last executing test programs: 17.577114836s ago: executing program 1 (id=273): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (rerun: 64) socket$packet(0x11, 0x2, 0x300) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) setpgid(r1, r1) (rerun: 64) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 64) r5 = eventfd2(0x0, 0x0) (rerun: 64) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r5, 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000440)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x2}}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) (rerun: 64) r6 = fsopen(&(0x7f0000000080)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f0000000380)='0\x00\xfa\xb8F\n9\xea\xbe\x92\x1eY\xbe\xd7\b\xa7\xc4\x19\'\xaaF\xc6< \x06\xccf\xa7\x10[1\xbc\xd5*\xb2\\\xa8\xb1p\x99X\xd0\x96\x87\xf9\x18\x94\xca-\xe9T\xf1\f4\x19\x9b\xda\xd0\x1fJ\xb4\xc8S\xadbo\x1b2\xfd\x1c6\x9c=\x89D\xafIhg\a\xae\x9cn{\x18\':\xf0\xbe\xa7\xedxmh@\\\x91\xc13\x17T\xc7\xe0\xe2\x02\x15ur\xae\xdeB<\x16\x02\xebg\xd9x\xb1L\x82\xdcI~r\x85\xd5\x1d\xb18\x88\x1d\x11\xb3-AR]53n\n\x81K\x7fA\xb2x\x94\xa9\xfe\xa11\x12\x18l\x7f\xd5k\xb5$\xc7I\xbc\xf3\\\xe8\x16I\x95A\x05\xcd\xdf\xd2\x02e\xab/N\x9fb\x19O\\\x19w\xebW\xfb\xef\xcf\xd0\xa9\x98:\x81\xbf\xae\xe5n\x0eo\xbe\f\xe0\x96\x047\x15!\xff\xf4\xe7\xe7\xa6\xc6&$\x0e3\xa1z1n\xa3\xf9\xa0A\x85_\x98f\xae\xd3]f\x97\x80?\xaa\x80|b\t\x02\xd1a\xf2\xdf>\xea\v\xa5\"\xfeI\xcd\x87\xea\xde\xd6?)\x1bt\xbe\x11\x89\xb5+.\xf5E\x87\xf4\xb1tH,|\xa4\xba\x81\xa1\x88\xac\x1b\xa8U\xa2\xc1\x89XO\xccK\xcd\xa2Xo-\xcb\x11KQy\x8c\xb9\x9f \xf1\xce\x06\xc1\x89\xfe\x0fP\xbb\x8ee\x11\xdaA\xd8\x1f&\xe0\xd2\xb4ksA\xae\"$\x03wU\xfc\x96\xd2n\xcc\xc6\xb4\x05\xe6s\xe7G\x98\x88\x80\x82\xd9\x9e\xf2B\xb4I\xe0L\a\b_\x15\x14\\a\xbf\xf3\x02\x03\xd3F\x19\x0eQ\x1d\xdd\xfa1\v\xdc\x87\x17\x85\xd0bUx\x87\x971]n\xb1\xcfjF\x10LmQE\xb8', 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x88, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) (async) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x40e80, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffff"], 0x62) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.479889828s ago: executing program 1 (id=274): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000340)={0x40, 0x0, 0x5, "373208bbcf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000b80)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x20, 0x9, 0x39, {0x39, 0xc, "abbe47a8bcee96d9ca658206a3e9b8c302e6bef517cfad9218fb61f02dedc57cd48064dde80734e794a13afa7d8b6ecf003039c98cd3f4"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x581e}}, &(0x7f00000031c0)=ANY=[@ANYBLOB="000fe7000000050fe7000320100a050501000000000700c0beff000f00000000c00000603fff0000ff0000bb1001ae07e565443c346b5e7c72256e87d87c9e044a9907e99d643e1f2c2d2b8745e09f9e8c6baa3d185ebbf81991748df7963b3a6dd1df57f0e4d96fed9b80e452cf3a3333881ab01377554f684dfeadccadc9fedb3dce70592898c7f5e5b0591ba82f0e08c2c13d63d399d447c2ffb6ff7de790f462122f85629bedada7fb12901ff1105cdc9d7139bef28a8c202e634740271d196234d939a766fe58ac08bc30843b8f5d00ec54c5fd91105d2521577c3b5a0a618589c0e1ec07100200c10010", @ANYRES64, @ANYRESOCT=r0], &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x60, 0x6, 0x2, "8af8e64c", "7835880b"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x2, 0x3b, 0x4, 0xff, 0x8000}}}, &(0x7f00000016c0)={0x84, &(0x7f0000000440)={0x40, 0x16, 0x5d, "1cdde3cb7f56604ba7582465ea3f91d31b62f8acdff672d416a2025d113e122fcdbc9fee0c36ed28d64910b6cf0c87c1f7b37b52fd51b1bdf809194873b4b1aa621159ec2289aea36e09b26d98ec1a74abab861c50b27820af5e2b2f77"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x100, 0x1, [0xf]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, '^?'}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000840)={0x40, 0x17, 0x6, @local}, &(0x7f0000000880)={0x40, 0x19, 0x2, "8cc6"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000004c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.409019826s ago: executing program 1 (id=292): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@ipv4={""/10, ""/2, @multicast1}}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x80, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}}) fcntl$setstatus(r0, 0x4, 0x2000) getxattr(0x0, &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) getxattr(0x0, &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_settime(0xfffffffb, &(0x7f0000000140)) fcntl$setstatus(r0, 0x4, 0xa00) 14.407749576s ago: executing program 1 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='oom_score\x00') capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f00000001c0)={0x7d033da4, 0x3b, 0x0, 0x8, 0x6f90, 0x896}) chdir(&(0x7f0000000000)='./file0\x00') 14.407284156s ago: executing program 1 (id=295): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x802, 0x1) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x5220, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0xffffffff, [0x7ff, 0xfffffffffffffff7, 0xffffffffffffffff, 0x3f3, 0x100000000, 0x6ffe]}) prlimit64(0x0, 0x5, &(0x7f0000000840)={0x8, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001040)="98bb"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20100, 0x4) brk(0x6) r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) recvmmsg(r1, &(0x7f0000005200)=[{{&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000002080)=[{&(0x7f0000000480)=""/71, 0x47}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)=""/15, 0xf}, {&(0x7f00000005c0)=""/107, 0x6b}, {&(0x7f0000000640)=""/57, 0x39}, {&(0x7f0000000680)=""/142, 0x8e}, {&(0x7f0000000740)=""/234, 0xea}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x8, &(0x7f0000002100)=""/83, 0x53}, 0x8000}, {{&(0x7f0000002180)=@caif=@dgm, 0x80, &(0x7f0000002440)=[{&(0x7f0000002200)=""/27, 0x1b}, {&(0x7f0000002240)=""/224, 0xe0}, {&(0x7f0000002340)=""/73, 0x49}, {&(0x7f00000023c0)=""/85, 0x55}], 0x4, &(0x7f0000002480)=""/187, 0xbb}, 0x7}, {{&(0x7f0000002540)=@hci, 0x80, &(0x7f0000002600)=[{&(0x7f00000025c0)=""/43, 0x2b}], 0x1, &(0x7f0000002640)=""/237, 0xed}, 0x400}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000002740)=""/140, 0x8c}, {&(0x7f0000002800)=""/121, 0x79}, {&(0x7f0000002880)}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/164, 0xa4}, {&(0x7f0000003980)=""/219, 0xdb}, {&(0x7f0000003a80)=""/143, 0x8f}, {&(0x7f0000003b40)=""/164, 0xa4}], 0x8, &(0x7f0000003c80)=""/207, 0xcf}, 0x1000}, {{&(0x7f0000003d80)=@l2, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003e00)=""/217, 0xd9}, {&(0x7f0000003f00)=""/205, 0xcd}, {&(0x7f0000004000)=""/165, 0xa5}, {&(0x7f00000040c0)=""/243, 0xf3}], 0x4, &(0x7f0000004200)=""/4096, 0x1000}, 0x101}], 0x5, 0x2060, &(0x7f0000005340)) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@remote, @in=@rand_addr=0x64010101, 0x4e20, 0x4, 0x4e21, 0x6, 0x2, 0x80, 0x20, 0x0, r3, r4}, {0x8, 0xf, 0x2, 0x4, 0x3, 0x4, 0xd925, 0x800}, {0x8ff, 0x80, 0x5, 0x100000000}, 0x8, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, {{@in6=@mcast1, 0x4d6, 0x60}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x3504, 0x1, 0x0, 0x2, 0x0, 0x8001, 0xeb}}, 0xe8) 13.982179287s ago: executing program 1 (id=296): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syncfs(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000000000000006"]) connect$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db", 0x1}], 0x1}}], 0x1, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 13.919409388s ago: executing program 32 (id=296): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syncfs(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000000000000006"]) connect$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db", 0x1}], 0x1}}], 0x1, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 6.393188918s ago: executing program 4 (id=339): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a0090000180c200000300000000000086dd694fd2cd0000000000000080bbff0200000000000000000000000186009078ff2b0500020009000700000005"], 0x63) 6.33251511s ago: executing program 4 (id=341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="083c86dd00011100046000313b0c6eec00be60302bfffe8000000000000000000000000200aaff02000000000000000000000000000183a474"], 0xfdef) 6.278371781s ago: executing program 4 (id=342): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001840)={0x34, &(0x7f00000015c0)={0x0, 0xea410cc7c124e8cc, 0x2, "1d17"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x20, 0x7, 0xde, {0xde, 0x9, "a7c4539db231e2738d1b8676b71dedee4b309e0f5693214a304aad0c24dcb4b8d933fa9d1bf24303bc2b5293ed24b51d95bda2caf77b64d907382cd788261c9e7f35cbeddf1d6bd75d5f15111d3760a0f1ec1fb3c52092f61c89dd40c16e70b13bff2858b0c2c2a0bb90d0f9894941ce8b35ac0842ac7316cba6510484f7bfbfc0ba1d76cc0031fad456a583df4d5554e6b0a40ecf7333683c6a47a9924c31e22f63ecb9094b357b4f5c47a644e2c232bc88e7fc6682d0d58b8f3bb495f7f6cd6577bf974517a8ee579514c3d62039f8f619219fc72551bf35c2c225"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}, &(0x7f00000001c0)={0x0, 0xf, 0xa3, {0x5, 0xf, 0xa3, 0x2, [@generic={0x94, 0x10, 0xb, "a71c2f63268fd485ef45124618ba7233f1818f026ff01371af396fc64cfc102b17051133e2619f322576e28227204a5b647e8177555e502c448ddb7ceb1e53d018730be4e595efa8f77d011bf9229728c302087adb77b8b241c225328f052f7af30b9f33894c89ea67fc695e4feeedaaf8b807d76027546dd9b2b7fb6e11cd8afdbe53c148b5216bace1fa42bd6a0b3f21"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xf8, 0x3, 0x8}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0xf8, 0x6, "7538ad3a", "e1469825"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0xf4, 0x6, 0x2, 0x1ff, 0xffff}}}, &(0x7f0000000900)={0x84, &(0x7f0000000340)={0x20, 0xb, 0xb3, "332bb32d385b17ad06beb7cd80a8e4d1b01d7083161143313bfd5be5cc7074c66fcb4475442b83d4e22c28d4898713851254aca368b07cc745263a5f67e81e0edf9f31b40a8468473860ad70032943b7a6cce0857c3b1be982a38414b329fdc8ba0bf4ed46f8ddea3b1b496ff779d664a4c8e6a65207fe37aa01fafce7461b1ef267b2762df542533c5ef0e4b76d0ffdf964d6adfe9d8f607dd144970b1640337efe79ac1dd3b8433e728b4e3cb4818975efca"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2b}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x4, 0x8, [0xff0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000580)={0x40, 0xb, 0x2, 'Lj'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "d0b5"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xa}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xfe}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xf}}) 3.672989507s ago: executing program 0 (id=356): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x3, 0x100}, 0x0) r0 = syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240b0001ff23000c240302070300040007008109040100000102f700090401010101022000090501090002030b04082501000040040009040200000102200009040201010102200009240201000f0e07011024010201000400000008b8000000030905820908"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) pread64(r1, 0x0, 0x0, 0xfe) ptrace$cont(0x9, r0, 0xff, 0x42) socket$inet_icmp(0x2, 0x2, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000300)=0x6, 0x4) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040)=0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x1a, 0xa01, 0x0, 0x25dfdbff, {0x3}}, 0x14}}, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0x4018aee3, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) execve(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r7, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x7868, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000580)) 3.252839628s ago: executing program 4 (id=357): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r3, &(0x7f0000000080)='0', 0x1) 3.119863681s ago: executing program 0 (id=360): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, &(0x7f00000000c0)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a320000000000000000000000ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040810000e0c9e35161b4e352d753079380800014004000000", 0x58}], 0x1) syz_usb_connect$uac1(0x1, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xc, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x19}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, 'F'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x5, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) 2.75761732s ago: executing program 4 (id=363): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0x7fff, 0x81, 0x2, 0x25}, 'syz1\x00', 0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000080)="30ece89e1c", 0x5}], 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@'], 0xfe33) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0x7fff, 0x81, 0x2, 0x25}, 'syz1\x00', 0x3f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) (async) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000080)="30ece89e1c", 0x5}], 0x1) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@'], 0xfe33) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r2, 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) 2.513094477s ago: executing program 4 (id=366): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001840)={0x34, &(0x7f00000015c0)={0x0, 0xea410cc7c124e8cc, 0x2, "1d17"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x20, 0x7, 0xde, {0xde, 0x9, "a7c4539db231e2738d1b8676b71dedee4b309e0f5693214a304aad0c24dcb4b8d933fa9d1bf24303bc2b5293ed24b51d95bda2caf77b64d907382cd788261c9e7f35cbeddf1d6bd75d5f15111d3760a0f1ec1fb3c52092f61c89dd40c16e70b13bff2858b0c2c2a0bb90d0f9894941ce8b35ac0842ac7316cba6510484f7bfbfc0ba1d76cc0031fad456a583df4d5554e6b0a40ecf7333683c6a47a9924c31e22f63ecb9094b357b4f5c47a644e2c232bc88e7fc6682d0d58b8f3bb495f7f6cd6577bf974517a8ee579514c3d62039f8f619219fc72551bf35c2c225"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}, &(0x7f00000001c0)={0x0, 0xf, 0xa3, {0x5, 0xf, 0xa3, 0x2, [@generic={0x94, 0x10, 0xb, "a71c2f63268fd485ef45124618ba7233f1818f026ff01371af396fc64cfc102b17051133e2619f322576e28227204a5b647e8177555e502c448ddb7ceb1e53d018730be4e595efa8f77d011bf9229728c302087adb77b8b241c225328f052f7af30b9f33894c89ea67fc695e4feeedaaf8b807d76027546dd9b2b7fb6e11cd8afdbe53c148b5216bace1fa42bd6a0b3f21"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xf8, 0x3, 0x8}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0xf8, 0x6, "7538ad3a", "e1469825"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0xf4, 0x6, 0x2, 0x1ff, 0xffff}}}, &(0x7f0000000900)={0x84, &(0x7f0000000340)={0x20, 0xb, 0xb3, "332bb32d385b17ad06beb7cd80a8e4d1b01d7083161143313bfd5be5cc7074c66fcb4475442b83d4e22c28d4898713851254aca368b07cc745263a5f67e81e0edf9f31b40a8468473860ad70032943b7a6cce0857c3b1be982a38414b329fdc8ba0bf4ed46f8ddea3b1b496ff779d664a4c8e6a65207fe37aa01fafce7461b1ef267b2762df542533c5ef0e4b76d0ffdf964d6adfe9d8f607dd144970b1640337efe79ac1dd3b8433e728b4e3cb4818975efca"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2b}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x4, 0x8, [0xff0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000580)={0x40, 0xb, 0x2, 'Lj'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000600)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "d0b5"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xa}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xfe}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xf}}) 2.085152267s ago: executing program 2 (id=369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x86, {0x201, "b989010000b800000100ba000000000f302e460f01c536440f0966baf80cb83460ed8def66bafc0c66b8721b66ef43c707090000008f29b801b49d0200000066baf80cb8ec7ead86ef66bafc0cb80d000000efb9800000c00f3235004000000f30c4014a2ab95b000000660f6512"}}], 0xb6}) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040b4"], 0x0) unshare(0x60000600) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}], 0x2, 0x20000800) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000300)=@svm={0x0, 0x1, 0x1080, {}, {"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"}}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000300), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xac776000) capset(&(0x7f0000000040)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000180001032ebd0000fcdbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 1.739270316s ago: executing program 0 (id=370): ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x3, 0x5, 0x1, 0x7}, 0x9, 0x5, 'id0\x00', 'timer0\x00', 0x0, 0x2, 0x7103, 0x1ff, 0x2}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) 1.688083378s ago: executing program 0 (id=371): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r3, &(0x7f0000000080)='0', 0x1) 1.18438616s ago: executing program 3 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001a80), 0x1, 0x0) flistxattr(r1, &(0x7f0000001ac0)=""/1, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) setxattr$security_ima(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000340)=ANY=[], 0x3, 0x2) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) pwrite64(r3, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r6}}], 0x1, 0x0, 0x0) openat$incfs(r6, &(0x7f0000000180)='.log\x00', 0x200400, 0x12c) 1.073516462s ago: executing program 2 (id=373): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010000000000000080000700000040"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x8) 1.025994324s ago: executing program 2 (id=374): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d001080"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x50a02891599f06e2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x1) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) 955.598266ms ago: executing program 2 (id=375): mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) lsm_set_self_attr(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="6500000000000000050000000000000021000000000000000100000000000000cfd8e9a87a76cf65ce75e3e2cea6402d2c58911705b2"], 0x21, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 673.122653ms ago: executing program 2 (id=376): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2002000017000100000000000000000064010100000000000000000000000000000004da00000000ff02000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000144e210000000080000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ac1414bb000000000000000000000000002b0000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000b290f83bcdce21d5dcdd00000000000000000000000000000000000000000004000000000000020000000000000000000000000000000a0000000000000004001000000000000100ffff00000000000000000000000000000000000003000000000000000000020200000000f9ffffff020000000000000000000000c40005"], 0x220}, 0x1, 0x0, 0x0, 0x80}, 0x4840) 628.262564ms ago: executing program 2 (id=377): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x11}, {0x400000b6, 0x0, 0xc}]}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ef, 0x0, 0x7f, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) 398.84854ms ago: executing program 3 (id=378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000080)={0x1e0, 0x5, 0x4, 0x5}) pwrite64(r1, &(0x7f0000000700)="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", 0x1000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0x1a12}) r4 = eventfd2(0x7, 0x80001) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@multicast1, @in=@broadcast, 0x4e21, 0x5300, 0x4e20, 0xc, 0xa, 0xa0, 0x74c00b53195cc9dd, 0x5e, 0x0, r5}, {0x3, 0x9, 0x2, 0x4830, 0xb60, 0x8, 0x0, 0x7e}, {0xfff, 0x6, 0x0, 0xed8}, 0x5, 0x6e6bb6, 0x2, 0x0, 0x3}, {{@in=@empty, 0x4d3, 0x2b}, 0x2, @in=@private=0xa010101, 0x0, 0x4, 0x0, 0xd, 0x5, 0xed3, 0x4}}, 0xe8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r4, 0x1, 0x2, r4}) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000340)=[@code={0xa, 0x66, {"36f3430f5aa309000000dd3f0f01cf400f01c34799b9040900000f3266baf80cb8338abd86ef66bafc0cecb8010000000f01d9c744240043000000c7442402fe8a0000ff2c2466baf80cb8e8464682ef66bafc0ced"}}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd0000, 0x1e96}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest16=0x808, 0xfe3, 0x10000, 0x4}}, @nested_load_syzos={0x136, 0x38, {0x2, 0x4, [@nested_amd_vmload={0x182, 0x18}]}}, @code={0xa, 0x62, {"c4818d58f647d2b700680000f4f3460f224266b871000f00d0470f35c74424004e000000c744240203000000c7442406000000000f011c24410f827b8e000066ba410066b8006866ef670f5f8502000000"}}], 0x188}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000540)={[0x6, 0xfffffffffffffff7, 0xe56, 0x1, 0x4, 0x9, 0xfffffffffffffffe, 0x3, 0x8, 0x51b, 0x3, 0x7, 0xa, 0x80, 0x3, 0x6de4], 0xa000, 0x10}) write$eventfd(r4, &(0x7f0000000300)=0x7, 0x8) r7 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) ioctl$TIOCSLCKTRMIOS(r7, 0x5457, &(0x7f0000000100)) 173.043206ms ago: executing program 3 (id=379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x881, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x335002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x335002, 0x0) unshare(0x14000400) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x30d001) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x200003}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc891}, 0x4c050) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x200003}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc891}, 0x4c050) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a80)}}], 0x1, 0x2090) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0xc0104d03, &(0x7f0000000240)="09fbebe138f72f4a7977e36d7f3f809e9948833f70ba36f16ee42fe70805d84af9055725a98f49cbeb4a749b2454fbfae6a30244eebece0c") (async) ioctl(r3, 0xc0104d03, &(0x7f0000000240)="09fbebe138f72f4a7977e36d7f3f809e9948833f70ba36f16ee42fe70805d84af9055725a98f49cbeb4a749b2454fbfae6a30244eebece0c") ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000080)={0x6, 'bond_slave_0\x00', {0x73cd}, 0x8000}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000080)={0x6, 'bond_slave_0\x00', {0x73cd}, 0x8000}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'erspan0\x00', {0x4}, 0x5}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'erspan0\x00', {0x4}, 0x5}) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/mtrr\x00', 0x10002, 0x0) read$FUSE(r5, &(0x7f0000001800)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000001800)={0x2020}, 0x2020) socket$can_raw(0x1d, 0x3, 0x1) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) madvise(&(0x7f00000f3000/0x3000)=nil, 0x3000, 0x12) (async) madvise(&(0x7f00000f3000/0x3000)=nil, 0x3000, 0x12) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r7) unshare(0x28000600) (async) unshare(0x28000600) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f00000017c0)={0x0, 0xfffffffffffffe7b, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYBLOB="62f7459cfb4b951228de6db5480fdde2fda8d99880f47827583431eba97707e5bc3eb00f3cea97c46a7d", @ANYRESHEX=r8], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000180)=0xfffffffc, 0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 117.593087ms ago: executing program 3 (id=380): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5423, &(0x7f0000007000)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) stat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@nullb, r2, &(0x7f00000002c0)='./file0\x00') openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000004c0)='./file1\x00', 0x5) unlinkat(r3, &(0x7f00000011c0)='./file0\x00', 0x0) 72.752188ms ago: executing program 3 (id=381): r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair(0x25, 0x4, 0x7fff, &(0x7f0000000280)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x28) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0xc4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf0, r0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, './binderfs\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}]}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0x8821) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x400010, &(0x7f0000000140)='\\\x00') mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 5.0762ms ago: executing program 0 (id=382): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x2, 0x0, 0x7, 0x8, 0x0, r1}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000140)={0x4, 0xe}) write$vga_arbiter(r0, &(0x7f0000000180)=@other={'lock', ' ', 'none'}, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000200)={0x18, 0x106, 0x1, 0xa1f5, 0x8}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write(r4, &(0x7f0000000280)="30f37302cf97ff519f9f09e54b11ed", 0xf) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f00000002c0)={0x0, 0x4}) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000580)={{'\x00', 0x1}, {0x8f3}, 0x8, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="fe7a9987a1e343d4143c7795b2c3218655f8326c83762044d0b1b040a4470da2f789ac86569f1c8cb421987bc9df3308545c68f83346c6a9cdda508fa9d25db4283a0474aa78bb44b916d551a6c9e5fda89f5c78bb04565cc5ed69d58968f457f04a0db0e035de4b10ad57ea50d7dd4d5f11d498", 0x74, 0x0, &(0x7f0000000400)={0x2, 0x142, {0x1, 0xc, 0xf8, "1f7278f2a63fd3e86b2b339db7f32d3dccc9112ed12fc653560ad9c424e50d5b84234182e05985a7b5102784f5544997fb37ed4b849886a18687c3315929d28bcd699f4686d58fc3098a17392b3e77b9ce8541fb618dad9c2801106323407614d7e6e456b63f849a2b1b9a726ad918e1f93bbb364d212bc1fa04fa9f5e87b09cec3ef6d00641a8360ee652091edf1aad08c8d1474df5d96dacdb488ec7830cbd29fe24b4316bdb12024c8a600f552cd517997931085fd7182a30cb8236d192e9ca77b1bb575d6da268c67a9f55cfde72f35b94f92362548b723d9c13f2291572b3e8f16b6df5bdca19a61de28397d0f555cc0c9bf082acbf", 0x3d, "c1d605b14973bd927bd0a5cfd83ac0c08d1e92cbc3bd9e4b56cbb56ece31bc7d0e880d08f4c7ad06d70408fd7bda83099ef17996a1c286dddf2aba4788"}, 0x1a, "57201d2190a744a7e91a4f78d8a22fde3b7a271c2c2a3fba81c9"}, 0x168}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000700)=0xe8) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, r5, &(0x7f0000000740)='./file1\x00') ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000780)={0x4, 0x3, 0x18}) fgetxattr(r3, &(0x7f00000007c0)=@random={'system.', '\x00'}, &(0x7f0000000800)=""/190, 0xbe) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f00000008c0)={0x81, 0x0, 0x3}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x0, 0x2000001, 0x13, r0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000940)={0x0}, &(0x7f0000000980)=0xc) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000009c0)={'\x00', 0x5, 0x5, 0x7, 0x20, 0x4, r6}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000a40)=""/69, &(0x7f0000000ac0)=0x45) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000b00)={0x0, @aes128, 0x0, @desc3}) r7 = syz_open_dev$loop(&(0x7f0000000b40), 0x5, 0x141040) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r3) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000b80)={0x0, {}, 0x0, {}, 0xf, 0x6, 0x19, 0x9, "be98786084397858d4a022cd18e65b3b18985229d693f6fbf3faa0b1cb21a2bf9b29b1948926c0ca21eb9d7056414da92aa0c6918ab4720121e10ced0e09ea98", "779c919dad8e823614777cff6f6f2315d0b6ba65e8a3532053a4cbdd3c09d6c3", [0x2, 0x6]}) ioctl$XFS_IOC_FSGEOMETRY(r7, 0x8100587e, &(0x7f0000000c40)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x5e31, &(0x7f0000000d40)={0x0, 0x579e, 0x80, 0x1, 0x31a, 0x0, r4}, &(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000001080)={{0x0, 0x9, 0x8, 0xffffffffffffffff, 0x1, 0x1, 0x3ff, 0x8, 0x4, 0x2060f9f1, 0x1, 0xb7d, 0x7, 0xfffffffffffffff5, 0x138000000}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2.10295ms ago: executing program 3 (id=383): getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(r0, r0, 0x0) setregid(0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$BLKRASET(r1, 0x1262, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) socket(0x11, 0xa, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mkdir(&(0x7f0000000240)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x1ff) renameat(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00') mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = open$dir(&(0x7f00000002c0)='./my_sys/bus/pci/devices/0000:00:01.0/config/file0\x00', 0x40202, 0x56) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat(r3, &(0x7f0000000340)='./file0\x00', 0x90000, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) fallocate(r2, 0x1, 0x3, 0x8) 0s ago: executing program 0 (id=384): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d001080"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x50a02891599f06e2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x1) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): in process `syz.3.73'. [ 33.387484][ T537] fuse: Bad value for 'fd' [ 33.393484][ T537] capability: warning: `syz.3.74' uses 32-bit capabilities (legacy support in use) [ 33.426104][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 33.479532][ T64] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.576040][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 33.585763][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.606079][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 33.617875][ T45] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 33.627077][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.635110][ T45] usb 2-1: Product: syz [ 33.646019][ T45] usb 2-1: Manufacturer: syz [ 33.650699][ T45] usb 2-1: SerialNumber: syz [ 33.666336][ T45] usb 2-1: config 0 descriptor?? [ 34.483249][ T45] usb 1-1: USB disconnect, device number 7 [ 34.496435][ T567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=567 comm=syz.0.81 [ 34.524314][ T569] netlink: 52 bytes leftover after parsing attributes in process `syz.0.82'. [ 34.638932][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.652931][ T64] usb 3-1: no configurations [ 34.657749][ T64] usb 3-1: can't read configurations, error -22 [ 34.686082][ T319] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.867397][ T319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.879537][ T319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.892531][ T319] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.908291][ T319] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 34.930977][ T319] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 34.955135][ T319] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 34.966211][ T319] usb 4-1: config 1 interface 1 has no altsetting 0 [ 34.975011][ T319] usb 4-1: string descriptor 0 read error: -22 [ 34.981567][ T319] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 34.990817][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.482318][ T591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 35.515527][ T593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=593 comm=syz.0.91 [ 35.555666][ T595] netlink: 44 bytes leftover after parsing attributes in process `syz.0.92'. [ 35.564546][ T595] tc_dump_action: action bad kind [ 35.597060][ T598] netlink: 52 bytes leftover after parsing attributes in process `syz.0.93'. [ 35.956063][ T383] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.238971][ T322] usb 4-1: USB disconnect, device number 6 [ 36.268730][ T45] usb 2-1: USB disconnect, device number 9 [ 36.286299][ T623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=623 comm=syz.0.101 [ 36.312491][ T625] netlink: 52 bytes leftover after parsing attributes in process `syz.1.102'. [ 36.696041][ T322] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 36.857127][ T322] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.873049][ T322] usb 1-1: config 0 interface 0 has no altsetting 0 [ 36.879730][ T322] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 36.888867][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.897822][ T322] usb 1-1: config 0 descriptor?? [ 37.026952][ T383] usb 3-1: unable to get BOS descriptor or descriptor too short [ 37.035109][ T383] usb 3-1: no configurations [ 37.039845][ T383] usb 3-1: can't read configurations, error -22 [ 37.156097][ T319] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 37.305261][ T322] hid (null): unknown global tag 0xc [ 37.307180][ T319] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 37.312413][ T322] uclogic 0003:5543:0522.0003: unknown main item tag 0x2 [ 37.322292][ T319] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 37.328410][ T322] uclogic 0003:5543:0522.0003: unknown main item tag 0x7 [ 37.337210][ T319] usb 2-1: config 220 interface 0 has no altsetting 0 [ 37.344189][ T322] uclogic 0003:5543:0522.0003: unknown global tag 0xc [ 37.352555][ T319] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 37.357691][ T322] uclogic 0003:5543:0522.0003: item 0 4 1 12 parsing failed [ 37.366979][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.374242][ T322] uclogic 0003:5543:0522.0003: parse failed [ 37.382223][ T319] usb 2-1: Product: syz [ 37.388028][ T322] uclogic 0003:5543:0522.0003: probe with driver uclogic failed with error -22 [ 37.392321][ T319] usb 2-1: Manufacturer: syz [ 37.405730][ T319] usb 2-1: SerialNumber: syz [ 37.466070][ T383] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.515849][ T322] usb 1-1: USB disconnect, device number 8 [ 37.564700][ T649] FAULT_INJECTION: forcing a failure. [ 37.564700][ T649] name failslab, interval 1, probability 0, space 0, times 0 [ 37.577357][ T649] CPU: 1 UID: 0 PID: 649 Comm: syz.3.112 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 37.577387][ T649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.577400][ T649] Call Trace: [ 37.577407][ T649] [ 37.577415][ T649] __dump_stack+0x21/0x30 [ 37.577447][ T649] dump_stack_lvl+0x140/0x1c0 [ 37.577474][ T649] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.577502][ T649] ? __lruvec_stat_mod_folio+0x13f/0x1a0 [ 37.577538][ T649] dump_stack+0x19/0x20 [ 37.577565][ T649] should_fail_ex+0x3c2/0x510 [ 37.577588][ T649] should_failslab+0xac/0x100 [ 37.577612][ T649] kmem_cache_alloc_noprof+0x42/0x410 [ 37.577632][ T649] ? __pte_alloc+0x1ae/0x440 [ 37.577650][ T649] ? __anon_vma_prepare+0xa5/0x590 [ 37.577671][ T649] __anon_vma_prepare+0xa5/0x590 [ 37.577692][ T649] do_pte_missing+0x2bbf/0x4440 [ 37.577717][ T649] ? __kasan_check_write+0x18/0x20 [ 37.577736][ T649] ? _raw_spin_lock+0x92/0x120 [ 37.577766][ T649] ? __cfi__raw_spin_lock+0x10/0x10 [ 37.577796][ T649] ? pte_marker_clear+0x1b0/0x1b0 [ 37.577819][ T649] ? __pmd_alloc+0x5a6/0x9a0 [ 37.577842][ T649] ? kasan_save_track+0x4f/0x80 [ 37.577864][ T649] ? kasan_save_track+0x3e/0x80 [ 37.577886][ T649] ? __cfi___pmd_alloc+0x10/0x10 [ 37.577907][ T649] ? mas_preallocate+0x79b/0xc90 [ 37.577930][ T649] ? vma_link+0x12b/0x6c0 [ 37.577950][ T649] ? insert_vm_struct+0x2d5/0x3b0 [ 37.577972][ T649] ? alloc_bprm+0x795/0xb30 [ 37.577988][ T649] ? do_execveat_common+0x199/0xae0 [ 37.578006][ T649] ? x64_sys_call+0x906/0x2ee0 [ 37.578024][ T649] ? mas_destroy+0x2768/0x3050 [ 37.578047][ T649] handle_mm_fault+0x1189/0x1ba0 [ 37.578072][ T649] ? __cfi_handle_mm_fault+0x10/0x10 [ 37.578094][ T649] ? __kernel_text_address+0x11/0x40 [ 37.578122][ T649] ? __cfi_find_vma+0x10/0x10 [ 37.578141][ T649] ? vma_is_secretmem+0x11/0x50 [ 37.578167][ T649] ? check_vma_flags+0x2a5/0x3a0 [ 37.578193][ T649] __get_user_pages+0x114b/0x22d0 [ 37.578221][ T649] ? populate_vma_page_range+0x220/0x220 [ 37.578247][ T649] ? rwsem_read_trylock+0x275/0x5a0 [ 37.578275][ T649] get_user_pages_remote+0x377/0xb80 [ 37.578300][ T649] ? down_read+0x7f/0xe0 [ 37.578322][ T649] ? __cfi_get_user_pages_remote+0x10/0x10 [ 37.578346][ T649] ? __kasan_check_read+0x15/0x20 [ 37.578365][ T649] ? __vm_enough_memory+0x11e/0x380 [ 37.578387][ T649] ? security_vm_enough_memory_mm+0x257/0x270 [ 37.578411][ T649] get_arg_page+0x24c/0x520 [ 37.578437][ T649] ? copy_string_kernel+0x2e0/0x2e0 [ 37.578463][ T649] ? __kasan_check_write+0x18/0x20 [ 37.578482][ T649] ? up_write+0x66/0x280 [ 37.578508][ T649] ? copy_string_kernel+0x20/0x2e0 [ 37.578541][ T649] copy_string_kernel+0x17a/0x2e0 [ 37.578567][ T649] do_execveat_common+0x7de/0xae0 [ 37.578585][ T649] ? getname_flags+0x203/0x6b0 [ 37.578608][ T649] __x64_sys_execveat+0xd2/0xf0 [ 37.578626][ T649] x64_sys_call+0x906/0x2ee0 [ 37.578644][ T649] do_syscall_64+0x57/0xf0 [ 37.578661][ T649] ? clear_bhb_loop+0x50/0xa0 [ 37.578684][ T649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.578705][ T649] RIP: 0033:0x7fbf0a79e159 [ 37.578723][ T649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.578739][ T649] RSP: 002b:00007fbf0b67a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 37.578763][ T649] RAX: ffffffffffffffda RBX: 00007fbf0aa25fa0 RCX: 00007fbf0a79e159 [ 37.578778][ T649] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 37.578792][ T649] RBP: 00007fbf0a83503b R08: 0000000000001000 R09: 0000000000000000 [ 37.578805][ T649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.578818][ T649] R13: 00007fbf0aa26038 R14: 00007fbf0aa25fa0 R15: 00007fff73f99d68 [ 37.578834][ T649] [ 37.612684][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 37.612702][ T36] audit: type=1400 audit(1789096437.680:224): avc: denied { read } for pid=642 comm="syz.1.109" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.989669][ T36] audit: type=1400 audit(1789096437.700:225): avc: denied { open } for pid=642 comm="syz.1.109" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.989675][ T383] usb 3-1: Using ep0 maxpacket: 16 [ 37.989705][ T36] audit: type=1400 audit(1789096437.700:226): avc: denied { block_suspend } for pid=642 comm="syz.1.109" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.016879][ T383] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.045328][ T36] audit: type=1400 audit(1789096437.700:227): avc: denied { write } for pid=642 comm="syz.1.109" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.062856][ T383] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 38.078001][ T36] audit: type=1400 audit(1789096437.700:228): avc: denied { read write } for pid=642 comm="syz.1.109" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.087171][ T657] netlink: 52 bytes leftover after parsing attributes in process `syz.0.114'. [ 38.106810][ T36] audit: type=1400 audit(1789096437.700:229): avc: denied { open } for pid=642 comm="syz.1.109" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.138690][ T36] audit: type=1400 audit(1789096437.700:230): avc: denied { ioctl } for pid=642 comm="syz.1.109" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.148691][ T383] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 38.165387][ T36] audit: type=1400 audit(1789096437.700:231): avc: denied { ioctl } for pid=642 comm="syz.1.109" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.176693][ T383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.216150][ T319] usb 2-1: USB disconnect, device number 10 [ 38.229500][ T383] usb 3-1: Product: syz [ 38.233722][ T383] usb 3-1: Manufacturer: syz [ 38.238411][ T383] usb 3-1: SerialNumber: syz [ 38.252583][ T383] usb 3-1: config 0 descriptor?? [ 38.264515][ T36] audit: type=1400 audit(1789096438.330:232): avc: denied { create } for pid=662 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 38.768215][ T36] audit: type=1400 audit(1789096438.840:233): avc: denied { ioctl } for pid=675 comm="syz.1.121" path="socket:[5014]" dev="sockfs" ino=5014 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.776196][ T676] syz.1.121 uses obsolete (PF_INET,SOCK_PACKET) [ 38.803208][ T676] fuse: Unknown parameter 'ožZÉ\ [ 38.803208][ T676] %ƒÇؓ8ŸÄcG( ' [ 38.824358][ T678] FAULT_INJECTION: forcing a failure. [ 38.824358][ T678] name failslab, interval 1, probability 0, space 0, times 0 [ 38.837165][ T678] CPU: 0 UID: 0 PID: 678 Comm: syz.1.122 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 38.837200][ T678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.837212][ T678] Call Trace: [ 38.837217][ T678] [ 38.837224][ T678] __dump_stack+0x21/0x30 [ 38.837260][ T678] dump_stack_lvl+0x140/0x1c0 [ 38.837288][ T678] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.837317][ T678] ? __lruvec_stat_mod_folio+0x13f/0x1a0 [ 38.837346][ T678] dump_stack+0x19/0x20 [ 38.837371][ T678] should_fail_ex+0x3c2/0x510 [ 38.837395][ T678] should_failslab+0xac/0x100 [ 38.837419][ T678] kmem_cache_alloc_noprof+0x42/0x410 [ 38.837451][ T678] ? __pte_alloc+0x1ae/0x440 [ 38.837476][ T678] ? __anon_vma_prepare+0xa5/0x590 [ 38.837499][ T678] __anon_vma_prepare+0xa5/0x590 [ 38.837523][ T678] do_pte_missing+0x2bbf/0x4440 [ 38.837549][ T678] ? __kasan_check_write+0x18/0x20 [ 38.837564][ T678] ? _raw_spin_lock+0x92/0x120 [ 38.837583][ T678] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.837601][ T678] ? pte_marker_clear+0x1b0/0x1b0 [ 38.837617][ T678] ? __pmd_alloc+0x5a6/0x9a0 [ 38.837631][ T678] ? kasan_save_track+0x4f/0x80 [ 38.837645][ T678] ? kasan_save_track+0x3e/0x80 [ 38.837658][ T678] ? __cfi___pmd_alloc+0x10/0x10 [ 38.837672][ T678] ? mas_preallocate+0x79b/0xc90 [ 38.837687][ T678] ? vma_link+0x12b/0x6c0 [ 38.837700][ T678] ? insert_vm_struct+0x2d5/0x3b0 [ 38.837713][ T678] ? alloc_bprm+0x795/0xb30 [ 38.837724][ T678] ? do_execveat_common+0x199/0xae0 [ 38.837736][ T678] ? x64_sys_call+0x906/0x2ee0 [ 38.837747][ T678] ? mas_destroy+0x2768/0x3050 [ 38.837761][ T678] handle_mm_fault+0x1189/0x1ba0 [ 38.837777][ T678] ? __cfi_handle_mm_fault+0x10/0x10 [ 38.837792][ T678] ? __kernel_text_address+0x11/0x40 [ 38.837809][ T678] ? __cfi_find_vma+0x10/0x10 [ 38.837822][ T678] ? vma_is_secretmem+0x11/0x50 [ 38.837839][ T678] ? check_vma_flags+0x2a5/0x3a0 [ 38.837856][ T678] __get_user_pages+0x114b/0x22d0 [ 38.837873][ T678] ? populate_vma_page_range+0x220/0x220 [ 38.837890][ T678] ? rwsem_read_trylock+0x275/0x5a0 [ 38.837908][ T678] get_user_pages_remote+0x377/0xb80 [ 38.837926][ T678] ? down_read+0x7f/0xe0 [ 38.837943][ T678] ? __cfi_get_user_pages_remote+0x10/0x10 [ 38.837958][ T678] ? __kasan_check_read+0x15/0x20 [ 38.837971][ T678] ? __vm_enough_memory+0x11e/0x380 [ 38.837984][ T678] ? security_vm_enough_memory_mm+0x257/0x270 [ 38.838000][ T678] get_arg_page+0x24c/0x520 [ 38.838017][ T678] ? copy_string_kernel+0x2e0/0x2e0 [ 38.838034][ T678] ? __kasan_check_write+0x18/0x20 [ 38.838047][ T678] ? up_write+0x66/0x280 [ 38.838063][ T678] ? copy_string_kernel+0x20/0x2e0 [ 38.838080][ T678] copy_string_kernel+0x17a/0x2e0 [ 38.838097][ T678] do_execveat_common+0x7de/0xae0 [ 38.838109][ T678] ? getname_flags+0x203/0x6b0 [ 38.838123][ T678] __x64_sys_execveat+0xd2/0xf0 [ 38.838134][ T678] x64_sys_call+0x906/0x2ee0 [ 38.838146][ T678] do_syscall_64+0x57/0xf0 [ 38.838157][ T678] ? clear_bhb_loop+0x50/0xa0 [ 38.838171][ T678] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.838185][ T678] RIP: 0033:0x7f03fcb9e159 [ 38.838197][ T678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.838208][ T678] RSP: 002b:00007f03fb5e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 38.838224][ T678] RAX: ffffffffffffffda RBX: 00007f03fce25fa0 RCX: 00007f03fcb9e159 [ 38.838234][ T678] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 38.838242][ T678] RBP: 00007f03fcc3503b R08: 0000000000001000 R09: 0000000000000000 [ 38.838251][ T678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.838258][ T678] R13: 00007f03fce26038 R14: 00007f03fce25fa0 R15: 00007ffc97025cb8 [ 38.838269][ T678] [ 38.956054][ T322] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.026030][ T383] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 39.176050][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 39.242924][ T322] usb 4-1: device descriptor read/64, error -71 [ 39.656039][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 39.662237][ T45] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 39.670534][ T45] usb 2-1: config 179 has no interface number 0 [ 39.676849][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 39.688066][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 39.699311][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 39.710563][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 39.722094][ T45] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 39.735340][ T45] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 39.744407][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.753426][ T681] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 39.776079][ T322] usb 4-1: device descriptor read/64, error -71 [ 39.963545][ T45] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 40.016102][ T322] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.149271][ T322] usb 4-1: device descriptor read/64, error -71 [ 40.149693][ T383] usb 1-1: unable to get BOS descriptor or descriptor too short [ 40.163302][ T383] usb 1-1: no configurations [ 40.168023][ T383] usb 1-1: can't read configurations, error -22 [ 40.192994][ T319] usb 3-1: USB disconnect, device number 7 [ 40.365590][ T681] fuse: Bad value for 'group_id' [ 40.375179][ T696] netlink: 52 bytes leftover after parsing attributes in process `syz.0.124'. [ 40.376078][ T681] fuse: Bad value for 'group_id' [ 40.397019][ T45] usb 2-1: USB disconnect, device number 11 [ 40.397067][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 40.397099][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 40.419779][ T322] usb 4-1: device descriptor read/64, error -71 [ 40.536116][ T322] usb usb4-port1: attempt power cycle [ 40.876065][ T322] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.886942][ T712] FAULT_INJECTION: forcing a failure. [ 40.886942][ T712] name failslab, interval 1, probability 0, space 0, times 0 [ 40.897078][ T322] usb 4-1: device descriptor read/8, error -71 [ 40.899576][ T712] CPU: 0 UID: 0 PID: 712 Comm: syz.2.132 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 40.899602][ T712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.899614][ T712] Call Trace: [ 40.899621][ T712] [ 40.899628][ T712] __dump_stack+0x21/0x30 [ 40.899660][ T712] dump_stack_lvl+0x140/0x1c0 [ 40.899687][ T712] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.899715][ T712] ? mas_prev+0x5f/0xa0 [ 40.899739][ T712] dump_stack+0x19/0x20 [ 40.899765][ T712] should_fail_ex+0x3c2/0x510 [ 40.899788][ T712] should_failslab+0xac/0x100 [ 40.899812][ T712] kmem_cache_alloc_noprof+0x42/0x410 [ 40.899833][ T712] ? __pte_alloc+0x1ae/0x440 [ 40.899852][ T712] ? __anon_vma_prepare+0xec/0x590 [ 40.899873][ T712] __anon_vma_prepare+0xec/0x590 [ 40.899893][ T712] do_pte_missing+0x2bbf/0x4440 [ 40.899918][ T712] ? __kasan_check_write+0x18/0x20 [ 40.899937][ T712] ? _raw_spin_lock+0x92/0x120 [ 40.899964][ T712] ? __cfi__raw_spin_lock+0x10/0x10 [ 40.899993][ T712] ? pte_marker_clear+0x1b0/0x1b0 [ 40.900025][ T712] ? __pmd_alloc+0x5a6/0x9a0 [ 40.900047][ T712] ? kasan_save_track+0x4f/0x80 [ 40.900068][ T712] ? kasan_save_track+0x3e/0x80 [ 40.900089][ T712] ? __cfi___pmd_alloc+0x10/0x10 [ 40.900111][ T712] ? mas_preallocate+0x79b/0xc90 [ 40.900133][ T712] ? vma_link+0x12b/0x6c0 [ 40.900154][ T712] ? insert_vm_struct+0x2d5/0x3b0 [ 40.900175][ T712] ? alloc_bprm+0x795/0xb30 [ 40.900192][ T712] ? do_execveat_common+0x199/0xae0 [ 40.900210][ T712] ? x64_sys_call+0x906/0x2ee0 [ 40.900228][ T712] ? mas_destroy+0x2768/0x3050 [ 40.900251][ T712] handle_mm_fault+0x1189/0x1ba0 [ 40.900276][ T712] ? __cfi_handle_mm_fault+0x10/0x10 [ 40.900300][ T712] ? __kernel_text_address+0x11/0x40 [ 40.900328][ T712] ? __cfi_find_vma+0x10/0x10 [ 40.900348][ T712] ? vma_is_secretmem+0x11/0x50 [ 40.900375][ T712] ? check_vma_flags+0x2a5/0x3a0 [ 40.900402][ T712] __get_user_pages+0x114b/0x22d0 [ 40.900430][ T712] ? populate_vma_page_range+0x220/0x220 [ 40.900455][ T712] ? rwsem_read_trylock+0x275/0x5a0 [ 40.900483][ T712] get_user_pages_remote+0x377/0xb80 [ 40.900510][ T712] ? down_read+0x7f/0xe0 [ 40.900533][ T712] ? __cfi_get_user_pages_remote+0x10/0x10 [ 40.900557][ T712] ? __kasan_check_read+0x15/0x20 [ 40.900576][ T712] ? __vm_enough_memory+0x11e/0x380 [ 40.900597][ T712] ? security_vm_enough_memory_mm+0x257/0x270 [ 40.900622][ T712] get_arg_page+0x24c/0x520 [ 40.900648][ T712] ? copy_string_kernel+0x2e0/0x2e0 [ 40.900675][ T712] ? __kasan_check_write+0x18/0x20 [ 40.900694][ T712] ? up_write+0x66/0x280 [ 40.900719][ T712] ? copy_string_kernel+0x20/0x2e0 [ 40.900746][ T712] copy_string_kernel+0x17a/0x2e0 [ 40.900773][ T712] do_execveat_common+0x7de/0xae0 [ 40.900791][ T712] ? getname_flags+0x203/0x6b0 [ 40.900813][ T712] __x64_sys_execveat+0xd2/0xf0 [ 40.900832][ T712] x64_sys_call+0x906/0x2ee0 [ 40.900849][ T712] do_syscall_64+0x57/0xf0 [ 40.900866][ T712] ? clear_bhb_loop+0x50/0xa0 [ 40.900889][ T712] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.900911][ T712] RIP: 0033:0x7fe61279e159 [ 40.900928][ T712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.900944][ T712] RSP: 002b:00007fe6135f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 40.900965][ T712] RAX: ffffffffffffffda RBX: 00007fe612a25fa0 RCX: 00007fe61279e159 [ 40.900981][ T712] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 40.900993][ T712] RBP: 00007fe61283503b R08: 0000000000001000 R09: 0000000000000000 [ 40.901015][ T712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.901027][ T712] R13: 00007fe612a26038 R14: 00007fe612a25fa0 R15: 00007fffa163ec18 [ 40.901043][ T712] [ 41.060100][ T716] netlink: 52 bytes leftover after parsing attributes in process `syz.0.135'. [ 41.197074][ T322] usb 4-1: device descriptor read/8, error -71 [ 41.266055][ T319] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 41.456023][ T319] usb 2-1: Using ep0 maxpacket: 16 [ 41.462274][ T319] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.476076][ T319] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 41.487384][ T319] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 41.496585][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.504628][ T319] usb 2-1: Product: syz [ 41.506035][ T322] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 41.508900][ T319] usb 2-1: Manufacturer: syz [ 41.526027][ T319] usb 2-1: SerialNumber: syz [ 41.531926][ T319] usb 2-1: config 0 descriptor?? [ 41.546051][ T383] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 41.551414][ T322] usb 4-1: device descriptor read/8, error -71 [ 41.688116][ T322] usb 4-1: device descriptor read/8, error -71 [ 42.125591][ T322] usb usb4-port1: unable to enumerate USB device [ 42.247568][ T752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=752 comm=syz.0.144 [ 42.260813][ T752] FAULT_INJECTION: forcing a failure. [ 42.260813][ T752] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 42.274083][ T752] CPU: 0 UID: 0 PID: 752 Comm: syz.0.144 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 42.274115][ T752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.274126][ T752] Call Trace: [ 42.274133][ T752] [ 42.274140][ T752] __dump_stack+0x21/0x30 [ 42.274174][ T752] dump_stack_lvl+0x140/0x1c0 [ 42.274206][ T752] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.274235][ T752] dump_stack+0x19/0x20 [ 42.274262][ T752] should_fail_ex+0x3c2/0x510 [ 42.274289][ T752] should_fail_alloc_page+0xec/0x110 [ 42.274316][ T752] __alloc_pages_noprof+0x1c0/0x7e0 [ 42.274346][ T752] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 42.274381][ T752] ? __kasan_check_write+0x18/0x20 [ 42.274404][ T752] __folio_alloc_noprof+0x14/0x80 [ 42.274436][ T752] folio_prealloc+0x46/0x220 [ 42.274464][ T752] do_pte_missing+0x16af/0x4440 [ 42.274493][ T752] ? __kasan_check_write+0x18/0x20 [ 42.274513][ T752] ? _raw_spin_lock+0x92/0x120 [ 42.274546][ T752] ? pte_marker_clear+0x1b0/0x1b0 [ 42.274572][ T752] ? __pmd_alloc+0x5a6/0x9a0 [ 42.274596][ T752] ? kasan_save_track+0x4f/0x80 [ 42.274620][ T752] ? kasan_save_track+0x3e/0x80 [ 42.274644][ T752] ? mas_preallocate+0x79b/0xc90 [ 42.274668][ T752] ? vma_link+0x12b/0x6c0 [ 42.274691][ T752] ? insert_vm_struct+0x2d5/0x3b0 [ 42.274715][ T752] ? do_execveat_common+0x199/0xae0 [ 42.274735][ T752] ? x64_sys_call+0x906/0x2ee0 [ 42.274755][ T752] ? mas_destroy+0x2768/0x3050 [ 42.274780][ T752] handle_mm_fault+0x1189/0x1ba0 [ 42.274808][ T752] ? __cfi_handle_mm_fault+0x10/0x10 [ 42.274833][ T752] ? __kernel_text_address+0x11/0x40 [ 42.274862][ T752] ? __cfi_find_vma+0x10/0x10 [ 42.274883][ T752] ? vma_is_secretmem+0x11/0x50 [ 42.274921][ T752] ? check_vma_flags+0x2a5/0x3a0 [ 42.274950][ T752] __get_user_pages+0x114b/0x22d0 [ 42.274982][ T752] ? populate_vma_page_range+0x220/0x220 [ 42.275009][ T752] ? rwsem_read_trylock+0x275/0x5a0 [ 42.275039][ T752] get_user_pages_remote+0x377/0xb80 [ 42.275069][ T752] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 42.275097][ T752] ? __cfi_get_user_pages_remote+0x10/0x10 [ 42.275126][ T752] ? get_arg_page+0x22f/0x520 [ 42.275158][ T752] get_arg_page+0x24c/0x520 [ 42.275187][ T752] ? copy_string_kernel+0x2e0/0x2e0 [ 42.275218][ T752] ? __kasan_check_write+0x18/0x20 [ 42.275239][ T752] ? up_write+0x66/0x280 [ 42.275270][ T752] ? copy_string_kernel+0x20/0x2e0 [ 42.275301][ T752] copy_string_kernel+0x17a/0x2e0 [ 42.275333][ T752] do_execveat_common+0x7de/0xae0 [ 42.275354][ T752] ? getname_flags+0x203/0x6b0 [ 42.275381][ T752] __x64_sys_execveat+0xd2/0xf0 [ 42.275402][ T752] x64_sys_call+0x906/0x2ee0 [ 42.275421][ T752] do_syscall_64+0x57/0xf0 [ 42.275440][ T752] ? clear_bhb_loop+0x50/0xa0 [ 42.275464][ T752] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.275487][ T752] RIP: 0033:0x7fc43a59e159 [ 42.275506][ T752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.275523][ T752] RSP: 002b:00007fc43b479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 42.275547][ T752] RAX: ffffffffffffffda RBX: 00007fc43a825fa0 RCX: 00007fc43a59e159 [ 42.275563][ T752] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 42.275577][ T752] RBP: 00007fc43a63503b R08: 0000000000001000 R09: 0000000000000000 [ 42.275592][ T752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.275605][ T752] R13: 00007fc43a826038 R14: 00007fc43a825fa0 R15: 00007ffce2885438 [ 42.275623][ T752] [ 42.692994][ T758] netlink: 52 bytes leftover after parsing attributes in process `syz.0.146'. [ 42.928904][ T383] usb 3-1: unable to get BOS descriptor or descriptor too short [ 42.936670][ T383] usb 3-1: no configurations [ 42.941297][ T383] usb 3-1: can't read configurations, error -22 [ 43.065270][ T772] rust_binder: 771:772 error while translating object: EINVAL [ 43.066070][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 43.066086][ T36] audit: type=1400 audit(1789096443.130:245): avc: denied { map } for pid=771 comm="syz.3.152" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.086297][ T772] rust_binder: Failure in copy_transaction_data: EINVAL [ 43.115218][ T772] rust_binder: 771:772 transaction async to 771:0 failed EINVAL, code 0 size 96-24 [ 43.131732][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 43.149318][ T36] audit: type=1400 audit(1789096443.130:246): avc: denied { set_context_mgr } for pid=771 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 43.189229][ T36] audit: type=1400 audit(1789096443.130:247): avc: denied { call } for pid=771 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 43.220448][ T36] audit: type=1400 audit(1789096443.280:248): avc: denied { bind } for pid=777 comm="syz.2.151" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.242796][ T36] audit: type=1400 audit(1789096443.280:249): avc: denied { node_bind } for pid=777 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 43.288124][ T9] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.299175][ T9] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.322166][ T36] audit: type=1400 audit(1789096443.330:250): avc: denied { read write } for pid=775 comm="syz.3.153" name="max_speed" dev="configfs" ino=6452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 43.355447][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 43.364709][ T784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=784 comm=syz.2.155 [ 43.367965][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 43.383805][ T787] netlink: 52 bytes leftover after parsing attributes in process `syz.3.156'. [ 43.386320][ T36] audit: type=1400 audit(1789096443.330:251): avc: denied { open } for pid=775 comm="syz.3.153" path="/36/config/usb_gadget/g1/max_speed" dev="configfs" ino=6452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 43.419842][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.428435][ T36] audit: type=1400 audit(1789096443.330:252): avc: denied { setattr } for pid=775 comm="syz.3.153" name="/" dev="configfs" ino=1368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.450916][ T9] usb 1-1: config 0 descriptor?? [ 43.573350][ T36] audit: type=1400 audit(1789096443.640:253): avc: denied { create } for pid=791 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.612756][ T36] audit: type=1400 audit(1789096443.640:254): avc: denied { getopt } for pid=791 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.658035][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 43.664386][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 43.673388][ T9] usb 1-1: USB disconnect, device number 11 [ 43.836039][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 43.951203][ T311] usb 2-1: USB disconnect, device number 12 [ 44.187603][ T804] syz.0.162: attempt to access beyond end of device [ 44.187603][ T804] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 44.216681][ T804] bridge_slave_0: default FDB implementation only supports local addresses [ 44.380791][ T812] netlink: 52 bytes leftover after parsing attributes in process `syz.0.165'. [ 44.459155][ T818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=818 comm=syz.0.167 [ 44.472479][ T818] FAULT_INJECTION: forcing a failure. [ 44.472479][ T818] name failslab, interval 1, probability 0, space 0, times 0 [ 44.485552][ T818] CPU: 1 UID: 0 PID: 818 Comm: syz.0.167 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 44.485586][ T818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.485599][ T818] Call Trace: [ 44.485606][ T818] [ 44.485615][ T818] __dump_stack+0x21/0x30 [ 44.485651][ T818] dump_stack_lvl+0x140/0x1c0 [ 44.485681][ T818] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.485713][ T818] dump_stack+0x19/0x20 [ 44.485742][ T818] should_fail_ex+0x3c2/0x510 [ 44.485770][ T818] ? security_prepare_creds+0x66/0x260 [ 44.485795][ T818] should_failslab+0xac/0x100 [ 44.485824][ T818] __kmalloc_noprof+0x69/0x510 [ 44.485846][ T818] ? kasan_save_alloc_info+0x3a/0x50 [ 44.485867][ T818] ? security_prepare_creds+0x66/0x260 [ 44.485890][ T818] ? __kasan_slab_alloc+0x73/0x90 [ 44.485916][ T818] security_prepare_creds+0x66/0x260 [ 44.485940][ T818] prepare_creds+0x46d/0x6b0 [ 44.485964][ T818] prepare_exec_creds+0x1b/0x220 [ 44.485992][ T818] bprm_execve+0xe8/0x13f0 [ 44.486012][ T818] ? copy_string_kernel+0x2e0/0x2e0 [ 44.486042][ T818] ? copy_string_kernel+0x1b7/0x2e0 [ 44.486070][ T818] ? alloc_bprm+0xb30/0xb30 [ 44.486089][ T818] ? __kasan_check_write+0x18/0x20 [ 44.486110][ T818] ? copy_string_kernel+0x28c/0x2e0 [ 44.486142][ T818] do_execveat_common+0x97e/0xae0 [ 44.486163][ T818] ? getname_flags+0x203/0x6b0 [ 44.486187][ T818] __x64_sys_execveat+0xd2/0xf0 [ 44.486208][ T818] x64_sys_call+0x906/0x2ee0 [ 44.486228][ T818] do_syscall_64+0x57/0xf0 [ 44.486249][ T818] ? clear_bhb_loop+0x50/0xa0 [ 44.486274][ T818] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.486298][ T818] RIP: 0033:0x7fc43a59e159 [ 44.486316][ T818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.486333][ T818] RSP: 002b:00007fc43b479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 44.486357][ T818] RAX: ffffffffffffffda RBX: 00007fc43a825fa0 RCX: 00007fc43a59e159 [ 44.486373][ T818] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 44.486396][ T818] RBP: 00007fc43a63503b R08: 0000000000001000 R09: 0000000000000000 [ 44.486412][ T818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.486426][ T818] R13: 00007fc43a826038 R14: 00007fc43a825fa0 R15: 00007ffce2885438 [ 44.486447][ T818] [ 44.770409][ T823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 44.932201][ T829] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 44.978037][ T833] netlink: 52 bytes leftover after parsing attributes in process `syz.2.174'. [ 44.996129][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 45.010966][ T835] syzkaller1: entered promiscuous mode [ 45.016561][ T835] syzkaller1: entered allmulticast mode [ 45.023147][ T835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 45.127918][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 45.137370][ T10] usb 4-1: no configurations [ 45.142114][ T10] usb 4-1: can't read configurations, error -22 [ 45.156042][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 45.162270][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 45.170469][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.180687][ T9] usb 2-1: config 0 has no interface number 0 [ 45.186861][ T9] usb 2-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 45.197763][ T9] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.218144][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 45.236022][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.244028][ T9] usb 2-1: Product: syz [ 45.266028][ T9] usb 2-1: Manufacturer: syz [ 45.270708][ T9] usb 2-1: SerialNumber: syz [ 45.276357][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 45.286244][ T9] usb 2-1: config 0 descriptor?? [ 45.296434][ T9] asix 2-1:0.34: probe with driver asix failed with error -22 [ 45.427047][ T45] usb 3-1: config index 0 descriptor too short (expected 4257, got 161) [ 45.435486][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.446555][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 25500, setting to 1024 [ 45.457806][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 45.466860][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.676703][ T45] usb 3-1: string descriptor 0 read error: -71 [ 45.684362][ T45] uvcvideo 3-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 45.693434][ T45] usb 3-1: Found UVC 1.00 device (046d:0825) [ 45.700440][ T45] uvcvideo 3-1:1.1: No supported video formats found. [ 45.707257][ T45] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 45.715746][ T45] usb 3-1: USB disconnect, device number 10 [ 45.800309][ T843] FAULT_INJECTION: forcing a failure. [ 45.800309][ T843] name failslab, interval 1, probability 0, space 0, times 0 [ 45.813026][ T843] CPU: 1 UID: 0 PID: 843 Comm: syz.0.178 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 45.813059][ T843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.813068][ T843] Call Trace: [ 45.813072][ T843] [ 45.813077][ T843] __dump_stack+0x21/0x30 [ 45.813100][ T843] dump_stack_lvl+0x140/0x1c0 [ 45.813118][ T843] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.813135][ T843] ? mas_prev+0x5f/0xa0 [ 45.813151][ T843] dump_stack+0x19/0x20 [ 45.813168][ T843] should_fail_ex+0x3c2/0x510 [ 45.813185][ T843] should_failslab+0xac/0x100 [ 45.813200][ T843] kmem_cache_alloc_noprof+0x42/0x410 [ 45.813213][ T843] ? __pte_alloc+0x1ae/0x440 [ 45.813225][ T843] ? __anon_vma_prepare+0xec/0x590 [ 45.813238][ T843] __anon_vma_prepare+0xec/0x590 [ 45.813251][ T843] do_pte_missing+0x2bbf/0x4440 [ 45.813267][ T843] ? __kasan_check_write+0x18/0x20 [ 45.813280][ T843] ? _raw_spin_lock+0x92/0x120 [ 45.813297][ T843] ? __cfi__raw_spin_lock+0x10/0x10 [ 45.813316][ T843] ? pte_marker_clear+0x1b0/0x1b0 [ 45.813331][ T843] ? __pmd_alloc+0x5a6/0x9a0 [ 45.813346][ T843] ? kasan_save_track+0x4f/0x80 [ 45.813360][ T843] ? kasan_save_track+0x3e/0x80 [ 45.813374][ T843] ? __cfi___pmd_alloc+0x10/0x10 [ 45.813389][ T843] ? mas_preallocate+0x79b/0xc90 [ 45.813404][ T843] ? vma_link+0x12b/0x6c0 [ 45.813417][ T843] ? insert_vm_struct+0x2d5/0x3b0 [ 45.813431][ T843] ? alloc_bprm+0x795/0xb30 [ 45.813441][ T843] ? do_execveat_common+0x199/0xae0 [ 45.813453][ T843] ? x64_sys_call+0x906/0x2ee0 [ 45.813465][ T843] ? mas_destroy+0x2768/0x3050 [ 45.813479][ T843] handle_mm_fault+0x1189/0x1ba0 [ 45.813495][ T843] ? __cfi_handle_mm_fault+0x10/0x10 [ 45.813510][ T843] ? __kernel_text_address+0x11/0x40 [ 45.813527][ T843] ? __cfi_find_vma+0x10/0x10 [ 45.813539][ T843] ? vma_is_secretmem+0x11/0x50 [ 45.813556][ T843] ? check_vma_flags+0x2a5/0x3a0 [ 45.813573][ T843] __get_user_pages+0x114b/0x22d0 [ 45.813591][ T843] ? populate_vma_page_range+0x220/0x220 [ 45.813607][ T843] ? rwsem_read_trylock+0x275/0x5a0 [ 45.813625][ T843] get_user_pages_remote+0x377/0xb80 [ 45.813642][ T843] ? down_read+0x7f/0xe0 [ 45.813656][ T843] ? __cfi_get_user_pages_remote+0x10/0x10 [ 45.813672][ T843] ? __kasan_check_read+0x15/0x20 [ 45.813684][ T843] ? __vm_enough_memory+0x11e/0x380 [ 45.813697][ T843] ? security_vm_enough_memory_mm+0x257/0x270 [ 45.813713][ T843] get_arg_page+0x24c/0x520 [ 45.813730][ T843] ? copy_string_kernel+0x2e0/0x2e0 [ 45.813748][ T843] ? __kasan_check_write+0x18/0x20 [ 45.813760][ T843] ? up_write+0x66/0x280 [ 45.813777][ T843] ? copy_string_kernel+0x20/0x2e0 [ 45.813794][ T843] copy_string_kernel+0x17a/0x2e0 [ 45.813811][ T843] do_execveat_common+0x7de/0xae0 [ 45.813823][ T843] ? getname_flags+0x203/0x6b0 [ 45.813837][ T843] __x64_sys_execveat+0xd2/0xf0 [ 45.813849][ T843] x64_sys_call+0x906/0x2ee0 [ 45.813860][ T843] do_syscall_64+0x57/0xf0 [ 45.813871][ T843] ? clear_bhb_loop+0x50/0xa0 [ 45.813886][ T843] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.813900][ T843] RIP: 0033:0x7fc43a59e159 [ 45.813912][ T843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.813923][ T843] RSP: 002b:00007fc43b479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 45.813939][ T843] RAX: ffffffffffffffda RBX: 00007fc43a825fa0 RCX: 00007fc43a59e159 [ 45.813949][ T843] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 45.813957][ T843] RBP: 00007fc43a63503b R08: 0000000000001000 R09: 0000000000000000 [ 45.813975][ T843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.813983][ T843] R13: 00007fc43a826038 R14: 00007fc43a825fa0 R15: 00007ffce2885438 [ 45.813994][ T843] [ 46.274081][ T854] overlay: Unknown parameter 'À9' [ 46.376663][ T859] netlink: 52 bytes leftover after parsing attributes in process `syz.3.183'. [ 46.618090][ T868] 8021q: VLANs not supported on lo [ 46.836037][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 46.876044][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 47.006059][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.188154][ T874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 47.246044][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.436038][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 47.486063][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 47.587128][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 47.597081][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 47.607005][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 47.618047][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.624332][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 47.635519][ T10] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 47.644574][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.653713][ T874] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 47.661147][ T874] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 47.668512][ T874] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 47.676746][ T10] pl2303 1-1:1.0: pl2303 converter detected [ 47.684083][ T10] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 47.768561][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.786516][ T45] usb 4-1: no configurations [ 47.791169][ T45] usb 4-1: can't read configurations, error -22 [ 47.792532][ T879] FAULT_INJECTION: forcing a failure. [ 47.792532][ T879] name failslab, interval 1, probability 0, space 0, times 0 [ 47.797932][ T31] usb 2-1: USB disconnect, device number 13 [ 47.816091][ T879] CPU: 0 UID: 0 PID: 879 Comm: syz.1.189 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 47.816126][ T879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.816139][ T879] Call Trace: [ 47.816146][ T879] [ 47.816154][ T879] __dump_stack+0x21/0x30 [ 47.816192][ T879] dump_stack_lvl+0x140/0x1c0 [ 47.816222][ T879] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.816254][ T879] dump_stack+0x19/0x20 [ 47.816281][ T879] should_fail_ex+0x3c2/0x510 [ 47.816306][ T879] ? security_prepare_creds+0x66/0x260 [ 47.816329][ T879] should_failslab+0xac/0x100 [ 47.816357][ T879] __kmalloc_noprof+0x69/0x510 [ 47.816380][ T879] ? kasan_save_alloc_info+0x3a/0x50 [ 47.816401][ T879] ? security_prepare_creds+0x66/0x260 [ 47.816422][ T879] ? __kasan_slab_alloc+0x73/0x90 [ 47.816449][ T879] security_prepare_creds+0x66/0x260 [ 47.816473][ T879] prepare_creds+0x46d/0x6b0 [ 47.816497][ T879] prepare_exec_creds+0x1b/0x220 [ 47.816519][ T879] bprm_execve+0xe8/0x13f0 [ 47.816538][ T879] ? copy_string_kernel+0x2e0/0x2e0 [ 47.816569][ T879] ? copy_string_kernel+0x1b7/0x2e0 [ 47.816597][ T879] ? alloc_bprm+0xb30/0xb30 [ 47.816615][ T879] ? __kasan_check_write+0x18/0x20 [ 47.816637][ T879] ? copy_string_kernel+0x28c/0x2e0 [ 47.816668][ T879] do_execveat_common+0x97e/0xae0 [ 47.816688][ T879] ? getname_flags+0x203/0x6b0 [ 47.816711][ T879] __x64_sys_execveat+0xd2/0xf0 [ 47.816731][ T879] x64_sys_call+0x906/0x2ee0 [ 47.816751][ T879] do_syscall_64+0x57/0xf0 [ 47.816770][ T879] ? clear_bhb_loop+0x50/0xa0 [ 47.816795][ T879] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.816820][ T879] RIP: 0033:0x7f03fcb9e159 [ 47.816839][ T879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.816857][ T879] RSP: 002b:00007f03fb5e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 47.816882][ T879] RAX: ffffffffffffffda RBX: 00007f03fce25fa0 RCX: 00007f03fcb9e159 [ 47.816900][ T879] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 47.816915][ T879] RBP: 00007f03fcc3503b R08: 0000000000001000 R09: 0000000000000000 [ 47.816929][ T879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.816952][ T879] R13: 00007f03fce26038 R14: 00007f03fce25fa0 R15: 00007ffc97025cb8 [ 47.816971][ T879] [ 48.061264][ T9] usb 3-1: device descriptor read/64, error -71 [ 48.176130][ T9] usb usb3-port1: attempt power cycle [ 48.182074][ T874] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 48.190490][ T874] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 48.197679][ T874] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 48.204838][ T874] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 48.213296][ T874] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 48.409738][ T893] netlink: 52 bytes leftover after parsing attributes in process `syz.3.194'. [ 48.496260][ T874] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 48.509535][ T874] pl2303 ttyUSB0: error sending break = -32 [ 48.516035][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 48.536104][ T10] usb 1-1: USB disconnect, device number 12 [ 48.544900][ T10] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 48.558368][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.566044][ T10] pl2303 1-1:1.0: device disconnected [ 48.707168][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.926045][ T64] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 48.956176][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 48.977139][ T9] usb 3-1: device descriptor read/8, error -71 [ 49.056102][ T64] usb 2-1: device descriptor read/64, error -71 [ 49.062065][ T906] FAULT_INJECTION: forcing a failure. [ 49.062065][ T906] name failslab, interval 1, probability 0, space 0, times 0 [ 49.075137][ T906] CPU: 1 UID: 0 PID: 906 Comm: syz.0.199 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 49.075164][ T906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.075172][ T906] Call Trace: [ 49.075176][ T906] [ 49.075182][ T906] __dump_stack+0x21/0x30 [ 49.075205][ T906] dump_stack_lvl+0x140/0x1c0 [ 49.075223][ T906] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.075241][ T906] dump_stack+0x19/0x20 [ 49.075258][ T906] should_fail_ex+0x3c2/0x510 [ 49.075275][ T906] ? security_prepare_creds+0x66/0x260 [ 49.075290][ T906] should_failslab+0xac/0x100 [ 49.075305][ T906] __kmalloc_noprof+0x69/0x510 [ 49.075318][ T906] ? kasan_save_alloc_info+0x3a/0x50 [ 49.075330][ T906] ? security_prepare_creds+0x66/0x260 [ 49.075344][ T906] ? __kasan_slab_alloc+0x73/0x90 [ 49.075359][ T906] security_prepare_creds+0x66/0x260 [ 49.075373][ T906] prepare_creds+0x46d/0x6b0 [ 49.075387][ T906] prepare_exec_creds+0x1b/0x220 [ 49.075401][ T906] bprm_execve+0xe8/0x13f0 [ 49.075413][ T906] ? copy_string_kernel+0x2e0/0x2e0 [ 49.075431][ T906] ? copy_string_kernel+0x1b7/0x2e0 [ 49.075456][ T906] ? alloc_bprm+0xb30/0xb30 [ 49.075467][ T906] ? __kasan_check_write+0x18/0x20 [ 49.075481][ T906] ? copy_string_kernel+0x28c/0x2e0 [ 49.075499][ T906] do_execveat_common+0x97e/0xae0 [ 49.075511][ T906] ? getname_flags+0x203/0x6b0 [ 49.075525][ T906] __x64_sys_execveat+0xd2/0xf0 [ 49.075537][ T906] x64_sys_call+0x906/0x2ee0 [ 49.075548][ T906] do_syscall_64+0x57/0xf0 [ 49.075560][ T906] ? clear_bhb_loop+0x50/0xa0 [ 49.075576][ T906] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.075591][ T906] RIP: 0033:0x7fc43a59e159 [ 49.075603][ T906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.075615][ T906] RSP: 002b:00007fc43b479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 49.075630][ T906] RAX: ffffffffffffffda RBX: 00007fc43a825fa0 RCX: 00007fc43a59e159 [ 49.075640][ T906] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 49.075649][ T906] RBP: 00007fc43a63503b R08: 0000000000001000 R09: 0000000000000000 [ 49.075657][ T906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.075666][ T906] R13: 00007fc43a826038 R14: 00007fc43a825fa0 R15: 00007ffce2885438 [ 49.075676][ T906] [ 49.310734][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 49.321476][ T9] usb 3-1: device descriptor read/8, error -71 [ 49.436195][ T9] usb usb3-port1: unable to enumerate USB device [ 49.456047][ T64] usb 2-1: device descriptor read/64, error -71 [ 49.466357][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 49.472520][ T10] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 49.480757][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.490944][ T10] usb 4-1: config 0 has no interface number 0 [ 49.497070][ T10] usb 4-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 49.507869][ T10] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.522279][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 49.531350][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.539607][ T10] usb 4-1: Product: syz [ 49.543767][ T10] usb 4-1: Manufacturer: syz [ 49.548386][ T10] usb 4-1: SerialNumber: syz [ 49.553531][ T10] usb 4-1: config 0 descriptor?? [ 49.559284][ T10] asix 4-1:0.34: probe with driver asix failed with error -22 [ 49.596049][ T383] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 49.696032][ T64] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 49.826241][ T64] usb 2-1: device descriptor read/64, error -71 [ 50.066055][ T64] usb 2-1: device descriptor read/64, error -71 [ 50.176176][ T64] usb usb2-port1: attempt power cycle [ 50.215901][ T930] netlink: 52 bytes leftover after parsing attributes in process `syz.2.206'. [ 50.256013][ T934] fuse: Unknown parameter 'group' [ 50.283946][ T383] usb 1-1: unable to get BOS descriptor or descriptor too short [ 50.291669][ T383] usb 1-1: no configurations [ 50.300657][ T383] usb 1-1: can't read configurations, error -22 [ 50.309072][ T941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=941 comm=syz.2.209 [ 50.464822][ T952] netlink: 52 bytes leftover after parsing attributes in process `syz.2.215'. [ 50.503666][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 50.503684][ T36] audit: type=1400 audit(1789096450.570:265): avc: denied { setopt } for pid=955 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.535386][ T36] audit: type=1400 audit(1789096450.570:266): avc: denied { ioctl } for pid=955 comm="syz.2.216" path="socket:[7505]" dev="sockfs" ino=7505 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.566034][ T64] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 50.572918][ T36] audit: type=1400 audit(1789096450.570:267): avc: denied { bind } for pid=955 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.597087][ T64] usb 2-1: device descriptor read/8, error -71 [ 50.603645][ T36] audit: type=1400 audit(1789096450.660:268): avc: denied { create } for pid=961 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.634976][ T36] audit: type=1400 audit(1789096450.660:269): avc: denied { execute } for pid=961 comm="syz.2.217" path="/selinux/commit_pending_bools" dev="selinuxfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 50.676024][ T36] audit: type=1400 audit(1789096450.660:270): avc: denied { getopt } for pid=961 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.737039][ T64] usb 2-1: device descriptor read/8, error -71 [ 50.956046][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 50.976042][ T64] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 51.007021][ T64] usb 2-1: device descriptor read/8, error -71 [ 51.029138][ T36] audit: type=1400 audit(1789096451.100:271): avc: denied { ioctl } for pid=967 comm="syz.0.219" path="socket:[8239]" dev="sockfs" ino=8239 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.092637][ T973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=973 comm=syz.0.220 [ 51.127748][ T36] audit: type=1400 audit(1789096451.200:272): avc: denied { read } for pid=974 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.157007][ T64] usb 2-1: device descriptor read/8, error -71 [ 51.266140][ T64] usb usb2-port1: unable to enumerate USB device [ 51.655546][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.664969][ T9] usb 3-1: no configurations [ 51.669662][ T9] usb 3-1: can't read configurations, error -22 [ 51.731402][ T36] audit: type=1400 audit(1789096451.800:273): avc: denied { write } for pid=982 comm="syz.1.223" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.788791][ T986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.801201][ T986] ======================================================= [ 51.801201][ T986] WARNING: The mand mount option has been deprecated and [ 51.801201][ T986] and is ignored by this kernel. Remove the mand [ 51.801201][ T986] option from the mount to silence this warning. [ 51.801201][ T986] ======================================================= [ 51.920021][ T31] usb 4-1: USB disconnect, device number 15 [ 51.977231][ T991] netlink: 52 bytes leftover after parsing attributes in process `syz.0.226'. [ 52.236045][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 52.316049][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 52.387057][ T45] usb 1-1: config 240 has an invalid interface number: 170 but max is 0 [ 52.395447][ T45] usb 1-1: config 240 has no interface number 0 [ 52.416017][ T45] usb 1-1: config 240 interface 170 has no altsetting 0 [ 52.427053][ T45] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice= 3.6a [ 52.436280][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.444326][ T45] usb 1-1: Product: syz [ 52.449702][ T45] usb 1-1: Manufacturer: syz [ 52.454327][ T45] usb 1-1: SerialNumber: syz [ 52.468359][ T1003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1003 comm=syz.3.230 [ 52.486110][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 52.500671][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 52.513541][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 52.530528][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=1030, bcdDevice= 0.40 [ 52.539652][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.547704][ T9] usb 3-1: Product: ꗬ외읛궽맙鷨뙆䅜楈̴坁댋쒨鸩牤ꀨ벳ꅧ槳鞃頉並鼣ẏ劵Ч阨槣ၴ嚦䀩ﱏ㵵袙௣붮픰䑶泡젌训ꏩ塵†䈟鬓꠆彑灉㳎鯃贶㔈ᛢ싻ぷ勯☆ [ 52.569338][ T9] usb 3-1: Manufacturer: ᐇ [ 52.573937][ T9] usb 3-1: SerialNumber: syz [ 52.668417][ T993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.677117][ T993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.687395][ T45] usb_ehset_test 1-1:240.170: probe with driver usb_ehset_test failed with error -32 [ 52.746040][ T322] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 52.783046][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 52.792623][ T9] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 52.803960][ T9] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 52.813718][ T9] usb 3-1: USB disconnect, device number 16 [ 52.824481][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.876044][ T322] usb 4-1: device descriptor read/64, error -71 [ 52.887246][ T383] usb 1-1: USB disconnect, device number 15 [ 52.956044][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 53.126030][ T322] usb 4-1: device descriptor read/64, error -71 [ 53.386048][ T322] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 53.458589][ T36] audit: type=1400 audit(1789096453.530:274): avc: denied { read } for pid=1012 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.536040][ T322] usb 4-1: device descriptor read/64, error -71 [ 53.586034][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 53.629702][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 53.638334][ T45] usb 2-1: no configurations [ 53.642939][ T45] usb 2-1: can't read configurations, error -22 [ 53.736801][ T1019] netlink: 52 bytes leftover after parsing attributes in process `syz.1.237'. [ 53.756280][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 53.763881][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 53.773426][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.776098][ T322] usb 4-1: device descriptor read/64, error -71 [ 53.783657][ T9] usb 3-1: config 0 has no interface number 0 [ 53.799064][ T9] usb 3-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 53.810180][ T9] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.824821][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 53.834188][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.842472][ T9] usb 3-1: Product: syz [ 53.846924][ T9] usb 3-1: Manufacturer: syz [ 53.852167][ T9] usb 3-1: SerialNumber: syz [ 53.858540][ T9] usb 3-1: config 0 descriptor?? [ 53.866726][ T9] asix 3-1:0.34: probe with driver asix failed with error -22 [ 53.906112][ T322] usb usb4-port1: attempt power cycle [ 54.172645][ T1028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1028 comm=syz.1.240 [ 54.246038][ T322] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 54.277087][ T322] usb 4-1: device descriptor read/8, error -71 [ 54.407076][ T322] usb 4-1: device descriptor read/8, error -71 [ 54.476037][ T45] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 54.616110][ T311] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 54.627225][ T45] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.637210][ T45] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.650064][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 54.656705][ T322] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 54.664305][ T45] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 54.673440][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.682004][ T45] usb 2-1: config 0 descriptor?? [ 54.690356][ T322] usb 4-1: device descriptor read/8, error -71 [ 54.766726][ T311] usb 1-1: not running at top speed; connect to a high speed hub [ 54.775600][ T311] usb 1-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 54.785913][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.796252][ T311] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 54.805324][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.813359][ T311] usb 1-1: Product: syz [ 54.817597][ T311] usb 1-1: Manufacturer: syz [ 54.822226][ T311] usb 1-1: SerialNumber: syz [ 54.828008][ T322] usb 4-1: device descriptor read/8, error -71 [ 54.946210][ T322] usb usb4-port1: unable to enumerate USB device [ 55.049697][ T311] usb 1-1: 0:1 : does not exist [ 55.054614][ T311] usb 1-1: unit 4 not found! [ 55.059247][ T311] usb 1-1: unit 14 not found! [ 55.066921][ T311] usb 1-1: USB disconnect, device number 16 [ 55.082930][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.101639][ T45] input: HID 1020:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1020:0006.0004/input/input6 [ 55.114863][ T45] belkin 0003:1020:0006.0004: input,hidraw0: USB HID v0.00 Joystick [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 55.302239][ T9] usb 2-1: USB disconnect, device number 19 [ 55.917040][ T311] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 56.411650][ T9] usb 3-1: USB disconnect, device number 17 [ 56.554905][ T322] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 56.718032][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.730742][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.740989][ T322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.754223][ T322] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.763482][ T322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.773088][ T322] usb 2-1: config 0 descriptor?? [ 56.796053][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 56.803696][ T383] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 56.936102][ T383] usb 1-1: device descriptor read/64, error -71 [ 56.957136][ T9] usb 3-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 56.967575][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 47, changing to 7 [ 56.978510][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 26176, setting to 1024 [ 56.996057][ T9] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 57.005122][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.017666][ T9] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 57.070174][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 57.079824][ T311] usb 4-1: no configurations [ 57.084653][ T311] usb 4-1: can't read configurations, error -22 [ 57.176056][ T383] usb 1-1: device descriptor read/64, error -71 [ 57.201685][ T322] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 57.220002][ T9] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 57.235050][ T322] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 57.236632][ T9] usb 3-1: USB disconnect, device number 18 [ 57.267487][ T36] audit: type=1400 audit(1789096457.330:275): avc: denied { bind } for pid=1066 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.426045][ T383] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 57.556034][ T383] usb 1-1: device descriptor read/64, error -71 [ 57.735706][ T1082] netlink: 52 bytes leftover after parsing attributes in process `syz.2.254'. [ 57.746802][ T311] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 57.764770][ T1084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1084 comm=syz.2.255 [ 57.777858][ T1084] FAULT_INJECTION: forcing a failure. [ 57.777858][ T1084] name failslab, interval 1, probability 0, space 0, times 0 [ 57.790588][ T1084] CPU: 0 UID: 0 PID: 1084 Comm: syz.2.255 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 57.790621][ T1084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.790634][ T1084] Call Trace: [ 57.790641][ T1084] [ 57.790649][ T1084] __dump_stack+0x21/0x30 [ 57.790685][ T1084] dump_stack_lvl+0x140/0x1c0 [ 57.790714][ T1084] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.790746][ T1084] ? futex_wait+0x2b8/0x7c0 [ 57.790767][ T1084] ? __cfi_futex_wait+0x10/0x10 [ 57.790786][ T1084] dump_stack+0x19/0x20 [ 57.790813][ T1084] should_fail_ex+0x3c2/0x510 [ 57.790838][ T1084] should_failslab+0xac/0x100 [ 57.790864][ T1084] kmem_cache_alloc_noprof+0x42/0x410 [ 57.790886][ T1084] ? do_futex+0x32a/0x510 [ 57.790911][ T1084] ? getname_flags+0xcc/0x6b0 [ 57.790938][ T1084] getname_flags+0xcc/0x6b0 [ 57.790962][ T1084] getname+0x1b/0x30 [ 57.790984][ T1084] do_sys_openat2+0xda/0x1d0 [ 57.791016][ T1084] ? fput+0x1a4/0x230 [ 57.791043][ T1084] ? do_sys_open+0x100/0x100 [ 57.791074][ T1084] __x64_sys_openat+0x13a/0x170 [ 57.791102][ T1084] x64_sys_call+0xe69/0x2ee0 [ 57.791121][ T1084] do_syscall_64+0x57/0xf0 [ 57.791138][ T1084] ? clear_bhb_loop+0x50/0xa0 [ 57.791164][ T1084] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.791188][ T1084] RIP: 0033:0x7fe61279e159 [ 57.791215][ T1084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.791234][ T1084] RSP: 002b:00007fe6135f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.791260][ T1084] RAX: ffffffffffffffda RBX: 00007fe612a25fa0 RCX: 00007fe61279e159 [ 57.791276][ T1084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 57.791292][ T1084] RBP: 00007fe61283503b R08: 0000000000000000 R09: 0000000000000000 [ 57.791306][ T1084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.791319][ T1084] R13: 00007fe612a26038 R14: 00007fe612a25fa0 R15: 00007fffa163ec18 [ 57.791338][ T1084] [ 57.876078][ T311] usb 4-1: device descriptor read/64, error -71 [ 57.879672][ T383] usb 1-1: device descriptor read/64, error -71 [ 58.019424][ T36] audit: type=1400 audit(1789096458.090:276): avc: denied { mounton } for pid=1085 comm="syz.2.256" path="/68/dev/sda1" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.019581][ T1086] binder: Unknown parameter 'mea{ure' [ 58.044456][ T1087] syz.2.256 (1087): attempted to duplicate a private mapping with mremap. This is not supported. [ 58.116133][ T383] usb usb1-port1: attempt power cycle [ 58.136062][ T311] usb 4-1: device descriptor read/64, error -71 [ 58.246112][ T311] usb usb4-port1: attempt power cycle [ 58.406139][ C1] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 58.456083][ T383] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 58.477540][ T383] usb 1-1: device descriptor read/8, error -71 [ 58.546064][ T322] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 58.586094][ T311] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 58.607113][ T311] usb 4-1: device descriptor read/8, error -71 [ 58.617095][ T383] usb 1-1: device descriptor read/8, error -71 [ 58.676048][ T322] usb 2-1: device descriptor read/64, error -32 [ 58.737081][ T311] usb 4-1: device descriptor read/8, error -71 [ 58.866452][ T383] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 58.897750][ T383] usb 1-1: device descriptor read/8, error -71 [ 58.916137][ T322] usb 2-1: device descriptor read/64, error -32 [ 58.976061][ T311] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 58.997118][ T311] usb 4-1: device descriptor read/8, error -71 [ 59.047183][ T383] usb 1-1: device descriptor read/8, error -71 [ 59.127117][ T311] usb 4-1: device descriptor read/8, error -71 [ 59.146033][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 59.156042][ T322] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 59.156245][ T383] usb usb1-port1: unable to enumerate USB device [ 59.236102][ T311] usb usb4-port1: unable to enumerate USB device [ 59.286038][ T322] usb 2-1: device descriptor read/64, error -32 [ 59.296123][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 59.302501][ T45] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 59.310831][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.321034][ T45] usb 3-1: config 0 has no interface number 0 [ 59.327154][ T45] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 59.337165][ T45] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.351419][ T45] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 59.360490][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.368491][ T45] usb 3-1: Product: syz [ 59.372684][ T45] usb 3-1: Manufacturer: syz [ 59.377294][ T45] usb 3-1: SerialNumber: syz [ 59.382511][ T45] usb 3-1: config 0 descriptor?? [ 59.387787][ T1094] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 59.395512][ T45] asix 3-1:0.34: probe with driver asix failed with error -22 [ 59.508879][ T1099] FAULT_INJECTION: forcing a failure. [ 59.508879][ T1099] name failslab, interval 1, probability 0, space 0, times 0 [ 59.521776][ T1099] CPU: 1 UID: 0 PID: 1099 Comm: syz.1.260 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 59.521810][ T1099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.521823][ T1099] Call Trace: [ 59.521830][ T1099] [ 59.521837][ T1099] __dump_stack+0x21/0x30 [ 59.521873][ T1099] dump_stack_lvl+0x140/0x1c0 [ 59.521901][ T1099] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.521929][ T1099] ? vfs_write+0xbcf/0xfd0 [ 59.521952][ T1099] dump_stack+0x19/0x20 [ 59.521980][ T1099] should_fail_ex+0x3c2/0x510 [ 59.522006][ T1099] should_failslab+0xac/0x100 [ 59.522031][ T1099] __kmalloc_cache_noprof+0x41/0x470 [ 59.522052][ T1099] ? __se_sys_timerfd_create+0x1c6/0x590 [ 59.522083][ T1099] __se_sys_timerfd_create+0x1c6/0x590 [ 59.522113][ T1099] ? xfd_validate_state+0x68/0x140 [ 59.522143][ T1099] ? __x64_sys_timerfd_create+0x80/0x80 [ 59.522174][ T1099] ? __kasan_check_write+0x18/0x20 [ 59.522196][ T1099] __x64_sys_timerfd_create+0x5f/0x80 [ 59.522226][ T1099] x64_sys_call+0x2e54/0x2ee0 [ 59.522244][ T1099] do_syscall_64+0x57/0xf0 [ 59.522263][ T1099] ? clear_bhb_loop+0x50/0xa0 [ 59.522286][ T1099] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.522308][ T1099] RIP: 0033:0x7f03fcb9e159 [ 59.522325][ T1099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.522342][ T1099] RSP: 002b:00007f03fb5e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 59.522365][ T1099] RAX: ffffffffffffffda RBX: 00007f03fce25fa0 RCX: 00007f03fcb9e159 [ 59.522381][ T1099] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000007 [ 59.522394][ T1099] RBP: 00007f03fcc3503b R08: 0000000000000000 R09: 0000000000000000 [ 59.522407][ T1099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.522420][ T1099] R13: 00007f03fce26038 R14: 00007f03fce25fa0 R15: 00007ffc97025cb8 [ 59.522437][ T1099] [ 59.750312][ T1102] netlink: 36 bytes leftover after parsing attributes in process `syz.1.261'. [ 59.777602][ T1105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.262'. [ 59.789022][ T36] audit: type=1400 audit(1789096459.860:277): avc: denied { write } for pid=1104 comm="syz.0.263" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.812188][ T36] audit: type=1400 audit(1789096459.860:278): avc: denied { open } for pid=1104 comm="syz.0.263" path="/84/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.835951][ T36] audit: type=1400 audit(1789096459.880:279): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 60.096033][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 60.246040][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 60.252338][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.263252][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.276075][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 60.285104][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.293696][ T9] usb 1-1: config 0 descriptor?? [ 60.346401][ T31] usb 2-1: USB disconnect, device number 20 [ 60.701762][ T9] kye 0003:0458:5015.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 60.713629][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.720500][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.727299][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.734017][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.740799][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.747536][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.754264][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.760992][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.767713][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.774393][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.781106][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.787828][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.794522][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.801283][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.808131][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.814844][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.821553][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.828263][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.834941][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.841652][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.848357][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.855030][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.861731][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.868443][ T9] kye 0003:0458:5015.0006: unknown main item tag 0x0 [ 60.875801][ T9] kye 0003:0458:5015.0006: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 60.886740][ T9] kye 0003:0458:5015.0006: tablet-enabling feature report not found [ 60.894765][ T9] kye 0003:0458:5015.0006: tablet enabling failed [ 60.905542][ T9] usb 1-1: USB disconnect, device number 21 [ 61.313141][ T1147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1147 comm=syz.3.269 [ 61.333767][ T1147] FAULT_INJECTION: forcing a failure. [ 61.333767][ T1147] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.359262][ T1147] CPU: 1 UID: 0 PID: 1147 Comm: syz.3.269 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 61.359299][ T1147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.359313][ T1147] Call Trace: [ 61.359320][ T1147] [ 61.359328][ T1147] __dump_stack+0x21/0x30 [ 61.359366][ T1147] dump_stack_lvl+0x140/0x1c0 [ 61.359397][ T1147] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.359431][ T1147] dump_stack+0x19/0x20 [ 61.359461][ T1147] should_fail_ex+0x3c2/0x510 [ 61.359489][ T1147] should_fail+0xf/0x20 [ 61.359514][ T1147] should_fail_usercopy+0x1e/0x30 [ 61.359543][ T1147] strncpy_from_user+0x29/0x280 [ 61.359570][ T1147] getname_flags+0x106/0x6b0 [ 61.359597][ T1147] getname+0x1b/0x30 [ 61.359619][ T1147] do_sys_openat2+0xda/0x1d0 [ 61.359649][ T1147] ? fput+0x1a4/0x230 [ 61.359685][ T1147] ? do_sys_open+0x100/0x100 [ 61.359718][ T1147] __x64_sys_openat+0x13a/0x170 [ 61.359750][ T1147] x64_sys_call+0xe69/0x2ee0 [ 61.359771][ T1147] do_syscall_64+0x57/0xf0 [ 61.359790][ T1147] ? clear_bhb_loop+0x50/0xa0 [ 61.359817][ T1147] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.359842][ T1147] RIP: 0033:0x7fbf0a79e159 [ 61.359861][ T1147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.359881][ T1147] RSP: 002b:00007fbf0b67a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 61.359907][ T1147] RAX: ffffffffffffffda RBX: 00007fbf0aa25fa0 RCX: 00007fbf0a79e159 [ 61.359925][ T1147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 61.359940][ T1147] RBP: 00007fbf0a83503b R08: 0000000000000000 R09: 0000000000000000 [ 61.359954][ T1147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.359968][ T1147] R13: 00007fbf0aa26038 R14: 00007fbf0aa25fa0 R15: 00007fff73f99d68 [ 61.359987][ T1147] [ 61.846384][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 61.913846][ T383] usb 3-1: USB disconnect, device number 19 [ 61.996054][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 62.467369][ T36] audit: type=1326 audit(1789096462.540:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1155 comm="syz.0.271" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43a59e159 code=0x7fc00000 [ 62.476036][ T9] usb 2-1: device descriptor read/64, error -71 [ 62.746060][ T9] usb 2-1: device descriptor read/64, error -71 [ 62.776072][ T311] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 62.887119][ T36] audit: type=1400 audit(1789096462.960:281): avc: denied { shutdown } for pid=1186 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.924096][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 62.939190][ T45] usb 4-1: no configurations [ 62.943845][ T45] usb 4-1: can't read configurations, error -22 [ 62.950258][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 62.966752][ T311] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.986037][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 62.986037][ T311] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 62.986071][ T311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 63.031556][ T311] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 63.041859][ T1195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1195 comm=syz.2.281 [ 63.050810][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.054759][ T1195] FAULT_INJECTION: forcing a failure. [ 63.054759][ T1195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.076062][ T311] usb 1-1: config 0 descriptor?? [ 63.080228][ T1195] CPU: 0 UID: 0 PID: 1195 Comm: syz.2.281 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 63.080261][ T1195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.080275][ T1195] Call Trace: [ 63.080281][ T1195] [ 63.080289][ T1195] __dump_stack+0x21/0x30 [ 63.080321][ T1195] dump_stack_lvl+0x140/0x1c0 [ 63.080349][ T1195] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.080379][ T1195] dump_stack+0x19/0x20 [ 63.080406][ T1195] should_fail_ex+0x3c2/0x510 [ 63.080431][ T1195] should_fail+0xf/0x20 [ 63.080453][ T1195] should_fail_usercopy+0x1e/0x30 [ 63.080477][ T1195] strncpy_from_user+0x29/0x280 [ 63.080502][ T1195] getname_flags+0x106/0x6b0 [ 63.080525][ T1195] getname+0x1b/0x30 [ 63.080546][ T1195] do_sys_openat2+0xda/0x1d0 [ 63.080573][ T1195] ? fput+0x1a4/0x230 [ 63.080597][ T1195] ? do_sys_open+0x100/0x100 [ 63.080625][ T1195] __x64_sys_openat+0x13a/0x170 [ 63.080653][ T1195] x64_sys_call+0xe69/0x2ee0 [ 63.080671][ T1195] do_syscall_64+0x57/0xf0 [ 63.080690][ T1195] ? clear_bhb_loop+0x50/0xa0 [ 63.080713][ T1195] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.080743][ T1195] RIP: 0033:0x7fe61279e159 [ 63.080760][ T1195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.080778][ T1195] RSP: 002b:00007fe6135f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 63.080801][ T1195] RAX: ffffffffffffffda RBX: 00007fe612a25fa0 RCX: 00007fe61279e159 [ 63.080816][ T1195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 63.080830][ T1195] RBP: 00007fe61283503b R08: 0000000000000000 R09: 0000000000000000 [ 63.080843][ T1195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.080856][ T1195] R13: 00007fe612a26038 R14: 00007fe612a25fa0 R15: 00007fffa163ec18 [ 63.080874][ T1195] [ 63.136032][ T9] usb 2-1: device descriptor read/64, error -71 [ 63.321186][ T36] audit: type=1400 audit(1789096463.380:282): avc: denied { write } for pid=1196 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.516021][ T9] usb 2-1: device descriptor read/64, error -71 [ 63.545281][ T1185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.564031][ T1185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.581024][ T311] konepure 0003:1E7D:2DBE.0007: unknown main item tag 0x0 [ 63.593243][ T311] konepure 0003:1E7D:2DBE.0007: unknown main item tag 0x0 [ 63.600716][ T311] konepure 0003:1E7D:2DBE.0007: unknown main item tag 0x0 [ 63.608078][ T311] konepure 0003:1E7D:2DBE.0007: unknown main item tag 0x0 [ 63.615291][ T311] konepure 0003:1E7D:2DBE.0007: unknown main item tag 0x0 [ 63.622814][ T311] konepure 0003:1E7D:2DBE.0007: unknown main item tag 0x0 [ 63.630210][ T311] konepure 0003:1E7D:2DBE.0007: unbalanced collection at end of report description [ 63.637234][ T9] usb usb2-port1: attempt power cycle [ 63.640031][ T311] konepure 0003:1E7D:2DBE.0007: parse failed [ 63.651142][ T311] konepure 0003:1E7D:2DBE.0007: probe with driver konepure failed with error -22 [ 63.809031][ T311] usb 1-1: USB disconnect, device number 22 [ 63.996042][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 64.027135][ T9] usb 2-1: device descriptor read/8, error -71 [ 64.157007][ T9] usb 2-1: device descriptor read/8, error -71 [ 64.329175][ T36] audit: type=1400 audit(1789096464.400:283): avc: denied { bind } for pid=1213 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.382421][ T311] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 64.396034][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 64.410265][ T36] audit: type=1400 audit(1789096464.480:284): avc: denied { map } for pid=1225 comm="syz.2.289" path="pipe:[1614]" dev="pipefs" ino=1614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 64.428838][ T9] usb 2-1: device descriptor read/8, error -71 [ 64.469130][ T1228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1228 comm=syz.2.290 [ 64.482169][ T1228] FAULT_INJECTION: forcing a failure. [ 64.482169][ T1228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.495308][ T1228] CPU: 1 UID: 0 PID: 1228 Comm: syz.2.290 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 64.495340][ T1228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.495353][ T1228] Call Trace: [ 64.495359][ T1228] [ 64.495367][ T1228] __dump_stack+0x21/0x30 [ 64.495399][ T1228] dump_stack_lvl+0x140/0x1c0 [ 64.495425][ T1228] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.495454][ T1228] dump_stack+0x19/0x20 [ 64.495480][ T1228] should_fail_ex+0x3c2/0x510 [ 64.495505][ T1228] should_fail+0xf/0x20 [ 64.495526][ T1228] should_fail_usercopy+0x1e/0x30 [ 64.495554][ T1228] strncpy_from_user+0x29/0x280 [ 64.495577][ T1228] getname_flags+0x106/0x6b0 [ 64.495601][ T1228] getname+0x1b/0x30 [ 64.495622][ T1228] do_sys_openat2+0xda/0x1d0 [ 64.495648][ T1228] ? fput+0x1a4/0x230 [ 64.495673][ T1228] ? do_sys_open+0x100/0x100 [ 64.495701][ T1228] __x64_sys_openat+0x13a/0x170 [ 64.495728][ T1228] x64_sys_call+0xe69/0x2ee0 [ 64.495746][ T1228] do_syscall_64+0x57/0xf0 [ 64.495764][ T1228] ? clear_bhb_loop+0x50/0xa0 [ 64.495787][ T1228] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.495809][ T1228] RIP: 0033:0x7fe61279e159 [ 64.495827][ T1228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.495843][ T1228] RSP: 002b:00007fe6135f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.495866][ T1228] RAX: ffffffffffffffda RBX: 00007fe612a25fa0 RCX: 00007fe61279e159 [ 64.495881][ T1228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 64.495895][ T1228] RBP: 00007fe61283503b R08: 0000000000000000 R09: 0000000000000000 [ 64.495907][ T1228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.495920][ T1228] R13: 00007fe612a26038 R14: 00007fe612a25fa0 R15: 00007fffa163ec18 [ 64.495937][ T1228] [ 64.567123][ T9] usb 2-1: device descriptor read/8, error -71 [ 64.596020][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 64.597130][ T311] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 64.616035][ T383] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 64.630765][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.716288][ T9] usb usb2-port1: unable to enumerate USB device [ 64.719091][ T311] usb 4-1: config 0 has no interface number 0 [ 64.731491][ T311] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 64.741538][ T36] audit: type=1400 audit(1789096464.800:285): avc: denied { create } for pid=1229 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 64.761124][ T311] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.776871][ T36] audit: type=1400 audit(1789096464.850:286): avc: denied { append } for pid=1232 comm="syz.2.293" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.806108][ T36] audit: type=1400 audit(1789096464.850:287): avc: denied { mounton } for pid=1235 comm="syz.1.294" path="/51/file0" dev="incremental-fs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.833920][ T311] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 64.841301][ T36] audit: type=1400 audit(1789096464.850:288): avc: denied { getattr } for pid=1235 comm="syz.1.294" name="/" dev="incremental-fs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.944533][ T1134] bridge_slave_1: left allmulticast mode [ 64.957182][ T1134] bridge_slave_1: left promiscuous mode [ 64.969655][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.986920][ T1134] bridge_slave_0: left allmulticast mode [ 64.998136][ T1134] bridge_slave_0: left promiscuous mode [ 65.010635][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.153786][ T1134] veth1_macvtap: left promiscuous mode [ 65.166320][ T1134] veth0_vlan: left promiscuous mode [ 65.186534][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.195036][ T311] usb 4-1: Product: syz [ 65.199301][ T311] usb 4-1: Manufacturer: syz [ 65.203981][ T311] usb 4-1: SerialNumber: syz [ 65.209451][ T311] usb 4-1: config 0 descriptor?? [ 65.214773][ T1207] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 65.222889][ T311] asix 4-1:0.34: probe with driver asix failed with error -22 [ 65.350413][ T36] audit: type=1400 audit(1789096465.420:289): avc: denied { mounton } for pid=1242 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.389853][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.397059][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.404124][ T1242] bridge_slave_0: entered allmulticast mode [ 65.410552][ T1242] bridge_slave_0: entered promiscuous mode [ 65.416973][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.424028][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.431183][ T1242] bridge_slave_1: entered allmulticast mode [ 65.437738][ T1242] bridge_slave_1: entered promiscuous mode [ 65.487564][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.494636][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.501924][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.508981][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.530204][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.537630][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.547068][ T516] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.554150][ T516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.563452][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.570529][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.607105][ T1242] veth0_vlan: entered promiscuous mode [ 65.625300][ T1242] veth1_macvtap: entered promiscuous mode [ 65.789393][ T383] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.797452][ T383] usb 1-1: no configurations [ 65.802068][ T383] usb 1-1: can't read configurations, error -22 [ 65.916115][ T9] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 66.067243][ T9] usb 5-1: descriptor type invalid, skip [ 66.072947][ T9] usb 5-1: No LPM exit latency info found, disabling LPM. [ 66.081254][ T9] usb 5-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 66.091930][ T9] usb 5-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 66.103507][ T9] usb 5-1: string descriptor 0 read error: -22 [ 66.109949][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd [ 66.119346][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.350827][ T45] usb 5-1: USB disconnect, device number 2 [ 66.406177][ T311] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 66.436320][ T383] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 66.566049][ T383] usb 1-1: device descriptor read/64, error -71 [ 66.568125][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.583537][ T311] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 66.592689][ T311] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 66.601083][ T311] usb 3-1: Product: syz [ 66.605248][ T311] usb 3-1: Manufacturer: syz [ 66.611708][ T311] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 66.706037][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.806036][ T383] usb 1-1: device descriptor read/64, error -71 [ 66.813515][ T311] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 66.823283][ T311] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 66.832146][ T311] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 66.839444][ T45] usb 5-1: device descriptor read/64, error -71 [ 66.847312][ T311] usb 3-1: USB disconnect, device number 20 [ 66.916117][ T383] usb usb1-port1: attempt power cycle [ 67.076042][ T45] usb 5-1: device descriptor read/64, error -71 [ 67.129570][ T311] usb 4-1: USB disconnect, device number 26 [ 67.142291][ T1269] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 67.256101][ T383] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 67.297172][ T383] usb 1-1: device descriptor read/8, error -71 [ 67.316080][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.437470][ T383] usb 1-1: device descriptor read/8, error -71 [ 67.446176][ T45] usb 5-1: device descriptor read/64, error -71 [ 67.596243][ T311] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 67.686065][ T383] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 67.696084][ T45] usb 5-1: device descriptor read/64, error -71 [ 67.717103][ T383] usb 1-1: device descriptor read/8, error -71 [ 67.726173][ T311] usb 3-1: device descriptor read/64, error -71 [ 67.806232][ T45] usb usb5-port1: attempt power cycle [ 67.847153][ T383] usb 1-1: device descriptor read/8, error -71 [ 67.966062][ T383] usb usb1-port1: unable to enumerate USB device [ 67.986035][ T311] usb 3-1: device descriptor read/64, error -71 [ 68.156074][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 68.177149][ T45] usb 5-1: device descriptor read/8, error -71 [ 68.226050][ T311] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 68.306999][ T45] usb 5-1: device descriptor read/8, error -71 [ 68.336034][ T383] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 68.356025][ T311] usb 3-1: device descriptor read/64, error -71 [ 68.466088][ T383] usb 4-1: device descriptor read/64, error -71 [ 68.546043][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 68.567022][ T45] usb 5-1: device descriptor read/8, error -71 [ 68.596061][ T311] usb 3-1: device descriptor read/64, error -71 [ 68.677971][ T1281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1281 comm=syz.4.307 [ 68.690847][ T1281] FAULT_INJECTION: forcing a failure. [ 68.690847][ T1281] name failslab, interval 1, probability 0, space 0, times 0 [ 68.703580][ T1281] CPU: 1 UID: 0 PID: 1281 Comm: syz.4.307 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 68.703614][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.703628][ T1281] Call Trace: [ 68.703635][ T1281] [ 68.703645][ T1281] __dump_stack+0x21/0x30 [ 68.703699][ T1281] dump_stack_lvl+0x140/0x1c0 [ 68.703728][ T1281] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.703758][ T1281] ? futex_wait+0x2b8/0x7c0 [ 68.703780][ T1281] ? __cfi_futex_wait+0x10/0x10 [ 68.703801][ T1281] dump_stack+0x19/0x20 [ 68.703830][ T1281] should_fail_ex+0x3c2/0x510 [ 68.703856][ T1281] should_failslab+0xac/0x100 [ 68.703883][ T1281] kmem_cache_alloc_noprof+0x42/0x410 [ 68.703907][ T1281] ? do_futex+0x32a/0x510 [ 68.703934][ T1281] ? getname_flags+0xcc/0x6b0 [ 68.703958][ T1281] getname_flags+0xcc/0x6b0 [ 68.703981][ T1281] getname+0x1b/0x30 [ 68.704002][ T1281] do_sys_openat2+0xda/0x1d0 [ 68.704031][ T1281] ? fput+0x1a4/0x230 [ 68.704058][ T1281] ? do_sys_open+0x100/0x100 [ 68.704087][ T1281] ? __cfi_ksys_write+0x10/0x10 [ 68.704111][ T1281] __x64_sys_openat+0x13a/0x170 [ 68.704141][ T1281] x64_sys_call+0xe69/0x2ee0 [ 68.704161][ T1281] do_syscall_64+0x57/0xf0 [ 68.704179][ T1281] ? clear_bhb_loop+0x50/0xa0 [ 68.704207][ T1281] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.704231][ T1281] RIP: 0033:0x7f16fa39e159 [ 68.704248][ T1281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.704265][ T1281] RSP: 002b:00007f16fb26b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 68.704289][ T1281] RAX: ffffffffffffffda RBX: 00007f16fa625fa0 RCX: 00007f16fa39e159 [ 68.704305][ T1281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 68.704318][ T1281] RBP: 00007f16fa43503b R08: 0000000000000000 R09: 0000000000000000 [ 68.704333][ T1281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.704347][ T1281] R13: 00007f16fa626038 R14: 00007f16fa625fa0 R15: 00007fffd2f41f48 [ 68.704365][ T1281] [ 68.704796][ T45] usb 5-1: device descriptor read/8, error -71 [ 68.726228][ T383] usb 4-1: device descriptor read/64, error -71 [ 68.726727][ T311] usb usb3-port1: attempt power cycle [ 68.976017][ T383] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 69.036154][ T45] usb usb5-port1: unable to enumerate USB device [ 69.048754][ T1288] netlink: 52 bytes leftover after parsing attributes in process `syz.0.310'. [ 69.136033][ T383] usb 4-1: device descriptor read/64, error -71 [ 69.163875][ T1296] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 69.173167][ T1297] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 69.266042][ T311] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 69.287051][ T311] usb 3-1: device descriptor read/8, error -71 [ 69.368560][ T1306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1306 comm=syz.0.316 [ 69.380948][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 69.381537][ T1306] FAULT_INJECTION: forcing a failure. [ 69.381537][ T1306] name failslab, interval 1, probability 0, space 0, times 0 [ 69.401189][ T383] usb 4-1: device descriptor read/64, error -71 [ 69.401194][ T1306] CPU: 1 UID: 0 PID: 1306 Comm: syz.0.316 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 69.401225][ T1306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.401239][ T1306] Call Trace: [ 69.401246][ T1306] [ 69.401254][ T1306] __dump_stack+0x21/0x30 [ 69.401288][ T1306] dump_stack_lvl+0x140/0x1c0 [ 69.401315][ T1306] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.401343][ T1306] ? futex_wait+0x2b8/0x7c0 [ 69.401362][ T1306] ? __cfi_futex_wait+0x10/0x10 [ 69.401381][ T1306] dump_stack+0x19/0x20 [ 69.401408][ T1306] should_fail_ex+0x3c2/0x510 [ 69.401432][ T1306] should_failslab+0xac/0x100 [ 69.401456][ T1306] kmem_cache_alloc_noprof+0x42/0x410 [ 69.401477][ T1306] ? do_futex+0x32a/0x510 [ 69.401502][ T1306] ? getname_flags+0xcc/0x6b0 [ 69.401525][ T1306] getname_flags+0xcc/0x6b0 [ 69.401547][ T1306] getname+0x1b/0x30 [ 69.401568][ T1306] do_sys_openat2+0xda/0x1d0 [ 69.401595][ T1306] ? fput+0x1a4/0x230 [ 69.401619][ T1306] ? do_sys_open+0x100/0x100 [ 69.401646][ T1306] __x64_sys_openat+0x13a/0x170 [ 69.401684][ T1306] x64_sys_call+0xe69/0x2ee0 [ 69.401703][ T1306] do_syscall_64+0x57/0xf0 [ 69.401721][ T1306] ? clear_bhb_loop+0x50/0xa0 [ 69.401744][ T1306] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.401765][ T1306] RIP: 0033:0x7fc43a59e159 [ 69.401783][ T1306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.401801][ T1306] RSP: 002b:00007fc43b479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.401824][ T1306] RAX: ffffffffffffffda RBX: 00007fc43a825fa0 RCX: 00007fc43a59e159 [ 69.401841][ T1306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 69.401855][ T1306] RBP: 00007fc43a63503b R08: 0000000000000000 R09: 0000000000000000 [ 69.401868][ T1306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.401882][ T1306] R13: 00007fc43a826038 R14: 00007fc43a825fa0 R15: 00007ffce2885438 [ 69.401901][ T1306] [ 69.420008][ T311] usb 3-1: device descriptor read/8, error -71 [ 69.546665][ T383] usb usb4-port1: attempt power cycle [ 69.646027][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 69.652388][ T45] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 69.660780][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.671362][ T45] usb 5-1: config 0 has no interface number 0 [ 69.677749][ T45] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 69.689470][ T45] usb 5-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.704735][ T45] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 69.714049][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.726005][ T45] usb 5-1: Product: syz [ 69.730204][ T45] usb 5-1: Manufacturer: syz [ 69.738837][ T45] usb 5-1: SerialNumber: syz [ 69.745493][ T45] usb 5-1: config 0 descriptor?? [ 69.755788][ T1290] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 69.763711][ T45] asix 5-1:0.34: probe with driver asix failed with error -22 [ 69.806050][ T311] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 69.837257][ T311] usb 3-1: device descriptor read/8, error -71 [ 69.956046][ T383] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 69.970125][ T311] usb 3-1: device descriptor read/8, error -71 [ 69.994737][ T383] usb 4-1: device descriptor read/8, error -71 [ 70.026023][ T45] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 70.086145][ T311] usb usb3-port1: unable to enumerate USB device [ 70.127079][ T383] usb 4-1: device descriptor read/8, error -71 [ 70.176053][ T45] usb 1-1: device descriptor read/64, error -71 [ 70.369310][ T383] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 70.376046][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 70.376064][ T36] audit: type=1400 audit(1789096470.440:291): avc: denied { bind } for pid=1314 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.410009][ T383] usb 4-1: device descriptor read/8, error -71 [ 70.416326][ T45] usb 1-1: device descriptor read/64, error -71 [ 70.424457][ T1317] netlink: 52 bytes leftover after parsing attributes in process `syz.2.320'. [ 70.479188][ T1320] mmap: syz.2.321 (1320) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.547926][ T383] usb 4-1: device descriptor read/8, error -71 [ 70.656832][ T383] usb usb4-port1: unable to enumerate USB device [ 70.676074][ T45] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 70.816070][ T45] usb 1-1: device descriptor read/64, error -71 [ 70.936084][ T311] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 71.056102][ T45] usb 1-1: device descriptor read/64, error -71 [ 71.086037][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 71.092586][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 71.100988][ T311] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 71.117196][ T311] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 71.117219][ T1336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1336 comm=syz.3.325 [ 71.121728][ T311] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 71.127054][ T1336] FAULT_INJECTION: forcing a failure. [ 71.127054][ T1336] name failslab, interval 1, probability 0, space 0, times 0 [ 71.138598][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.147696][ T1336] CPU: 0 UID: 0 PID: 1336 Comm: syz.3.325 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 71.147730][ T1336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.147741][ T1336] Call Trace: [ 71.147749][ T1336] [ 71.147757][ T1336] __dump_stack+0x21/0x30 [ 71.147791][ T1336] dump_stack_lvl+0x140/0x1c0 [ 71.147819][ T1336] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.147845][ T1336] ? futex_wait+0x2b8/0x7c0 [ 71.147865][ T1336] ? __cfi_futex_wait+0x10/0x10 [ 71.147885][ T1336] dump_stack+0x19/0x20 [ 71.147910][ T1336] should_fail_ex+0x3c2/0x510 [ 71.147933][ T1336] should_failslab+0xac/0x100 [ 71.147957][ T1336] kmem_cache_alloc_noprof+0x42/0x410 [ 71.147977][ T1336] ? do_futex+0x32a/0x510 [ 71.148002][ T1336] ? getname_flags+0xcc/0x6b0 [ 71.148024][ T1336] getname_flags+0xcc/0x6b0 [ 71.148045][ T1336] getname+0x1b/0x30 [ 71.148065][ T1336] do_sys_openat2+0xda/0x1d0 [ 71.148091][ T1336] ? fput+0x1a4/0x230 [ 71.148115][ T1336] ? do_sys_open+0x100/0x100 [ 71.148143][ T1336] __x64_sys_openat+0x13a/0x170 [ 71.148188][ T1336] x64_sys_call+0xe69/0x2ee0 [ 71.148207][ T1336] do_syscall_64+0x57/0xf0 [ 71.148225][ T1336] ? clear_bhb_loop+0x50/0xa0 [ 71.148250][ T1336] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.148273][ T1336] RIP: 0033:0x7fbf0a79e159 [ 71.148290][ T1336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.148307][ T1336] RSP: 002b:00007fbf0b67a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 71.148328][ T1336] RAX: ffffffffffffffda RBX: 00007fbf0aa25fa0 RCX: 00007fbf0a79e159 [ 71.148344][ T1336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 71.148359][ T1336] RBP: 00007fbf0a83503b R08: 0000000000000000 R09: 0000000000000000 [ 71.148373][ T1336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.148386][ T1336] R13: 00007fbf0aa26038 R14: 00007fbf0aa25fa0 R15: 00007fff73f99d68 [ 71.148403][ T1336] [ 71.369634][ T45] usb usb1-port1: attempt power cycle [ 71.375348][ T311] usb 3-1: Product: syz [ 71.379710][ T311] usb 3-1: Manufacturer: syz [ 71.384346][ T311] usb 3-1: SerialNumber: syz [ 71.595029][ T311] usb 3-1: USB disconnect, device number 25 [ 71.706025][ T45] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 71.738317][ T45] usb 1-1: device descriptor read/8, error -71 [ 71.761486][ T1349] tipc: Started in network mode [ 71.766399][ T1349] tipc: Node identity ac14142f, cluster identity 4096 [ 71.773216][ T1349] tipc: New replicast peer: 255.255.255.255 [ 71.779322][ T1349] tipc: Enabled bearer , priority 10 [ 71.786017][ T1349] netlink: 52 bytes leftover after parsing attributes in process `syz.3.328'. [ 71.810446][ T1351] netlink: 52 bytes leftover after parsing attributes in process `syz.3.329'. [ 71.867137][ T45] usb 1-1: device descriptor read/8, error -71 [ 71.938194][ T36] audit: type=1400 audit(1789096472.010:292): avc: denied { watch } for pid=1356 comm="syz.3.332" path="/79" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.984322][ T36] audit: type=1400 audit(1789096472.050:293): avc: denied { watch_reads } for pid=1356 comm="syz.3.332" path="/79" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.073406][ T31] usb 5-1: USB disconnect, device number 7 [ 72.087394][ T36] audit: type=1400 audit(1789096472.160:294): avc: denied { write } for pid=1360 comm="syz.4.334" name="protocols" dev="proc" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 72.116022][ T45] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 72.157060][ T45] usb 1-1: device descriptor read/8, error -71 [ 72.256022][ T383] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 72.287046][ T45] usb 1-1: device descriptor read/8, error -71 [ 72.386019][ T64] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 72.396107][ T45] usb usb1-port1: unable to enumerate USB device [ 72.406010][ T383] usb 4-1: Using ep0 maxpacket: 32 [ 72.415957][ T383] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 72.424190][ T383] usb 4-1: config 0 has no interface number 0 [ 72.436019][ T383] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 72.457440][ T383] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 72.466658][ T383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.474684][ T383] usb 4-1: Product: syz [ 72.479009][ T383] usb 4-1: Manufacturer: syz [ 72.483625][ T383] usb 4-1: SerialNumber: syz [ 72.493026][ T383] usb 4-1: config 0 descriptor?? [ 72.498343][ T1359] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.537112][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.547384][ T64] usb 3-1: config 1 interface 1 altsetting 65 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 72.566061][ T64] usb 3-1: config 1 interface 1 has no altsetting 1 [ 72.574259][ T64] usb 3-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 72.583485][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.591548][ T64] usb 3-1: Product: syz [ 72.595835][ T64] usb 3-1: Manufacturer: syz [ 72.600507][ T64] usb 3-1: SerialNumber: syz [ 72.671779][ T36] audit: type=1400 audit(1789096472.740:295): avc: granted { setsecparam } for pid=1373 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 72.706975][ T1359] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.759433][ T1376] netlink: 52 bytes leftover after parsing attributes in process `syz.4.338'. [ 72.819329][ T64] usb 3-1: 1:65 : no or invalid class specific endpoint descriptor [ 72.837603][ T64] usb 3-1: USB disconnect, device number 26 [ 72.850056][ T36] audit: type=1400 audit(1789096472.920:296): avc: denied { map } for pid=1379 comm="syz.0.340" path="socket:[11162]" dev="sockfs" ino=11162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 72.896068][ T45] tipc: Node number set to 2886997039 [ 73.196049][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 73.326059][ T383] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 73.356131][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 73.362580][ T45] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 73.370972][ T45] usb 5-1: config 0 has no interface number 0 [ 73.380885][ T45] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 73.403809][ T45] usb 5-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 73.417524][ T45] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 73.427702][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.435764][ T45] usb 5-1: Product: syz [ 73.440457][ T45] usb 5-1: Manufacturer: syz [ 73.445111][ T45] usb 5-1: SerialNumber: syz [ 73.459906][ T45] usb 5-1: config 0 descriptor?? [ 73.465421][ T1385] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 73.479637][ T1409] netlink: 52 bytes leftover after parsing attributes in process `syz.2.347'. [ 73.490997][ T45] asix 5-1:0.34: probe with driver asix failed with error -22 [ 73.533778][ T1359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.542412][ T1359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.576052][ T383] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 198 [ 73.766023][ T45] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 73.779298][ T383] usb 4-1: USB disconnect, device number 31 [ 73.927748][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 73.941911][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.956016][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.970471][ T45] usb 3-1: string descriptor 0 read error: -22 [ 73.976979][ T45] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 73.980691][ T36] audit: type=1400 audit(1789096474.050:297): avc: denied { getopt } for pid=1358 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.986252][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.286043][ T45] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 74.436044][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 74.442206][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.453826][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 74.462930][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.470934][ T45] usb 1-1: Product: syz [ 74.475102][ T45] usb 1-1: Manufacturer: syz [ 74.479743][ T45] usb 1-1: SerialNumber: syz [ 74.560351][ T36] audit: type=1400 audit(1789096474.630:298): avc: denied { name_bind } for pid=1419 comm="syz.3.351" src=8422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 74.561830][ T1420] ªªªªª»: renamed from dummy0 (while UP) [ 74.606556][ T1423] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 74.606579][ T1423] rust_binder: Read failure Err(EFAULT) in pid:250 [ 74.614924][ T1423] rust_binder: Write failure EFAULT in pid:250 [ 74.622833][ T36] audit: type=1400 audit(1789096474.690:299): avc: denied { name_bind } for pid=1422 comm="syz.3.352" src=1028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 74.690780][ T1414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.700219][ T1414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.712734][ T45] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 74.716449][ T1414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.724831][ T45] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 74.733379][ T1414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.753794][ T45] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 74.763861][ T45] usb 1-1: USB disconnect, device number 31 [ 74.763883][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.036063][ T383] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 75.187096][ T383] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.197549][ T383] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 75.208146][ T383] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.217235][ T383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.225247][ T383] usb 4-1: Product: syz [ 75.229439][ T383] usb 4-1: Manufacturer: syz [ 75.234052][ T383] usb 4-1: SerialNumber: syz [ 75.441088][ T36] audit: type=1400 audit(1789096475.510:300): avc: denied { write } for pid=1435 comm="syz.3.354" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.445621][ T383] usb 4-1: 1:1 : invalid UAC_AS_GENERAL desc [ 75.471155][ T383] usb 4-1: 0:2 : does not exist [ 75.483418][ T383] usb 4-1: USB disconnect, device number 32 [ 75.495380][ T1095] udevd[1095]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.953192][ T45] usb 5-1: USB disconnect, device number 8 [ 76.009397][ T36] audit: type=1400 audit(1789096476.080:301): avc: denied { setopt } for pid=1453 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.031437][ T36] audit: type=1400 audit(1789096476.100:302): avc: denied { read } for pid=1453 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.066354][ T36] audit: type=1400 audit(1789096476.100:303): avc: denied { setattr } for pid=1453 comm="syz.3.358" name="PING" dev="sockfs" ino=12475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.181662][ T1468] tipc: Enabling of bearer rejected, failed to enable media [ 76.336034][ T383] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 76.461582][ T1473] netlink: 'syz.3.362': attribute type 11 has an invalid length. [ 76.470625][ T36] audit: type=1400 audit(1789096476.540:304): avc: denied { listen } for pid=1471 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 76.487999][ T1475] input: syz1 as /devices/virtual/input/input7 [ 76.501480][ T36] audit: type=1400 audit(1789096476.540:305): avc: denied { read write } for pid=1474 comm="syz.4.363" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.525812][ T36] audit: type=1400 audit(1789096476.540:306): avc: denied { open } for pid=1474 comm="syz.4.363" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.537384][ T45] usb 3-1: USB disconnect, device number 27 [ 76.555903][ T36] audit: type=1400 audit(1789096476.540:307): avc: denied { ioctl } for pid=1474 comm="syz.4.363" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.586071][ T383] usb 1-1: unable to get BOS descriptor or descriptor too short [ 76.589900][ T36] audit: type=1400 audit(1789096476.540:308): avc: denied { mount } for pid=1474 comm="syz.4.363" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.597219][ T383] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 76.615850][ T36] audit: type=1400 audit(1789096732.616:309): avc: denied { mounton } for pid=1474 comm="syz.4.363" path="/13/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 76.656044][ T383] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 76.678077][ T383] usb 1-1: string descriptor 0 read error: -22 [ 76.684331][ T383] usb 1-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 76.713759][ T383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.747025][ T1493] netlink: 328 bytes leftover after parsing attributes in process `syz.2.367'. [ 76.747320][ T383] usb 1-1: low speed audio streaming not supported [ 76.766013][ T383] usb 1-1: low speed audio streaming not supported [ 76.956573][ T10] usb 1-1: USB disconnect, device number 33 [ 77.026042][ T45] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 77.176067][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 77.187046][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.197543][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.210170][ T45] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 77.219463][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.236007][ T45] usb 4-1: Product: syz [ 77.240207][ T45] usb 4-1: Manufacturer: syz [ 77.244817][ T45] usb 4-1: SerialNumber: syz [ 77.346051][ T383] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 77.473445][ T45] usb 4-1: unit 6 not found! [ 77.486546][ T45] usb 4-1: USB disconnect, device number 33 [ 78.207706][ T1514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1514 comm=syz.2.374 [ 78.388419][ T1516] SELinux: Context Ï is not valid (left unmapped). [ 78.441178][ T383] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.448948][ T383] usb 3-1: no configurations [ 78.453562][ T383] usb 3-1: can't read configurations, error -22 [ 78.558504][ T1518] netlink: 52 bytes leftover after parsing attributes in process `syz.2.376'. [ 79.076079][ T383] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 79.176056][ T1533] binder: Unknown parameter 'defcontext01777777777777777777777' [ 79.225486][ T1537] BUG: scheduling while atomic: syz.3.383/1537/0x00000002 [ 79.232440][ T1539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1539 comm=syz.0.384 [ 79.232690][ T1537] Modules linked in: [ 79.248878][ T1537] CPU: 0 UID: 0 PID: 1537 Comm: syz.3.383 Not tainted syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 79.248912][ T1537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.248927][ T1537] Call Trace: [ 79.248934][ T1537] [ 79.248942][ T1537] __dump_stack+0x21/0x30 [ 79.248987][ T1537] dump_stack_lvl+0x140/0x1c0 [ 79.249018][ T1537] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.249048][ T1537] ? update_load_avg+0x4f3/0x1980 [ 79.249078][ T1537] dump_stack+0x19/0x20 [ 79.249106][ T1537] __schedule_bug+0x12b/0x200 [ 79.249130][ T1537] ? find_proxy_task+0x2460/0x2460 [ 79.249155][ T1537] ? __kasan_check_read+0x15/0x20 [ 79.249179][ T1537] ? psi_group_change+0xab6/0x10a0 [ 79.249207][ T1537] __schedule+0xb85/0x20b0 [ 79.249228][ T1537] ? detach_entity_load_avg+0x7a0/0x7a0 [ 79.249252][ T1537] ? update_curr+0x6b9/0x9c0 [ 79.249274][ T1537] ? __sched_text_start+0x10/0x10 [ 79.249297][ T1537] ? __kasan_check_read+0x15/0x20 [ 79.249318][ T1537] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 79.249349][ T1537] ? __kasan_check_write+0x18/0x20 [ 79.249369][ T1537] ? _raw_spin_lock_irq+0x93/0x120 [ 79.249389][ T1537] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 79.249410][ T1537] schedule+0xc5/0x240 [ 79.249430][ T1537] schedule_preempt_disabled+0x14/0x30 [ 79.249452][ T1537] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 79.249480][ T1537] ? activate_task+0x43b/0x480 [ 79.249503][ T1537] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 79.249530][ T1537] ? try_to_wake_up+0x111a/0x1fd0 [ 79.249555][ T1537] ? __kasan_check_write+0x18/0x20 [ 79.249577][ T1537] ? wake_q_add_safe+0x29/0x100 [ 79.249596][ T1537] ? __cfi_try_to_wake_up+0x10/0x10 [ 79.249619][ T1537] ? rwsem_mark_wake+0x507/0x770 [ 79.249650][ T1537] ? rwsem_read_trylock+0x275/0x5a0 [ 79.249680][ T1537] ? wake_up_q+0x10a/0x1c0 [ 79.249699][ T1537] ? downgrade_write+0x470/0x470 [ 79.249731][ T1537] down_write+0x163/0x2b0 [ 79.249757][ T1537] ? __cfi_down_write+0x10/0x10 [ 79.249782][ T1537] ? down_read+0x7f/0xe0 [ 79.249808][ T1537] ? __cfi_down_read+0x10/0x10 [ 79.249836][ T1537] kernfs_remove_by_name_ns+0x8c/0x180 [ 79.249865][ T1537] sysfs_unmerge_group+0xd7/0x130 [ 79.249891][ T1537] dpm_sysfs_remove+0x7b/0xd0 [ 79.249921][ T1537] device_del+0x241/0xcf0 [ 79.249941][ T1537] ? __cfi_class_find_device+0x10/0x10 [ 79.249973][ T1537] ? __cfi_device_del+0x10/0x10 [ 79.249991][ T1537] ? __kasan_check_write+0x18/0x20 [ 79.250012][ T1537] ? kobject_put+0x1cc/0x2a0 [ 79.250045][ T1537] device_destroy+0xb0/0x100 [ 79.250066][ T1537] ? __cfi_device_destroy+0x10/0x10 [ 79.250086][ T1537] ? __kasan_check_write+0x18/0x20 [ 79.250110][ T1537] android_device_destroy+0x118/0x180 [ 79.250143][ T1537] gadgets_drop+0x1d/0x30 [ 79.250165][ T1537] ? __cfi_gadgets_drop+0x10/0x10 [ 79.250187][ T1537] configfs_rmdir+0x8ba/0x9b0 [ 79.250219][ T1537] vfs_rmdir+0x3de/0x560 [ 79.250251][ T1537] do_rmdir+0x29a/0x590 [ 79.250281][ T1537] ? __cfi_do_rmdir+0x10/0x10 [ 79.250310][ T1537] ? __kasan_check_write+0x18/0x20 [ 79.250331][ T1537] __x64_sys_rmdir+0x4b/0x60 [ 79.250360][ T1537] x64_sys_call+0xaf7/0x2ee0 [ 79.250380][ T1537] do_syscall_64+0x57/0xf0 [ 79.250399][ T1537] ? clear_bhb_loop+0x50/0xa0 [ 79.250424][ T1537] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.250448][ T1537] RIP: 0033:0x7fbf0a79e159 [ 79.250467][ T1537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.250486][ T1537] RSP: 002b:00007fbf0b67a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 79.250511][ T1537] RAX: ffffffffffffffda RBX: 00007fbf0aa25fa0 RCX: 00007fbf0a79e159 [ 79.250527][ T1537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 79.250542][ T1537] RBP: 00007fbf0a83503b R08: 0000000000000000 R09: 0000000000000000 [ 79.250555][ T1537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.250569][ T1537] R13: 00007fbf0aa26038 R14: 00007fbf0aa25fa0 R15: 00007fff73f99d68 [ 79.250588][ T1537] [ 79.376848][ T1537] ------------[ cut here ]------------ [ 79.382185][ T383] usb 3-1: Using ep0 maxpacket: 16 [ 79.389681][ T1537] WARNING: CPU: 1 PID: 1537 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 79.537278][ T383] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.538904][ T1537] Modules linked in: [ 79.543636][ T383] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 79.548697][ T1537] [ 79.548711][ T1537] CPU: 1 UID: 0 PID: 1537 Comm: syz.3.383 Tainted: G W syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 79.554423][ T383] usb 3-1: config 0 interface 0 has no altsetting 0 [ 79.557909][ T1537] Tainted: [W]=WARN [ 79.557919][ T1537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.566040][ T383] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 79.567022][ T1537] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 79.584033][ T383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.597005][ T1537] Code: 48 83 3d b4 03 dc 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 cc 44 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 79.775571][ T1537] RSP: 0018:ffffc9000eb47980 EFLAGS: 00010206 [ 79.776376][ T383] usb 3-1: config 0 descriptor?? [ 79.781703][ T1537] RAX: 000000007fffffff RBX: ffff8881f56ccfc0 RCX: 00000000004ccfc0 [ 79.794631][ T1537] RDX: ffff8881f56ccfc0 RSI: 0000000000000001 RDI: 0000000095d0e1f9 [ 79.802675][ T1537] RBP: ffffc9000eb479e0 R08: 00000000ada210f0 R09: 00000000df6f1c7e [ 79.810708][ T1537] R10: 000000000000000d R11: ffffffff8175a5e0 R12: 0000000024b4ccfc [ 79.818730][ T1537] R13: 0000000000000000 R14: ffffc9000eb479f0 R15: 000000000000000d [ 79.826778][ T1537] FS: 00007fbf0b67a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 79.835731][ T1537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.842378][ T1537] CR2: 00007ffce2883fd8 CR3: 0000000117524000 CR4: 00000000003526b0 [ 79.850398][ T1537] DR0: 0000000000000005 DR1: 00000000570fac24 DR2: 0000000000000010 [ 79.858435][ T1537] DR3: 00000000000003ff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 79.866464][ T1537] Call Trace: [ 79.869765][ T1537] [ 79.872716][ T1537] ? do_syscall_64+0x57/0xf0 [ 79.877372][ T1537] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.883482][ T1537] kasan_save_track+0x4f/0x80 [ 79.888230][ T1537] ? kasan_save_track+0x3e/0x80 [ 79.893106][ T1537] ? kasan_save_free_info+0x44/0x50 [ 79.898360][ T1537] ? __kasan_slab_free+0x5f/0x80 [ 79.903324][ T1537] ? kfree+0x158/0x440 [ 79.907469][ T1537] ? gadget_info_attr_release+0xcb/0x130 [ 79.913128][ T1537] ? config_item_put+0x175/0x240 [ 79.918121][ T1537] ? configfs_rmdir+0x8e8/0x9b0 [ 79.923000][ T1537] ? vfs_rmdir+0x3de/0x560 [ 79.927489][ T1537] ? do_rmdir+0x29a/0x590 [ 79.931848][ T1537] ? __x64_sys_rmdir+0x4b/0x60 [ 79.936684][ T1537] ? x64_sys_call+0xaf7/0x2ee0 [ 79.941471][ T1537] ? do_syscall_64+0x57/0xf0 [ 79.946123][ T1537] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.952224][ T1537] kasan_save_free_info+0x44/0x50 [ 79.957307][ T1537] __kasan_slab_free+0x5f/0x80 [ 79.962099][ T1537] kfree+0x158/0x440 [ 79.966057][ T1537] ? gadget_info_attr_release+0xcb/0x130 [ 79.971718][ T1537] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 79.977844][ T1537] gadget_info_attr_release+0xcb/0x130 [ 79.983325][ T1537] config_item_put+0x175/0x240 [ 79.988146][ T1537] ? __cfi_gadgets_drop+0x10/0x10 [ 79.993196][ T1537] configfs_rmdir+0x8e8/0x9b0 [ 79.997938][ T1537] vfs_rmdir+0x3de/0x560 [ 80.002220][ T1537] do_rmdir+0x29a/0x590 [ 80.006457][ T1537] ? __cfi_do_rmdir+0x10/0x10 [ 80.011167][ T1537] ? __kasan_check_write+0x18/0x20 [ 80.016334][ T1537] __x64_sys_rmdir+0x4b/0x60 [ 80.020953][ T1537] x64_sys_call+0xaf7/0x2ee0 [ 80.025580][ T1537] do_syscall_64+0x57/0xf0 [ 80.030053][ T1537] ? clear_bhb_loop+0x50/0xa0 [ 80.034760][ T1537] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.040717][ T1537] RIP: 0033:0x7fbf0a79e159 [ 80.045149][ T1537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.064819][ T1537] RSP: 002b:00007fbf0b67a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 80.073295][ T1537] RAX: ffffffffffffffda RBX: 00007fbf0aa25fa0 RCX: 00007fbf0a79e159 [ 80.081387][ T1537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 80.089457][ T1537] RBP: 00007fbf0a83503b R08: 0000000000000000 R09: 0000000000000000 [ 80.097495][ T1537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.105485][ T1537] R13: 00007fbf0aa26038 R14: 00007fbf0aa25fa0 R15: 00007fff73f99d68 [ 80.113518][ T1537] [ 80.116574][ T1537] ---[ end trace 0000000000000000 ]--- [ 80.122728][ T1537] BUG: scheduling while atomic: syz.3.383/1537/0x00000000 [ 80.129926][ T1537] Modules linked in: [ 80.133842][ T1537] CPU: 1 UID: 0 PID: 1537 Comm: syz.3.383 Tainted: G W syzkaller #0 053bc84e93bdef9c6c9615cbace6655003d8d143 [ 80.133879][ T1537] Tainted: [W]=WARN [ 80.133887][ T1537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.133900][ T1537] Call Trace: [ 80.133907][ T1537] [ 80.133915][ T1537] __dump_stack+0x21/0x30 [ 80.133948][ T1537] dump_stack_lvl+0x140/0x1c0 [ 80.133976][ T1537] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.134006][ T1537] dump_stack+0x19/0x20 [ 80.134034][ T1537] __schedule_bug+0x12b/0x200 [ 80.134058][ T1537] ? find_proxy_task+0x2460/0x2460 [ 80.134082][ T1537] __schedule+0xb85/0x20b0 [ 80.134105][ T1537] ? plist_check_list+0x2a1/0x2c0 [ 80.134126][ T1537] ? __sched_text_start+0x10/0x10 [ 80.134147][ T1537] ? plist_add+0x4d4/0x570 [ 80.134178][ T1537] ? __futex_queue+0x19f/0x350 [ 80.134204][ T1537] ? __cfi___futex_queue+0x10/0x10 [ 80.134231][ T1537] schedule+0xc5/0x240 [ 80.134252][ T1537] futex_wait_queue+0xfc/0x240 [ 80.134272][ T1537] __futex_wait+0x15b/0x3d0 [ 80.134292][ T1537] ? __cfi___futex_wait+0x10/0x10 [ 80.134313][ T1537] ? __cfi_futex_wake_mark+0x10/0x10 [ 80.134333][ T1537] ? __kasan_check_read+0x15/0x20 [ 80.134354][ T1537] ? futex_wake+0x627/0x950 [ 80.134374][ T1537] futex_wait+0x128/0x7c0 [ 80.134394][ T1537] ? __cfi_futex_wait+0x10/0x10 [ 80.134416][ T1537] do_futex+0x32a/0x510 [ 80.134454][ T1537] ? __cfi_do_futex+0x10/0x10 [ 80.134479][ T1537] ? __kasan_slab_free+0x6a/0x80 [ 80.134505][ T1537] ? kmem_cache_free+0x1bd/0x4f0 [ 80.134529][ T1537] __se_sys_futex+0x13c/0x320 [ 80.134556][ T1537] ? putname+0x113/0x150 [ 80.134579][ T1537] ? __x64_sys_futex+0x110/0x110 [ 80.134608][ T1537] __x64_sys_futex+0xe9/0x110 [ 80.134636][ T1537] x64_sys_call+0x227f/0x2ee0 [ 80.134655][ T1537] do_syscall_64+0x57/0xf0 [ 80.134675][ T1537] ? clear_bhb_loop+0x50/0xa0 [ 80.134700][ T1537] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.134724][ T1537] RIP: 0033:0x7fbf0a79e159 [ 80.134742][ T1537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.134760][ T1537] RSP: 002b:00007fbf0b67a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 80.134785][ T1537] RAX: ffffffffffffffda RBX: 00007fbf0aa25fa8 RCX: 00007fbf0a79e159 [ 80.134801][ T1537] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbf0aa25fa8 [ 80.134816][ T1537] RBP: 00007fbf0aa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 80.134830][ T1537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.134844][ T1537] R13: 00007fbf0aa26038 R14: 00007fff73f99c80 R15: 00007fff73f99d68 [ 80.134863][ T1537] [ 80.196180][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.473856][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.488175][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.495000][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.501840][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.510179][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.517011][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.523805][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.530650][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.537460][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.544251][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.551091][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.558361][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.565163][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.572113][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.580831][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.587760][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.594562][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.601486][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.608390][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.615189][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.622145][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.629057][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.635852][ T383] sony 0003:054C:024B.0008: unknown main item tag 0x0 [ 80.646830][ T383] sony 0003:054C:024B.0008: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.2-1/input0 [ 80.663316][ T383] sony 0003:054C:024B.0008: failed to claim input [ 80.681147][ T383] usb 3-1: USB disconnect, device number 29