last executing test programs: 1m10.474062647s ago: executing program 2 (id=193): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x4d0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000020000/0x18000)=nil, 0x0, 0x0, 0x56, 0x0, 0x0) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) r3 = userfaultfd(0x80001) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xdff16000) close_range(r0, 0xffffffffffffffff, 0x0) 1m10.473777147s ago: executing program 2 (id=194): chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/218) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000002000000000000000600"/112], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) sendmsg$unix(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x1c000}, 0x4000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@index_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_off}, {@verity_off}]}) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e28, 0x9, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002b80), 0x3, 0x9c11) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 1m10.462523787s ago: executing program 2 (id=195): chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) (fail_nth: 11) 1m10.32930039s ago: executing program 2 (id=197): mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='fuseblk\x00', &(0x7f0000000d00)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x9b\x9bO\x88/\t\xcf\x9b\x9f\b\xb6\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcd\x89F\xd0#\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88\x1d\bn\x7f\x0e\x85\xa5\xb4\x05?_\xc9\xef\xe0Q\xdb\xb6\x935\xf1\x18\xac\xe0\x15\xf3\xde\xbd\xb5\xa1\x06\xfd7\x87\xe1\f\x0f\xf8\xc5\x8a\xdc!\x00\x00@\x00'/119, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') read(r3, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000002280)=""/4094, 0xffe, 0xd33) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) 1m9.567904536s ago: executing program 2 (id=200): openat(0xffffffffffffffff, &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x40) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x2019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xf49, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0x7d, 0xbb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0xbe, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x9, 0xb0, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x6, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x3, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x4, 0x8, 0x3, 0x3, 0xb8, 0x0, 0xd}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x89, 0x47, 0xf, 0x0, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0xf77de6acf5693786, 0x5, 0x9, 0x57, {0x8, 0x25, 0x1, 0x0, 0x30, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0x7fff, 0x4, "8722ec"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x7f}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x3, 0x5, "8f45d61e5f0b46"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x9, 0x5a, {0x8, 0x25, 0x1, 0x1, 0x30, 0x11, 0xf}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x2, 0x3, 0x2, 0x20, 0x6}, 0x10c, &(0x7f0000000200)={0x5, 0xf, 0x10c, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x63, "e1555a249bcf208d147d063b48178688"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x8, 0x4}, @generic={0x8d, 0x10, 0xb, "34e28bb633ad4e979459dba1d91cd5e12bdd49d5ae707163af97d6f85839440a67b25b8099f479a0509314e6c661e78f251e6b7740278c1792a075d440ccb1d94b2a182ee2dbd6d9bf823c683d929d324dc1aa464a71138e424d758efa8f1b8352e458a3e7bc40f99a6e1666d2fad51969913a4d81d7c2a7aa7e70530e6ef3c7704c0aeb8a8feab57d56"}, @generic={0x4e, 0x10, 0x2, "d3e9e1d87591f2f4b5c1fc1c55b59ff8e17188fdc41a228bc6f37630dc0390cb8b540da3df14a1fb265aff7d22ac187c25cb129b58528e7ff42fe601aa4143d084d2faf7faa9f3d54801b0"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x8, 0x5d, 0xe, 0x89}]}, 0x4, [{0xa3, &(0x7f0000000400)=@string={0xa3, 0x3, "5e66a70edda857d62469991dcf8b7a0d3d6f5d46fd9bb96a9eb44be1330f3e20d49b3e2dfd3b6b4bd539c889f370628a58a0847a64df2f3e13efb514d62626d111fa8d74f42f770ba82e08c037232fcb1417ad08150b9ff7f956c5c96cb9cc9c0fc0c5fc6719258ec5ef2a73e4bf84cd5d8b1afdfea80f48a4525a4bcabd04dbd5ad3d23188b65f3c33e3466d6ca64d0faf9d02725809df380835139865b4a2b58"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x418}}, {0xa9, &(0x7f0000000500)=@string={0xa9, 0x3, "ee5db630b133c021d9ae2b979b5170affa8858708e5cf00069a59188c9a998eb03b906849e2c2fcd19a287e2402ab6198bbb77e2503336c1d3abf9f9031d8bbc9fbaa89b8fe760416c30aca0e5683299a959a2900d7293c9b833cd573e18febb48074cb0062115c440af8df2036b0fdc2c8ad6eec7c902b00edff1148f39846b6f488c455c1db2c4b6661adc0cace96aae1bff4239ec78cda537a4e8080c172f1955d1813456d5"}}, {0x37, &(0x7f00000005c0)=@string={0x37, 0x3, "b8f6c59c1912c508e7e9f8d8e55fe04d686ab9756143b224d654cb2caec299bf833e907b07f8a64b2e451b3f1c6a205070306aedeb"}}]}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0x28, {0x28, 0x8, "83efb930f01842562348d180df827ff0478fa22a61a54607b71ea9e43d359c479c37f525cde3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m9.461678389s ago: executing program 2 (id=201): chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x3000, 0x1) 1m9.430097629s ago: executing program 32 (id=201): chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x3000, 0x1) 8.349545569s ago: executing program 3 (id=460): syz_usb_connect$uac3(0x1, 0xc5, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x499, 0x500c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0xb, 0x40, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x23, 0x30, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xa, 0x101, 0x0, 0x2, 0x8e, 0x8, 0x9, 0x7e}, @as_header={0x17, 0x24, 0x1, 0x3, 0x6, 0x6, 0x0, 0x9, 0x9, 0x8, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x37, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x1, 0x0, 0x2, 0x0, 0x2, 0x7, 0xb, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0xe, 0xb, {0xa, 0x25, 0x25, 0x7, 0x3a, 0xd}}}}}}}}]}}, &(0x7f0000007bc0)={0x0, 0x0, 0x0, 0x0}) 7.029805847s ago: executing program 1 (id=468): socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x1, &(0x7f0000000040)=""/44, &(0x7f0000000000)=0x2c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0x4008af24, &(0x7f0000001040)) 7.027880917s ago: executing program 1 (id=469): syz_usb_connect$uac2(0x2, 0xa8, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x453, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x18, 0xb1, 0x70, 0xff, 0x403, 0xf068, 0xe0f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x441, 0x2, 0x83, 0x3, 0x50, 0xbb, "", [{{0x9, 0x4, 0x6, 0x0, 0x4, 0xee, 0x4d, 0x7b, 0x4, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x8, 0xf9, "1d2b"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x81, 0x1001}]}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x9, 0x1, 0x5, [@generic={0xae, 0x21, "35433b15d90fa69eb2a7765cc395a4338acc7acf6328159b144f466fa23294cb248e1cc26313e2352f19cac00278c9e6ec0ab050d6f9c76af5e1419af6966ddd1ea7097c3c6ee3387210c1f45d4aee226aaea6f891c330f5bbc23a0762a3b20a525fc45e5ace2591e7fa7cc5fb8c5bc583b99774d1fdbb6b35200af456b2e2d0275d218e6360128be8c4a960587bae964f237c9b2c1f61a7786a7e2374c72f541e951bef932d33f6aedb10f0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x0, 0x81, 0x5b, [@generic={0x24, 0x10, "69b6b584e1f73c0af9939c661cc6729440a1bf21635caa559c549ce505ec2da2d3ba"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x6, 0x5, 0x9, [@generic={0x1f, 0x23, "75998a718b2c4df7b6d801777c898e5c10480674f58f50bd8bbcadbcd9"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x2, 0x0, 0x5, [@generic={0x22, 0x22, "ed2b0afb9a0bccde40085c8897fae52e0a9f63abb65daedcf4c7de5bcd09e32b"}]}}]}}, {{0x9, 0x4, 0x7c, 0x0, 0xe, 0x2, 0x2, 0xff, 0xfa, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x6, 0x7f, "5fe0", "95"}]}], [{{0x9, 0x5, 0x3, 0x10, 0x0, 0x2, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x8}]}}, {{0x9, 0x5, 0xd, 0x6, 0x1e7, 0x8, 0x0, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xfa, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd8, 0x800}, @generic={0xad, 0x21, "761893811f56caaec275195fc39972df43fa95466af0384313019ebe0c829a1d3f615af59a086ac5f92f136028b1c0af2f25d847ada4307123ac492c9eadd2f876daecca9f58dbc090fc22aeece5d091d6f86b9430e60c0ed6c8402995a5b5066e416ece1cd302cd30ca80db61cabee1b438889a80ad225c1cebd4a859c184d3ee0cf5cc9e9d884f82432fa5a042f85e96a1ac952c5ce21f4bee618b887c18d37a079a17683a93529a1b57"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x0, 0x7, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0xfffa}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x5, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1e, 0x3}]}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x1, 0x8, 0x4, [@generic={0x4d, 0x23, "36338c816cb3be212dfd8f833287a9a3f3cb01abe126900a42ab1dccbdc574044ffb1c0e861599c9f600e01d28c69c293b2f7f3a1a976e076bc559ed8016c9a3dc36ba570119de48bd6d3a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x0, 0x5, 0x9}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x0, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xa, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x8, 0x6, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xa, 0xff, 0x10, [@generic={0x2a, 0x1, "e77dbb9db31524cff118bea0f87ba63a27bfac154cd2f3496f970d4d861b7f5350e0b718b40b4e7a"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x2, 0x7, 0x38}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x4, 0x8, 0x8, [@generic={0xf2, 0x6, "89527b145bf7cdf908fd2a0eb2a2b5819e7ebf5b7eb65e287c7c080cc505ae2164b64491e98eae1551a94e0d93b8922404dac37d76e242e0b528f4270f89432aa3d1add0971f56b602344a4830d609784bfd058336de42cbfc4b14556ad251939398e5d01db22cd3a31314de70eec0a245ba398326abb1efa2bafca670c28e4ef73aa814e53817ad2051472e3c3dde013181b3f8fb6346be2fbf6ce89ed2c8b622b009877a2b6419dbce130982465ccd5dbd2ca594c20e4b0d8012d9403a920e56dfdfb6de3d5b9dd318637defaa053632caa1f700cbb87ec715b0c2fa79b4873fd010d30128afdfc2e9ff1f8927bc16"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfc, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x2, 0x6}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x310, 0x1, 0x1, 0x9, 0x20, 0xf8}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}, 0x9, [{0x3b, &(0x7f0000000840)=@string={0x3b, 0x3, "4e38d7af921ad75a413372ceeffd2be9614ce31ccc223185723da5aa4bd355c254963deda629301422f3e58a386dc105a6dfcb4645788daf11"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x816}}, {0x2b, &(0x7f0000000900)=@string={0x2b, 0x3, "f5f31913989db23fa536452fb120776f7c59e1a860f4c06082068d656daf66be2bda82b3512923b398"}}, {0xd3, &(0x7f0000000940)=@string={0xd3, 0x3, "63a001ecc0c8a85a692427de353d08e82f05d76a7361a49c004ff5f54213556c1e4044f9acf0fd534fcb43c7781c9be8aeab62359cbf910327caf2034f96adef3d69b574898af581bec1a34ac9015edda9f80dd262704886c899848685bf48b41d34ac2edfe9339130ba99212bcb0cebfe1e9cb79bf95958a18a69a9a6243d3cb6da65cc8c8168f96f47b94bb0df69f39cda0a376e65a046e825bad8e05cdb8956974d3c831428f7e4243b72a57686ed7af3c9a4c9f4a8df951b85995d0e89eaacad66f264bfe1d64cc32bd7f8725fdf2a"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x426}}, {0x9, &(0x7f0000000ac0)=@string={0x9, 0x3, "1ea1a409b5539a"}}, {0xc, &(0x7f0000000b00)=@string={0xc, 0x3, "27ecc98c54b5718ec8b1"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x400a}}]}) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) inotify_add_watch(r0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000008) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r6, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c40)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000c80)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x62, 0x3, 0x3, 0x8}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) socket$key(0xf, 0x3, 0x2) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000880)={0x2c, &(0x7f0000000580)={0x0, 0x5, 0x12, {0x12, 0xa, "77e0462e5268aa4916123047b0a7e4cd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r9, 0x40184810, &(0x7f00000002c0)={0x3, 0xffffffff, 0xfffffffe, 0xffff01c2, 0x2, 0xa}) 5.627292408s ago: executing program 0 (id=479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') dup(r1) ioctl$NS_GET_PARENT(r1, 0x8004b706, 0x0) 5.565698419s ago: executing program 0 (id=480): syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async, rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080), 0x8) (async, rerun: 64) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xb3, 0xa0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x62, 0x35, 0xf, 0x2, {0xa, 0x25, 0x25, 0x401, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x620, 0x6, 0x40, 0xc0, {0xa, 0x25, 0x25, 0x7ffdffff, 0x2f, 0xbd9}}}}}}}}]}}, 0x0) 5.361554684s ago: executing program 3 (id=481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x0) 4.015154113s ago: executing program 1 (id=487): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x100048, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x42, 0x0, 0x0, 0x4, 0x2, 0x1}}) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "dece6c7c5800", '\x00\x00\x00@'}, 0x28) writev(r1, &(0x7f0000000580)=[{&(0x7f00000006c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff923d587505a66033816d9d554d83669efc751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfda67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb6383655", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_256={{0x303}, "d14b94279842d167", "6df94a725f975c1092c9e11b2d9d54de0939459fe77ea03a8b5c3ae227475914", "3d272089", "1164892b37762361"}, 0x38) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0x4000}], 0x1) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r2 = syz_clone(0x22100200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendfile(r5, r5, 0x0, 0x9) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r6 = syz_open_procfs(r2, &(0x7f0000000400)='stat\x00') pread64(r6, &(0x7f0000000040)=""/10, 0xa, 0x4) mount(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f00000004c0)='anon_inodefs\x00', 0x2, 0x0) 3.949716895s ago: executing program 1 (id=488): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB], 0x6c}], 0x1}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x804) r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x2, 0x2) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000340)=""/38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.448360475s ago: executing program 1 (id=491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYRES64=r2], 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)={0x1b, 0xa, '\x00', [@pad1, @generic={0xd6, 0x49, "35b90c27522be16bf296d610eaca693848c8fb6206567e30571f52ca3cab1949929709afda41c5438c6aa09e4fc337eea069fb8d5ab2e1f4bb3a8d20d699ce84c0d14391afa84ab784"}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x3}]}, 0x60) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x9, 0x40000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @loopback}, {0x6, @remote}, 0x30, {0x2, 0x4e24, @broadcast}, 'tunl0\x00'}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r0, r3, 0x0, 0x7ffff004) 2.578480964s ago: executing program 0 (id=495): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040)) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) fsetxattr$security_capability(r1, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x7, 0xb29}]}, 0xc, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c1}, 0x8091) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1633c0d9c4"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) fsopen(&(0x7f0000000480)='ocfs2_dlmfs\x00', 0x1) fremovexattr(r1, &(0x7f00000004c0)=@random={'user.', ':\x00'}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000005c0)=@urb_type_control={0x2, {0xc, 0x1}, 0x2, 0x4, &(0x7f0000000500)={0x60, 0xa, 0xfff8, 0x6, 0x4}, 0x8, 0x8, 0x9, 0x0, 0x7ff, 0x87a, &(0x7f0000000540)="952192cdf0c044c04d874a0a33978da51f55cb242e653da0866fc182390ab93dd404999af02210b5ec13c9fda2e95ea53baa8dec9bcc2146f9f04aba79a4e07d1eef24a51403acb6ec7d0fceb8de169d537858620f504a3e87263f32cfe4e7cadb37a753f6cd4f05c1224c3a"}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x188}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r8, 0x208, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0xc4804) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x9571f32585610594}, 0x20000814) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl0\x00', r9, 0x6, 0x7, 0x4, 0x3, 0x24, @rand_addr=' \x01\x00', @remote, 0x8, 0x700, 0x81, 0x675a9b3f}}) openat$cgroup_ro(r2, &(0x7f0000000ac0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x10000, 0x0) openat(r10, &(0x7f0000000b40)='./file0\x00', 0x100, 0xa0) r11 = openat$cgroup_ro(r10, &(0x7f0000000b80)='pids.events\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r11, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xb4, r12, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2008004}, 0x40000) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe0}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xeb}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8001) 2.509769576s ago: executing program 0 (id=496): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) (async) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xf5, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="b4", 0x1}], 0x1}}], 0x2, 0x5081) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.28696708s ago: executing program 3 (id=498): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)={0x18, 0x20, 0x1, 0x70bd23, 0x0, "", [@typed={0x8, 0x62, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'wg0\x00', &(0x7f0000000240)=@ethtool_eee={0x45, 0xcaf5, 0x7, 0x6, 0xc, 0x7, 0x10000, 0xcc51, [0x8, 0xff]}}) r3 = open_tree(r1, &(0x7f0000000300)='./cgroup\x00', 0x89801) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), &(0x7f00000000c0)='./cgroup\x00', 0x9, 0x2) fstat(r3, 0x0) 2.213579102s ago: executing program 3 (id=499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004801}, 0x40) (rerun: 64) 2.213442022s ago: executing program 3 (id=500): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) readahead(r0, 0xa, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x541b, &(0x7f0000000100)={'veth1_to_hsr\x00', @link_local}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x40a2011, r4, 0x56a89000) 2.199621762s ago: executing program 3 (id=501): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x3a, 0x0, 0x0, @u64=0x7fff8}]}, 0x2c}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x1, 0x0, 0x2, 0x9, 0xe64a, 0xffffffff, 0xf}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x10, 0xb1, {0xb1, 0x3, "4bc564e8d6fea15cfb1cefa7840af3e208a77d3c6ccfbc76e32d622219d950025d87602dc33fcd79c51db8f8e8e14fdfe45cbaff7ad061f794e75e50e910eae9febf165792ca8b511f4051cb669282447acffa6fbce9d7a0bb56554cd6606709526824673b4f5e4574117281f1fa1da9340fdfbb90da633d56fc9f1491bd2568f02277497af1564132adc4874c169ba37dfc0aa0c84e66d01a5e9237af9595de7d1e239f29f211c2737d4422185435"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}}, &(0x7f0000000980)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="40067f00000083a56ef2f7601b3558ca1bd4c970923aa5bbc1e2787bdad0aabbe8b74b7a211802bf30358509cccfab98b73740a29faed6f3e26ac61f0d01ef0f5a463a9b1a7afe99848c990380b14021d3fdf03b6411a6afb043b8a2f43454bf362943df18ad1cd48521000d1712a81bd48afba1d5cff37a908c0cd7dddc27fe98cd5c"], &(0x7f0000000500)={0xa1, 0x1, 0x400, "a533c88a1142b09d3f1c25cea6090f85a4fc78aef9653ec54931069d338b06c762fbc59b15b1f4575bb0aec61b9d4df13474cd6bd567c31e1789d6819976a5282aec7f734568722c62a2ed5a2517a3f005f5c5ddec535b991c3322e33119643243755b76b32bef16cdd8e77b87ca83323883c6407020257199fa9b1468b8149837317676ffbeb75f21074b4361488f13098bdac3caf9db60051ab101e61859bc9e582edd2a95b3f204670b1d138aa2719319534997ce47fce76de9fb761340ae9b732c7a39c537ca6b380df3c0f5a10dc415580397090d4aa476dc0bdb0e310b7b42ccb65f41b1e15f056f06dad21203441a0ba4f33d41f99a9776bb72eff6b76cf63562104c54487c5a4d362c5e326bc70a7d2e491999fb63a305fbcc47660ba193a3fdb8ed48466dc66d726cef02e9f4c41ede7465b451dfbbde7105e816120eed6db54c2546a77ad2895051fb6d3a0f883c6984305271eb78f97f25b168c23057c12b6f6e97d56917a2decc08b9208999c132d71b35417ef24022cae610f744aa04b73a8ec9598079b62ceeccf66a94d64608342427a7819950c634b88ac1c0ce1326d9669d595c0fbb79504ce8741b3090dd73c07331102706340f254d16eed73c6c9dcd727443dd71eac800bbb1a4f1190ea61264ad1def0e54766663930525308e5b6125e214150917b197d01483f61c9d601a29692dd9278808990348884de6da508cf5793a3d36249165d2617d8c03365120a69b831874c835c6e2bf04cb8a2f6e6bed97ec9f0816a17bf8a9c34487d7527724718a4cde1b8f417423e901dc3086903a3e4d8091ae658079a31ee6e61493294c4540472f1ad0d3ea136ed7134eab34ce918e1146a08835360dbea905bb90ae34e0066fb4d56ad2cf1c1b4e35d7e3cc7390f22db85bbf18d7446c1116d91efeace1e356fa50a394f42056134a8c70a751894a6ef476ddd7a88fb685abff793400b98c7ff3ec93b47e2ce976a7440963d6410af8a38efe92578599b517ad8cc23e0c6fdff2daa3dd98f2e31b6818cd5d7286b46933709d06796c1fdfe8fa8737c22afdc516ef300b536f6cb2d44732140d2dd138f63a13ab0b9661dc967ea99888dce62439ad38d2136ed4aa073cfc89ea11d4910b35bdd6d3a7d45dce22397cb6920dc9abe425d38773ec90fae71904588376f952b9eea244b83ef5a6cf6ec889d5d5c43c049e5c37e6995448f760e872c99f8e7e5c79033eb21eec065d6845303135930c13e7ee40d8a062a7bda9d8f5a1a774e221c56cbcc4e03a2ca93c971d524cd09fbe44d62ae631d9c763ff64a527b36ca74c4b11ce03a9937ccebcc2183c0244ee1a27469ad9e678b11b6e100a69d02f5ec0f54dd508c6aba87f5f3ea555344a1a6d740f8a9c309e6d523b561cbf86250ce1a699482dc82a239c3df405f320052f672827c73a"}, &(0x7f0000000940)={0x21, 0x0, 0x4, "6124901f"}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0xb, 0x0, &(0x7f00000002c0)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000300)={0x20, 0x6, 0xf, '\x00'/15}, 0x0, 0x0, &(0x7f0000000040), 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0x2, 0x6, 0xf318, 0x100, 0x9}) 1.86094445s ago: executing program 4 (id=503): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000440)={r0, &(0x7f0000000180)='\\-\x00', 0x2000, &(0x7f0000000280)={@align=0x1, {0xa, 0x7fff, 0xffff7fff, 0x8000}}, 0xffffffff, &(0x7f00000003c0), &(0x7f0000000400)}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000000a000000000000", 0x58}], 0x1) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r9, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)='C', 0x14}], 0x1}}], 0x1, 0x20000081) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x1) 1.860605s ago: executing program 4 (id=504): syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) (async) r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b8008000000f23d8b9800000c00f3235001000000f300f23f8640fc77e490f01c566baf80cb8017eb280ef66bafc0cec9a0a5000003900f30fc7b502000000c74424007900c0fec7442402ab2c7e2ac7442406000000000f0114240f01cb66ba2000b00fee0f01c8", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, 0x0) 1.84662949s ago: executing program 0 (id=505): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0c00990001000000010000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) read$FUSE(r2, &(0x7f0000009800)={0x2020}, 0x2020) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x78, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xff, 0x5}}}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x8, 0x5}, {0x6, 0x6}, {0x1, 0x4}, {0x4e, 0x2}, {0x9, 0x1}, {0x3, 0x4}, {0x1, 0x3}, {0x7, 0x4}, {0x3e, 0x7}, {0x81, 0x3}, {0x50}, {0x5, 0x2}, {0x34, 0x3}], "eaa8531fec7ce47f"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x4, 0x5}, {0x10}, {0x1, 0x2}, {0x5, 0x1}, {0x3, 0x3}, {0x6, 0x7}, {0x6d, 0x6}, {0x6, 0x4}, {0x7f, 0x6}, {0x1, 0x6}, {0x2, 0x6}, {0x80, 0x4}, {0xdb}], "f9ecc8664d0d30c3"}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 1.818680471s ago: executing program 0 (id=506): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x0, {{0xa, 0x4e20, 0x7, @mcast2, 0x4}}, 0x1}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x1, 0x0, 0xb, 0x7, 0x4f2}, 0x20) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000000c0)=0x4001002, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffedb4000000088fc70738daf7b3200aaff020000000000000000000000000001042086dd"], 0xfdef) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) syz_usb_connect$uac1(0x4, 0x81, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0) 1.189796195s ago: executing program 4 (id=507): syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x74, 0x24, 0x88, 0x20, 0x1a0a, 0x102, 0x376a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0xe4, 0x0, 0x3, "", [{{0x9, 0x4, 0x83, 0x0, 0x0, 0x75, 0x41, 0x2e, 0x1}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x3001}}, {0xc8, &(0x7f0000000300)=@string={0xc8, 0x3, "5ca5b4e735371fa7f9e9fc1bf4bf503d2eb6e08a6e559fd3ea67c844ed75f7b5f54af04da6cd9f1d4a3b3e7f3a413c42492b441cdfac4b848e746cee25f4efd58833c07a1fc6e1245f7c6eaffc666b2777adef2748a014d7282156f3636fa0b8309399f78dcf183bda54a24373faa724a6e576adbefc1dc9c757eb1e1030bea3b90af373d7dfd81fb826f35ce6005c120812d3ee5cd66a962265555fede1f09921115f2cf216bd2773efdc9a15bf77d30332e4b771d7b96f95a04726323e2c7f4f336a326087"}}, {0xa1, &(0x7f0000000180)=@string={0xa1, 0x3, "96aa511c397422a247ceff85ffaa35cc3cae9135989654b4aaabe06baf2d43235b66318ca2b9d21118c51da069cd936190cb25bc017de4f839b84a054b0fdc2473950213728943e2d86377101cbeee3e922c5660f2a6db56c65c1368282146d13015c9e0782e99d0bf573f61a4303a02ff1bf5dab71eceb3f718d4c6e7a110a8c130fcb51e50559ca1f0866c162650913ae698ef94399e7b6c90dd8e8eca02"}}]}) 702.639025ms ago: executing program 4 (id=508): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x32, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xd, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x10, 0x4}}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x10001e5}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x70, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)=@x86={0x7, 0x1, 0x8e, 0x0, 0x859000, 0x7, 0x1, 0xe, 0x12, 0x8, 0x7c, 0x8, 0x0, 0xe84, 0xb6, 0x99, 0x0, 0x1, 0xff, '\x00', 0x9, 0x401}) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r9, &(0x7f00000003c0)={0x2c, 0x2, r11, 0x20000000}, 0x10) recvmmsg(r9, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x100, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000000)={0x6, 0x5, 0x800000000000102}) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) readlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000240)=""/220, 0xdc) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB=' \n,'], 0x0, 0x0, 0x0, 0x0}, 0x0) 431.833841ms ago: executing program 1 (id=509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setrlimit(0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)=ANY=[@ANYBLOB="2c0000001900150000000000fffffffe0a0000000202000000000000100004"], 0x2c}], 0x1}, 0x0) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x78, 0x65, 0x0, 0x82, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x3, "c4a1b8e01ba9a62c1c2e3cf577a8d851045ef41945f383ccf137201eb4dd7df2", "98994d19627a481b27e612cf41970f3f", {"00855f5dc8025460287d5461246a68a5", "0400"}}}}}}}}, 0x8e) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x10) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e23, @rand_addr=0xc8000000}}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write(r7, &(0x7f0000000180)="b4", 0x1) recvmmsg$unix(r7, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000033240)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="401204000000aeeb00b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 97.776698ms ago: executing program 4 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3095a000", @ANYRES16=r0, @ANYBLOB="417627bd7000fbdbdf2501000000000000000141000000140017000000ff"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) 70.438899ms ago: executing program 4 (id=511): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_setup(0xfff, &(0x7f0000000100)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000700)={[0x4]}, 0x8, 0x800) r7 = eventfd(0x7f) io_submit(r1, 0x4, &(0x7f00000007c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x5, r2, &(0x7f0000000140)="20a37815623a85bed1079013ad075a1ac1522b9164", 0x15, 0x800, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x7f, r3, &(0x7f0000000500)="58715bf898b1486e7e4050000d31678eb7357c823d6dbf594668b5da0420355752121a4bcc2f04100937b2985e39ec2df99f4ce2809c38b3519d1483ea76d477bcbc5f73d53769d362d93fae2b8c8008791fb7a2071b418e1e6a18490af3cfa4fafe5b0e1649a242169ed70d3f1a8cb89e2bf3e7ef3c2e87ba66d583e3bc0a7c19f8c47b9c88820b09f067db1869206263d26bd83685ec", 0x97, 0x2, 0x0, 0x3, r4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xc, 0x2, r5, &(0x7f0000000640)="73376c5a568c358b7f5558993c1111fce006587e5fb3ae1344d5d8a81e4405d651135338b246ef066770eead88822f31b5d5ab4f9d9b71c890c94680c86bfaa66827fbafa449451b08919c70a53b481b2301902273cc8a088a057129bc9110e43cadf4602c3d617288ef4badff6bab59d670a18b", 0x74, 0xa9, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x7, r6, &(0x7f0000000740)="dfa612193024e4597b74c80d1c7646545889072463e2d5eb073f95cd919827de1139cf04f86dcee5c1fc8bef", 0x2c, 0x8000000000000000, 0x0, 0x1, r7}]) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000400)) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xe8e, 0x0, 0x2, 0x156}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) unshare(0x24020400) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x8591, 0x80, 0x3, 0x3d9}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb470, 0x200, 0x1ffe, 0x10000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b98, 0x10000, 0x0, 0x30b, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb10, 0x10, 0x1, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc56e, 0x40, 0x0, 0x30f}}], 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r12, '\x00', {0xfff8, 0x4, 0x0, 0x0}}, 0x0) 0s ago: executing program 33 (id=511): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_setup(0xfff, &(0x7f0000000100)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000700)={[0x4]}, 0x8, 0x800) r7 = eventfd(0x7f) io_submit(r1, 0x4, &(0x7f00000007c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x5, r2, &(0x7f0000000140)="20a37815623a85bed1079013ad075a1ac1522b9164", 0x15, 0x800, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x7f, r3, &(0x7f0000000500)="58715bf898b1486e7e4050000d31678eb7357c823d6dbf594668b5da0420355752121a4bcc2f04100937b2985e39ec2df99f4ce2809c38b3519d1483ea76d477bcbc5f73d53769d362d93fae2b8c8008791fb7a2071b418e1e6a18490af3cfa4fafe5b0e1649a242169ed70d3f1a8cb89e2bf3e7ef3c2e87ba66d583e3bc0a7c19f8c47b9c88820b09f067db1869206263d26bd83685ec", 0x97, 0x2, 0x0, 0x3, r4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xc, 0x2, r5, &(0x7f0000000640)="73376c5a568c358b7f5558993c1111fce006587e5fb3ae1344d5d8a81e4405d651135338b246ef066770eead88822f31b5d5ab4f9d9b71c890c94680c86bfaa66827fbafa449451b08919c70a53b481b2301902273cc8a088a057129bc9110e43cadf4602c3d617288ef4badff6bab59d670a18b", 0x74, 0xa9, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x7, r6, &(0x7f0000000740)="dfa612193024e4597b74c80d1c7646545889072463e2d5eb073f95cd919827de1139cf04f86dcee5c1fc8bef", 0x2c, 0x8000000000000000, 0x0, 0x1, r7}]) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000400)) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xe8e, 0x0, 0x2, 0x156}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) unshare(0x24020400) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x8591, 0x80, 0x3, 0x3d9}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb470, 0x200, 0x1ffe, 0x10000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b98, 0x10000, 0x0, 0x30b, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb10, 0x10, 0x1, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc56e, 0x40, 0x0, 0x30f}}], 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r12, '\x00', {0xfff8, 0x4, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): .3.245" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 95.060202][ T1082] netlink: 'syz.0.243': attribute type 4 has an invalid length. [ 95.081977][ T1085] rust_binder: Failure in copy_transaction_data: EINVAL [ 95.082023][ T1085] rust_binder: 1081:1085 transaction to 1081 failed: EINVAL [ 95.205764][ T31] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 95.335535][ T311] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 95.355534][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.365629][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 95.371824][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.382021][ T31] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.391019][ T31] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 95.400120][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.409223][ T31] usb 4-1: config 0 descriptor?? [ 95.465578][ T311] usb 1-1: device descriptor read/64, error -71 [ 95.516818][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.527897][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.538043][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.551170][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.560439][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.571548][ T10] usb 5-1: config 0 descriptor?? [ 95.643907][ T1098] process 'syz.1.252' launched './file0' with NULL argv: empty string added [ 95.703399][ T1100] FAULT_INJECTION: forcing a failure. [ 95.703399][ T1100] name failslab, interval 1, probability 0, space 0, times 0 [ 95.716149][ T311] usb 1-1: device descriptor read/64, error -71 [ 95.716284][ T1100] CPU: 0 UID: 0 PID: 1100 Comm: syz.1.253 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 95.716424][ T1100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 95.716458][ T1100] Call Trace: [ 95.716497][ T1100] [ 95.716519][ T1100] __dump_stack+0x21/0x30 [ 95.716613][ T1100] dump_stack_lvl+0x140/0x1c0 [ 95.716694][ T1100] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.716777][ T1100] dump_stack+0x19/0x20 [ 95.716860][ T1100] should_fail_ex+0x3c2/0x510 [ 95.716926][ T1100] should_failslab+0xac/0x100 [ 95.716993][ T1100] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 95.717051][ T1100] ? security_context_to_sid_core+0xde/0x5c0 [ 95.717140][ T1100] kmemdup_nul+0x5a/0x1a0 [ 95.717241][ T1100] security_context_to_sid_core+0xde/0x5c0 [ 95.717342][ T1100] ? ovl_other_xattr_get+0x114/0x160 [ 95.717418][ T1100] ? security_context_to_sid+0x60/0x60 [ 95.717495][ T1100] ? kasan_save_alloc_info+0x3a/0x50 [ 95.717581][ T1100] ? __cfi_ovl_other_xattr_get+0x10/0x10 [ 95.717653][ T1100] ? __vfs_getxattr+0x445/0x480 [ 95.717720][ T1100] security_context_to_sid_default+0x3f/0x50 [ 95.717808][ T1100] inode_doinit_use_xattr+0x1a7/0x550 [ 95.717883][ T1100] inode_doinit_with_dentry+0x7c3/0xde0 [ 95.717958][ T1100] ? sb_finish_set_opts+0xa40/0xa40 [ 95.718031][ T1100] ? __kasan_slab_free+0x6a/0x80 [ 95.718096][ T1100] selinux_d_instantiate+0x2b/0x40 [ 95.718170][ T1100] security_d_instantiate+0xb8/0xf0 [ 95.718236][ T1100] d_splice_alias+0x71/0x3a0 [ 95.718308][ T1100] ovl_lookup+0x1b8c/0x1d20 [ 95.718382][ T1100] ? __d_lookup_rcu+0x334/0x3c0 [ 95.718456][ T1100] ? __cfi_ovl_lookup+0x10/0x10 [ 95.718521][ T1100] ? __cfi_d_alloc_parallel+0x10/0x10 [ 95.718585][ T1100] ? rwsem_read_trylock+0x275/0x5a0 [ 95.718672][ T1100] ? __cfi_ovl_permission+0x10/0x10 [ 95.718744][ T1100] ? downgrade_write+0x470/0x470 [ 95.718815][ T1100] __lookup_slow+0x2e5/0x420 [ 95.718881][ T1100] ? lookup_one_len+0x300/0x300 [ 95.718953][ T1100] ? down_read+0x7f/0xe0 [ 95.719044][ T1100] lookup_slow+0x57/0x80 [ 95.719129][ T1100] walk_component+0x308/0x450 [ 95.719199][ T1100] path_lookupat+0x155/0x440 [ 95.719257][ T1100] filename_lookup+0x22d/0x5a0 [ 95.719330][ T1100] ? __cfi_filename_lookup+0x10/0x10 [ 95.719402][ T1100] ? check_stack_object+0x81/0x150 [ 95.719467][ T1100] ? strncpy_from_user+0x14f/0x280 [ 95.719533][ T1100] ? __kasan_check_write+0x18/0x20 [ 95.719587][ T1100] ? getname_flags+0x203/0x6b0 [ 95.719650][ T1100] user_path_at+0x42/0x60 [ 95.719723][ T1100] path_setxattr+0x250/0x5a0 [ 95.719787][ T1100] ? simple_xattrs_free+0x180/0x180 [ 95.719875][ T1100] ? __cfi_ksys_write+0x10/0x10 [ 95.719943][ T1100] __x64_sys_setxattr+0xc9/0xe0 [ 95.719997][ T1100] x64_sys_call+0x2d94/0x2ee0 [ 95.720052][ T1100] do_syscall_64+0x57/0xf0 [ 95.720108][ T1100] ? clear_bhb_loop+0x50/0xa0 [ 95.720194][ T1100] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.720259][ T1100] RIP: 0033:0x7f0b2959de99 [ 95.720320][ T1100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.720371][ T1100] RSP: 002b:00007f0b2a410028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 95.720437][ T1100] RAX: ffffffffffffffda RBX: 00007f0b29825fa0 RCX: 00007f0b2959de99 [ 95.720500][ T1100] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 95.720548][ T1100] RBP: 00007f0b2a410090 R08: 0000000000000001 R09: 0000000000000000 [ 95.720589][ T1100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 95.720632][ T1100] R13: 00007f0b29826038 R14: 00007f0b29825fa0 R15: 00007ffef71c8538 [ 95.720685][ T1100] [ 95.720863][ T1100] SELinux: inode_doinit_use_xattr: context_to_sid(root:object_r:user_tmpfs_t) returned 12 for dev=overlay ino=512 [ 95.975588][ T311] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 96.089024][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 96.111944][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 96.119446][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 96.127787][ T10] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 96.140485][ T10] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 96.225551][ T311] usb 1-1: device descriptor read/64, error -71 [ 96.375636][ T445] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 96.378124][ T1001] usb 4-1: USB disconnect, device number 36 [ 96.432405][ T1107] 9p: Unknown Cache mode or invalid value dev/kvm [ 96.443836][ T31] usb 5-1: USB disconnect, device number 6 [ 96.465597][ T311] usb 1-1: device descriptor read/64, error -71 [ 96.482610][ T1107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 96.525565][ T445] usb 2-1: device descriptor read/64, error -71 [ 96.575642][ T311] usb usb1-port1: attempt power cycle [ 96.765680][ T445] usb 2-1: device descriptor read/64, error -71 [ 96.795572][ T1001] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 96.915556][ T311] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 96.926216][ T1001] usb 4-1: device descriptor read/64, error -71 [ 96.936669][ T311] usb 1-1: device descriptor read/8, error -71 [ 97.015571][ T445] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 97.066905][ T311] usb 1-1: device descriptor read/8, error -71 [ 97.145544][ T445] usb 2-1: device descriptor read/64, error -71 [ 97.165742][ T1001] usb 4-1: device descriptor read/64, error -71 [ 97.305586][ T311] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 97.326731][ T311] usb 1-1: device descriptor read/8, error -71 [ 97.395542][ T445] usb 2-1: device descriptor read/64, error -71 [ 97.406453][ T1001] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 97.456645][ T311] usb 1-1: device descriptor read/8, error -71 [ 97.505640][ T445] usb usb2-port1: attempt power cycle [ 97.545674][ T1001] usb 4-1: device descriptor read/64, error -71 [ 97.566021][ T311] usb usb1-port1: unable to enumerate USB device [ 97.785549][ T1001] usb 4-1: device descriptor read/64, error -71 [ 97.845547][ T445] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 97.866666][ T445] usb 2-1: device descriptor read/8, error -71 [ 97.895668][ T1001] usb usb4-port1: attempt power cycle [ 97.968532][ T1116] ip6gretap0: entered promiscuous mode [ 97.974156][ T1116] ip6gretap0: entered allmulticast mode [ 97.996545][ T445] usb 2-1: device descriptor read/8, error -71 [ 98.235554][ T445] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 98.235563][ T1001] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 98.255652][ T311] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 98.264272][ T1001] usb 4-1: device descriptor read/8, error -71 [ 98.266925][ T445] usb 2-1: device descriptor read/8, error -71 [ 98.396666][ T1001] usb 4-1: device descriptor read/8, error -71 [ 98.405645][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 98.407143][ T445] usb 2-1: device descriptor read/8, error -71 [ 98.412515][ T311] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 98.427226][ T311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.437998][ T311] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.448022][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.456221][ T311] usb 5-1: Product: syz [ 98.460439][ T311] usb 5-1: Manufacturer: syz [ 98.465030][ T311] usb 5-1: SerialNumber: syz [ 98.515609][ T46] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 98.525746][ T445] usb usb2-port1: unable to enumerate USB device [ 98.635547][ T1001] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 98.656640][ T1001] usb 4-1: device descriptor read/8, error -71 [ 98.665679][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 98.673608][ T311] usb 5-1: 0:2 : does not exist [ 98.673687][ T46] usb 1-1: config 43 has an invalid interface number: 162 but max is 0 [ 98.687086][ T46] usb 1-1: config 43 has no interface number 0 [ 98.693346][ T46] usb 1-1: config 43 interface 162 altsetting 139 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 98.706727][ T46] usb 1-1: config 43 interface 162 has no altsetting 0 [ 98.715307][ T46] usb 1-1: New USB device found, idVendor=0af0, idProduct=8200, bcdDevice=3e.98 [ 98.724539][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.732680][ T311] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 98.739956][ T46] usb 1-1: Product: syz [ 98.744128][ T46] usb 1-1: Manufacturer: syz [ 98.748850][ T46] usb 1-1: SerialNumber: syz [ 98.757722][ T311] usb 5-1: USB disconnect, device number 7 [ 98.770433][ T1078] udevd[1078]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.789216][ T1001] usb 4-1: device descriptor read/8, error -71 [ 98.905657][ T1001] usb usb4-port1: unable to enumerate USB device [ 98.958007][ T46] usb 1-1: USB disconnect, device number 36 [ 99.203434][ T1129] FAULT_INJECTION: forcing a failure. [ 99.203434][ T1129] name failslab, interval 1, probability 0, space 0, times 0 [ 99.216144][ T1129] CPU: 1 UID: 0 PID: 1129 Comm: syz.4.262 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 99.216182][ T1129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 99.216197][ T1129] Call Trace: [ 99.216204][ T1129] [ 99.216212][ T1129] __dump_stack+0x21/0x30 [ 99.216251][ T1129] dump_stack_lvl+0x140/0x1c0 [ 99.216274][ T1129] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.216296][ T1129] ? avc_has_perm_noaudit+0x289/0x360 [ 99.216316][ T1129] dump_stack+0x19/0x20 [ 99.216337][ T1129] should_fail_ex+0x3c2/0x510 [ 99.216355][ T1129] should_failslab+0xac/0x100 [ 99.216374][ T1129] __kmalloc_cache_noprof+0x41/0x470 [ 99.216391][ T1129] ? ovl_encode_real_fh+0xe4/0x440 [ 99.216408][ T1129] ovl_encode_real_fh+0xe4/0x440 [ 99.216423][ T1129] ? __cfi_ovl_encode_real_fh+0x10/0x10 [ 99.216440][ T1129] ovl_copy_up_flags+0xb55/0x2d10 [ 99.216460][ T1129] ? ovl_maybe_copy_up+0x170/0x170 [ 99.216481][ T1129] ? __kasan_check_write+0x18/0x20 [ 99.216496][ T1129] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 99.216514][ T1129] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 99.216533][ T1129] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 99.216551][ T1129] ? __wake_up+0x169/0x190 [ 99.216567][ T1129] ? _raw_spin_unlock+0x45/0x60 [ 99.216584][ T1129] ? __d_add+0x636/0xac0 [ 99.216601][ T1129] ? d_splice_alias+0x115/0x3a0 [ 99.216617][ T1129] ? ovl_lookup+0x1b8c/0x1d20 [ 99.216637][ T1129] ? __d_lookup_rcu+0x334/0x3c0 [ 99.216660][ T1129] ? avc_has_perm+0x155/0x240 [ 99.216677][ T1129] ? __cfi_avc_has_perm+0x10/0x10 [ 99.216695][ T1129] ovl_copy_up+0x1b/0x30 [ 99.216710][ T1129] ovl_xattr_set+0x2d7/0x410 [ 99.216728][ T1129] ? ovl_xattr_escape_name+0x240/0x240 [ 99.216747][ T1129] ovl_other_xattr_set+0x3e/0x50 [ 99.216765][ T1129] ? __cfi_ovl_other_xattr_set+0x10/0x10 [ 99.216783][ T1129] __vfs_setxattr+0x453/0x4a0 [ 99.216808][ T1129] __vfs_setxattr_noperm+0x12d/0x670 [ 99.216833][ T1129] __vfs_setxattr_locked+0x212/0x240 [ 99.216857][ T1129] vfs_setxattr+0x16b/0x2f0 [ 99.216881][ T1129] ? __cfi_vfs_setxattr+0x10/0x10 [ 99.216904][ T1129] ? mnt_want_write+0x321/0x510 [ 99.216926][ T1129] path_setxattr+0x337/0x5a0 [ 99.216943][ T1129] ? simple_xattrs_free+0x180/0x180 [ 99.216974][ T1129] ? __cfi_ksys_write+0x10/0x10 [ 99.216991][ T1129] __x64_sys_setxattr+0xc9/0xe0 [ 99.217007][ T1129] x64_sys_call+0x2d94/0x2ee0 [ 99.217021][ T1129] do_syscall_64+0x57/0xf0 [ 99.217038][ T1129] ? clear_bhb_loop+0x50/0xa0 [ 99.217058][ T1129] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.217078][ T1129] RIP: 0033:0x7fca5fd9de99 [ 99.217092][ T1129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.217106][ T1129] RSP: 002b:00007fca60d10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 99.217123][ T1129] RAX: ffffffffffffffda RBX: 00007fca60025fa0 RCX: 00007fca5fd9de99 [ 99.217135][ T1129] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 99.217146][ T1129] RBP: 00007fca60d10090 R08: 0000000000000001 R09: 0000000000000000 [ 99.217157][ T1129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.217166][ T1129] R13: 00007fca60026038 R14: 00007fca60025fa0 R15: 00007ffc7e297538 [ 99.217180][ T1129] [ 99.581538][ T1140] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 99.594035][ T1142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 99.650094][ T1143] loop7: detected capacity change from 0 to 7 [ 99.656882][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.666121][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.674089][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.683348][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.691350][ T1143] loop7: unable to read partition table [ 99.697371][ T1143] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 99.711053][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.720217][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.730071][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.739280][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.747257][ T445] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 99.755214][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.755642][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 99.755687][ T36] audit: type=1400 audit(1784651888.840:310): avc: denied { map } for pid=1136 comm="syz.4.265" path="socket:[12760]" dev="sockfs" ino=12760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 99.764397][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.802601][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.811818][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.820367][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.829563][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.865545][ T1001] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 99.895516][ T10] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 99.908427][ T36] audit: type=1400 audit(1784651889.000:311): avc: denied { read write } for pid=1152 comm="syz.4.270" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.940859][ T36] audit: type=1400 audit(1784651889.000:312): avc: denied { open } for pid=1152 comm="syz.4.270" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.947537][ T1153] ,$V: renamed from lo (while UP) [ 99.973696][ T36] audit: type=1400 audit(1784651889.000:313): avc: denied { ioctl } for pid=1152 comm="syz.4.270" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 100.005310][ T445] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.015706][ T1001] usb 1-1: Using ep0 maxpacket: 8 [ 100.016444][ T445] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.024207][ T1001] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.040718][ T445] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.045379][ T1001] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 100.054061][ T445] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.060659][ T1001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.069469][ T445] usb 2-1: Product: syz [ 100.076638][ T1001] usb 1-1: Product: syz [ 100.081014][ T445] usb 2-1: Manufacturer: syz [ 100.084981][ T1001] usb 1-1: Manufacturer: syz [ 100.090083][ T445] usb 2-1: SerialNumber: syz [ 100.094600][ T1001] usb 1-1: SerialNumber: syz [ 100.104281][ T10] usb 4-1: config 24 has an invalid descriptor of length 100, skipping remainder of the config [ 100.114737][ T10] usb 4-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 100.128521][ T10] usb 4-1: string descriptor 0 read error: -22 [ 100.134786][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 100.144132][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.330864][ T1001] usb 1-1: selecting invalid altsetting 1 [ 100.339568][ T1001] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 100.349864][ T1001] usb 1-1: USB disconnect, device number 37 [ 100.356422][ T10] usb 4-1: USB disconnect, device number 41 [ 100.372269][ T1133] udevd[1133]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.392335][ T445] cdc_ncm 2-1:1.0: bind() failure [ 100.400302][ T445] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 100.408527][ T445] cdc_ncm 2-1:1.1: bind() failure [ 100.416741][ T445] usb 2-1: USB disconnect, device number 40 [ 100.637069][ T1158] FAULT_INJECTION: forcing a failure. [ 100.637069][ T1158] name failslab, interval 1, probability 0, space 0, times 0 [ 100.650137][ T1158] CPU: 1 UID: 0 PID: 1158 Comm: syz.4.272 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 100.650172][ T1158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 100.650187][ T1158] Call Trace: [ 100.650195][ T1158] [ 100.650205][ T1158] __dump_stack+0x21/0x30 [ 100.650240][ T1158] dump_stack_lvl+0x140/0x1c0 [ 100.650268][ T1158] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.650291][ T1158] dump_stack+0x19/0x20 [ 100.650316][ T1158] should_fail_ex+0x3c2/0x510 [ 100.650334][ T1158] should_failslab+0xac/0x100 [ 100.650354][ T1158] __kmalloc_node_noprof+0x69/0x500 [ 100.650371][ T1158] ? __kvmalloc_node_noprof+0x128/0x300 [ 100.650396][ T1158] __kvmalloc_node_noprof+0x128/0x300 [ 100.650421][ T1158] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 100.650450][ T1158] ? avc_has_perm_noaudit+0x289/0x360 [ 100.650470][ T1158] simple_xattr_alloc+0x67/0x140 [ 100.650489][ T1158] simple_xattr_set+0x45/0x300 [ 100.650507][ T1158] shmem_xattr_handler_set+0x198/0x2d0 [ 100.650531][ T1158] ? __cfi_shmem_xattr_handler_set+0x10/0x10 [ 100.650553][ T1158] __vfs_setxattr+0x453/0x4a0 [ 100.650578][ T1158] __vfs_setxattr_noperm+0x12d/0x670 [ 100.650603][ T1158] __vfs_setxattr_locked+0x212/0x240 [ 100.650628][ T1158] vfs_setxattr+0x16b/0x2f0 [ 100.650652][ T1158] ? __cfi_vfs_setxattr+0x10/0x10 [ 100.650676][ T1158] ? ovl_encode_real_fh+0x26e/0x440 [ 100.650694][ T1158] ovl_set_impure+0x1d9/0x350 [ 100.650711][ T1158] ovl_copy_up_flags+0xc5e/0x2d10 [ 100.650737][ T1158] ? ovl_maybe_copy_up+0x170/0x170 [ 100.650753][ T1158] ? __kasan_check_write+0x18/0x20 [ 100.650768][ T1158] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 100.650786][ T1158] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 100.650805][ T1158] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 100.650823][ T1158] ? __wake_up+0x169/0x190 [ 100.650840][ T1158] ? _raw_spin_unlock+0x45/0x60 [ 100.650857][ T1158] ? __d_add+0x636/0xac0 [ 100.650875][ T1158] ? d_splice_alias+0x115/0x3a0 [ 100.650891][ T1158] ? ovl_lookup+0x1b8c/0x1d20 [ 100.650911][ T1158] ? __d_lookup_rcu+0x334/0x3c0 [ 100.650934][ T1158] ? avc_has_perm+0x155/0x240 [ 100.650952][ T1158] ? __cfi_avc_has_perm+0x10/0x10 [ 100.650970][ T1158] ovl_copy_up+0x1b/0x30 [ 100.650984][ T1158] ovl_xattr_set+0x2d7/0x410 [ 100.651002][ T1158] ? ovl_xattr_escape_name+0x240/0x240 [ 100.651022][ T1158] ovl_other_xattr_set+0x3e/0x50 [ 100.651040][ T1158] ? __cfi_ovl_other_xattr_set+0x10/0x10 [ 100.651059][ T1158] __vfs_setxattr+0x453/0x4a0 [ 100.651084][ T1158] __vfs_setxattr_noperm+0x12d/0x670 [ 100.651110][ T1158] __vfs_setxattr_locked+0x212/0x240 [ 100.651135][ T1158] vfs_setxattr+0x16b/0x2f0 [ 100.651159][ T1158] ? __cfi_vfs_setxattr+0x10/0x10 [ 100.651183][ T1158] ? mnt_want_write+0x321/0x510 [ 100.651204][ T1158] path_setxattr+0x337/0x5a0 [ 100.651222][ T1158] ? simple_xattrs_free+0x180/0x180 [ 100.651244][ T1158] ? __cfi_ksys_write+0x10/0x10 [ 100.651262][ T1158] __x64_sys_setxattr+0xc9/0xe0 [ 100.651276][ T1158] x64_sys_call+0x2d94/0x2ee0 [ 100.651291][ T1158] do_syscall_64+0x57/0xf0 [ 100.651307][ T1158] ? clear_bhb_loop+0x50/0xa0 [ 100.651328][ T1158] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.651348][ T1158] RIP: 0033:0x7fca5fd9de99 [ 100.651362][ T1158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.651376][ T1158] RSP: 002b:00007fca60d10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 100.651393][ T1158] RAX: ffffffffffffffda RBX: 00007fca60025fa0 RCX: 00007fca5fd9de99 [ 100.651405][ T1158] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 100.651416][ T1158] RBP: 00007fca60d10090 R08: 0000000000000001 R09: 0000000000000000 [ 100.651426][ T1158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.651441][ T1158] R13: 00007fca60026038 R14: 00007fca60025fa0 R15: 00007ffc7e297538 [ 100.651454][ T1158] [ 101.044513][ T1167] netlink: 88 bytes leftover after parsing attributes in process `syz.3.275'. [ 101.108552][ T36] audit: type=1400 audit(1784651890.200:314): avc: denied { append } for pid=1170 comm="syz.3.277" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.275517][ T10] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 101.315577][ T1001] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 101.415576][ T445] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 101.427320][ T10] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 101.438226][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 101.447945][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 101.461804][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.470941][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.475579][ T1001] usb 5-1: Using ep0 maxpacket: 16 [ 101.478977][ T10] usb 2-1: SerialNumber: syz [ 101.488867][ T368] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 101.496803][ T1001] usb 5-1: unable to get BOS descriptor or descriptor too short [ 101.505446][ T1001] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 101.515722][ T1001] usb 5-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.528235][ T1001] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 101.537413][ T1001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.545422][ T1001] usb 5-1: Product: syz [ 101.549685][ T1001] usb 5-1: Manufacturer: syz [ 101.554311][ T1001] usb 5-1: SerialNumber: syz [ 101.597002][ T445] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.605112][ T445] usb 1-1: not running at top speed; connect to a high speed hub [ 101.615349][ T445] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 101.624499][ T445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.632664][ T445] usb 1-1: Product: syz [ 101.637077][ T445] usb 1-1: Manufacturer: syz [ 101.641728][ T445] usb 1-1: SerialNumber: syz [ 101.655526][ T368] usb 4-1: Using ep0 maxpacket: 32 [ 101.661927][ T368] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 101.670214][ T368] usb 4-1: config 0 has no interface number 0 [ 101.676391][ T368] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 101.688063][ T368] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 101.697191][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.705229][ T368] usb 4-1: Product: syz [ 101.709655][ T368] usb 4-1: Manufacturer: syz [ 101.714323][ T36] audit: type=1400 audit(1784651890.800:315): avc: denied { cmd } for pid=1164 comm="iou-wrk-1165" path="/77/file2" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 101.737075][ T368] usb 4-1: SerialNumber: syz [ 101.742957][ T10] cdc_acm 2-1:1.0: skipping garbage [ 101.748558][ T368] usb 4-1: config 0 descriptor?? [ 101.755428][ T1180] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 101.763551][ T1001] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 101.765921][ T10] usb 2-1: USB disconnect, device number 41 [ 101.772392][ T1001] snd-usb-audio 5-1:5.0: probe with driver snd-usb-audio failed with error -22 [ 101.978805][ T1180] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 102.167895][ T445] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 102.174891][ T445] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 102.180900][ T445] usb 1-1: 0:3 : does not exist [ 102.185831][ T445] usb 1-1: 0:4 : does not exist [ 102.190769][ T445] usb 1-1: 0:5 : does not exist [ 102.195858][ T445] usb 1-1: 0:6 : does not exist [ 102.200770][ T445] usb 1-1: 0:7 : does not exist [ 102.205750][ T445] usb 1-1: 0:8 : does not exist [ 102.210667][ T445] usb 1-1: 0:9 : does not exist [ 102.215798][ T445] usb 1-1: 0:10 : does not exist [ 102.220785][ T445] usb 1-1: 0:11 : does not exist [ 102.225809][ T445] usb 1-1: 0:12 : does not exist [ 102.230805][ T445] usb 1-1: 0:13 : does not exist [ 102.235812][ T445] usb 1-1: 0:14 : does not exist [ 102.240913][ T445] usb 1-1: unit 7 not found! [ 102.253587][ T445] usb 1-1: USB disconnect, device number 38 [ 102.263261][ T1001] usb 5-1: USB disconnect, device number 8 [ 102.278235][ T1078] udevd[1078]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.314595][ T1133] udevd[1133]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 102.396270][ T368] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 102.406636][ T368] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 132 [ 102.606962][ T1001] usb 4-1: USB disconnect, device number 42 [ 102.725541][ T445] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 102.733719][ T36] audit: type=1400 audit(1784651891.820:316): avc: denied { create } for pid=1203 comm="syz.4.283" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.765244][ T1209] FAULT_INJECTION: forcing a failure. [ 102.765244][ T1209] name failslab, interval 1, probability 0, space 0, times 0 [ 102.777970][ T1209] CPU: 0 UID: 0 PID: 1209 Comm: syz.4.284 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 102.778005][ T1209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 102.778020][ T1209] Call Trace: [ 102.778028][ T1209] [ 102.778042][ T1209] __dump_stack+0x21/0x30 [ 102.778071][ T1209] dump_stack_lvl+0x140/0x1c0 [ 102.778092][ T1209] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.778114][ T1209] ? __kasan_kmalloc+0x96/0xb0 [ 102.778134][ T1209] dump_stack+0x19/0x20 [ 102.778154][ T1209] should_fail_ex+0x3c2/0x510 [ 102.778172][ T1209] should_failslab+0xac/0x100 [ 102.778192][ T1209] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 102.778210][ T1209] ? simple_xattr_set+0x5e/0x300 [ 102.778228][ T1209] ? __asan_memcpy+0x5a/0x80 [ 102.778245][ T1209] kstrdup+0x4d/0x130 [ 102.778268][ T1209] simple_xattr_set+0x5e/0x300 [ 102.778286][ T1209] shmem_xattr_handler_set+0x198/0x2d0 [ 102.778308][ T1209] ? __cfi_shmem_xattr_handler_set+0x10/0x10 [ 102.778330][ T1209] __vfs_setxattr+0x453/0x4a0 [ 102.778369][ T1209] __vfs_setxattr_noperm+0x12d/0x670 [ 102.778399][ T1209] __vfs_setxattr_locked+0x212/0x240 [ 102.778424][ T1209] vfs_setxattr+0x16b/0x2f0 [ 102.778448][ T1209] ? __cfi_vfs_setxattr+0x10/0x10 [ 102.778472][ T1209] ? ovl_encode_real_fh+0x26e/0x440 [ 102.778494][ T1209] ovl_set_impure+0x1d9/0x350 [ 102.778512][ T1209] ovl_copy_up_flags+0xc5e/0x2d10 [ 102.778532][ T1209] ? ovl_maybe_copy_up+0x170/0x170 [ 102.778547][ T1209] ? __kasan_check_write+0x18/0x20 [ 102.778562][ T1209] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 102.778580][ T1209] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 102.778599][ T1209] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 102.778617][ T1209] ? __wake_up+0x169/0x190 [ 102.778634][ T1209] ? _raw_spin_unlock+0x45/0x60 [ 102.778655][ T1209] ? __d_add+0x636/0xac0 [ 102.778676][ T1209] ? d_splice_alias+0x115/0x3a0 [ 102.778697][ T1209] ? ovl_lookup+0x1b8c/0x1d20 [ 102.778717][ T1209] ? __d_lookup_rcu+0x334/0x3c0 [ 102.778745][ T1209] ? avc_has_perm+0x155/0x240 [ 102.778764][ T1209] ? __cfi_avc_has_perm+0x10/0x10 [ 102.778782][ T1209] ovl_copy_up+0x1b/0x30 [ 102.778801][ T1209] ovl_xattr_set+0x2d7/0x410 [ 102.778820][ T1209] ? ovl_xattr_escape_name+0x240/0x240 [ 102.778839][ T1209] ovl_other_xattr_set+0x3e/0x50 [ 102.778856][ T1209] ? __cfi_ovl_other_xattr_set+0x10/0x10 [ 102.778898][ T1209] __vfs_setxattr+0x453/0x4a0 [ 102.778940][ T1209] __vfs_setxattr_noperm+0x12d/0x670 [ 102.778967][ T1209] __vfs_setxattr_locked+0x212/0x240 [ 102.778992][ T1209] vfs_setxattr+0x16b/0x2f0 [ 102.779016][ T1209] ? __cfi_vfs_setxattr+0x10/0x10 [ 102.779040][ T1209] ? mnt_want_write+0x321/0x510 [ 102.779061][ T1209] path_setxattr+0x337/0x5a0 [ 102.779079][ T1209] ? simple_xattrs_free+0x180/0x180 [ 102.779101][ T1209] ? __cfi_ksys_write+0x10/0x10 [ 102.779119][ T1209] __x64_sys_setxattr+0xc9/0xe0 [ 102.779134][ T1209] x64_sys_call+0x2d94/0x2ee0 [ 102.779149][ T1209] do_syscall_64+0x57/0xf0 [ 102.779165][ T1209] ? clear_bhb_loop+0x50/0xa0 [ 102.779186][ T1209] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.779206][ T1209] RIP: 0033:0x7fca5fd9de99 [ 102.779221][ T1209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.779237][ T1209] RSP: 002b:00007fca60d10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 102.779255][ T1209] RAX: ffffffffffffffda RBX: 00007fca60025fa0 RCX: 00007fca5fd9de99 [ 102.779266][ T1209] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 102.779277][ T1209] RBP: 00007fca60d10090 R08: 0000000000000001 R09: 0000000000000000 [ 102.779287][ T1209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.779296][ T1209] R13: 00007fca60026038 R14: 00007fca60025fa0 R15: 00007ffc7e297538 [ 102.779310][ T1209] [ 103.170673][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 103.180151][ T9] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.257008][ T445] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.267933][ T445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.278907][ T445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.288744][ T445] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.306537][ T445] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 103.315669][ T445] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 103.323781][ T445] usb 1-1: Manufacturer: syz [ 103.329420][ T445] usb 1-1: config 0 descriptor?? [ 103.465530][ T1001] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 103.545936][ T445] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 103.553368][ T445] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 103.563282][ T445] appleir 0003:05AC:8243.000C: hiddev96,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 103.579096][ T445] usb 1-1: USB disconnect, device number 39 [ 103.585598][ T349] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 103.615510][ T1001] usb 5-1: Using ep0 maxpacket: 16 [ 103.623220][ T1001] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.633039][ T1001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.643884][ T1001] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.660860][ T1001] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 67, changing to 7 [ 103.662182][ T1224] fido_id[1224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 103.688151][ T1001] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.698741][ T1001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.707335][ T1001] usb 5-1: Product: syz [ 103.714447][ T1001] usb 5-1: Manufacturer: syz [ 103.721846][ T1001] usb 5-1: SerialNumber: syz [ 103.737666][ T349] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 103.746827][ T349] usb 2-1: can't read configurations, error -61 [ 103.875533][ T349] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 103.939155][ T1001] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 103.948234][ T1001] usb 5-1: found format II with max.bitrate = 128, frame size=3249 [ 103.956357][ T1001] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 103.962744][ T1001] usb 5-1: 0:2 : does not exist [ 103.968174][ T1001] usb 5-1: unit 6 not found! [ 103.978721][ T1001] usb 5-1: USB disconnect, device number 9 [ 104.027020][ T349] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 104.034766][ T349] usb 2-1: can't read configurations, error -61 [ 104.043324][ T349] usb usb2-port1: attempt power cycle [ 104.046076][ T445] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 104.180601][ T36] audit: type=1400 audit(1784651893.270:317): avc: denied { map } for pid=1239 comm="syz.3.292" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.205659][ T445] usb 1-1: device descriptor read/64, error -71 [ 104.395563][ T349] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 104.435246][ T349] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 104.442929][ T349] usb 2-1: can't read configurations, error -61 [ 104.445642][ T445] usb 1-1: device descriptor read/64, error -71 [ 104.556322][ T368] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 104.595551][ T349] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 104.617610][ T349] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 104.625430][ T349] usb 2-1: can't read configurations, error -61 [ 104.639709][ T349] usb usb2-port1: unable to enumerate USB device [ 104.705572][ T445] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 104.717764][ T368] usb 4-1: config 9 has an invalid interface number: 235 but max is 0 [ 104.726111][ T368] usb 4-1: config 9 has no interface number 0 [ 104.732259][ T368] usb 4-1: config 9 interface 235 has no altsetting 0 [ 104.741102][ T368] usb 4-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=c6.b8 [ 104.750533][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.758788][ T368] usb 4-1: Product: syz [ 104.763127][ T368] usb 4-1: Manufacturer: syz [ 104.768114][ T368] usb 4-1: SerialNumber: syz [ 104.835524][ T1001] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 104.845539][ T445] usb 1-1: device descriptor read/64, error -71 [ 104.985512][ T1001] usb 5-1: Using ep0 maxpacket: 32 [ 104.992083][ T1001] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 105.003851][ T1001] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.010773][ T1001] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 105.020223][ T1001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.031959][ T1001] usb 5-1: config 0 descriptor?? [ 105.039320][ T1254] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 105.095557][ T445] usb 1-1: device descriptor read/64, error -71 [ 105.205731][ T445] usb usb1-port1: attempt power cycle [ 105.452168][ T1001] pantherlord 0003:0E8F:0003.000D: ignoring exceeding usage max [ 105.464382][ T1001] pantherlord 0003:0E8F:0003.000D: report_id 1905511305 is invalid [ 105.472661][ T1001] pantherlord 0003:0E8F:0003.000D: item 0 4 1 8 parsing failed [ 105.480633][ T1001] pantherlord 0003:0E8F:0003.000D: parse failed [ 105.487192][ T1001] pantherlord 0003:0E8F:0003.000D: probe with driver pantherlord failed with error -22 [ 105.555566][ T445] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 105.586677][ T445] usb 1-1: device descriptor read/8, error -71 [ 105.655602][ T1001] usb 5-1: USB disconnect, device number 10 [ 105.716666][ T445] usb 1-1: device descriptor read/8, error -71 [ 105.965561][ T445] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 106.006668][ T445] usb 1-1: device descriptor read/8, error -71 [ 106.136695][ T445] usb 1-1: device descriptor read/8, error -71 [ 106.255510][ T445] usb usb1-port1: unable to enumerate USB device [ 106.427561][ T1263] netlink: 'syz.1.298': attribute type 4 has an invalid length. [ 106.435306][ T1263] netlink: 17 bytes leftover after parsing attributes in process `syz.1.298'. [ 106.446695][ T1263] netlink: 'syz.1.298': attribute type 4 has an invalid length. [ 106.454408][ T1263] netlink: 17 bytes leftover after parsing attributes in process `syz.1.298'. [ 106.525627][ T1001] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 106.543271][ T36] audit: type=1326 audit(1784651895.630:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1272 comm="syz.1.300" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b2959de99 code=0x0 [ 106.685504][ T1001] usb 5-1: Using ep0 maxpacket: 32 [ 106.693040][ T1001] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 106.707069][ T1001] usb 5-1: config 0 has no interface number 0 [ 106.715103][ T1001] usb 5-1: config 0 interface 184 has no altsetting 0 [ 106.724936][ T1001] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 106.734464][ T1001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.742856][ T1001] usb 5-1: Product: syz [ 106.748071][ T1001] usb 5-1: Manufacturer: syz [ 106.752786][ T1001] usb 5-1: SerialNumber: syz [ 106.759082][ T1001] usb 5-1: config 0 descriptor?? [ 106.765139][ T1001] smsc75xx v1.0.0 [ 107.035558][ T445] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 107.195536][ T445] usb 1-1: Using ep0 maxpacket: 32 [ 107.201919][ T445] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.210194][ T445] usb 1-1: config 0 has no interface number 0 [ 107.216384][ T445] usb 1-1: config 0 interface 184 has no altsetting 0 [ 107.224697][ T445] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 107.233905][ T445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.244287][ T368] ftdi_sio 4-1:9.235: FTDI USB Serial Device converter detected [ 107.252139][ T445] usb 1-1: Product: syz [ 107.256807][ T368] ftdi_sio ttyUSB0: unknown device type: 0xc6b8 [ 107.263189][ T445] usb 1-1: Manufacturer: syz [ 107.267900][ T445] usb 1-1: SerialNumber: syz [ 107.273951][ T368] usb 4-1: USB disconnect, device number 43 [ 107.280246][ T445] usb 1-1: config 0 descriptor?? [ 107.287485][ T445] smsc75xx v1.0.0 [ 107.291562][ T368] ftdi_sio 4-1:9.235: device disconnected [ 107.366563][ T1001] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 107.377495][ T1001] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 107.416114][ T1282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.425553][ T1282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.495498][ T36] audit: type=1400 audit(1784651896.580:319): avc: denied { cmd } for pid=1284 comm="syz.3.304" path="socket:[14106]" dev="sockfs" ino=14106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.645511][ T347] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 107.748762][ T36] audit: type=1400 audit(1784651896.840:320): avc: denied { setopt } for pid=1295 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.768377][ T36] audit: type=1400 audit(1784651896.840:321): avc: denied { accept } for pid=1295 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.801049][ T1297] netlink: 'syz.3.306': attribute type 5 has an invalid length. [ 107.807699][ T347] usb 2-1: not running at top speed; connect to a high speed hub [ 107.817346][ T347] usb 2-1: config 1 interface 0 altsetting 215 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 107.828399][ T347] usb 2-1: config 1 interface 0 has no altsetting 0 [ 107.836499][ T347] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.40 [ 107.845623][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.853661][ T347] usb 2-1: Product: Ё [ 107.857791][ T347] usb 2-1: Manufacturer: о [ 107.862524][ T347] usb 2-1: SerialNumber: syz [ 107.868569][ T1285] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.888821][ T445] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 107.899811][ T445] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 108.175203][ T1298] kernel profiling enabled (shift: 63) [ 108.180893][ T1298] profiling shift: 63 too large [ 108.186051][ T1299] kernel profiling enabled (shift: 63) [ 108.191729][ T1299] profiling shift: 63 too large [ 108.226952][ T347] usbhid 2-1:1.0: can't add hid device: -71 [ 108.233011][ T347] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 108.243650][ T1257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.253261][ T1257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.263227][ T347] usb 2-1: USB disconnect, device number 46 [ 108.298303][ T1001] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 108.309260][ T1001] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 108.319099][ T1001] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 108.328729][ T1001] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 108.338187][ T1001] usb 5-1: USB disconnect, device number 11 [ 108.555525][ T347] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 108.716717][ T347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.739991][ T445] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 108.757252][ T347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.773627][ T445] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 108.783476][ T347] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 108.795757][ T445] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 108.807289][ T347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.824594][ T445] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 108.833620][ T347] usb 2-1: config 0 descriptor?? [ 108.849089][ T445] usb 1-1: USB disconnect, device number 44 [ 108.880306][ T36] audit: type=1400 audit(1784651897.970:322): avc: denied { execute } for pid=1323 comm="syz.4.314" path="/selinux/create" dev="selinuxfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 108.908828][ T1322] rust_binder: 1321:1322 transaction to 0 failed: ENOENT [ 108.959750][ T36] audit: type=1400 audit(1784651898.050:323): avc: denied { create } for pid=1328 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 109.055687][ T1331] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.088772][ T1333] tmpfs: Unsupported parameter 'mpol' [ 109.096667][ T36] audit: type=1326 audit(1784651898.190:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1332 comm="syz.4.318" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca5fd9de99 code=0x0 [ 109.158814][ T1337] syzkaller0: entered promiscuous mode [ 109.164376][ T1337] syzkaller0: entered allmulticast mode [ 109.175523][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 109.195511][ T445] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 109.249639][ T36] audit: type=1400 audit(1784651898.340:325): avc: denied { create } for pid=1334 comm="dhcpcd-run-hook" name="resolv.conf.ip6gretap0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.273526][ T36] audit: type=1400 audit(1784651898.360:326): avc: denied { write } for pid=1334 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.ip6gretap0.ipv4ll" dev="tmpfs" ino=2498 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.276758][ T347] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 109.308268][ T36] audit: type=1400 audit(1784651898.360:327): avc: denied { append } for pid=1334 comm="dhcpcd-run-hook" name="resolv.conf.ip6gretap0.ipv4ll" dev="tmpfs" ino=2498 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.342878][ T347] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 109.350902][ T347] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 109.365562][ T347] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 109.373074][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.385945][ T445] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.395506][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.405296][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 109.414527][ T347] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 109.427688][ T347] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 109.434587][ T445] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.444849][ T347] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 109.451703][ T445] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 109.460729][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.469712][ T347] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 109.480761][ T445] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 109.493254][ T9] usb 4-1: config 0 descriptor?? [ 109.498466][ T445] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 109.498714][ T347] arvo 0003:1E7D:30D4.000E: couldn't init struct arvo_device [ 109.520396][ T445] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 109.531291][ T445] usb 1-1: config 1 interface 1 has no altsetting 0 [ 109.537985][ T347] arvo 0003:1E7D:30D4.000E: couldn't install keyboard [ 109.546037][ T347] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -71 [ 109.555747][ T445] usb 1-1: string descriptor 0 read error: -22 [ 109.562007][ T445] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 109.572697][ T347] usb 2-1: USB disconnect, device number 47 [ 109.578709][ T445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.592251][ T1349] fido_id[1349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 109.921840][ T9] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 109.929372][ T9] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 109.937054][ T9] playstation 0003:054C:0DF2.000F: item fetching failed at offset 2/5 [ 109.945706][ T9] playstation 0003:054C:0DF2.000F: Parse failed [ 109.952432][ T9] playstation 0003:054C:0DF2.000F: probe with driver playstation failed with error -22 [ 110.037123][ T1357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 110.186104][ T1327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.194747][ T1327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.212239][ T445] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 110.222413][ T311] usb 4-1: USB disconnect, device number 44 [ 110.224604][ T445] usb 1-1: Warning! Unlikely big volume range (=994), cval->res is probably wrong. [ 110.245233][ T445] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = -994/0/1 [ 110.268780][ T445] usb 1-1: USB disconnect, device number 45 [ 110.305523][ T1381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 110.695564][ T311] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 110.787399][ T46] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 110.847128][ T311] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.857696][ T311] usb 5-1: string descriptor 0 read error: -22 [ 110.863906][ T311] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 110.873118][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.883620][ T311] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 110.960865][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.969104][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 110.978625][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.989134][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.999811][ T46] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 111.009998][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.018102][ T46] usb 1-1: Product: syz [ 111.022305][ T46] usb 1-1: Manufacturer: syz [ 111.026959][ T46] usb 1-1: SerialNumber: syz [ 111.045578][ T1001] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 111.091062][ T1392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.099718][ T1392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.107891][ T311] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 111.123038][ T311] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 111.134805][ T311] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 111.141142][ T1133] udevd[1133]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.152989][ T311] usb 5-1: USB disconnect, device number 12 [ 111.185554][ T9] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 111.208171][ T1001] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.217346][ T1001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.225421][ T1001] usb 4-1: Product: syz [ 111.231338][ T1001] usb 4-1: Manufacturer: syz [ 111.236008][ T1001] usb 4-1: SerialNumber: syz [ 111.336750][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.347949][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.358905][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 111.368084][ T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 111.376514][ T9] usb 2-1: Product: syz [ 111.380738][ T9] usb 2-1: Manufacturer: syz [ 111.388983][ T9] hub 2-1:4.0: USB hub found [ 111.589331][ T9] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 111.644471][ T1399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.653169][ T1399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.662172][ T1001] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 111.668306][ T1001] cdc_ncm 4-1:1.0: bind() failure [ 111.674369][ T1001] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 111.681255][ T1001] cdc_ncm 4-1:1.1: bind() failure [ 111.759642][ T46] usb 1-1: unit 3 not found! [ 111.774539][ T46] usb 1-1: USB disconnect, device number 46 [ 111.793930][ T1407] syzkaller1: entered promiscuous mode [ 111.800619][ T1407] syzkaller1: entered allmulticast mode [ 111.809317][ T1078] udevd[1078]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.905624][ T1001] usb 2-1: USB disconnect, device number 48 [ 111.955559][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 112.023961][ T445] usb 4-1: USB disconnect, device number 45 [ 112.040181][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 112.040200][ T36] audit: type=1400 audit(1784651901.130:330): avc: denied { search } for pid=1416 comm="syz.3.337" name="/" dev="configfs" ino=2616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 112.079608][ T36] audit: type=1400 audit(1784651901.160:331): avc: denied { read } for pid=1416 comm="syz.3.337" name="/" dev="configfs" ino=2616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 112.101588][ T36] audit: type=1400 audit(1784651901.160:332): avc: denied { open } for pid=1416 comm="syz.3.337" path="/" dev="configfs" ino=2616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 112.124799][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.136179][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.145268][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.156045][ T9] usb 5-1: config 0 descriptor?? [ 112.181589][ T36] audit: type=1400 audit(1784651901.270:333): avc: denied { mount } for pid=1419 comm="syz.3.338" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 112.221982][ T36] audit: type=1400 audit(1784651901.310:334): avc: denied { write } for pid=1421 comm="syz.3.339" name="tcp" dev="proc" ino=4026532599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 112.272388][ T1426] netlink: 'syz.3.341': attribute type 1 has an invalid length. [ 112.281172][ T36] audit: type=1400 audit(1784651901.370:335): avc: denied { create } for pid=1425 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 112.319070][ T36] audit: type=1400 audit(1784651901.410:336): avc: denied { map } for pid=1429 comm="syz.1.343" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 112.405930][ T1440] FAULT_INJECTION: forcing a failure. [ 112.405930][ T1440] name failslab, interval 1, probability 0, space 0, times 0 [ 112.419298][ T1440] CPU: 1 UID: 0 PID: 1440 Comm: syz.4.345 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 112.419338][ T1440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 112.419353][ T1440] Call Trace: [ 112.419360][ T1440] [ 112.419369][ T1440] __dump_stack+0x21/0x30 [ 112.419407][ T1440] dump_stack_lvl+0x140/0x1c0 [ 112.419440][ T1440] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.419475][ T1440] dump_stack+0x19/0x20 [ 112.419507][ T1440] should_fail_ex+0x3c2/0x510 [ 112.419534][ T1440] should_failslab+0xac/0x100 [ 112.419564][ T1440] kmem_cache_alloc_noprof+0x42/0x410 [ 112.419588][ T1440] ? security_inode_alloc+0x51/0x230 [ 112.419618][ T1440] security_inode_alloc+0x51/0x230 [ 112.419647][ T1440] inode_init_always_gfp+0x756/0x9e0 [ 112.419675][ T1440] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 112.419705][ T1440] alloc_inode+0xc5/0x270 [ 112.419732][ T1440] ? _raw_spin_lock+0x92/0x120 [ 112.419757][ T1440] new_inode+0x25/0x1e0 [ 112.419797][ T1440] shmem_get_inode+0x352/0xc10 [ 112.419827][ T1440] shmem_tmpfile+0x5f/0x150 [ 112.419859][ T1440] vfs_tmpfile+0x381/0x580 [ 112.419890][ T1440] kernel_tmpfile_open+0x54/0x90 [ 112.419924][ T1440] ovl_copy_up_flags+0x224b/0x2d10 [ 112.419955][ T1440] ? ovl_maybe_copy_up+0x170/0x170 [ 112.419977][ T1440] ? __kasan_check_write+0x18/0x20 [ 112.420000][ T1440] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 112.420026][ T1440] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 112.420054][ T1440] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 112.420082][ T1440] ? __wake_up+0x169/0x190 [ 112.420107][ T1440] ? __d_add+0x636/0xac0 [ 112.420132][ T1440] ? d_splice_alias+0x115/0x3a0 [ 112.420155][ T1440] ? ovl_lookup+0x1b8c/0x1d20 [ 112.420184][ T1440] ? __d_lookup_rcu+0x334/0x3c0 [ 112.420217][ T1440] ? avc_has_perm+0x155/0x240 [ 112.420242][ T1440] ? __cfi_avc_has_perm+0x10/0x10 [ 112.420274][ T1440] ovl_copy_up+0x1b/0x30 [ 112.420295][ T1440] ovl_xattr_set+0x2d7/0x410 [ 112.420321][ T1440] ? ovl_xattr_escape_name+0x240/0x240 [ 112.420350][ T1440] ovl_other_xattr_set+0x3e/0x50 [ 112.420377][ T1440] ? __cfi_ovl_other_xattr_set+0x10/0x10 [ 112.420403][ T1440] __vfs_setxattr+0x453/0x4a0 [ 112.420439][ T1440] __vfs_setxattr_noperm+0x12d/0x670 [ 112.420476][ T1440] __vfs_setxattr_locked+0x212/0x240 [ 112.420516][ T1440] vfs_setxattr+0x16b/0x2f0 [ 112.420551][ T1440] ? __cfi_vfs_setxattr+0x10/0x10 [ 112.420585][ T1440] ? mnt_want_write+0x321/0x510 [ 112.420617][ T1440] path_setxattr+0x337/0x5a0 [ 112.420644][ T1440] ? simple_xattrs_free+0x180/0x180 [ 112.420676][ T1440] ? __cfi_ksys_write+0x10/0x10 [ 112.420702][ T1440] __x64_sys_setxattr+0xc9/0xe0 [ 112.420725][ T1440] x64_sys_call+0x2d94/0x2ee0 [ 112.420747][ T1440] do_syscall_64+0x57/0xf0 [ 112.420780][ T1440] ? clear_bhb_loop+0x50/0xa0 [ 112.420810][ T1440] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.420838][ T1440] RIP: 0033:0x7fca5fd9de99 [ 112.420857][ T1440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.420878][ T1440] RSP: 002b:00007fca60d10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 112.420903][ T1440] RAX: ffffffffffffffda RBX: 00007fca60025fa0 RCX: 00007fca5fd9de99 [ 112.420920][ T1440] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 112.420935][ T1440] RBP: 00007fca60d10090 R08: 0000000000000001 R09: 0000000000000000 [ 112.420950][ T1440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.420963][ T1440] R13: 00007fca60026038 R14: 00007fca60025fa0 R15: 00007ffc7e297538 [ 112.420983][ T1440] [ 112.765691][ T445] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 112.808356][ T36] audit: type=1400 audit(1784651901.900:337): avc: denied { ioctl } for pid=1444 comm="syz.4.346" path="/44/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.838244][ T1445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.846735][ T1001] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 112.855694][ T1445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.947942][ T445] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.957164][ T445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.965229][ T445] usb 4-1: Product: syz [ 112.969711][ T445] usb 4-1: Manufacturer: syz [ 112.974373][ T445] usb 4-1: SerialNumber: syz [ 113.015514][ T1001] usb 1-1: Using ep0 maxpacket: 32 [ 113.021892][ T1001] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 113.030149][ T1001] usb 1-1: config 0 has no interface number 0 [ 113.036334][ T1001] usb 1-1: config 0 interface 184 has no altsetting 0 [ 113.044865][ T1001] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 113.053993][ T1001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.062035][ T1001] usb 1-1: Product: syz [ 113.066260][ T1001] usb 1-1: Manufacturer: syz [ 113.070885][ T1001] usb 1-1: SerialNumber: syz [ 113.076409][ T1001] usb 1-1: config 0 descriptor?? [ 113.082262][ T1001] smsc75xx v1.0.0 [ 113.472236][ T1504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.480926][ T1504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.489486][ T1001] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 113.500431][ T1001] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 113.510144][ T1001] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 113.520449][ T1001] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 113.840189][ T1518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.848890][ T1518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.983562][ T445] cdc_ncm 4-1:1.0: failed to get mac address [ 114.015522][ T1522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.024154][ T1522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.035984][ T1524] FAULT_INJECTION: forcing a failure. [ 114.035984][ T1524] name failslab, interval 1, probability 0, space 0, times 0 [ 114.048780][ T1524] CPU: 1 UID: 0 PID: 1524 Comm: syz.1.354 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 114.048817][ T1524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 114.048831][ T1524] Call Trace: [ 114.048839][ T1524] [ 114.048848][ T1524] __dump_stack+0x21/0x30 [ 114.048886][ T1524] dump_stack_lvl+0x140/0x1c0 [ 114.048918][ T1524] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.048950][ T1524] ? __vfs_setxattr_noperm+0x12d/0x670 [ 114.048987][ T1524] ? __x64_sys_setxattr+0xc9/0xe0 [ 114.049008][ T1524] ? do_syscall_64+0x57/0xf0 [ 114.049033][ T1524] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 114.049063][ T1524] dump_stack+0x19/0x20 [ 114.049094][ T1524] should_fail_ex+0x3c2/0x510 [ 114.049120][ T1524] should_failslab+0xac/0x100 [ 114.049149][ T1524] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 114.049174][ T1524] ? shmem_alloc_inode+0x3b/0xd0 [ 114.049204][ T1524] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 114.049234][ T1524] shmem_alloc_inode+0x3b/0xd0 [ 114.049263][ T1524] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 114.049291][ T1524] alloc_inode+0x7d/0x270 [ 114.049319][ T1524] ? _raw_spin_lock+0x92/0x120 [ 114.049344][ T1524] new_inode+0x25/0x1e0 [ 114.049373][ T1524] shmem_get_inode+0x352/0xc10 [ 114.049403][ T1524] shmem_tmpfile+0x5f/0x150 [ 114.049436][ T1524] vfs_tmpfile+0x381/0x580 [ 114.049467][ T1524] kernel_tmpfile_open+0x54/0x90 [ 114.049498][ T1524] ovl_copy_up_flags+0x224b/0x2d10 [ 114.049528][ T1524] ? ovl_maybe_copy_up+0x170/0x170 [ 114.049551][ T1524] ? __kasan_check_write+0x18/0x20 [ 114.049573][ T1524] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 114.049606][ T1524] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 114.049634][ T1524] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 114.049660][ T1524] ? __wake_up+0x169/0x190 [ 114.049685][ T1524] ? __d_add+0x636/0xac0 [ 114.049710][ T1524] ? d_splice_alias+0x115/0x3a0 [ 114.049735][ T1524] ? ovl_lookup+0x1b8c/0x1d20 [ 114.049765][ T1524] ? __d_lookup_rcu+0x334/0x3c0 [ 114.049798][ T1524] ? avc_has_perm+0x155/0x240 [ 114.049825][ T1524] ? __cfi_avc_has_perm+0x10/0x10 [ 114.049852][ T1524] ovl_copy_up+0x1b/0x30 [ 114.049874][ T1524] ovl_xattr_set+0x2d7/0x410 [ 114.049901][ T1524] ? ovl_xattr_escape_name+0x240/0x240 [ 114.049929][ T1524] ovl_other_xattr_set+0x3e/0x50 [ 114.049956][ T1524] ? __cfi_ovl_other_xattr_set+0x10/0x10 [ 114.049983][ T1524] __vfs_setxattr+0x453/0x4a0 [ 114.050020][ T1524] __vfs_setxattr_noperm+0x12d/0x670 [ 114.050062][ T1524] __vfs_setxattr_locked+0x212/0x240 [ 114.050097][ T1524] vfs_setxattr+0x16b/0x2f0 [ 114.050136][ T1524] ? __cfi_vfs_setxattr+0x10/0x10 [ 114.050171][ T1524] ? mnt_want_write+0x321/0x510 [ 114.050201][ T1524] path_setxattr+0x337/0x5a0 [ 114.050228][ T1524] ? simple_xattrs_free+0x180/0x180 [ 114.050258][ T1524] ? __cfi_ksys_write+0x10/0x10 [ 114.050285][ T1524] __x64_sys_setxattr+0xc9/0xe0 [ 114.050306][ T1524] x64_sys_call+0x2d94/0x2ee0 [ 114.050327][ T1524] do_syscall_64+0x57/0xf0 [ 114.050350][ T1524] ? clear_bhb_loop+0x50/0xa0 [ 114.050380][ T1524] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 114.050408][ T1524] RIP: 0033:0x7f0b2959de99 [ 114.050429][ T1524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.050449][ T1524] RSP: 002b:00007f0b2a410028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 114.050473][ T1524] RAX: ffffffffffffffda RBX: 00007f0b29825fa0 RCX: 00007f0b2959de99 [ 114.050490][ T1524] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 114.050506][ T1524] RBP: 00007f0b2a410090 R08: 0000000000000001 R09: 0000000000000000 [ 114.050521][ T1524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.050535][ T1524] R13: 00007f0b29826038 R14: 00007f0b29825fa0 R15: 00007ffef71c8538 [ 114.050554][ T1524] [ 114.425965][ T445] cdc_ncm 4-1:1.0: bind() failure [ 114.444786][ T445] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 114.454132][ T445] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 114.465912][ T445] usb 4-1: USB disconnect, device number 46 [ 114.695514][ T311] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 114.825516][ T311] usb 2-1: device descriptor read/64, error -71 [ 114.948919][ T36] audit: type=1400 audit(1784651904.040:338): avc: denied { sqpoll } for pid=1531 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 114.975754][ T36] audit: type=1400 audit(1784651904.070:339): avc: denied { execute } for pid=1531 comm="syz.3.357" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.010087][ T1537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.019897][ T1537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.033577][ T1537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.044233][ T1537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.085500][ T311] usb 2-1: device descriptor read/64, error -71 [ 115.325513][ T311] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 115.455547][ T311] usb 2-1: device descriptor read/64, error -71 [ 115.567453][ T1556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.576117][ T1556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.591866][ T347] usb 1-1: USB disconnect, device number 47 [ 115.695512][ T311] usb 2-1: device descriptor read/64, error -71 [ 115.805628][ T311] usb usb2-port1: attempt power cycle [ 115.935554][ T347] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 116.091888][ T347] usb 1-1: Using ep0 maxpacket: 8 [ 116.105084][ T347] usb 1-1: too many configurations: 162, using maximum allowed: 8 [ 116.114164][ T347] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 116.121964][ T347] usb 1-1: can't read configurations, error -61 [ 116.137741][ T1563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.146438][ T1563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.155610][ T311] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 116.159781][ T1563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.171810][ T1563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.186772][ T311] usb 2-1: device descriptor read/8, error -71 [ 116.255536][ T347] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 116.316652][ T311] usb 2-1: device descriptor read/8, error -71 [ 116.415516][ T347] usb 1-1: Using ep0 maxpacket: 8 [ 116.421008][ T347] usb 1-1: too many configurations: 162, using maximum allowed: 8 [ 116.430312][ T347] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 116.438015][ T347] usb 1-1: can't read configurations, error -61 [ 116.444859][ T347] usb usb1-port1: attempt power cycle [ 116.495551][ T1001] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 116.555509][ T311] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 116.576584][ T311] usb 2-1: device descriptor read/8, error -71 [ 116.645499][ T1001] usb 4-1: Using ep0 maxpacket: 16 [ 116.652501][ T1001] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.663556][ T1001] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.673439][ T1001] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 116.686463][ T1001] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.693116][ T1001] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 116.702216][ T1001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.711292][ T311] usb 2-1: device descriptor read/8, error -71 [ 116.717744][ T1001] usb 4-1: config 0 descriptor?? [ 116.795530][ T347] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 116.815885][ T347] usb 1-1: Using ep0 maxpacket: 8 [ 116.821527][ T347] usb 1-1: too many configurations: 162, using maximum allowed: 8 [ 116.830901][ T347] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 116.835610][ T311] usb usb2-port1: unable to enumerate USB device [ 116.839448][ T347] usb 1-1: can't read configurations, error -61 [ 116.975538][ T347] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 116.996045][ T347] usb 1-1: Using ep0 maxpacket: 8 [ 117.001547][ T347] usb 1-1: too many configurations: 162, using maximum allowed: 8 [ 117.010723][ T347] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 117.018381][ T347] usb 1-1: can't read configurations, error -61 [ 117.024810][ T347] usb usb1-port1: unable to enumerate USB device [ 117.126046][ T1001] hid (null): unknown global tag 0xc [ 117.416040][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 117.422198][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 117.533640][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 117.533678][ T36] audit: type=1400 audit(1784651906.620:341): avc: denied { bind } for pid=1564 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.558929][ T36] audit: type=1400 audit(1784651906.620:342): avc: denied { node_bind } for pid=1564 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 117.578831][ T36] audit: type=1400 audit(1784651906.640:343): avc: denied { ioctl } for pid=1564 comm="syz.3.369" path="socket:[15277]" dev="sockfs" ino=15277 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.713514][ T36] audit: type=1400 audit(1784651906.800:344): avc: denied { execute_no_trans } for pid=1574 comm="syz.4.372" path="/53/file1" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.796768][ T1577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.806018][ T1577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.828612][ T1582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.837261][ T1582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.865646][ T1001] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 118.015518][ T1001] usb 2-1: Using ep0 maxpacket: 16 [ 118.022228][ T1001] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.030633][ T1001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.040808][ T1001] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 118.051375][ T1001] usb 2-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 118.060845][ T1001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.068897][ T1001] usb 2-1: Product: syz [ 118.073104][ T1001] usb 2-1: Manufacturer: syz [ 118.077797][ T1001] usb 2-1: SerialNumber: syz [ 118.286718][ T1001] usb 2-1: unit 2 not found! [ 118.294418][ T1001] usb 2-1: USB disconnect, device number 53 [ 118.306418][ T1078] udevd[1078]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.638584][ T36] audit: type=1400 audit(1784651907.730:345): avc: denied { write } for pid=1587 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.667046][ T36] audit: type=1400 audit(1784651907.760:346): avc: denied { mount } for pid=1592 comm="syz.0.377" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.808203][ T1596] overlayfs: failed to resolve '/': -2 [ 118.892024][ T1602] syzkaller0: entered promiscuous mode [ 118.897713][ T1602] syzkaller0: entered allmulticast mode [ 119.235514][ T445] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 119.261818][ T1001] usb 4-1: USB disconnect, device number 47 [ 119.366927][ T445] usb 1-1: device descriptor read/64, error -71 [ 119.387792][ T1619] loop7: detected capacity change from 0 to 7 [ 119.394334][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.403564][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.411585][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.420804][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.428993][ T1619] loop7: unable to read partition table [ 119.435812][ T1619] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 119.453916][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.463142][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.473954][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.483175][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.492634][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.501888][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.510536][ T36] audit: type=1400 audit(1784651908.600:347): avc: denied { connect } for pid=1618 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.530106][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.530146][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.548019][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.549158][ T1619] netlink: 32 bytes leftover after parsing attributes in process `syz.3.387'. [ 119.557224][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.566992][ T36] audit: type=1400 audit(1784651908.640:348): avc: denied { nlmsg_read } for pid=1618 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.595153][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.604397][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.612781][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.622008][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 119.629934][ T110] loop7: unable to read partition table [ 119.635701][ T445] usb 1-1: device descriptor read/64, error -71 [ 119.718011][ T1630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.726677][ T1630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.875524][ T445] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 120.005519][ T445] usb 1-1: device descriptor read/64, error -71 [ 120.245543][ T445] usb 1-1: device descriptor read/64, error -71 [ 120.309410][ T1647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.318055][ T1647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.355611][ T445] usb usb1-port1: attempt power cycle [ 120.697560][ T445] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 120.726649][ T445] usb 1-1: device descriptor read/8, error -71 [ 120.858891][ T445] usb 1-1: device descriptor read/8, error -71 [ 120.955515][ T311] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 121.095525][ T445] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 121.106812][ T311] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 121.118001][ T311] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.127085][ T445] usb 1-1: device descriptor read/8, error -71 [ 121.131402][ T311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.143673][ T311] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 121.152764][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.161604][ T311] usb 4-1: config 0 descriptor?? [ 121.266628][ T445] usb 1-1: device descriptor read/8, error -71 [ 121.375606][ T445] usb usb1-port1: unable to enumerate USB device [ 121.571077][ T311] zeroplus 0003:0C12:0005.0011: item fetching failed at offset 6/40 [ 121.579391][ T311] zeroplus 0003:0C12:0005.0011: parse failed [ 121.585488][ T311] zeroplus 0003:0C12:0005.0011: probe with driver zeroplus failed with error -22 [ 121.772748][ T311] usb 4-1: USB disconnect, device number 48 [ 122.289426][ T36] audit: type=1400 audit(1784651911.380:349): avc: denied { map } for pid=1666 comm="syz.3.402" path="socket:[16789]" dev="sockfs" ino=16789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.312698][ T36] audit: type=1400 audit(1784651911.380:350): avc: denied { read write } for pid=1666 comm="syz.3.402" path="socket:[16789]" dev="sockfs" ino=16789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.383145][ T1677] FAULT_INJECTION: forcing a failure. [ 122.383145][ T1677] name failslab, interval 1, probability 0, space 0, times 0 [ 122.395945][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 122.403616][ T1677] CPU: 0 UID: 0 PID: 1677 Comm: syz.3.404 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 122.403659][ T1677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 122.403674][ T1677] Call Trace: [ 122.403680][ T1677] [ 122.403687][ T1677] __dump_stack+0x21/0x30 [ 122.403715][ T1677] dump_stack_lvl+0x140/0x1c0 [ 122.403738][ T1677] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.403762][ T1677] ? __kasan_kmalloc+0x96/0xb0 [ 122.403782][ T1677] dump_stack+0x19/0x20 [ 122.403804][ T1677] should_fail_ex+0x3c2/0x510 [ 122.403822][ T1677] should_failslab+0xac/0x100 [ 122.403842][ T1677] __kmalloc_node_noprof+0x69/0x500 [ 122.403859][ T1677] ? __kvmalloc_node_noprof+0x128/0x300 [ 122.403885][ T1677] __kvmalloc_node_noprof+0x128/0x300 [ 122.403915][ T1677] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 122.403940][ T1677] ? __kasan_check_write+0x18/0x20 [ 122.403959][ T1677] ? _raw_spin_lock+0x92/0x120 [ 122.403976][ T1677] ? __cfi__raw_spin_lock+0x10/0x10 [ 122.403993][ T1677] simple_xattr_alloc+0x67/0x140 [ 122.404012][ T1677] shmem_initxattrs+0x24f/0x530 [ 122.404035][ T1677] ? security_inode_init_security+0x11c/0x600 [ 122.404058][ T1677] security_inode_init_security+0x431/0x600 [ 122.404078][ T1677] ? __cfi_shmem_initxattrs+0x10/0x10 [ 122.404102][ T1677] ? __cfi_security_inode_init_security+0x10/0x10 [ 122.404122][ T1677] ? shmem_get_inode+0x81c/0xc10 [ 122.404143][ T1677] shmem_tmpfile+0x9a/0x150 [ 122.404166][ T1677] vfs_tmpfile+0x381/0x580 [ 122.404188][ T1677] kernel_tmpfile_open+0x54/0x90 [ 122.404209][ T1677] ovl_copy_up_flags+0x224b/0x2d10 [ 122.404229][ T1677] ? ovl_maybe_copy_up+0x170/0x170 [ 122.404245][ T1677] ? __kasan_check_write+0x18/0x20 [ 122.404273][ T1677] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 122.404299][ T1677] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 122.404328][ T1677] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 122.404346][ T1677] ? __wake_up+0x169/0x190 [ 122.404364][ T1677] ? __d_add+0x636/0xac0 [ 122.404382][ T1677] ? d_splice_alias+0x115/0x3a0 [ 122.404400][ T1677] ? ovl_lookup+0x1b8c/0x1d20 [ 122.404420][ T1677] ? __d_lookup_rcu+0x334/0x3c0 [ 122.404444][ T1677] ? avc_has_perm+0x155/0x240 [ 122.404462][ T1677] ? __cfi_avc_has_perm+0x10/0x10 [ 122.404480][ T1677] ovl_copy_up+0x1b/0x30 [ 122.404495][ T1677] ovl_xattr_set+0x2d7/0x410 [ 122.404514][ T1677] ? ovl_xattr_escape_name+0x240/0x240 [ 122.404533][ T1677] ovl_other_xattr_set+0x3e/0x50 [ 122.404551][ T1677] ? __cfi_ovl_other_xattr_set+0x10/0x10 [ 122.404569][ T1677] __vfs_setxattr+0x453/0x4a0 [ 122.404594][ T1677] __vfs_setxattr_noperm+0x12d/0x670 [ 122.404619][ T1677] __vfs_setxattr_locked+0x212/0x240 [ 122.404643][ T1677] vfs_setxattr+0x16b/0x2f0 [ 122.404667][ T1677] ? __cfi_vfs_setxattr+0x10/0x10 [ 122.404691][ T1677] ? mnt_want_write+0x321/0x510 [ 122.404712][ T1677] path_setxattr+0x337/0x5a0 [ 122.404735][ T1677] ? simple_xattrs_free+0x180/0x180 [ 122.404757][ T1677] ? __cfi_ksys_write+0x10/0x10 [ 122.404775][ T1677] __x64_sys_setxattr+0xc9/0xe0 [ 122.404790][ T1677] x64_sys_call+0x2d94/0x2ee0 [ 122.404804][ T1677] do_syscall_64+0x57/0xf0 [ 122.404821][ T1677] ? clear_bhb_loop+0x50/0xa0 [ 122.404842][ T1677] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.404862][ T1677] RIP: 0033:0x7fa66379de99 [ 122.404876][ T1677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.404895][ T1677] RSP: 002b:00007fa6645c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 122.404912][ T1677] RAX: ffffffffffffffda RBX: 00007fa663a25fa0 RCX: 00007fa66379de99 [ 122.404925][ T1677] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 122.404937][ T1677] RBP: 00007fa6645c8090 R08: 0000000000000001 R09: 0000000000000000 [ 122.404947][ T1677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.404957][ T1677] R13: 00007fa663a26038 R14: 00007fa663a25fa0 R15: 00007ffd544ef308 [ 122.404970][ T1677] [ 122.555309][ T1679] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 122.582163][ T36] audit: type=1400 audit(1784651911.610:351): avc: denied { execstack } for pid=1678 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 122.667659][ T1679] cgroup: release_agent respecified [ 122.671460][ T36] audit: type=1400 audit(1784651911.700:352): avc: denied { relabelto } for pid=1678 comm="syz.1.405" name="file0" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:vhost_device_t:s0" [ 122.852036][ T36] audit: type=1400 audit(1784651911.700:353): avc: denied { associate } for pid=1678 comm="syz.1.405" name="file0" dev="tmpfs" ino=682 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:vhost_device_t:s0" [ 122.879570][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 122.884705][ T36] audit: type=1400 audit(1784651911.760:354): avc: denied { mounton } for pid=1678 comm="syz.1.405" path="/102/file0" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:vhost_device_t:s0" [ 122.914867][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.924020][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.932211][ T9] usb 1-1: Product: syz [ 122.936474][ T9] usb 1-1: Manufacturer: 䰊 [ 122.941693][ T9] usb 1-1: SerialNumber: syz [ 123.033677][ T36] audit: type=1400 audit(1784651912.120:355): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:vhost_device_t:s0" [ 123.058795][ T1684] input: syz1 as /devices/virtual/input/input11 [ 123.093489][ T1686] rust_binder: Write failure EINVAL in pid:306 [ 123.123407][ T36] audit: type=1400 audit(1784651912.210:356): avc: denied { load_policy } for pid=1688 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 123.161241][ T1689] SELinux: failed to load policy [ 123.215499][ T311] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 123.350868][ T36] audit: type=1400 audit(1784651912.440:357): avc: denied { accept } for pid=1703 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.353298][ T1665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.380369][ T1665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.383532][ T36] audit: type=1400 audit(1784651912.470:358): avc: denied { create } for pid=1703 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 123.416650][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.421960][ T36] audit: type=1400 audit(1784651912.510:359): avc: denied { connect } for pid=1664 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.427912][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.457884][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.470826][ T311] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.479935][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.490914][ T311] usb 4-1: config 0 descriptor?? [ 123.510957][ T445] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 123.519332][ T445] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.555824][ T1709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.567122][ T1709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.704128][ T36] audit: type=1400 audit(1784651912.790:360): avc: denied { read } for pid=1681 comm="syz.3.406" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.960864][ T311] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 123.974985][ T311] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 123.980795][ T1717] netlink: 104 bytes leftover after parsing attributes in process `syz.1.415'. [ 124.295515][ T445] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 124.343237][ T311] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 124.370509][ T311] usb 4-1: USB disconnect, device number 49 [ 124.446565][ T445] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 124.454952][ T445] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 124.466752][ T445] usb 2-1: config 220 has no interface number 2 [ 124.473104][ T445] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 124.486424][ T445] usb 2-1: config 220 interface 0 has no altsetting 0 [ 124.493276][ T445] usb 2-1: config 220 interface 76 has no altsetting 0 [ 124.506332][ T445] usb 2-1: config 220 interface 1 has no altsetting 0 [ 124.514962][ T445] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 124.524225][ T445] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.532342][ T445] usb 2-1: Product: syz [ 124.536735][ T445] usb 2-1: Manufacturer: syz [ 124.542268][ T445] usb 2-1: SerialNumber: syz [ 125.086129][ T347] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 125.101208][ T9] usb 1-1: 1:1 : no UAC_FORMAT_TYPE desc [ 125.109953][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 125.122735][ T9] usb 1-1: unit 3 not found! [ 125.131415][ T9] usb 1-1: USB disconnect, device number 56 [ 125.144849][ T1078] udevd[1078]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.234180][ T311] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 125.243085][ T311] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 125.254078][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 125.277748][ T445] usb 2-1: selecting invalid altsetting 0 [ 125.285480][ T347] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 125.305596][ T445] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 125.314956][ T445] usb 2-1: No valid video chain found. [ 125.327110][ T347] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 125.336885][ T347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.357526][ T445] usb 2-1: USB disconnect, device number 54 [ 125.367795][ T347] usb 4-1: config 0 descriptor?? [ 125.374188][ T1739] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 125.429641][ T1752] netlink: 'syz.4.428': attribute type 4 has an invalid length. [ 125.462999][ T1756] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.499735][ T1758] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3944. macoff=96 [ 125.522346][ T1458] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.627253][ T1761] kvm: kvm [1760]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 125.636414][ T1762] kvm: kvm [1760]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 125.647944][ T1761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.656686][ T1761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.800323][ T347] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x2 [ 125.807793][ T347] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x4 [ 125.815065][ T347] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0xd [ 125.822786][ T347] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x1 [ 125.830092][ T347] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x3 [ 125.837360][ T347] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x1 [ 125.862733][ T1768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.871388][ T1768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.067072][ T347] konepure 0003:1E7D:2DB4.0015: hidraw0: USB HID v80.09 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 126.119030][ T1771] overlayfs: upper fs does not support file handles, falling back to index=off. [ 126.128298][ T1771] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 126.137179][ T1771] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 126.146922][ T1771] overlayfs: conflicting lowerdir path [ 126.401209][ T1782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 126.410333][ T1780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 126.419330][ T1780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 126.428302][ T311] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 126.429119][ T1780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 126.445221][ T1780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 126.454323][ T1780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 126.463411][ T1780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 126.472502][ T1780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 126.481539][ T1780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 126.490577][ T1780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 126.528750][ T445] usb 4-1: USB disconnect, device number 50 [ 126.594762][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.605819][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.615766][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.629000][ T311] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.642434][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.654387][ T311] usb 1-1: config 0 descriptor?? [ 126.657792][ T1807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.668196][ T1807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.067210][ T311] usbhid 1-1:0.0: can't add hid device: -71 [ 127.073285][ T311] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 127.082110][ T311] usb 1-1: USB disconnect, device number 57 [ 127.109934][ T445] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 127.118128][ T445] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.194171][ T1813] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 127.201958][ T1813] SELinux: failed to load policy [ 127.219515][ T1815] FAULT_INJECTION: forcing a failure. [ 127.219515][ T1815] name failslab, interval 1, probability 0, space 0, times 0 [ 127.232197][ T1815] CPU: 0 UID: 0 PID: 1815 Comm: syz.4.443 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 127.232233][ T1815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 127.232249][ T1815] Call Trace: [ 127.232257][ T1815] [ 127.232266][ T1815] __dump_stack+0x21/0x30 [ 127.232303][ T1815] dump_stack_lvl+0x140/0x1c0 [ 127.232335][ T1815] ? __cfi_dump_stack_lvl+0x10/0x10 [ 127.232369][ T1815] ? security_inode_post_setattr+0x93/0x120 [ 127.232392][ T1815] ? __cfi_shmem_setattr+0x10/0x10 [ 127.232417][ T1815] dump_stack+0x19/0x20 [ 127.232438][ T1815] should_fail_ex+0x3c2/0x510 [ 127.232457][ T1815] should_failslab+0xac/0x100 [ 127.232477][ T1815] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 127.232494][ T1815] ? avc_has_perm_noaudit+0x289/0x360 [ 127.232513][ T1815] ? __d_alloc+0x42/0x8c0 [ 127.232529][ T1815] __d_alloc+0x42/0x8c0 [ 127.232544][ T1815] d_alloc_parallel+0xe4/0x1370 [ 127.232560][ T1815] ? avc_has_perm_noaudit+0x26b/0x360 [ 127.232579][ T1815] ? __asan_memcpy+0x5a/0x80 [ 127.232596][ T1815] ? selinux_inode_permission+0x3f2/0x5d0 [ 127.232620][ T1815] ? __cfi_d_alloc_parallel+0x10/0x10 [ 127.232637][ T1815] ? __cfi_selinux_inode_permission+0x10/0x10 [ 127.232662][ T1815] ? generic_permission+0x1e2/0x590 [ 127.232681][ T1815] __lookup_slow+0x150/0x420 [ 127.232700][ T1815] ? __d_lookup+0x4e8/0x550 [ 127.232717][ T1815] ? lookup_one_len+0x300/0x300 [ 127.232737][ T1815] ? lookup_one_common+0x320/0x470 [ 127.232758][ T1815] lookup_one+0x19e/0x2f0 [ 127.232777][ T1815] ? __cfi_lookup_one+0x10/0x10 [ 127.232798][ T1815] ovl_copy_up_flags+0x25dc/0x2d10 [ 127.232818][ T1815] ? ovl_maybe_copy_up+0x170/0x170 [ 127.232835][ T1815] ? __kasan_check_write+0x18/0x20 [ 127.232850][ T1815] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 127.232869][ T1815] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 127.232888][ T1815] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 127.232931][ T1815] ? __wake_up+0x169/0x190 [ 127.232949][ T1815] ? __d_add+0x636/0xac0 [ 127.232967][ T1815] ? d_splice_alias+0x115/0x3a0 [ 127.232983][ T1815] ? ovl_lookup+0x1b8c/0x1d20 [ 127.233004][ T1815] ? __d_lookup_rcu+0x334/0x3c0 [ 127.233027][ T1815] ? avc_has_perm+0x155/0x240 [ 127.233045][ T1815] ? __cfi_avc_has_perm+0x10/0x10 [ 127.233063][ T1815] ovl_copy_up+0x1b/0x30 [ 127.233078][ T1815] ovl_xattr_set+0x2d7/0x410 [ 127.233097][ T1815] ? ovl_xattr_escape_name+0x240/0x240 [ 127.233116][ T1815] ovl_other_xattr_set+0x3e/0x50 [ 127.233134][ T1815] ? __cfi_ovl_other_xattr_set+0x10/0x10 [ 127.233153][ T1815] __vfs_setxattr+0x453/0x4a0 [ 127.233179][ T1815] __vfs_setxattr_noperm+0x12d/0x670 [ 127.233204][ T1815] __vfs_setxattr_locked+0x212/0x240 [ 127.233229][ T1815] vfs_setxattr+0x16b/0x2f0 [ 127.233253][ T1815] ? __cfi_vfs_setxattr+0x10/0x10 [ 127.233277][ T1815] ? mnt_want_write+0x321/0x510 [ 127.233299][ T1815] path_setxattr+0x337/0x5a0 [ 127.233317][ T1815] ? simple_xattrs_free+0x180/0x180 [ 127.233339][ T1815] ? __cfi_ksys_write+0x10/0x10 [ 127.233356][ T1815] __x64_sys_setxattr+0xc9/0xe0 [ 127.233372][ T1815] x64_sys_call+0x2d94/0x2ee0 [ 127.233386][ T1815] do_syscall_64+0x57/0xf0 [ 127.233405][ T1815] ? clear_bhb_loop+0x50/0xa0 [ 127.233427][ T1815] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 127.233447][ T1815] RIP: 0033:0x7fca5fd9de99 [ 127.233461][ T1815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.233475][ T1815] RSP: 002b:00007fca60d10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 127.233493][ T1815] RAX: ffffffffffffffda RBX: 00007fca60025fa0 RCX: 00007fca5fd9de99 [ 127.233506][ T1815] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 127.233517][ T1815] RBP: 00007fca60d10090 R08: 0000000000000001 R09: 0000000000000000 [ 127.233528][ T1815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.233538][ T1815] R13: 00007fca60026038 R14: 00007fca60025fa0 R15: 00007ffc7e297538 [ 127.233552][ T1815] [ 127.615712][ T321] Bluetooth: hci0: command 0x1003 tx timeout [ 127.627784][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.657336][ T1821] fuse: Unknown parameter 'd' [ 127.665373][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 127.665390][ T36] audit: type=1400 audit(1784651916.750:366): avc: denied { read write } for pid=1820 comm="syz.1.446" name="file0" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.699671][ T36] audit: type=1400 audit(1784651916.750:367): avc: denied { open } for pid=1820 comm="syz.1.446" path="/114/file0" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.725046][ T36] audit: type=1400 audit(1784651916.820:368): avc: denied { bind } for pid=1818 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.762508][ T1826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.771120][ T1826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.819763][ T1824] bridge0: port 3(erspan0) entered blocking state [ 127.826296][ T1824] bridge0: port 3(erspan0) entered disabled state [ 127.832777][ T1824] erspan0: entered allmulticast mode [ 127.838548][ T1824] erspan0: entered promiscuous mode [ 127.843869][ T1824] bridge0: port 3(erspan0) entered blocking state [ 127.850352][ T1824] bridge0: port 3(erspan0) entered forwarding state [ 127.865558][ T445] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 128.026783][ T445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.037769][ T445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.047592][ T445] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.056697][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.065481][ T445] usb 1-1: config 0 descriptor?? [ 128.215556][ T311] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 128.273004][ T1817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.281679][ T1817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.373554][ T311] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.384699][ T311] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.394752][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.404077][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.414684][ T311] hub 4-1:4.0: USB hub found [ 128.455006][ T1834] kvm: user requested TSC rate below hardware speed [ 128.617686][ T311] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 128.646096][ T311] usb 4-1: USB disconnect, device number 51 [ 128.707132][ T445] usb 1-1: string descriptor 0 read error: -71 [ 128.713638][ T445] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #200: -71 [ 128.723407][ T445] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 128.731570][ T445] uclogic 0003:256C:006D.0017: failed probing pen v2 parameters: -71 [ 128.739696][ T445] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 128.747255][ T445] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 128.757477][ T445] usb 1-1: USB disconnect, device number 58 [ 128.775594][ T349] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 128.900232][ T36] audit: type=1326 audit(1784651917.990:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1849 comm="syz.4.456" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca5fd9de99 code=0x0 [ 128.935577][ T349] usb 2-1: Using ep0 maxpacket: 16 [ 128.942161][ T349] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 128.950417][ T445] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 128.958064][ T349] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 128.972350][ T445] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.982793][ T349] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 128.993557][ T349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.015474][ T349] usb 2-1: Product: syz [ 129.019757][ T349] usb 2-1: Manufacturer: syz [ 129.024392][ T349] usb 2-1: SerialNumber: syz [ 129.199609][ T36] audit: type=1400 audit(1784651918.290:370): avc: denied { link } for pid=1864 comm="syz.3.459" name="#6f" dev="tmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.221876][ T36] audit: type=1400 audit(1784651918.290:371): avc: denied { rename } for pid=1864 comm="syz.3.459" name="#70" dev="tmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.252637][ T1843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.266335][ T1843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.285810][ T36] audit: type=1400 audit(1784651918.380:372): avc: denied { write } for pid=1869 comm="syz.0.461" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.311267][ T1870] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 129.311344][ T1870] rust_binder: Read failure Err(EFAULT) in pid:309 [ 129.322215][ T1870] rust_binder: Error while translating object. [ 129.322381][ T36] audit: type=1400 audit(1784651918.410:373): avc: denied { transfer } for pid=1869 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 129.355037][ T1870] rust_binder: Failure in copy_transaction_data: EINVAL [ 129.355071][ T1870] rust_binder: 1869:1870 transaction to 1869 failed: EINVAL [ 129.365083][ T349] usb 2-1: USB disconnect, device number 55 [ 129.384583][ T1078] udevd[1078]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.525495][ T445] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 129.615496][ T347] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 129.677543][ T445] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 55, changing to 4 [ 129.688942][ T445] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 129.699948][ T445] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 129.711179][ T445] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.765508][ T347] usb 1-1: Using ep0 maxpacket: 16 [ 129.771890][ T347] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1600, setting to 1024 [ 129.783439][ T347] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.790193][ T347] usb 1-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 129.799503][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.809719][ T347] usb 1-1: config 0 descriptor?? [ 129.829784][ T1872] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 129.839816][ T36] audit: type=1400 audit(1784651918.930:374): avc: denied { accept } for pid=1871 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 129.859241][ T1870] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.280135][ T347] wacom 0003:056A:00BC.0019: ignoring exceeding usage max [ 130.288768][ T347] wacom 0003:056A:00BC.0019: unknown main item tag 0x6 [ 130.295751][ T347] wacom 0003:056A:00BC.0019: ignoring exceeding usage max [ 130.304453][ T347] wacom 0003:056A:00BC.0019: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 130.314737][ T347] wacom 0003:056A:00BC.0019: hidraw0: USB HID v0.81 Device [HID 056a:00bc] on usb-dummy_hcd.0-1/input0 [ 130.326852][ T347] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BC.0019/input/input13 [ 130.479748][ T347] usb 1-1: USB disconnect, device number 59 [ 130.518408][ T1889] x_tables: unsorted underflow at hook 2 [ 130.525068][ T1889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.536129][ T1889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.562438][ T36] audit: type=1400 audit(1784651919.650:375): avc: denied { getopt } for pid=1890 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.835634][ T9] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 130.965564][ T9] usb 2-1: device descriptor read/64, error -71 [ 131.152442][ T1910] FAULT_INJECTION: forcing a failure. [ 131.152442][ T1910] name failslab, interval 1, probability 0, space 0, times 0 [ 131.165152][ T1910] CPU: 1 UID: 0 PID: 1910 Comm: syz.4.475 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 131.165189][ T1910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 131.165204][ T1910] Call Trace: [ 131.165212][ T1910] [ 131.165222][ T1910] __dump_stack+0x21/0x30 [ 131.165259][ T1910] dump_stack_lvl+0x140/0x1c0 [ 131.165293][ T1910] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.165326][ T1910] ? __kasan_kmalloc+0x96/0xb0 [ 131.165346][ T1910] dump_stack+0x19/0x20 [ 131.165388][ T1910] should_fail_ex+0x3c2/0x510 [ 131.165413][ T1910] should_failslab+0xac/0x100 [ 131.165444][ T1910] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 131.165485][ T1910] ? simple_xattr_set+0x5e/0x300 [ 131.165510][ T1910] ? __d_add+0x636/0xac0 [ 131.165535][ T1910] ? __asan_memcpy+0x5a/0x80 [ 131.165558][ T1910] kstrdup+0x4d/0x130 [ 131.165590][ T1910] simple_xattr_set+0x5e/0x300 [ 131.165620][ T1910] shmem_xattr_handler_set+0x198/0x2d0 [ 131.165642][ T1910] ? __cfi_shmem_xattr_handler_set+0x10/0x10 [ 131.165687][ T1910] __vfs_setxattr+0x453/0x4a0 [ 131.165721][ T1910] __vfs_setxattr_noperm+0x12d/0x670 [ 131.165758][ T1910] __vfs_setxattr_locked+0x212/0x240 [ 131.165783][ T1910] vfs_setxattr+0x16b/0x2f0 [ 131.165825][ T1910] ? __cfi_vfs_setxattr+0x10/0x10 [ 131.165859][ T1910] ? __kasan_check_write+0x18/0x20 [ 131.165882][ T1910] ovl_xattr_set+0x36f/0x410 [ 131.165910][ T1910] ? ovl_xattr_escape_name+0x240/0x240 [ 131.165930][ T1910] ovl_other_xattr_set+0x3e/0x50 [ 131.165949][ T1910] ? __cfi_ovl_other_xattr_set+0x10/0x10 [ 131.165995][ T1910] __vfs_setxattr+0x453/0x4a0 [ 131.166029][ T1910] __vfs_setxattr_noperm+0x12d/0x670 [ 131.166064][ T1910] __vfs_setxattr_locked+0x212/0x240 [ 131.166089][ T1910] vfs_setxattr+0x16b/0x2f0 [ 131.166135][ T1910] ? __cfi_vfs_setxattr+0x10/0x10 [ 131.166168][ T1910] ? mnt_want_write+0x321/0x510 [ 131.166202][ T1910] path_setxattr+0x337/0x5a0 [ 131.166220][ T1910] ? simple_xattrs_free+0x180/0x180 [ 131.166242][ T1910] ? __cfi_ksys_write+0x10/0x10 [ 131.166279][ T1910] __x64_sys_setxattr+0xc9/0xe0 [ 131.166300][ T1910] x64_sys_call+0x2d94/0x2ee0 [ 131.166321][ T1910] do_syscall_64+0x57/0xf0 [ 131.166348][ T1910] ? clear_bhb_loop+0x50/0xa0 [ 131.166370][ T1910] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.166390][ T1910] RIP: 0033:0x7fca5fd9de99 [ 131.166420][ T1910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.166442][ T1910] RSP: 002b:00007fca60d10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 131.166466][ T1910] RAX: ffffffffffffffda RBX: 00007fca60025fa0 RCX: 00007fca5fd9de99 [ 131.166490][ T1910] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 131.166502][ T1910] RBP: 00007fca60d10090 R08: 0000000000000001 R09: 0000000000000000 [ 131.166513][ T1910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.166523][ T1910] R13: 00007fca60026038 R14: 00007fca60025fa0 R15: 00007ffc7e297538 [ 131.166538][ T1910] [ 131.215636][ T9] usb 2-1: device descriptor read/64, error -71 [ 131.499279][ T1914] IPv6: Can't replace route, no match found [ 131.715507][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 131.745778][ T1918] kvm: user requested TSC rate below hardware speed [ 131.757242][ T1918] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 131.765917][ T1918] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 131.855536][ T9] usb 2-1: device descriptor read/64, error -71 [ 132.095548][ T9] usb 2-1: device descriptor read/64, error -71 [ 132.215737][ T9] usb usb2-port1: attempt power cycle [ 132.263383][ T445] usb 4-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice= 0.40 [ 132.281997][ T445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.298628][ T445] usb 4-1: can't set config #1, error -71 [ 132.310304][ T445] usb 4-1: USB disconnect, device number 52 [ 132.560805][ T1932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.569323][ T9] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 132.577126][ T1932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.596647][ T9] usb 2-1: device descriptor read/8, error -71 [ 132.615515][ T445] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 132.726626][ T9] usb 2-1: device descriptor read/8, error -71 [ 132.745527][ T445] usb 4-1: device descriptor read/64, error -71 [ 132.965533][ T9] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 132.985542][ T445] usb 4-1: device descriptor read/64, error -71 [ 132.992851][ T9] usb 2-1: device descriptor read/8, error -71 [ 133.126626][ T9] usb 2-1: device descriptor read/8, error -71 [ 133.155379][ T1944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.164167][ T1944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.225635][ T445] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 133.235700][ T9] usb usb2-port1: unable to enumerate USB device [ 133.355542][ T445] usb 4-1: device descriptor read/64, error -71 [ 133.595542][ T445] usb 4-1: device descriptor read/64, error -71 [ 133.687719][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 133.687738][ T36] audit: type=1400 audit(1784651922.780:381): avc: denied { name_bind } for pid=1951 comm="syz.4.489" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 133.706286][ T445] usb usb4-port1: attempt power cycle [ 133.728348][ T1956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.737358][ T1956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.055528][ T445] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 134.076621][ T445] usb 4-1: device descriptor read/8, error -71 [ 134.206741][ T445] usb 4-1: device descriptor read/8, error -71 [ 134.270967][ T1962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.279758][ T1962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.289290][ T1962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.298834][ T1962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.415541][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 134.445552][ T445] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 134.466532][ T445] usb 4-1: device descriptor read/8, error -71 [ 134.545541][ T9] usb 2-1: device descriptor read/64, error -71 [ 134.596604][ T445] usb 4-1: device descriptor read/8, error -71 [ 134.634658][ T36] audit: type=1400 audit(1784651923.720:382): avc: denied { relabelfrom } for pid=1966 comm="syz.4.494" name="UNIX-STREAM" dev="sockfs" ino=19061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 134.634692][ T1974] SELinux: Context system_u:object_r:syslogd_initrc_exec_t:s0 is not valid (left unmapped). [ 134.669385][ T36] audit: type=1400 audit(1784651923.760:383): avc: denied { relabelto } for pid=1966 comm="syz.4.494" name="UNIX-STREAM" dev="sockfs" ino=19061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:syslogd_initrc_exec_t:s0" [ 134.705789][ T445] usb usb4-port1: unable to enumerate USB device [ 134.785521][ T9] usb 2-1: device descriptor read/64, error -71 [ 135.025778][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 135.165536][ T9] usb 2-1: device descriptor read/64, error -71 [ 135.172660][ T1981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.181250][ T1981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.325749][ T445] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 135.343185][ T36] audit: type=1400 audit(1784651924.430:384): avc: denied { setattr } for pid=1982 comm="syz.3.498" name="psched" dev="proc" ino=4026532587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 135.405632][ T9] usb 2-1: device descriptor read/64, error -71 [ 135.485515][ T445] usb 1-1: Using ep0 maxpacket: 16 [ 135.492222][ T445] usb 1-1: config 0 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.505291][ T445] usb 1-1: config 0 interface 0 has no altsetting 0 [ 135.511948][ T445] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 135.521147][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.529251][ T9] usb usb2-port1: attempt power cycle [ 135.535656][ T445] usb 1-1: config 0 descriptor?? [ 135.665509][ T349] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 135.732932][ T1995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.741962][ T1996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.745713][ T1995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.752395][ T1996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.782381][ T445] usbhid 1-1:0.0: can't add hid device: -71 [ 135.795596][ T445] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 135.804579][ T445] usb 1-1: USB disconnect, device number 60 [ 135.816041][ T349] usb 4-1: Using ep0 maxpacket: 32 [ 135.823397][ T349] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 135.831849][ T349] usb 4-1: config 0 has no interface number 0 [ 135.839893][ T349] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 135.849133][ T349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.857220][ T349] usb 4-1: Product: syz [ 135.861486][ T349] usb 4-1: Manufacturer: syz [ 135.865604][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 135.873957][ T349] usb 4-1: SerialNumber: syz [ 135.879442][ T349] usb 4-1: config 0 descriptor?? [ 135.885780][ T349] smsc95xx v2.0.0 [ 135.896772][ T9] usb 2-1: device descriptor read/8, error -71 [ 136.026648][ T9] usb 2-1: device descriptor read/8, error -71 [ 136.086509][ T1989] netlink: 'syz.3.501': attribute type 58 has an invalid length. [ 136.120062][ T1989] kvm: kvm [1988]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 136.285506][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 136.306597][ T9] usb 2-1: device descriptor read/8, error -71 [ 136.367630][ T349] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 136.378604][ T349] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 136.396107][ T2010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.404742][ T2010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.436622][ T9] usb 2-1: device descriptor read/8, error -71 [ 136.545629][ T9] usb usb2-port1: unable to enumerate USB device [ 136.926167][ T2012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.934730][ T2012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.190913][ T349] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 137.204945][ T349] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 137.216303][ T2014] netlink: 'syz.1.509': attribute type 4 has an invalid length. [ 137.537296][ T349] usb 5-1: USB disconnect, device number 13 [ 137.545141][ T1499] bridge_slave_1: left allmulticast mode [ 137.552061][ T1499] bridge_slave_1: left promiscuous mode [ 137.573420][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.581211][ T1499] bridge_slave_0: left allmulticast mode [ 137.586051][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 137.588064][ T1499] bridge_slave_0: left promiscuous mode [ 137.600246][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.735486][ T9] usb 2-1: device descriptor read/64, error -71 [ 137.767435][ T1499] veth1_macvtap: left promiscuous mode [ 137.773100][ T1499] veth0_vlan: left promiscuous mode [ 137.874096][ T2028] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.885526][ T2028] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.892914][ T2028] bridge_slave_0: entered allmulticast mode [ 137.900854][ T2028] bridge_slave_0: entered promiscuous mode [ 137.908106][ T2028] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.915400][ T2028] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.922894][ T2028] bridge_slave_1: entered allmulticast mode [ 137.929555][ T2028] bridge_slave_1: entered promiscuous mode [ 137.975518][ T9] usb 2-1: device descriptor read/64, error -71 [ 137.987394][ T1499] ------------[ cut here ]------------ [ 137.992926][ T1499] WARNING: CPU: 0 PID: 1499 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 138.003164][ T1499] Modules linked in: [ 138.007117][ T1499] CPU: 0 UID: 0 PID: 1499 Comm: kworker/u8:60 Not tainted syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 138.019007][ T1499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 138.029154][ T1499] Workqueue: netns cleanup_net [ 138.033976][ T1499] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 138.040055][ T1499] Code: e8 b1 0e d7 fc 4b 83 3c 3e 00 75 19 e8 45 5b 7e fc 49 81 ff f8 07 00 00 74 1b e8 37 5b 7e fc 49 83 c7 08 eb c9 e8 2c 5b 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 138.059765][ T1499] RSP: 0000:ffffc9000f487b90 EFLAGS: 00010293 [ 138.065908][ T1499] RAX: ffffffff850916c4 RBX: ffff88811fd4a380 RCX: ffff888124810000 [ 138.068882][ T2028] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.073911][ T1499] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88811a3f40b8 [ 138.073933][ T1499] RBP: ffffc9000f487bb0 R08: 0000000000000003 R09: 0000000000000004 [ 138.080997][ T2028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.089003][ T1499] R10: dffffc0000000000 R11: fffff52001e90f04 R12: dffffc0000000000 [ 138.097221][ T2028] bridge0: port 1(bridge_slave_0) entered blocking state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 138.104169][ T1499] R13: dffffc0000000000 R14: ffff88811a3f4000 R15: 00000000000000b8 [ 138.112165][ T2028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.119221][ T1499] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 138.143421][ T1499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.148142][ T36] audit: type=1400 audit(1784651927.220:385): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[3076]" dev="pipefs" ino=3076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 138.150278][ T1499] CR2: 00007f7950f43d90 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 138.181053][ T1499] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 31597bd4124afd56 [ 138.189476][ T1499] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 138.197528][ T1499] Call Trace: [ 138.200840][ T1499] [ 138.203797][ T1499] cleanup_net+0x6ba/0xc90 [ 138.208352][ T1499] ? __cfi_cleanup_net+0x10/0x10 [ 138.213339][ T1499] ? kick_pool+0xb9/0x540 [ 138.217751][ T1499] process_scheduled_works+0x7f7/0x1060 [ 138.223373][ T1499] worker_thread+0xc99/0x13f0 [ 138.228121][ T1499] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 138.233881][ T1499] ? __kasan_check_read+0x15/0x20 [ 138.239066][ T1499] kthread+0x2c7/0x360 [ 138.243222][ T1499] ? __cfi_worker_thread+0x10/0x10 [ 138.248483][ T1499] ? __cfi_kthread+0x10/0x10 [ 138.253116][ T1499] ret_from_fork+0x67/0xa0 [ 138.257596][ T1499] ? __cfi_kthread+0x10/0x10 [ 138.262217][ T1499] ret_from_fork_asm+0x1a/0x30 [ 138.267085][ T1499] [ 138.270135][ T1499] ---[ end trace 0000000000000000 ]--- [ 138.325793][ T1499] ------------[ cut here ]------------ [ 138.331317][ T1499] WARNING: CPU: 0 PID: 1499 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 138.341591][ T1499] Modules linked in: [ 138.345564][ T1499] CPU: 0 UID: 0 PID: 1499 Comm: kworker/u8:60 Tainted: G W syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 138.358917][ T1499] Tainted: [W]=WARN [ 138.362748][ T1499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 138.372878][ T1499] Workqueue: netns cleanup_net [ 138.377738][ T1499] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 138.383868][ T1499] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 5a 7e fc 49 81 ff f8 07 00 00 74 1b e8 e2 5a 7e fc 49 83 c7 08 eb c5 e8 d7 5a 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 5a 7e fc 5b 41 5c 41 5e 41 [ 138.403643][ T1499] RSP: 0000:ffffc9000f487b90 EFLAGS: 00010293 [ 138.409801][ T1499] RAX: ffffffff85091719 RBX: ffff88811a3f4800 RCX: ffff888124810000 [ 138.417883][ T1499] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88811a3f4808 [ 138.425914][ T1499] RBP: ffffc9000f487bb0 R08: 0000000000000003 R09: 0000000000000004 [ 138.433931][ T1499] R10: dffffc0000000000 R11: fffff52001e90f04 R12: dffffc0000000000 [ 138.441980][ T1499] R13: dffffc0000000000 R14: ffff88811a3f4000 R15: 0000000000000008 [ 138.450026][ T1499] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 138.459045][ T1499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.465689][ T1499] CR2: 00007f8b5956de9c CR3: 00000000074aa000 CR4: 00000000003526b0 [ 138.473702][ T1499] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 31597bd4124afd56 [ 138.481744][ T1499] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 138.489791][ T1499] Call Trace: [ 138.493137][ T1499] [ 138.496135][ T1499] cleanup_net+0x6ba/0xc90 [ 138.500600][ T1499] ? __cfi_cleanup_net+0x10/0x10 [ 138.505614][ T1499] ? kick_pool+0xb9/0x540 [ 138.509990][ T1499] process_scheduled_works+0x7f7/0x1060 [ 138.515642][ T1499] worker_thread+0xc99/0x13f0 [ 138.520359][ T1499] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 138.526267][ T1499] ? __kasan_check_read+0x15/0x20 [ 138.531343][ T1499] kthread+0x2c7/0x360 [ 138.535492][ T1499] ? __cfi_worker_thread+0x10/0x10 [ 138.540642][ T1499] ? __cfi_kthread+0x10/0x10 [ 138.545269][ T1499] ret_from_fork+0x67/0xa0 [ 138.549780][ T1499] ? __cfi_kthread+0x10/0x10 [ 138.554416][ T1499] ret_from_fork_asm+0x1a/0x30 [ 138.559251][ T1499] [ 138.562305][ T1499] ---[ end trace 0000000000000000 ]--- [ 138.635122][ T1466] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.646668][ T1466] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.700471][ T1499] ------------[ cut here ]------------ [ 138.706018][ T1499] WARNING: CPU: 1 PID: 1499 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 138.715649][ T1499] Modules linked in: [ 138.719589][ T1499] CPU: 1 UID: 0 PID: 1499 Comm: kworker/u8:60 Tainted: G W syzkaller #0 9439e3255b4a1e8de1ac6f5994a0a4647331413b [ 138.733053][ T1499] Tainted: [W]=WARN [ 138.736908][ T1499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 138.747053][ T1499] Workqueue: netns cleanup_net [ 138.751876][ T1499] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 138.757495][ T1499] Code: 3c 20 00 74 08 48 89 df e8 9f ce f1 fc 48 8b 3b e8 b7 bf dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 88 b7 00 cc e8 22 1b 99 fc <0f> 0b e9 b0 fd ff ff e8 16 1b 99 fc 0f 0b e9 18 fe ff ff e8 0a 1b [ 138.777169][ T1499] RSP: 0018:ffffc9000f487b70 EFLAGS: 00010293 [ 138.783281][ T1499] RAX: ffffffff84ee56ce RBX: ffff88811fd4a380 RCX: ffff888124810000 [ 138.791330][ T1499] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888124810000 [ 138.799374][ T1499] RBP: ffffc9000f487b98 R08: ffffffff87d41c27 R09: 1ffffffff0fa8384 [ 138.807423][ T1499] R10: dffffc0000000000 R11: fffffbfff0fa8385 R12: 1ffffffff0fa80d8 [ 138.815465][ T1499] R13: dffffc0000000000 R14: ffff88811fd4af80 R15: dffffc0000000000 [ 138.823480][ T1499] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 138.832605][ T1499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.839260][ T1499] CR2: 00007f6fa55107e8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 138.847301][ T1499] Call Trace: [ 138.850611][ T1499] [ 138.853579][ T1499] xfrm_net_exit+0x31/0x80 [ 138.858069][ T1499] cleanup_net+0x6ba/0xc90 [ 138.862529][ T1499] ? __cfi_cleanup_net+0x10/0x10 [ 138.867545][ T1499] ? kick_pool+0xb9/0x540 [ 138.871920][ T1499] process_scheduled_works+0x7f7/0x1060 [ 138.877523][ T1499] worker_thread+0xc99/0x13f0 [ 138.882240][ T1499] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 138.888044][ T1499] ? __kasan_check_read+0x15/0x20 [ 138.893105][ T1499] kthread+0x2c7/0x360 [ 138.897238][ T1499] ? __cfi_worker_thread+0x10/0x10 [ 138.902388][ T1499] ? __cfi_kthread+0x10/0x10 [ 138.907056][ T1499] ret_from_fork+0x67/0xa0 [ 138.911521][ T1499] ? __cfi_kthread+0x10/0x10 [ 138.916188][ T1499] ret_from_fork_asm+0x1a/0x30 [ 138.920990][ T1499] [ 138.924037][ T1499] ---[ end trace 0000000000000000 ]--- [ 139.032530][ T1499] erspan0: left allmulticast mode [ 139.037657][ T1499] erspan0: left promiscuous mode [ 139.042710][ T1499] bridge0: port 3(erspan0) entered disabled state [ 139.049966][ T1499] bridge_slave_1: left allmulticast mode [ 139.055801][ T1499] bridge_slave_1: left promiscuous mode [ 139.061446][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.070221][ T1499] bridge_slave_0: left allmulticast mode [ 139.075946][ T1499] bridge_slave_0: left promiscuous mode [ 139.081643][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.089912][ T1499] bridge_slave_1: left allmulticast mode [ 139.095699][ T1499] bridge_slave_1: left promiscuous mode [ 139.101340][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.109136][ T1499] bridge_slave_0: left allmulticast mode [ 139.114792][ T1499] bridge_slave_0: left promiscuous mode [ 139.120561][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.167326][ T349] usb 4-1: USB disconnect, device number 57 [ 139.297901][ T1499] tipc: Disabling bearer [ 139.303184][ T1499] tipc: Left network mode [ 139.309349][ T1499] veth1_macvtap: left promiscuous mode [ 139.314872][ T1499] veth0_vlan: left promiscuous mode [ 139.320552][ T1499] veth1_macvtap: left promiscuous mode [ 139.326187][ T1499] veth0_vlan: left promiscuous mode [ 139.677863][ T1499] bridge_slave_1: left allmulticast mode [ 139.683542][ T1499] bridge_slave_1: left promiscuous mode [ 139.689228][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.696854][ T1499] bridge_slave_0: left allmulticast mode [ 139.702495][ T1499] bridge_slave_0: left promiscuous mode [ 139.708270][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.716220][ T1499] bridge_slave_1: left allmulticast mode [ 139.721867][ T1499] bridge_slave_1: left promiscuous mode [ 139.727555][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.734988][ T1499] bridge_slave_0: left allmulticast mode [ 139.740677][ T1499] bridge_slave_0: left promiscuous mode [ 139.746369][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.928765][ T1499] veth1_macvtap: left promiscuous mode [ 139.934299][ T1499] veth0_vlan: left promiscuous mode