwsem_read_trylock+0x275/0x5a0 [ 100.777077][ T2201] setup_net+0x227/0x9b0 [ 100.777101][ T2201] ? copy_net_ns+0xa20/0xa20 [ 100.777124][ T2201] ? down_read_killable+0x7f/0x100 [ 100.777148][ T2201] ? __cfi_down_read_killable+0x10/0x10 [ 100.777171][ T2201] copy_net_ns+0x4fc/0xa20 [ 100.777196][ T2201] create_new_namespaces+0x390/0x6f0 [ 100.777214][ T2201] unshare_nsproxy_namespaces+0x124/0x180 [ 100.777231][ T2201] ksys_unshare+0x4f9/0x920 [ 100.777245][ T2201] ? fput+0x1a4/0x230 [ 100.777264][ T2201] ? __cfi_ksys_unshare+0x10/0x10 [ 100.777279][ T2201] ? __kasan_check_write+0x18/0x20 [ 100.777303][ T2201] __x64_sys_unshare+0x3c/0x50 [ 100.777317][ T2201] x64_sys_call+0x2998/0x2ee0 [ 100.777334][ T2201] do_syscall_64+0x57/0xf0 [ 100.777350][ T2201] ? clear_bhb_loop+0x50/0xa0 [ 100.777373][ T2201] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.777395][ T2201] RIP: 0033:0x7f45bad9fb19 [ 100.777411][ T2201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.777425][ T2201] RSP: 002b:00007f45bbb9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 100.777442][ T2201] RAX: ffffffffffffffda RBX: 00007f45bb025fa0 RCX: 00007f45bad9fb19 [ 100.777455][ T2201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 100.777465][ T2201] RBP: 00007f45bae37b70 R08: 0000000000000000 R09: 0000000000000000 [ 100.777476][ T2201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.777486][ T2201] R13: 00007f45bb026038 R14: 00007f45bb025fa0 R15: 00007ffe077472a8 [ 100.777500][ T2201] [ 100.798233][ T1080] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.891583][ T2204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.666'. [ 100.897626][ T1080] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.903429][ T310] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 100.907382][ T1080] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.046706][ T310] usb 1-1: device descriptor read/64, error -71 [ 101.049633][ T1080] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 101.101675][ T1080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.110513][ T1080] usb 3-1: Product: syz [ 101.114808][ T1080] usb 3-1: Manufacturer: syz [ 101.119492][ T1080] usb 3-1: SerialNumber: syz [ 101.126403][ T1080] hub 3-1:1.0: bad descriptor, ignoring hub [ 101.132356][ T1080] hub 3-1:1.0: probe with driver hub failed with error -5 [ 101.198349][ T2208] netlink: 'syz.1.668': attribute type 27 has an invalid length. [ 101.286359][ T310] usb 1-1: device descriptor read/64, error -71 [ 101.328128][ T1080] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 101.396534][ T310] usb usb1-port1: attempt power cycle [ 101.637031][ T1080] usb 3-1: USB disconnect, device number 26 [ 101.645076][ T1080] usblp0: removed [ 101.736374][ T310] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 101.757459][ T310] usb 1-1: device descriptor read/8, error -71 [ 101.887630][ T310] usb 1-1: device descriptor read/8, error -71 [ 102.045795][ T2225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 102.126738][ T310] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 102.166454][ T310] usb 1-1: device descriptor read/8, error -71 [ 102.187863][ T2237] ./dev/sda1: Can't lookup blockdev [ 102.297569][ T310] usb 1-1: device descriptor read/8, error -71 [ 102.376379][ T10] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 102.406489][ T310] usb usb1-port1: unable to enumerate USB device [ 102.506374][ T45] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 102.518570][ T2248] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 102.539020][ T10] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.552104][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.558825][ T10] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 102.568103][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.577420][ T10] usb 2-1: config 0 descriptor?? [ 102.657745][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.667715][ T45] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.677618][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.692272][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 102.701503][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.709667][ T45] usb 3-1: Product: syz [ 102.713883][ T45] usb 3-1: Manufacturer: syz [ 102.718590][ T45] usb 3-1: SerialNumber: syz [ 102.725432][ T45] hub 3-1:1.0: bad descriptor, ignoring hub [ 102.731591][ T45] hub 3-1:1.0: probe with driver hub failed with error -5 [ 102.785215][ T2231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.794003][ T2231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.945556][ T45] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 103.220110][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 103.227208][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 103.236001][ T10] usb 2-1: USB disconnect, device number 21 [ 103.246481][ T310] usb 3-1: USB disconnect, device number 27 [ 103.253321][ T310] usblp0: removed [ 103.330484][ T36] audit: type=1400 audit(1793868557.975:1715): avc: denied { write } for pid=2257 comm="syz.1.688" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.474547][ T2263] netlink: 'syz.3.690': attribute type 27 has an invalid length. [ 103.756470][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 103.906394][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 103.912953][ T10] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 103.923051][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.933446][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 103.936506][ T310] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 103.944662][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 103.962550][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 103.977433][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 103.986746][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.994814][ T10] usb 4-1: Product: syz [ 103.999252][ T10] usb 4-1: Manufacturer: syz [ 104.003888][ T10] usb 4-1: SerialNumber: syz [ 104.009469][ T2267] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.107472][ T310] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.120650][ T310] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.127389][ T310] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 104.136543][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.145454][ T310] usb 3-1: config 0 descriptor?? [ 104.224775][ T36] audit: type=1400 audit(1793868558.865:1716): avc: denied { accept } for pid=2266 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.246545][ T36] audit: type=1326 audit(1793868558.885:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2266 comm="syz.3.692" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45bad9fb19 code=0x0 [ 104.282743][ T2288] cgroup: release_agent respecified [ 104.305357][ T36] audit: type=1400 audit(1793868558.945:1718): avc: denied { read write } for pid=2290 comm="syz.1.701" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.311168][ T2291] deleting an unspecified loop device is not supported. [ 104.330639][ T36] audit: type=1400 audit(1793868558.945:1719): avc: denied { open } for pid=2290 comm="syz.1.701" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.362454][ T36] audit: type=1400 audit(1793868558.955:1720): avc: denied { ioctl } for pid=2290 comm="syz.1.701" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.369242][ T2275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.398141][ T2275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.666344][ T45] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 104.816445][ T45] usb 2-1: device descriptor read/64, error -71 [ 104.888951][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 104.894995][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 104.904037][ T310] usb 3-1: USB disconnect, device number 28 [ 104.956342][ T376] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 104.987296][ T2297] FAULT_INJECTION: forcing a failure. [ 104.987296][ T2297] name failslab, interval 1, probability 0, space 0, times 0 [ 105.000218][ T2297] CPU: 0 UID: 0 PID: 2297 Comm: syz.2.703 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 105.000254][ T2297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.000270][ T2297] Call Trace: [ 105.000277][ T2297] [ 105.000285][ T2297] __dump_stack+0x21/0x30 [ 105.000314][ T2297] dump_stack_lvl+0x140/0x1c0 [ 105.000329][ T2297] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.000344][ T2297] ? avc_has_perm+0x155/0x240 [ 105.000362][ T2297] ? __cfi_avc_has_perm+0x10/0x10 [ 105.000379][ T2297] ? hook_file_open+0x1f2/0x8d0 [ 105.000401][ T2297] dump_stack+0x19/0x20 [ 105.000414][ T2297] should_fail_ex+0x3c2/0x510 [ 105.000430][ T2297] should_failslab+0xac/0x100 [ 105.000448][ T2297] __kmalloc_cache_noprof+0x41/0x470 [ 105.000472][ T2297] ? vhost_task_create+0x12c/0x3f0 [ 105.000511][ T2297] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 105.000542][ T2297] vhost_task_create+0x12c/0x3f0 [ 105.000572][ T2297] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 105.000594][ T2297] ? __cfi_vhost_task_create+0x10/0x10 [ 105.000614][ T2297] ? __cfi_vhost_task_fn+0x10/0x10 [ 105.000633][ T2297] ? __kasan_check_write+0x18/0x20 [ 105.000655][ T2297] ? mutex_lock+0x97/0x1d0 [ 105.000675][ T2297] ? __cfi_mutex_lock+0x10/0x10 [ 105.000695][ T2297] ? kernel_text_address+0xa9/0xe0 [ 105.000745][ T2297] kvm_mmu_post_init_vm+0x161/0x300 [ 105.000761][ T2297] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 105.000786][ T2297] ? _parse_integer_limit+0x195/0x1e0 [ 105.000811][ T2297] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 105.000836][ T2297] ? kstrtoull+0x13b/0x1e0 [ 105.000858][ T2297] ? kstrtouint+0x78/0xf0 [ 105.000880][ T2297] ? ioctl_has_perm+0x1bc/0x500 [ 105.000904][ T2297] ? __asan_memcpy+0x5a/0x80 [ 105.000927][ T2297] ? ioctl_has_perm+0x408/0x500 [ 105.000951][ T2297] ? has_cap_mac_admin+0xd0/0xd0 [ 105.000975][ T2297] ? __kasan_check_write+0x18/0x20 [ 105.000997][ T2297] ? mutex_lock_killable+0x97/0x1d0 [ 105.001020][ T2297] ? __cfi_mutex_lock_killable+0x10/0x10 [ 105.001042][ T2297] ? proc_fail_nth_write+0x184/0x220 [ 105.001065][ T2297] kvm_vcpu_ioctl+0xa43/0x1000 [ 105.001085][ T2297] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 105.001103][ T2297] ? hook_file_ioctl+0x1ef/0x590 [ 105.001125][ T2297] ? __cfi_vfs_write+0x10/0x10 [ 105.001149][ T2297] ? __cfi_hook_file_ioctl+0x10/0x10 [ 105.001171][ T2297] ? __kasan_check_write+0x18/0x20 [ 105.001194][ T2297] ? mutex_unlock+0x90/0x240 [ 105.001217][ T2297] ? __cfi_mutex_unlock+0x10/0x10 [ 105.001239][ T2297] ? __fget_files+0x2bc/0x330 [ 105.001257][ T2297] ? bpf_lsm_file_ioctl+0xd/0x20 [ 105.001275][ T2297] ? security_file_ioctl+0x3e/0x110 [ 105.001299][ T2297] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 105.001317][ T2297] __se_sys_ioctl+0x123/0x1b0 [ 105.001335][ T2297] __x64_sys_ioctl+0x7f/0xa0 [ 105.001352][ T2297] x64_sys_call+0x1878/0x2ee0 [ 105.001369][ T2297] do_syscall_64+0x57/0xf0 [ 105.001386][ T2297] ? clear_bhb_loop+0x50/0xa0 [ 105.001409][ T2297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.001431][ T2297] RIP: 0033:0x7f1c8479fb19 [ 105.001447][ T2297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.001462][ T2297] RSP: 002b:00007f1c855d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.001480][ T2297] RAX: ffffffffffffffda RBX: 00007f1c84a25fa0 RCX: 00007f1c8479fb19 [ 105.001493][ T2297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 105.001504][ T2297] RBP: 00007f1c855d4090 R08: 0000000000000000 R09: 0000000000000000 [ 105.001515][ T2297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.001526][ T2297] R13: 00007f1c84a26038 R14: 00007f1c84a25fa0 R15: 00007ffd1d7a4ea8 [ 105.001540][ T2297] [ 105.076860][ T45] usb 2-1: device descriptor read/64, error -71 [ 105.438446][ T2299] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3577997737 (14311990948 ns) > initial count (3627452148 ns). Using initial count to start timer. [ 105.457653][ T376] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.468636][ T376] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.478514][ T376] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.493292][ T376] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 105.502482][ T376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.510635][ T376] usb 1-1: Product: syz [ 105.514939][ T376] usb 1-1: Manufacturer: syz [ 105.519648][ T376] usb 1-1: SerialNumber: syz [ 105.530732][ T376] hub 1-1:1.0: bad descriptor, ignoring hub [ 105.536956][ T376] hub 1-1:1.0: probe with driver hub failed with error -5 [ 105.549301][ T2302] FAULT_INJECTION: forcing a failure. [ 105.549301][ T2302] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.562546][ T2302] CPU: 0 UID: 0 PID: 2302 Comm: syz.2.705 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 105.562580][ T2302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.562596][ T2302] Call Trace: [ 105.562604][ T2302] [ 105.562614][ T2302] __dump_stack+0x21/0x30 [ 105.562646][ T2302] dump_stack_lvl+0x140/0x1c0 [ 105.562669][ T2302] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.562689][ T2302] ? check_stack_object+0x81/0x150 [ 105.562727][ T2302] dump_stack+0x19/0x20 [ 105.562757][ T2302] should_fail_ex+0x3c2/0x510 [ 105.562781][ T2302] should_fail+0xf/0x20 [ 105.562800][ T2302] should_fail_usercopy+0x1e/0x30 [ 105.562821][ T2302] _copy_from_user+0x20/0xa0 [ 105.562850][ T2302] memdup_user+0x81/0x170 [ 105.562872][ T2302] ? strndup_user+0x40/0xd0 [ 105.562894][ T2302] strndup_user+0x6c/0xd0 [ 105.562938][ T2302] __se_sys_fsopen+0x43/0x390 [ 105.562968][ T2302] ? __kasan_check_read+0x15/0x20 [ 105.563001][ T2302] __x64_sys_fsopen+0x5f/0x80 [ 105.563022][ T2302] x64_sys_call+0x2d40/0x2ee0 [ 105.563039][ T2302] do_syscall_64+0x57/0xf0 [ 105.563076][ T2302] ? clear_bhb_loop+0x50/0xa0 [ 105.563106][ T2302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.563141][ T2302] RIP: 0033:0x7f1c8479fb19 [ 105.563156][ T2302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.563170][ T2302] RSP: 002b:00007f1c855d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 105.563195][ T2302] RAX: ffffffffffffffda RBX: 00007f1c84a25fa0 RCX: 00007f1c8479fb19 [ 105.563227][ T2302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 105.563242][ T2302] RBP: 00007f1c855d4090 R08: 0000000000000000 R09: 0000000000000000 [ 105.563257][ T2302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.563270][ T2302] R13: 00007f1c84a26038 R14: 00007f1c84a25fa0 R15: 00007ffd1d7a4ea8 [ 105.563294][ T2302] [ 105.616671][ T45] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 105.771992][ T376] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 105.773000][ T2308] 9pnet_fd: Insufficient options for proto=fd [ 105.789925][ T2308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 105.801748][ T36] audit: type=1400 audit(1793868560.445:1721): avc: denied { create } for pid=2307 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 105.822396][ T36] audit: type=1400 audit(1793868560.445:1722): avc: denied { create } for pid=2307 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 105.926362][ T45] usb 2-1: device descriptor read/64, error -71 [ 106.076438][ T1471] usb 1-1: USB disconnect, device number 40 [ 106.083565][ T1471] usblp0: removed [ 106.176376][ T45] usb 2-1: device descriptor read/64, error -71 [ 106.286453][ T45] usb usb2-port1: attempt power cycle [ 106.540657][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 106.550084][ T36] audit: type=1400 audit(1793868561.195:1723): avc: denied { connect } for pid=2319 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.558647][ T10] usb 4-1: USB disconnect, device number 20 [ 106.576906][ T2320] rust_binder: Write failure EFAULT in pid:485 [ 106.600446][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.636403][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 106.657518][ T45] usb 2-1: device descriptor read/8, error -71 [ 106.726359][ T376] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 106.787525][ T45] usb 2-1: device descriptor read/8, error -71 [ 106.829918][ T36] audit: type=1400 audit(1793868561.475:1724): avc: denied { module_load } for pid=2327 comm="syz.2.715" path=2F6D656D66643A2D42D54E49C56A9A0872580E202864656C6574656429 dev="tmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 106.829957][ T2328] Invalid ELF header len 16 [ 106.863319][ T2328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.871235][ T2328] EXT4-fs (sda1): shut down requested (2) [ 106.877142][ T2328] Aborting journal on device sda1-8. [ 106.880355][ T36] audit: type=1400 audit(1793868561.525:1725): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 106.884334][ T376] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.905423][ T36] audit: type=1400 audit(1793868561.525:1726): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.919060][ T376] usb 1-1: config 0 interface 0 has no altsetting 0 [ 106.945405][ T36] audit: type=1400 audit(1793868561.525:1727): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.946411][ T376] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 106.967078][ T36] audit: type=1400 audit(1793868561.525:1728): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.976805][ T376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.998207][ T36] audit: type=1400 audit(1793868561.525:1729): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.025627][ T36] audit: type=1400 audit(1793868561.525:1730): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.033126][ T376] usb 1-1: config 0 descriptor?? [ 107.056367][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 107.077454][ T45] usb 2-1: device descriptor read/8, error -71 [ 107.207392][ T45] usb 2-1: device descriptor read/8, error -71 [ 107.255860][ T2318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.264622][ T2318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.316725][ T45] usb usb2-port1: unable to enumerate USB device [ 107.755239][ T376] usbhid 1-1:0.0: can't add hid device: -71 [ 107.761274][ T376] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 107.771112][ T376] usb 1-1: USB disconnect, device number 41 [ 107.786400][ T45] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 107.826368][ T310] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 107.936474][ T375] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 107.945721][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.954324][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.964929][ T310] usb 4-1: device descriptor read/64, error -71 [ 107.971548][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.985746][ T45] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 107.994868][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 108.003070][ T45] usb 2-1: Product: syz [ 108.007416][ T45] usb 2-1: Manufacturer: syz [ 108.014140][ T45] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 108.020829][ T45] usb 2-1: No streaming interface found for terminal 2. [ 108.088002][ T375] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.099650][ T375] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.110754][ T375] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 108.122620][ T375] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 108.131747][ T375] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 108.139776][ T375] usb 3-1: Manufacturer: syz [ 108.145816][ T2378] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 108.153105][ T376] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 108.216377][ T310] usb 4-1: device descriptor read/64, error -71 [ 108.220940][ T10] usb 2-1: USB disconnect, device number 26 [ 108.306374][ T376] usb 1-1: Using ep0 maxpacket: 16 [ 108.312763][ T376] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.323869][ T376] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.333966][ T376] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 108.347229][ T376] usb 1-1: config 0 interface 0 has no altsetting 0 [ 108.353866][ T376] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 108.362964][ T376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.372846][ T376] usb 1-1: config 0 descriptor?? [ 108.428210][ T375] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 108.436555][ T375] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input8 [ 108.447988][ T375] usb 3-1: USB disconnect, device number 29 [ 108.476356][ T310] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 108.606403][ T310] usb 4-1: device descriptor read/64, error -71 [ 108.846363][ T310] usb 4-1: device descriptor read/64, error -71 [ 108.888051][ T376] hid (null): nested delimiters [ 108.966444][ T310] usb usb4-port1: attempt power cycle [ 109.091062][ T376] usb 1-1: USB disconnect, device number 42 [ 109.129498][ T2435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 109.306376][ T310] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 109.327393][ T310] usb 4-1: device descriptor read/8, error -71 [ 109.406413][ T1080] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 109.457762][ T310] usb 4-1: device descriptor read/8, error -71 [ 109.557712][ T1080] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.570918][ T1080] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.577673][ T1080] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 109.586814][ T1080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.597683][ T1080] usb 3-1: config 0 descriptor?? [ 109.696360][ T310] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 109.721293][ T310] usb 4-1: device descriptor read/8, error -71 [ 109.805628][ T2439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.814342][ T2439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.867075][ T310] usb 4-1: device descriptor read/8, error -71 [ 109.926320][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 109.976434][ T310] usb usb4-port1: unable to enumerate USB device [ 110.107519][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.120671][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 110.130207][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.146593][ T10] usb 2-1: config 0 descriptor?? [ 110.336313][ T1080] usbhid 3-1:0.0: can't add hid device: -71 [ 110.342502][ T1080] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 110.352141][ T1080] usb 3-1: USB disconnect, device number 30 [ 110.358267][ T2451] rust_binder: 2450:2451 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 110.603158][ T2473] netlink: 'syz.3.742': attribute type 27 has an invalid length. [ 110.726383][ T1080] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 110.771144][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 110.779608][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 110.791354][ T10] usb 2-1: USB disconnect, device number 27 [ 110.878013][ T1080] usb 3-1: config 0 has no interfaces? [ 110.883618][ T1080] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 110.892945][ T1080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.902043][ T1080] usb 3-1: config 0 descriptor?? [ 111.006448][ T1471] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 111.066359][ T376] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 111.109628][ T2468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'. [ 111.156361][ T1471] usb 4-1: Using ep0 maxpacket: 16 [ 111.162804][ T1471] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.173995][ T1471] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.183925][ T1471] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 111.197461][ T1471] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.204108][ T1471] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 111.215375][ T1471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.218074][ T376] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.232832][ T1471] usb 4-1: config 0 descriptor?? [ 111.237917][ T376] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.248055][ T376] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 111.257192][ T376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.266405][ T376] usb 1-1: config 0 descriptor?? [ 111.473708][ T2486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.482415][ T2486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.644371][ T10] usb 3-1: USB disconnect, device number 31 [ 111.860507][ T310] usb 4-1: USB disconnect, device number 25 [ 112.029148][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 112.029180][ T36] audit: type=1400 audit(1793868566.675:1742): avc: denied { bind } for pid=2504 comm="syz.0.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.053079][ T2506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.058308][ T36] audit: type=1400 audit(1793868566.695:1743): avc: denied { ioctl } for pid=2504 comm="syz.0.755" path="uts:[4026532302]" dev="nsfs" ino=4026532302 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.079586][ T2506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.091766][ T376] usbhid 1-1:0.0: can't add hid device: -71 [ 112.097829][ T36] audit: type=1400 audit(1793868566.745:1744): avc: denied { setattr } for pid=2504 comm="syz.0.755" name="/" dev="incremental-fs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.102407][ T376] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 112.128220][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 112.141168][ T376] usb 1-1: USB disconnect, device number 43 [ 112.212508][ T36] audit: type=1400 audit(1793868566.855:1745): avc: denied { read } for pid=2510 comm="syz.1.757" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.234175][ T36] audit: type=1400 audit(1793868566.855:1746): avc: denied { open } for pid=2510 comm="syz.1.757" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.255941][ T36] audit: type=1400 audit(1793868566.865:1747): avc: denied { create } for pid=2510 comm="syz.1.757" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 112.276332][ T36] audit: type=1400 audit(1793868566.865:1748): avc: denied { relabelfrom } for pid=2510 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 112.296218][ T36] audit: type=1400 audit(1793868566.865:1749): avc: denied { relabelto } for pid=2510 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 112.316345][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 112.322862][ T10] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 112.331264][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.341488][ T10] usb 3-1: config 0 has no interface number 0 [ 112.347652][ T10] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 112.357597][ T10] usb 3-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.370808][ T10] usb 3-1: config 0 interface 98 has no altsetting 0 [ 112.379212][ T10] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 112.388408][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.396456][ T10] usb 3-1: Product: syz [ 112.400716][ T10] usb 3-1: Manufacturer: syz [ 112.405340][ T10] usb 3-1: SerialNumber: syz [ 112.413426][ T10] usb 3-1: config 0 descriptor?? [ 112.425227][ T2503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.446716][ T10] asix 3-1:0.98: probe with driver asix failed with error -22 [ 112.575132][ T2527] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 112.601593][ T2529] FAULT_INJECTION: forcing a failure. [ 112.601593][ T2529] name failslab, interval 1, probability 0, space 0, times 0 [ 112.607217][ T36] audit: type=1400 audit(1793868567.255:1750): avc: denied { create } for pid=2530 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 112.614631][ T2529] CPU: 0 UID: 0 PID: 2529 Comm: syz.3.765 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 112.614726][ T2529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.614769][ T2529] Call Trace: [ 112.614790][ T2529] [ 112.614812][ T2529] __dump_stack+0x21/0x30 [ 112.614893][ T2529] dump_stack_lvl+0x140/0x1c0 [ 112.614949][ T2529] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.615021][ T2529] dump_stack+0x19/0x20 [ 112.615082][ T2529] should_fail_ex+0x3c2/0x510 [ 112.615146][ T2529] ? x509_fabricate_name+0x61b/0xcb0 [ 112.615240][ T2529] should_failslab+0xac/0x100 [ 112.615347][ T2529] __kmalloc_noprof+0x69/0x510 [ 112.615444][ T2529] ? __kmalloc_noprof+0x261/0x510 [ 112.615532][ T2529] ? x509_fabricate_name+0x61b/0xcb0 [ 112.615627][ T2529] ? asymmetric_key_generate_id+0xde/0x220 [ 112.615708][ T2529] x509_fabricate_name+0x61b/0xcb0 [ 112.615830][ T2529] x509_note_issuer+0xea/0x1c0 [ 112.615931][ T2529] asn1_ber_decoder+0x1974/0x1ff0 [ 112.616014][ T2529] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 112.616092][ T2529] ? kasan_save_alloc_info+0x3a/0x50 [ 112.616177][ T2529] ? __kasan_kmalloc+0x96/0xb0 [ 112.616241][ T2529] ? memblock_clear_nomap+0x90/0x2b0 [ 112.616314][ T2529] x509_cert_parse+0x1e3/0xbd0 [ 112.616406][ T2529] x509_key_preparse+0x6a/0x880 [ 112.616503][ T2529] ? __cfi_down_read+0x10/0x10 [ 112.616602][ T2529] asymmetric_key_preparse+0xb6/0x100 [ 112.616683][ T2529] __key_create_or_update+0x433/0xa90 [ 112.616777][ T2529] ? security_key_permission+0x3d/0x100 [ 112.616873][ T2529] ? key_create_or_update+0x70/0x70 [ 112.616959][ T2529] ? __kasan_kmalloc+0x96/0xb0 [ 112.617036][ T2529] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 112.617113][ T2529] key_create_or_update+0x47/0x70 [ 112.617230][ T2529] __se_sys_add_key+0x355/0x4b0 [ 112.617307][ T2529] ? __x64_sys_add_key+0xf0/0xf0 [ 112.617371][ T2529] ? __kasan_check_write+0x18/0x20 [ 112.617455][ T2529] ? fpregs_restore_userregs+0x11c/0x260 [ 112.617543][ T2529] __x64_sys_add_key+0xc3/0xf0 [ 112.617594][ T2529] x64_sys_call+0x195f/0x2ee0 [ 112.617661][ T2529] do_syscall_64+0x57/0xf0 [ 112.617755][ T2529] ? clear_bhb_loop+0x50/0xa0 [ 112.617847][ T2529] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.617923][ T2529] RIP: 0033:0x7f45bad9fb19 [ 112.617984][ T2529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.618037][ T2529] RSP: 002b:00007f45bbb9d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 112.618097][ T2529] RAX: ffffffffffffffda RBX: 00007f45bb025fa0 RCX: 00007f45bad9fb19 [ 112.618142][ T2529] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000200 [ 112.618193][ T2529] RBP: 00007f45bae37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 112.618236][ T2529] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 112.618278][ T2529] R13: 00007f45bb026038 R14: 00007f45bb025fa0 R15: 00007ffe077472a8 [ 112.618332][ T2529] [ 112.743595][ T2532] rust_binder: 2530:2532 transaction async to 0:0 failed EINVAL, code 4294967295 size 0-24 line process.rs:950 [ 112.951453][ T36] audit: type=1400 audit(1793868567.595:1751): avc: denied { write } for pid=2536 comm="syz.3.767" name="proc" dev="binder" ino=1048608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.019632][ T376] rust_binder: 2530: undelivered TRANSACTION_ERROR: 29201 [ 113.049545][ T2555] netlink: 'syz.3.774': attribute type 27 has an invalid length. [ 113.053394][ T2548] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 113.105188][ T2560] FAULT_INJECTION: forcing a failure. [ 113.105188][ T2560] name failslab, interval 1, probability 0, space 0, times 0 [ 113.117927][ T2560] CPU: 0 UID: 0 PID: 2560 Comm: syz.3.775 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 113.117968][ T2560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.117987][ T2560] Call Trace: [ 113.117997][ T2560] [ 113.118008][ T2560] __dump_stack+0x21/0x30 [ 113.118049][ T2560] dump_stack_lvl+0x140/0x1c0 [ 113.118070][ T2560] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.118089][ T2560] dump_stack+0x19/0x20 [ 113.118105][ T2560] should_fail_ex+0x3c2/0x510 [ 113.118124][ T2560] should_failslab+0xac/0x100 [ 113.118145][ T2560] __kmalloc_cache_noprof+0x41/0x470 [ 113.118175][ T2560] ? x509_cert_parse+0xba/0xbd0 [ 113.118203][ T2560] x509_cert_parse+0xba/0xbd0 [ 113.118232][ T2560] x509_key_preparse+0x6a/0x880 [ 113.118261][ T2560] ? __cfi_down_read+0x10/0x10 [ 113.118290][ T2560] asymmetric_key_preparse+0xb6/0x100 [ 113.118315][ T2560] __key_create_or_update+0x433/0xa90 [ 113.118342][ T2560] ? security_key_permission+0x3d/0x100 [ 113.118372][ T2560] ? key_create_or_update+0x70/0x70 [ 113.118398][ T2560] ? __kasan_kmalloc+0x96/0xb0 [ 113.118420][ T2560] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 113.118446][ T2560] key_create_or_update+0x47/0x70 [ 113.118472][ T2560] __se_sys_add_key+0x355/0x4b0 [ 113.118491][ T2560] ? __x64_sys_add_key+0xf0/0xf0 [ 113.118510][ T2560] ? __kasan_check_write+0x18/0x20 [ 113.118538][ T2560] ? fpregs_restore_userregs+0x11c/0x260 [ 113.118573][ T2560] __x64_sys_add_key+0xc3/0xf0 [ 113.118591][ T2560] x64_sys_call+0x195f/0x2ee0 [ 113.118610][ T2560] do_syscall_64+0x57/0xf0 [ 113.118630][ T2560] ? clear_bhb_loop+0x50/0xa0 [ 113.118656][ T2560] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.118681][ T2560] RIP: 0033:0x7f45bad9fb19 [ 113.118698][ T2560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.118713][ T2560] RSP: 002b:00007f45bbb9d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 113.118734][ T2560] RAX: ffffffffffffffda RBX: 00007f45bb025fa0 RCX: 00007f45bad9fb19 [ 113.118748][ T2560] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000200 [ 113.118762][ T2560] RBP: 00007f45bae37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 113.118775][ T2560] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 113.118787][ T2560] R13: 00007f45bb026038 R14: 00007f45bb025fa0 R15: 00007ffe077472a8 [ 113.118803][ T2560] [ 113.377441][ T2563] netlink: 'syz.3.776': attribute type 4 has an invalid length. [ 113.388178][ T2563] netlink: 'syz.3.776': attribute type 4 has an invalid length. [ 113.455146][ T2579] netlink: 'syz.0.783': attribute type 27 has an invalid length. [ 113.609922][ T2576] x86/PAT: syz.3.782:2576 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 113.696338][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 114.268138][ T2590] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 114.341237][ T2594] UHID_CREATE from different security context by process 540 (syz.3.790), this is not allowed. [ 114.773710][ T2605] netlink: 'syz.1.795': attribute type 27 has an invalid length. [ 114.829014][ T376] usb 3-1: USB disconnect, device number 32 [ 114.936368][ T10] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 114.987445][ T2619] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 115.107940][ T10] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.126613][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.133299][ T10] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 115.147188][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.167236][ T10] usb 4-1: config 0 descriptor?? [ 115.378079][ T2601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.389908][ T2601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.526317][ T310] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 115.686314][ T310] usb 2-1: Invalid ep0 maxpacket: 64 [ 115.826323][ T310] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 115.996315][ T310] usb 2-1: Invalid ep0 maxpacket: 64 [ 116.002060][ T310] usb usb2-port1: attempt power cycle [ 116.285310][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 116.291412][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 116.301903][ T10] usb 4-1: USB disconnect, device number 27 [ 116.309855][ T2658] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 116.366353][ T310] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 116.386716][ T310] usb 2-1: Invalid ep0 maxpacket: 64 [ 116.516373][ T310] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 116.546706][ T310] usb 2-1: Invalid ep0 maxpacket: 64 [ 116.552233][ T310] usb usb2-port1: unable to enumerate USB device [ 116.604763][ T2666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.621471][ T2666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.637856][ T2665] rust_binder: 2662:2665 transaction async to 2662:0 failed ENOMEM, code 4294967295 size 18446744073709551302-24 line thread.rs:1194 [ 116.641855][ T2666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.677042][ T2666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.690306][ T2666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.704597][ T2666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.717821][ T2666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.732010][ T2666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.745100][ T2666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.759303][ T2666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.136314][ T9] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 118.307395][ T9] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.326389][ T2677] netlink: 'syz.1.817': attribute type 6 has an invalid length. [ 118.346303][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.353072][ T9] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 118.372297][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.393244][ T9] usb 3-1: config 0 descriptor?? [ 118.608908][ T2675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.628198][ T2675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.509807][ T1471] rust_binder: 2662: undelivered TRANSACTION_ERROR: 29201 [ 119.712061][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 119.718131][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 119.729614][ T9] usb 3-1: USB disconnect, device number 33 [ 119.846346][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 120.007516][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.017631][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.027788][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.042782][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.052283][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.060631][ T45] usb 4-1: Product: syz [ 120.065018][ T45] usb 4-1: Manufacturer: syz [ 120.070013][ T45] usb 4-1: SerialNumber: syz [ 120.087158][ T45] hub 4-1:1.0: bad descriptor, ignoring hub [ 120.093941][ T45] hub 4-1:1.0: probe with driver hub failed with error -5 [ 120.278648][ T45] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 120.386331][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 120.546354][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 120.552823][ T10] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 120.561103][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.571885][ T10] usb 3-1: config 0 has no interface number 0 [ 120.578050][ T10] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 120.588125][ T1080] usb 4-1: USB disconnect, device number 28 [ 120.594801][ T10] usb 3-1: config 0 interface 98 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 120.605949][ T1080] usblp0: removed [ 120.620072][ T10] usb 3-1: config 0 interface 98 has no altsetting 0 [ 120.637778][ T10] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 120.646958][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.655103][ T10] usb 3-1: Product: syz [ 120.659359][ T10] usb 3-1: Manufacturer: syz [ 120.663995][ T10] usb 3-1: SerialNumber: syz [ 120.672532][ T10] usb 3-1: config 0 descriptor?? [ 120.678984][ T2702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.689869][ T10] asix 3-1:0.98: probe with driver asix failed with error -22 [ 120.697451][ T9] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 120.857586][ T9] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.870669][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.877527][ T9] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 120.886861][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.895697][ T9] usb 2-1: config 0 descriptor?? [ 121.109271][ T2706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.124959][ T2706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.863007][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 121.869196][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 121.880149][ T9] usb 2-1: USB disconnect, device number 32 [ 122.423076][ T2733] netlink: 'syz.3.837': attribute type 27 has an invalid length. [ 122.463981][ T2733] raw_sendmsg: syz.3.837 forgot to set AF_INET. Fix it! [ 122.876333][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 123.006342][ T45] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 123.047537][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.066346][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.096336][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 123.105438][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.164239][ T9] usb 3-1: USB disconnect, device number 34 [ 123.177596][ T45] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.206299][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.213247][ T45] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 123.236342][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.248211][ T45] usb 2-1: config 0 descriptor?? [ 123.456959][ T2751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.465703][ T2751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.069605][ T2761] netlink: 'syz.1.847': attribute type 27 has an invalid length. [ 124.114172][ T2761] vlan0.0: entered promiscuous mode [ 124.125126][ T2761] vlan0.0: entered allmulticast mode [ 124.184193][ T2767] FAULT_INJECTION: forcing a failure. [ 124.184193][ T2767] name failslab, interval 1, probability 0, space 0, times 0 [ 124.216344][ T2767] CPU: 1 UID: 0 PID: 2767 Comm: syz.1.849 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 124.216386][ T2767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 124.216402][ T2767] Call Trace: [ 124.216414][ T2767] [ 124.216424][ T2767] __dump_stack+0x21/0x30 [ 124.216452][ T2767] dump_stack_lvl+0x140/0x1c0 [ 124.216472][ T2767] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.216496][ T2767] dump_stack+0x19/0x20 [ 124.216516][ T2767] should_fail_ex+0x3c2/0x510 [ 124.216538][ T2767] should_failslab+0xac/0x100 [ 124.216562][ T2767] kmem_cache_alloc_noprof+0x42/0x410 [ 124.216595][ T2767] ? security_inode_alloc+0x51/0x230 [ 124.216622][ T2767] security_inode_alloc+0x51/0x230 [ 124.216649][ T2767] inode_init_always_gfp+0x756/0x9e0 [ 124.216674][ T2767] ? __cfi_sock_alloc_inode+0x10/0x10 [ 124.216697][ T2767] alloc_inode+0xc5/0x270 [ 124.216722][ T2767] ? bpf_lsm_socket_create+0xd/0x20 [ 124.216758][ T2767] new_inode_pseudo+0x19/0x40 [ 124.216785][ T2767] __sock_create+0x130/0x810 [ 124.216812][ T2767] __sys_socket+0xe1/0x1c0 [ 124.216837][ T2767] __x64_sys_socket+0x7e/0x90 [ 124.216864][ T2767] x64_sys_call+0x2608/0x2ee0 [ 124.216891][ T2767] do_syscall_64+0x57/0xf0 [ 124.216931][ T2767] ? clear_bhb_loop+0x50/0xa0 [ 124.216967][ T2767] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.217001][ T2767] RIP: 0033:0x7f955b99fb19 [ 124.217023][ T2767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.217045][ T2767] RSP: 002b:00007f955c794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 124.217072][ T2767] RAX: ffffffffffffffda RBX: 00007f955bc25fa0 RCX: 00007f955b99fb19 [ 124.217090][ T2767] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 124.217106][ T2767] RBP: 00007f955ba37b70 R08: 0000000000000000 R09: 0000000000000000 [ 124.217123][ T2767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.217139][ T2767] R13: 00007f955bc26038 R14: 00007f955bc25fa0 R15: 00007ffc51f2e6b8 [ 124.217161][ T2767] [ 124.217220][ T2767] socket: no more sockets [ 124.341410][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 124.341468][ T36] audit: type=1400 audit(1793868578.985:1756): avc: denied { setopt } for pid=2766 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.457371][ T2767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.849'. [ 124.539900][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 124.546449][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 124.559373][ T45] usb 2-1: USB disconnect, device number 33 [ 124.682668][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 124.694539][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.716537][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 124.736583][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 124.756571][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 124.776321][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 124.796545][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 124.816525][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 124.846586][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.866339][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.877393][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.896383][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.916547][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 124.936427][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 124.956586][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 124.967868][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 124.979054][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 124.990169][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 125.001382][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 125.006400][ T45] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 125.013564][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 125.031082][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 125.042279][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 125.053448][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 125.064725][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 125.075971][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 125.087104][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 125.098301][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 125.109789][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 125.121772][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 125.133812][ T10] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 125.148967][ T10] ax88179_178a 4-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, d6:b6:55:76:08:f8 [ 125.169261][ T10] usb 4-1: USB disconnect, device number 29 [ 125.178429][ T10] ax88179_178a 4-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 125.198668][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.218605][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.248280][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 125.257701][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.269912][ T45] usb 2-1: config 0 descriptor?? [ 125.546356][ T10] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 125.656347][ T376] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 125.681003][ T45] wacom 0003:056A:00B0.000D: unknown main item tag 0x2 [ 125.688907][ T45] wacom 0003:056A:00B0.000D: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 125.703072][ T45] wacom 0003:056A:00B0.000D: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.1-1/input0 [ 125.715269][ T2789] udevd[2789]: open /dev/null failed: No such file or directory [ 125.717891][ T10] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.723793][ T2789] udevd[2789]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 125.746176][ T45] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B0.000D/input/input9 [ 125.756436][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.764867][ T10] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 125.786442][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.802556][ T10] usb 4-1: config 0 descriptor?? [ 125.838357][ T376] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 125.849360][ T376] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 125.862189][ T376] usb 3-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 125.871447][ T376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.879590][ T376] usb 3-1: Product: ъ [ 125.883990][ T376] usb 3-1: Manufacturer: ‚䝓謡옿選⪛짇ꂋ褑䲷螗᭟䭝㥿Ꮏ [ 125.895869][ T310] usb 2-1: USB disconnect, device number 34 [ 126.011206][ T2786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.019944][ T2786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.319735][ T376] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 126.336580][ T376] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 126.356732][ T376] usb 3-1: USB disconnect, device number 35 [ 126.448656][ T2793] SELinux: security_context_str_to_sid (measure) failed with errno=-22 [ 126.602909][ T2795] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 126.646328][ T2795] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 126.696502][ T2795] FAULT_INJECTION: forcing a failure. [ 126.696502][ T2795] name failslab, interval 1, probability 0, space 0, times 0 [ 126.736323][ T2795] CPU: 0 UID: 0 PID: 2795 Comm: syz.3.857 Not tainted syzkaller #0 fb4d83c2a69de87362621e77e54386714fae73a9 [ 126.736365][ T2795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.736382][ T2795] Call Trace: [ 126.736390][ T2795] [ 126.736400][ T2795] __dump_stack+0x21/0x30 [ 126.736430][ T2795] dump_stack_lvl+0x140/0x1c0 [ 126.736456][ T2795] ? __cfi_dump_stack_lvl+0x10/0x10 [ 126.736482][ T2795] dump_stack+0x19/0x20 [ 126.736504][ T2795] should_fail_ex+0x3c2/0x510 [ 126.736526][ T2795] ? x509_fabricate_name+0x61b/0xcb0 [ 126.736560][ T2795] should_failslab+0xac/0x100 [ 126.736586][ T2795] __kmalloc_noprof+0x69/0x510 [ 126.736620][ T2795] ? x509_fabricate_name+0x61b/0xcb0 [ 126.736653][ T2795] ? x509_note_OID+0x12a/0x190 [ 126.736695][ T2795] x509_fabricate_name+0x61b/0xcb0 [ 126.736731][ T2795] x509_note_subject+0x8b/0xc0 [ 126.736765][ T2795] asn1_ber_decoder+0x1974/0x1ff0 [ 126.736797][ T2795] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 126.736823][ T2795] ? kasan_save_alloc_info+0x3a/0x50 [ 126.736856][ T2795] ? __kasan_kmalloc+0x96/0xb0 [ 126.736880][ T2795] ? memblock_clear_nomap+0x90/0x2b0 [ 126.736908][ T2795] x509_cert_parse+0x1e3/0xbd0 [ 126.736940][ T2795] x509_key_preparse+0x6a/0x880 [ 126.736976][ T2795] ? __cfi_down_read+0x10/0x10 [ 126.737010][ T2795] asymmetric_key_preparse+0xb6/0x100 [ 126.737039][ T2795] __key_create_or_update+0x433/0xa90 [ 126.737070][ T2795] ? security_key_permission+0x3d/0x100 [ 126.737106][ T2795] ? key_create_or_update+0x70/0x70 [ 126.737138][ T2795] ? __kasan_kmalloc+0x96/0xb0 [ 126.737166][ T2795] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 126.737197][ T2795] key_create_or_update+0x47/0x70 [ 126.737229][ T2795] __se_sys_add_key+0x355/0x4b0 [ 126.737253][ T2795] ? __x64_sys_add_key+0xf0/0xf0 [ 126.737276][ T2795] ? __kasan_check_write+0x18/0x20 [ 126.737309][ T2795] ? fpregs_restore_userregs+0x11c/0x260 [ 126.737343][ T2795] __x64_sys_add_key+0xc3/0xf0 [ 126.737366][ T2795] x64_sys_call+0x195f/0x2ee0 [ 126.737391][ T2795] do_syscall_64+0x57/0xf0 [ 126.737416][ T2795] ? clear_bhb_loop+0x50/0xa0 [ 126.737449][ T2795] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.737481][ T2795] RIP: 0033:0x7f45bad9fb19 [ 126.737502][ T2795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.737523][ T2795] RSP: 002b:00007f45bbb9d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 126.737550][ T2795] RAX: ffffffffffffffda RBX: 00007f45bb025fa0 RCX: 00007f45bad9fb19 [ 126.737568][ T2795] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000200000000200 [ 126.737585][ T2795] RBP: 00007f45bae37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 126.737601][ T2795] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 126.737616][ T2795] R13: 00007f45bb026038 R14: 00007f45bb025fa0 R15: 00007ffe077472a8 [ 126.737637][ T2795] [ 127.034208][ T2801] netlink: 'syz.2.860': attribute type 27 has an invalid length. [ 127.050669][ T2801] dummy1: entered promiscuous mode [ 127.055859][ T2801] dummy1: entered allmulticast mode [ 127.076503][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 127.082524][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 127.093011][ T10] usb 4-1: USB disconnect, device number 30 [ 127.141027][ T2807] usb usb1: usbfs: process 2807 (syz.2.863) did not claim interface 0 before use [ 127.160110][ T36] audit: type=1400 audit(1793868581.785:1757): avc: denied { create } for pid=2806 comm="syz.2.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 127.196313][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 127.357515][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.372496][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 127.381959][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.390162][ T9] usb 2-1: Product: syz [ 127.394491][ T9] usb 2-1: Manufacturer: syz [ 127.399191][ T9] usb 2-1: SerialNumber: syz [ 127.406022][ T9] rtl8150 2-1:1.0: couldn't find required endpoints [ 127.413371][ T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 127.486338][ T310] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 127.607489][ T36] audit: type=1400 audit(1793868582.255:1758): avc: denied { create } for pid=2798 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 127.629986][ T376] usb 2-1: USB disconnect, device number 35 [ 127.657493][ T310] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.670465][ T310] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.677270][ T310] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 127.686459][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.695260][ T310] usb 3-1: config 0 descriptor?? [ 127.906389][ T2812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.916037][ T2812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.216759][ T2822] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 128.346331][ T376] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 128.526930][ T376] usb 4-1: Using ep0 maxpacket: 8 [ 128.535499][ T376] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 128.548516][ T376] usb 4-1: New USB device found, idVendor=0499, idProduct=017f, bcdDevice= 0.40 [ 128.557881][ T376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.569287][ T376] usb 4-1: Product: syz [ 128.575719][ T376] usb 4-1: Manufacturer: syz [ 128.584743][ T376] usb 4-1: SerialNumber: syz [ 128.624316][ T2836] input: syz0 as /devices/virtual/input/input13 [ 128.783213][ T2841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.797638][ T36] audit: type=1400 audit(1793868583.445:1759): avc: granted { setsecparam } for pid=2819 comm="syz.3.868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 128.812611][ T2841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.826971][ T376] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 128.848557][ T376] usb 4-1: USB disconnect, device number 31 [ 128.917474][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 128.923539][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 128.935432][ T310] usb 3-1: USB disconnect, device number 36 [ 129.604834][ T2853] cgroup: fork rejected by pids controller in /syz1 [ 129.656337][ T310] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 129.816332][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 129.822795][ T310] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 129.831232][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.841651][ T310] usb 3-1: config 0 has no interface number 0 [ 129.848010][ T310] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 129.858210][ T310] usb 3-1: config 0 interface 98 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.868366][ T310] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 129.878630][ T310] usb 3-1: config 0 interface 98 has no altsetting 0 [ 129.887290][ T310] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 129.896577][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.904716][ T310] usb 3-1: Product: syz [ 129.909329][ T310] usb 3-1: Manufacturer: syz [ 129.914079][ T310] usb 3-1: SerialNumber: syz [ 129.921303][ T310] usb 3-1: config 0 descriptor?? [ 129.927421][ T2857] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.935867][ T310] asix 3-1:0.98: probe with driver asix failed with error -22 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 130.357200][ T36] audit: type=1400 audit(1793868584.995:1760): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1459]" dev="pipefs" ino=1459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 130.851703][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.859595][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.896874][ T10] usb 3-1: USB disconnect, device number 37 [ 130.995823][ T2861] bridge0: port 3(syz_tun) entered disabled state [ 131.003496][ T2861] bridge0: port 3(syz_tun) entered disabled state [ 131.270248][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.277910][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.285737][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.293619][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.301490][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.309252][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.490569][ T1252] tipc: Left network mode