last executing test programs: 6.790301816s ago: executing program 2 (id=29): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone3(&(0x7f0000000200)={0x110044000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/38, 0x26, &(0x7f0000000100)=""/179, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) process_madvise(r1, &(0x7f0000000840)=[{&(0x7f0000000280)="4080279c824cab6760ce8591bcdfe3226ef87a77c11db6a45ef0b38586", 0x1d}, {&(0x7f00000002c0)="da63d7db0ea4f32cf27e6d72d4de6269a3caf2cfa31281f3bce15ff7ac351e66491e623f9bb884364f7fcca49a6afd9df4c2f94108734a3485d01d23140cacbb509c81137a43d2cc3fa756c62d0667462abfbb6e81243c2ec3a7d13a318c5ca8852c7286a1b48b9ba9bfb03e23a4b7cd6699c94d2147d7af60b336c22c5a4e2e7b0b5c66d0d1802f90a14cfc4fc2162281bb0d567f68dd1f3f12d906bd2165fa07e72a1890ff363622823b71d0ba399816728fe21f4428565caa99b5a53d55a9066e8d775e6925593fc6cd60c0c98b233fde966bc59f767f8926acdbf8e1026779745e090d9ec0000c36102c7ce55e58ca2d98db08", 0xf5}, {&(0x7f0000000480)="e1ba7e4550635e3a7c9b4388e8da15a8ca3c82a6d7625a654590611378ab14dcc38deaea11a1ec9f9b830c306a62f76039f301c59fc953df1929f4c7996f8980f03f93c07b5fcde647fb0985642ddd5cba7fe3bfaf9a2dbb82863a322586a156888c8b06d618ffac78e30e2dc26956a88314dfc04c765190a63ae60458c5e7b3764aad7c97620e6dc2ff88423383942ddb8e3c59af7153f88c79e08daa2b9713466e8b11debf659fdd02f7e096f07365ee45975cd8c55f5a0ea43998524a9f9f5824821273669dc913c52df783371603", 0xd0}, {&(0x7f00000003c0)="78c2020a4f9a171daf415ea081ea135a406729928cac27e6", 0x18}, {&(0x7f0000000400)="f72a1c", 0x3}, {&(0x7f0000000580)="e68d7355fd5658fc0942f94307aa9b098aa1d55a6517edf07a632155cd4cfb72b67398ec1e84e80e2ef2187ca87b8930cf2567810af97aa9ff505b3bc2d64b06cdf2e17b36f89abe903d364056dea495f296e6936040c5771445d7e94e75d050a05e823cdec273caa21ad13c4d6d04694d8090081f5a6148d718b393d5f5ff5fe43882a3766bb3b240445d128ae20b8cf66adc9baf097982bdddfc373242ef48e794ff03", 0xa4}, {&(0x7f0000000640)="91b57db71afdf9b251655c2ca4940d8c5ad17cf7d6bb9c34b9184505905e98707905d31f360dbf7fc8e9346ee486802bda4ddee6495f0963a5b72b330362dd124e", 0x41}, {&(0x7f00000006c0)="76b72f6c44d31030865bf77eed81c18e3123360fa9027e4b1447ba7d66ef1022373cf538c6c54c877a3c276ee8fc40781cc6421b6bc3c439ebcdf4f90d34a2b97eff6701a0b00c1d9e5babfb4778544b574275dc4afa5b49a75fa165404976d0e5626fb143e8d0595aef9502a85c503e4276660b217a50eeb1c1f81ccd045315b9a3cdbb21b3fe99ffd8224a5ba5b7c39c78cf14dbcca8e5d698806ed9f3ebf57621c0df1001d1d81e26839b1d1437a596068ba8ab55494af5c4a3d013f2465dec76c6036aa8b57b47fe3941a5bf93d97199e1b861ec9317af2bcf40b1e173d37f6246a30bd2", 0xe6}, {&(0x7f00000007c0)="746cc633e25b7ca24bec7fcc3e3ac5141e6c8584a034915c930c86fa07c598f503eb1f45d1d388c205f3881bb62609bcff3b85281818d5d59fae48ed68681e29163f9a14566275107cd351118b24a6961f76c0c1339bdfd14048558fd1618d4db1faec7d444aa6b22817e0c3a2ba5bb8b6785a3da518d6356b9db544748c", 0x7e}, {&(0x7f0000000a00)="4627984340a0ec176b1398d15b2557b148910cea569445ed117096c250ab54c8aee9963126a8e3059e4071944bebb783c031784ebd346b180200e401342af0cf132a6e2a4f27b84d6cc7ad02e24d0f17c0412b5a4b78fb75aa219a413bddaa368a1ae558c92fac614716a4c92af15a097204e4bf91cf27df9e4b06e27c9b370a8c1718ca9407a97561a6874455bb69e9271f0677406e0785577876371bd5741d98ee42619c6bc39f83556d8f07c8c8b1447dd4c288ee86bbb744ee78e2cb9dca8b9656a510ee9071d46861336df8", 0xce}], 0xa, 0x9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x9]}, &(0x7f0000000080), 0x8) close(r1) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0xfffffff9, 0x8}}], 0x18}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x6, 0x0, &(0x7f0000000000)) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000003100)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xb0, 0xf, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x92, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x53, 0x4, 0xb4}}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x16, &(0x7f0000000040)=@string={0x16, 0x3, "c8d0a915b8c42196c07f8723ad7828bc58d961dd"}}, {0x0, 0x0}]}) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0={0xfc, 0x0, '\x00', 0xff}, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}}, 0xf0}}, 0x0) 3.773812545s ago: executing program 2 (id=54): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.61363473s ago: executing program 3 (id=58): r0 = inotify_init1(0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = syz_pidfd_open(r1, 0x0) process_mrelease(r3, 0x0) sendmmsg$inet6(r2, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000240)="fbfbbe57c3d75181fd68e747bf313d4262e462d29d3df16fe5ca102484249f52617f078d138af35167e08a17bfeed1ade5c7ca8fe3f47e396bc5fe051752759b338a44d1850e61e7e3704277541eddd62f5ee72c717312b7d7ecad88fc7c0ef337505a2284e8a2424856a363a84f61ce1d2a83b089d3a9080263a073f8b1422751697513bb95f3dfbd9223facdf2a186f31993792d899a52e09aedcf03dae3fa2f4c6e979414e741", 0xa8}, {&(0x7f0000000340)="5b49d35433e9473304e03323e223e37736ddfd86c902eb15f5f1291dec65c0ee684bfb477f8cd320ba765f", 0x2b}, {&(0x7f0000000480)="6a2e346b4fd3cdedcf9102bdf306a005e63a1fee63eea3e77edfbe8df6bc02e7b7c61d43c1877c361965f51643f49022e8f64e2553e582d8531601013a555140422a71104662517657ad8bd330c378edc27ed4ad3a8f5956ef62d84f519e70a3510510a1201617bfe68d319ef4af3766e3361833ca4f2780c3d5c7ee6b57feb4881404fa9c98a907f49e1d223d9c3b08d8aae3cd3f1b6c0d2b095619c26a7966dbca8fa07dfd76b2bfb8168adbddf61889e18f74be2e6a31ebee7fb3ada405805aff3940afb1ed58eceae442142f", 0xce}], 0x3, &(0x7f0000000580)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x32, 0x1, '\x00', [@ra, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}]}}}], 0x28}}], 0x1, 0x40000044) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) 2.544264936s ago: executing program 3 (id=59): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r5}}]}) splice(r2, 0x0, r3, 0x0, 0x80, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'batadv_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f0000000100)={'batadv0\x00', 0x400}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x1811}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.350846846s ago: executing program 0 (id=60): r0 = socket$inet6(0xa, 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x1]}}) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x4, 0x0, 0xeeee6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f0000010280)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) finit_module(r7, 0x0, 0x1) sendto$inet6(r0, &(0x7f0000000740)="f835fe28d0e37d9b0c311fbfd7bac91deac1de1bd587f7a0882648882d44b5f431a1856371478888ad70454fe9873709e003", 0x32, 0x50, &(0x7f0000000780)={0xa, 0x4e20, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfb9b}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'pim6reg1\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r6) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000101, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000740)=[@code={0xa, 0x69, {"b9030100c00f32b904000000c461b9dd07b9d20800000f3266450ff7ecf044093966d8baaff80c7cf80c7cd68d3e0fc7ae3ed7000066edc421845ef366bad00466baf80cb8665abb89ef66bafc0c66ed430f01f86644def0"}}], 0x69}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000104fcffffff00000000ac1414aae5fffff8b49ed9825133a9f7b59675ce79b09b000f4d6b35a000fc010000000000000007000097ed0afc283f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x8005) recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/203, 0xcb}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000300)=""/201, 0xc9}, {&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000200)=""/151, 0x97}, {&(0x7f0000000400)=""/49, 0x31}], 0x7, &(0x7f0000000600)=""/133, 0x85}, 0x100) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='map_files\x00') getdents64(r10, &(0x7f0000000040)=""/27, 0x1b) getdents(r10, &(0x7f0000001f80)=""/4093, 0xffd) 2.273379091s ago: executing program 3 (id=61): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x32c29000) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0xf80}], 0x1, 0x0, 0x0, 0x20000084}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c02000000020103000000000000000007000002a4000a800800014000000000800002800c000280050001003a0000002c00018014000300fe8000000000000000000000fe8000000000000000000000000000bb060003400004000014000180080001000000000008000200ac1efe011400018008000100ac1414bb080002007f00000106000340000200000c000280050001002100000008000140000000000800014000000001080001400000000138010a80040002804c0002800c0002800500010021000000060003400002000006000340000300000c00028005000100060000000c00028005000100210000001400018008000100ac1e010108000200640101020800014000000000480002801400018008000100ac1414bb080002000a0101001400018008000100ffffffff080002000a010100060003400001000006000340000400000c000280050001000100000008000140000000018c0002800c000280050001002f0000000c000280050001008400000006000340000400000c00028005000100210000001400018008000100ac14141708000200000000001400018008000100ac1e0001080002000000000006020000000200002c000180140003000000000000000000000000000000000014000400fc0100000000000000000000000000000e0006007369702d323030303000000006000740000300002400018006000340000100000c00028005000100840000000cc4010a0e0001002f000000"], 0x22c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) r2 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x17, @empty}, 0x10, &(0x7f00000000c0)=[{0x0, 0xffb9}], 0x1, &(0x7f0000001d00)=ANY=[], 0x7}, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) madvise(&(0x7f000012c000/0x3000)=nil, 0x3000, 0xe) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = accept$unix(r1, &(0x7f0000000e80), &(0x7f0000000f00)=0x6e) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002240)={0x15c, 0x0, &(0x7f0000002280)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100a, 0x2}, @fda={0x66646185, 0x0, 0x1, 0x2f}, @ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/219, 0xdb, 0x0, 0x3}}, &(0x7f0000000780)={0x0, 0x18, 0x38}}}, @acquire_done={0x40106309, 0x7f}, @clear_death, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000d40)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000c40)=""/224, 0xe0, 0x0, 0x2c}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000440)={0x0, 0x18, 0x40}}, 0x1000}, @release, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000dc0)={@fda={0x66646185, 0x7, 0x0, 0x32}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x0, 0x2a}}, &(0x7f0000000e40)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000f40)={@fda={0x66646185, 0x1, 0x0, 0x16}, @fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x1, 0x2, 0x1b}}, &(0x7f0000001fc0)={0x0, 0x20, 0x38}}}, @acquire={0x40046305, 0x2}], 0x9c, 0x0, &(0x7f0000002180)="403e7379d45c3d335f8a19195e3e33a06a73f80a18417da00115feaf2e5177dc5b7baf58b306c5f006b80667d2b4ce490d0f069d27c5670e012a8b5dbc244a48d58e4a7f2f1f659c5b0fda79d68086964a2ab862dc72fe0c9ed25211563733cb29677b9b6e728441a255ca84fc0c5b3f2b2ab50b92bbee572652eb6e0e6c2997284130b4ae953d32545927b0a5ac31aa66d91fc08c8f490ead361eda"}) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x1d, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff3b, 0x4000090, &(0x7f00000005c0)={0xa, 0x4e20, 0xa3, @private0, 0x9}, 0x1c) (async) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000400)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ext4\x00', 0x800000, &(0x7f0000000180)='check=relaxed') (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) 2.27251195s ago: executing program 0 (id=62): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6465636f6465217413192aec89faba05ec3d17466a5b00a8a1e90d3963e64e8b04635cd4ef5406da03"], 0xf) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r1) (async, rerun: 64) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (rerun: 64) read$msr(r3, &(0x7f00000001c0)=""/171, 0xab) 2.265380959s ago: executing program 2 (id=63): linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000a6ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.177694601s ago: executing program 0 (id=65): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x9, 0xfffffffffffffffd, 0x4, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x200000000000008d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 2.161939378s ago: executing program 3 (id=67): r0 = inotify_init1(0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = syz_pidfd_open(r1, 0x0) process_mrelease(r3, 0x0) sendmmsg$inet6(r2, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000240)="fbfbbe57c3d75181fd68e747bf313d4262e462d29d3df16fe5ca102484249f52617f078d138af35167e08a17bfeed1ade5c7ca8fe3f47e396bc5fe051752759b338a44d1850e61e7e3704277541eddd62f5ee72c717312b7d7ecad88fc7c0ef337505a2284e8a2424856a363a84f61ce1d2a83b089d3a9080263a073f8b1422751697513bb95f3dfbd9223facdf2a186f31993792d899a52e09aedcf03dae3fa2f4c6e979414e741", 0xa8}, {&(0x7f0000000340)="5b49d35433e9473304e03323e223e37736ddfd86c902eb15f5f1291dec65c0ee684bfb477f8cd320ba765f", 0x2b}, {&(0x7f0000000480)="6a2e346b4fd3cdedcf9102bdf306a005e63a1fee63eea3e77edfbe8df6bc02e7b7c61d43c1877c361965f51643f49022e8f64e2553e582d8531601013a555140422a71104662517657ad8bd330c378edc27ed4ad3a8f5956ef62d84f519e70a3510510a1201617bfe68d319ef4af3766e3361833ca4f2780c3d5c7ee6b57feb4881404fa9c98a907f49e1d223d9c3b08d8aae3cd3f1b6c0d2b095619c26a7966dbca8fa07dfd76b2bfb8168adbddf61889e18f74be2e6a31ebee7fb3ada405805aff3940afb1ed58eceae442142f", 0xce}], 0x3, &(0x7f0000000580)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x32, 0x1, '\x00', [@ra, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}]}}}], 0x28}}], 0x1, 0x40000044) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) 2.111302978s ago: executing program 2 (id=68): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x6}, 0x8) (async) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x10, 0x5, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x3, 0x51, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x66, 0xa0, 0x81, [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x50ff}, {0xd, 0x24, 0xf, 0x1, 0xdb5d, 0x9, 0x8, 0x6}, [@mdlm_detail={0x4, 0x24, 0x13, 0xf7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x0, 0xfb}}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) (async) writev(r1, 0x0, 0x20) 2.031607312s ago: executing program 3 (id=69): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x800455c9, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000480)=0xa) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = epoll_create(0x7) pipe2(&(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0xa000001c}) select(0x40, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x5, 0x2, 0x5, 0x4}, &(0x7f0000000200)={0x9, 0x8, 0x1, 0x9, 0x80, 0x2880285a, 0x100000000, 0x80}, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r7 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd0, 0x90, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x5, 0xa, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x8, 0xea}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x4, 0x84, 0x4, 0x40, 0xa}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xc1, 0x7, 0x6, 0x7}]}, 0x5, [{0x25, &(0x7f0000000180)=@string={0x25, 0x3, "8150f542ebd938f267d87dd91cb17558a3a51829ba01cb17fddd3e37ea79ee067a2e6c"}}, {0xda, &(0x7f00000001c0)=@string={0xda, 0x3, "5d08204d34e596c1907c9c56a45f31209ecce816d608d337de9d5edeadb893ea9a9ff6874a4a5c386a0f68855bcea3888c58fc3641363906168269bec139d89016e06d6ce79f816ad904cb6368b4442a292c5a64ada642431318b625be5e44d9f92e2c7cf8695b5e656459004cc5b52ad21a1dd9710249f7df02b6c017e7d6b37c421f84097756bd44573f46dcfdd701500bd7282296031637d0e308cc224114666ddffbbfb28875830ea3596f6eae012c0c3b6bf6ce0d9d3b2e62750ca386196dc3ecfad9f7f9f5f305270ab59d8e6c668cf9e57df3f282"}}, {0x3e, &(0x7f00000002c0)=@string={0x3e, 0x3, "e9080e1f4ca18e8691e89ff42bd45980cf06dcf16e8ffae081ff77a752e5f4a88890f28ce4f801c93a32fe39c5a3681c2e569f9a7ef4eed463de1312"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x448}}]}) r8 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x8, 0x3, 0x5}, {0x9, 0x5, 0xa, 0x2, 0x400, 0xd, 0x3, 0xc}, {0x9, 0x5, 0x80, 0x3, 0x8, 0x38, 0xe2, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r8, &(0x7f0000000940)={0x14, &(0x7f0000000800)={0x20, 0x22, 0xe5, {0xe5, 0x21, "68bda4434ac56fc56ccbeb628d101ffe144d9d491caf90aef97a47c9160b633660c8f8e98047fdd745de4128214ed818c5853469f9c2325fe637d5727c402c1cb93cae9720f7a95a4baebf2c9daef14bf398dc46ca45bfdcac98038d1a7302f6bdd8144ab5ededcce7a2219bb40234457ca12263cf8c36a4171f7d642bd03d63d0a9a31faddd07917f0d2f85efd50685911614ff0b78bcdd6d9599177a6eec1e16461bf5ec8d16e523e27edc0374383123db99f5afbe98fb092bcab5f9ab32788502819e3f3c5cae26977ebc5cbacb8ccaf3381bdd7326111997311aa3c975c49ed5e1"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f0000000ec0)={0x1c, &(0x7f0000000980)={0x20, 0x11, 0xa3, "69485ae66e5e0f29a145aff819b0ac85a5b82b92c2bb4726a85e57215cd6260f71cabe772affbb93da8d9db70bc72c0d5769a75f4bbd4d808888e41d588ea4317eff4ae10d099f6345ef79cd5941396568ae47d11ea647316e24accb371f4f93723fec55011edcda5eb8aad5b3ea78ae44c316d43eeed5c464703e8168b4c3b7ee41a6caa1172954d7bd75e8661cb7a566336048d22938aefec9eb0c8f8a41dea4c0c0"}, &(0x7f0000000a40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000e80)={0x21, 0x0, 0x2, "557f"}}) syz_usb_control_io$printer(r7, &(0x7f0000000540)={0x14, &(0x7f0000000400)={0x0, 0xe, 0xd4, {0xd4, 0x21, "304f54b752f13559583ab16fc164863e6801a15ecafa760da16f201b8c6e5ab025efa684d6458a674521594a78f0fd04fd35c8de890b391841ca9358998bb0265b3a10872984f6900cb4226e62aad9d7f7dde881d068e4b16f18db8dda57a801f797264f0e7f96404975ac5cd50616521192c7e4050bf44e8fa9345d5bc0ed7cc6d26153d51e9cc7cdbd76a4e7757a5af41564b09c5de9b09e68e9edf3ce154f47ff22b3a10b6258006e257ff829192e4e88d35b4accb57a9ef3a94d475d1ac82c46dd61c45ec1efb39cef8e7fa0ff45fea3"}}, &(0x7f0000000500)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "e27910da6edeb31272694f247bfed1dfb12acd933470c0a9f64a2ea3c07a641cf8d611db462beb68775b"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000580)={0x0, 0x18, 0x68, "b89f31e2c5ac5af80a5e145906c96d9fa3be29e2f0a7d9f866d07583697d24adbc8f96bbb13701739c2fc77641f7176007d30dd06ca67be7eae7d1d4b52df88f12fa71b8727b969209525fb03cafc75fe11a0d31e4fe043927a6ea48a9f16d48c490a078010054da"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x0, 0x41, {0x3f, "31b2acd4822d8c883ce6e62131c7b82f1fe98c83e849bf054fec5c3d0c43b3521d0198751b652f13531ec79ebd670be1523e56d870768bd0513cc5519f0b2b"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06e53f07080000002a900683"], 0x0}, 0x0) 1.756805866s ago: executing program 0 (id=71): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x5, 0x0, &(0x7f00000009c0)) syz_usb_connect$uac1(0x5, 0xb1, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX], 0x0) 1.499007054s ago: executing program 1 (id=75): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x85) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x880, &(0x7f00000000c0)={[{@lowerdir, 0x5c}]}) 1.470806738s ago: executing program 1 (id=76): linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000eaffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.397590654s ago: executing program 1 (id=77): inotify_init1(0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000000)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = syz_pidfd_open(r0, 0x0) process_mrelease(r2, 0x0) sendmmsg$inet6(r1, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000240)="fbfbbe57c3d75181fd68e747bf313d4262e462d29d3df16fe5ca102484249f52617f078d138af35167e08a17bfeed1ade5c7ca8fe3f47e396bc5fe051752759b338a44d1850e61e7e3704277541eddd62f5ee72c717312b7d7ecad88fc7c0ef337505a2284e8a2424856a363a84f61ce1d2a83b089d3a9080263a073f8b1422751697513bb95f3dfbd9223facdf2a186f31993792d899a52e09aedcf03dae3fa2f4c6e979414e741", 0xa8}, {&(0x7f0000000340)="5b49d35433e9473304e03323e223e37736ddfd86c902eb15f5f1291dec65c0ee684bfb477f8cd320ba765f", 0x2b}, {&(0x7f0000000480)="6a2e346b4fd3cdedcf9102bdf306a005e63a1fee63eea3e77edfbe8df6bc02e7b7c61d43c1877c361965f51643f49022e8f64e2553e582d8531601013a555140422a71104662517657ad8bd330c378edc27ed4ad3a8f5956ef62d84f519e70a3510510a1201617bfe68d319ef4af3766e3361833ca4f2780c3d5c7ee6b57feb4881404fa9c98a907f49e1d223d9c3b08d8aae3cd3f1b6c0d2b095619c26a7966dbca8fa07dfd76b2bfb8168adbddf61889e18f74be2e6a31ebee7fb3ada405805aff3940afb1ed58eceae442142f", 0xce}], 0x3, &(0x7f0000000580)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x32, 0x1, '\x00', [@ra, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}]}}}], 0x28}}], 0x1, 0x40000044) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0x2000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x80, 0x2, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.382453611s ago: executing program 1 (id=78): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000c00", @ANYRES32], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x3, &(0x7f0000000040)={0x0, 0x37, 0x4, @tid=r1}, &(0x7f0000000080)) 1.360375686s ago: executing program 1 (id=79): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x20048800) mknodat(0xffffffffffffffff, 0x0, 0xe10a, 0x1) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020a0000052406000105240000000d240f0100000000000000000006241a00000e090581031000000000090401", @ANYRES64], 0x0) 669.724756ms ago: executing program 2 (id=80): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x9, 0xfffffffffffffffd, 0x4, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x200000000000008d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 489.507239ms ago: executing program 0 (id=81): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46800c04000120000001000000020006"], 0x58) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b0000190007800800030000000000080002000000000008000300000000000800020000000000080003000000"], 0x7c}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10008084}, 0x2) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x110, r3, 0x10, 0x70bd28, 0x25dfcbfb, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda92}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4fb}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000881}, 0x40080) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580107}) 314.369974ms ago: executing program 0 (id=82): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="d4"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) syz_clone(0x224200, &(0x7f0000000100)='y?', 0x2, 0x0, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000002480)={0x2, {{0xa, 0x4e21, 0x8000, @loopback, 0x2}}, {{0xa, 0x4e24, 0xae79, @mcast2, 0x9}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) close_range(r2, r4, 0x2) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001540)={0x0, {{0xa, 0x4e22, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e20, 0x7, @remote, 0x3}}}, 0x108) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4, 0x24, 0x13, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mdlm_detail={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 227.504276ms ago: executing program 2 (id=83): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xf4, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/179) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0xb080}], 0x1, &(0x7f00000001c0)={r2, r3+60000000}, &(0x7f0000000200)={[0x3c17]}, 0x8) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$getownex(r5, 0x10, &(0x7f0000000280)={0x0, 0x0}) ptrace$setregs(0xf, r6, 0x7, &(0x7f00000002c0)="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") r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ip_tables_names\x00') ioctl$HIDIOCGRAWINFO(r7, 0x80084803, &(0x7f0000000400)=""/92) clock_nanosleep(0x0, 0x1, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)) r8 = socket(0xb, 0x3, 0x8) bind$inet(r4, &(0x7f0000000500)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$KIOCSOUND(r7, 0x4b2f, 0xfff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x77, 0x3, 0x0, 0x1}, {0x1ff, 0x8, 0x4, 0x5dd}]}) ioctl$FITRIM(r7, 0xc0185879, &(0x7f00000005c0)={0xc, 0x5, 0x4}) r9 = socket$can_raw(0x1d, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000600)='net/ip_tables_names\x00', 0x0, r9) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r9, 0x8002f515, &(0x7f0000000640)) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r10) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0x6, 0x7, 0x7, 0x7}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r5) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f00000007c0)={@loopback, @dev, 0x0}, &(0x7f0000000800)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x236c262c, 0x7fff, {{0x6, 0x4, 0x0, 0xd, 0x18, 0x67, 0x0, 0x7, 0x4, 0x0, @broadcast, @empty, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r11, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) ptrace$cont(0x18, r6, 0x7f8, 0x9) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000009c0)={{r9}, 0x0, 0x0, @unused=[0x2, 0x9b36], @name="9a7ff06817d98403260da4527f4341992d0749bad49a4b10950ffb9f18161d44174bf347f98b40e91c83831251908f4c2862aaed094a2ff0ad5796e8015f689976994f2e80e9810e321237679bfdfa1175497ce374e448b63ead023d1eefbc6558662a556fea699970aa04751ce80d78b16ffce881c0718443afb083a0dea48bddc67ba33c0f1757cdefb18df346652473b864c3da9919e1cb16a5535e49a14c33b9d68a1cccea93bfd2360f0c0a771f3cc232534437669c44362edcc685c46fb7f9ea46b7a0b65208acbc4df1db9aac4206310ab55295bff44ec5b1379861e0cace0996726e72d3e4a29d9d2a4b10c2e3e36924b23e41d117118e5ff2566b9ef215e74985fdc2d2eca1ef41a249457288b200689d99e88ac578b52d1bf271ec46705b0919be61eb16752040f6023a6fbbb09883dfe9275c2126c862d9be5312b8c8cb808d3221b097f8ca595b46577aeb7f834adef706fad39f333ad82dd98a90f793c33bfcd89301a63e163f920740f9721b0a628bd9ae44426ec4d674fb416b3bfc897bef238b93f360aaec929aebd95956f03fdd33f2ec8d7bcc8a8a5093dc9b5d356f38bd731e14c10f03277d71731a3dd68ca20a2a3e9e1ba1c7e4e14529f5e7bd8e4daa26826ab53b27e82b29b884a3680f786e738946eeb5eda8ad63c72d4312bbbb858c86819683b348984a61d6c43eeb6e86623773f3f7c1f314312013132429484aaa8396c9df685e01e8c7e2dc14447c227fd2c8655239dd1061dc2288c6bff39faf50869e3b77d14b8837a4e439b7104eaf9695d30d38f15c8d0755b1b813e5ba482c041bfc8b4b39a985835b69cae8d3ac96281f65e009bff1fadce79b2463fa2d0778f1b37e1ac60791d9b1685e860c6ea2fd46572d5dd71f8bedb91496a375f632c855bf5566c124a4162905d4aae0d1e229dc620a542b10852888d6d9c1ec660423f417ca859cc6dc597ed11ab7effb212051dffebf8dd5d89d6facc0f53b7ad54313388ad55c92b425dd687effd1eed632ed5519cb7408f03427df7827d03c633bd3e1fb53cc201c2cf11eacd59c50a22bd5f5cc5495cb043861e00ad60246346e83ff01381350f35267575b90e58ee0b2738f642dcdb9e1b22993b5fbcf2b2c8e15572dd48a53670e2c3e1855b294fe1638d6d3d8b21656413a56a82ae433513432fd5948b33f70717963f655b7d25abb630e53f7ea2bbf6ccde0678dbac04e856ac2af267c47a3fa4485340cedbfa5bda50da5ef070d77ece3cb26bf7223e3c23d3c5a67cd92cf237199fdbd00961cfb2a2f7ea87879ec7097b738f55b77caad8238a861cf1690097267cde0bbc005385dcd45a40f2dbd701cb9cef34bf1a25f37917205008647f3a8d2389aa47fbd4307eaad8517c8ceb0ae5858a28b64e237ddd9e8b4b74d62462467bcac19bcc9df085e6c4ce6a8bb796160576948ba65633ad81d49c608e5420eed82150040e450104ae3e27d3c45da10f5a406b667f895ed9a788f56863d851a380c246f58711a4303ffdb375281ab20e8f99de139169599eb1e6b2314ed1b8025c52f8c1ca6452bf3f16e7ad3538396a3ac41ff3b68239acb6d54dfb10e9b81115d890c8c88b3d7a49fc08758692cc00379d4bc3e4644f81ddff1783fb15c269bdc756f08b9b7d0762eb6f4d5e781dc847eb7052c9a38f7b67bb751fefd48da619f0ba1f1a0e91263426853c9f277a596cac80dc338f7ecdce80caba1066fd87a40db61edeee8b764ef49248b7301073e75ad91d64713035c506faabcdef7b6820339736d8dbe99e72e13c53d75eb1cfe29a9121edfbef7d2e30912c301394b7c1846656adbb6433897aa1f9fa555efcfe2be90d583f8899a204075316123438ff576f58d9ae5eb0766ec9846ba6564935fdc60d29444fc3f56cbfb547e72c9ccbd96ed8364eb8a6640b437284c4efb8afbc775c18a29442d2c04be6d26badbf23392cfe0eddcb2fef83a0dc163372e360c2cb4391a9e0b05782a13ef66966ad9592c69ba547e1accf59208cf81ebb2cec5c0a8c13cecb42abfe1f6644761e4d3da36895fe7fd464aad65e3106bca2941ee59ccef770aabc289beaff6c437fcdaa3b888b380de0492ccef19238dea3aff3ab3ff45b02c2511cbbddbf4afe49a04fb7543aed172438105c9e8972c75afee785eb03d1b10f74149fe2a5546e853eadee46917573d8b3c77f236d0331ef3196f633708c91248b53e983167924d27276a873e4d188be23720370843e2107c9c3280dad7c477bfd3bc1e39fa8ddfcd213f799929b29ca3698c3d74b7cee0d32036065153e79fc3a8b007bc1d6a5b3c7e9ffc0859129b742810aa40044837b080f9eafac776db772a8d4fc14b467e703b5a7b8526545ea20be0b07c959a877e64763a657f4fed6a393819a6f6ea011177fd52dd4f0668e0a59839b549e8dd049114da71f28382c9b49f8d17f2abecdc86cbfbe655a34faf4b8211171923853b76ae5ff6cef778fbe383442ecb7fb4851674aabbb8fc81a253c7bf92c3758b6919bc01a2dee6c928bf3956c7e5df07d74efa1a5050272e7339a99cc71dcdeb7e1db3eca7a10f431a744822933d3f0b9934f4d15126f1807637ff6323a5699a8b9cd5fb5d86611be833a6caf3e73b98937fd5a5ee68965d5fede7825bafe5aaddf6ca519779e7aa6f86729e0176f1195ceb679c702c0a2ad75b52d0a66172592a1f3c2fd18c519c36946985dba2288bc6a5f6ee7894ad62e3dd1725967cb0aa11cf18ba4e196a509ef9d7dc04fb0763543cfa64bec96ada54aaed7042f244e68b0d3f721367794b950caa57a6db03c3d03823e3bb5ece3580c2efac4e7b2ada22e8b3803401f4af55277695007eb08d5e94a2181a4a4d1145f1758c14afb732834ad71d6bf7a5b1ab6135bd24d9245a5f444f45618adb2d14d6251d6732b00949c5a8c60ac85bd3f0fcf859928c54cac522d63b9f288013d5e664624621277a0ad4e7f3160252169241f4db58d38a049e871219aa2ff9a59dedfc8f62205cea860cde85e30a788d9ea8eb11d7a2973895bcda3469efb673e6e678a96f3594e533cc4f9fa43a3e52e016f3833738af9a8195a67b7de91734d356cc71c9beb3a428f826d1c63c0c6d359ffc5020235b7dcc5048b1e301b50eb92a374b93d2dcdb848b434bb7a5682e8204b1a98dac4e80642b0947cc2603ee74a5b7eb5cee13b444c9231dab313a45600d11b0f794f99a167d6438a6896096ba35d7f32b9a052ff1d4ce07986938b74b7d0b1c82feb0c9aa809cb46d71608557439aea070db729eb731ec138e40ca5e1b3633d0f131f8c8f14c18e1bad180a1f720d0f73b5118f407482cd0a96a17cf7592a922dc6d6ac917f7ea3ac1383f56a5901879ecd5ff31d5b89b5f791f82265d644c4754127343980262fd60b38ebc74845b32fa48e155648a882d67832d0e82f080ce7ae412e1a289da0c595bbb58adf791729a1d23b3656910301df0500677921bf5805564724fd9e15395c996b5b1d2158ff06ce397397a2e02acbab24942cc938c285ec39c6eb27b377c1d04089d5d5570b000678a0a15bdbd31dc23983dd2b928e847ada5a3ab79bb259931d237733a82da83f0a6a2e37b35211d9fe909112dbef32fe5a6bec388dd002438c6138ed4d0fc7e53cd6e9f3b01ce7bdf592019b41c60ad187620e56d91f061a8c67d060b1b83aee42754394f6900f5c6d3195080e8e23436f24e28d9c1757a7e66e6de63e42e4f859f7689de99b51c42e56a0172661c328be386da1eb40d3be0cf88af3acf7254a70fae14630f831df28e8c0a2d740846e53382d8347ab568c08b74c914f2e0e294c02011bb4a218ac4df77fbad1ebb3a571c349703b33fa85a2ee640983e0b5f0dc530383821fb1ea3814472ff9fb973f63f64ecb0bcfe13f920a0dd5386e576a1f05158acceeb614b0577d590c90bb9a880e461dd9c5eb5195904f4ef4504129a2d3800b7ed7bec6c9bc20c854cb88260c5bb3e01bb4071f9329c7dda5aecb0d82e5ae37f0323931c69113e27bfa5d484968e030c0d71fd5319b49edf730dabf1550852c020b594c7a9a79815746b1d504bfd97b3b7ff0a617a3088933a994533544f2e92505500ef2647989683df3aea2da941d0a5bfbd61c72f18b1e3318ed1331572ed9d04c79a0c05bc703bf16b2da85bb7062de103bfe9bf6d0158d5113aec8bafa8ddd4cd38362e1debf1504bbbbcb81a4c8c7260d17a7f906599f4aa6c3cc4cff68cc2c1cea7933287ec508e9295d79325a8d579db28159fa5e9e89ac96ab9ed1a18402b227c11319bce7af858447a3b65062a96c9e90d09482ae63f7d1df9f4a1eb9caebb90fb10fa7f9a7884da0729644da712a21e6de78c85a9ac29aa3fd930ae75f2cb3bff300a02a9b05d46e0d62afb1027abb9b666bee7b00d6e8ebc4bb04de9959580ec6dc7b7cabb4194f0821de5b9e766ff2ce21ae0085bc3f33f68cce4d59ef36a9b5e47866a7eebe217c7fba2849dd702b52c699302230848cce4539f118f0691e0d335229059f4f2288304ee0ead9e071200d803eae58271d1ab201713b7e6d94a3045e39d1c13791555612e5853341f1482021a40e5db324686b40198c5464b8be1f681dc708df306e383f3b8b3915756de020a41079e40ba4aa2a8b6c80857223313be20cdce5c32fe67df8100b6973536347cb11fb8886635859680ff7631e4aa27f3553d4ba1b4fda7d193e6dda1d1835ef5dea83db5124f4b5f6c5aa3f6815d7735f99fdb8e96e0963ec26f137c1952c6ef795ba0beaf9d95065c6b3d139f473fba91688e42e089e81ef302fe9a75dbb2dbda54e879a5b86f99d2168338fba22ed37269118f2131241d66cec19fd865b9343742ad46d586cb2f459106f830dcdc0f6786c9865bd8e1c59c7498bb20b05632ce81af0d54f8a3ca82c65745af278533113b21800995631f1175222761dd7adf28c06052a7a7a5c62f37898ba7bb15e1452b137474172c63bf0a9c75543dd53800ada3a365f47088cb42cf9713d71a03656eafe9f7c06883bc76b1c7b4238bf8cf6bba59fbdbdc3c9cb936e4b5213784b87ccc6092b2c1f7f76269e5d25a441cadc16a1071ab7a7aa3629e60e4697faf84713e155837e820d93782b98637475fc0c2fa857ba108d659e4db34bdb52141d7c1902aea0493cfad26443a2ce77215ea0e867837927574bdbe93f9ab704b4d445f3eef930a0616ac8424e1208837c87fac03415851ef9a00220ab0dfe27862e484899e1d0071eb56f15abd5eefc49c1cc61585d21c16cb5b22058528e87810ee1016af9f62de5db1e9b57427ca178d9ee52e50e8d67a38ae14efbd85b953d55e04b2782aa35a2a54063a3ea8114e18144d73d068c7b64df2b5ac7d5889606592059fdc367ad27f266959d197ebdaf4e8f7d0819517d78c3ba35ffbf80a072904e2e4dfaf5cfa248fd0c85b66b73b786a93af02f746b46acd4dadf5d7d8dc109d3bb470f3f59f333e34b9e53ee663b0b712b1f85ffae0aef8e18ea4fca9e5682d9f1f3d73d38089d7108c006ae221e2519049f6606f9b24bf236828e454dac75335b03b75df74096b8b60757cfa7629f58214413eee697271407ab64e97be21685b2a9a31fe90a1f923ae141396c1e1be9543292bb216de468404ea049eaa5604ab09060fba2b19ce59bc7b50dbc44275c699bc680efcb0743"}) 101.344431ms ago: executing program 1 (id=84): prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0xbcaaf1788315a778, &(0x7f0000000140)='\x9a\xb5\xbe1\x9cMP\xae\x93\x10\xb0\xcfv\xac\xdd\"\xd65\x01 \xef\x10\xd6%\xf4`cq\x1ddG\xd4BN\x15\xdaX\x03\xdc\xe9;hxX\xa1\xe7\xa3\rZ,\xbb\n\x92K\xd6\xc8\xf2\x97F&\xe0\xd3\xd3\x11 Y\x04\x82\x1a\xe5\x8d\xf4\xf1\xc7\x8eL\x03O\x9b\xf4\xa7\x04\n\xbc&\x1b\x88?\\~n*\x02\xef\xce\xe4\x9a|\xe1n\x86\x93\x92\xed\xc1\x1bv1\xbd\x85\xd1\xdbv>\x99\x82\x19\xf3\xe6\x17\'\xfc\x17\x8b\xf2\xba\xd8\xb2c\xeb\xffK\x9b\x1b\x0f\xf1\xa7[G\x89\xb7\x9dp#F1\x16\x8b\x11`\xcd[\x9c\xac\t)\xd8R\xc7\xac\xc8I?\xe4u\x8b\x81\xa3\xe4 \xfbt\xd5\\\x02\xab\x00E#o-v*\xff\xf0yTG\xca\'\xed.\x878\xc4\x81\x06\xe9\x7fL\xf6\xf0X\r\x1f\xaaq\xa5/\x91\xec\xc0,\x01Z\x91\xc3\x95\x14<\v>P\xe1\xff\x1d\x14\x9c\'\x95\x00\x00\x00\x00\xe6Jg\x8b\x85pT\x87\x89r\xd2\xafei\x84\x82O\xae\x80\xe2\xad\xac\xfa\xd8\xa4\xf6\x03\xb5\x18,\xc2\xae}\x11>\xce\xba\x8a0\a\x85g\xde\xde\xafT.\xa9V>o\xed\xca\xd6\xf0\x19\x90\xb4l\xff\x13\x14\xea;\x8f\x93wUoFE') r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x9, 0x9}}]}}}]}}]}}, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xcc840000) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D') ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x401eb94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000080)) 0s ago: executing program 3 (id=85): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r0, r0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x18) 0s ago: executing program 3 (id=86): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af60, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0x7, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x40005, 0x3e, 0x7, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x80, 0x20000000, 0x82, 0x0, 0x7, 0x3, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x0, 0x8010, 0x5f31, 0x8, 0x1, 0x2, 0x202, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x2899f86e, 0x8d0, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x0, 0x5, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x9, 0xaaef, 0x4, 0xff], [0x9, 0x1, 0x3, 0x400, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0xa0000000, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x200005, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x1a9b42, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x10000003) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x13, r3, 0x954c3000) remap_file_pages(&(0x7f0000a71000/0x2000)=nil, 0x2000, 0x0, 0xc, 0x1000) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x40, 0x0, 0x7}}, 0x14) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x2, 0x3e8, 0x0, 0x300, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast1, @broadcast, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x3}}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x40, 0x10, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {}, {}, 0x0, 0x280}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) fremovexattr(r1, &(0x7f0000000180)=@random={'system.', '\xaa\xaa\xaa\xaa\xaa'}) ioprio_get$pid(0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): T36] audit: type=1400 audit(1771963216.100:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.862269][ T36] audit: type=1400 audit(1771963216.100:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 20.239673][ T36] audit: type=1400 audit(1771963223.490:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.240812][ T282] cgroup: Unknown subsys name 'net' [ 20.262357][ T36] audit: type=1400 audit(1771963223.490:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.290052][ T36] audit: type=1400 audit(1771963223.520:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.290236][ T282] cgroup: Unknown subsys name 'devices' [ 20.469582][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.475214][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.567705][ T36] audit: type=1400 audit(1771963223.820:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.590929][ T36] audit: type=1400 audit(1771963223.820:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.603912][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.616258][ T36] audit: type=1400 audit(1771963223.820:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.643618][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.647371][ T36] audit: type=1400 audit(1771963223.880:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.681408][ T36] audit: type=1400 audit(1771963223.880:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.707089][ T36] audit: type=1400 audit(1771963223.890:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.733824][ T36] audit: type=1400 audit(1771963223.890:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.536772][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.543862][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.551098][ T290] bridge_slave_0: entered allmulticast mode [ 21.557416][ T290] bridge_slave_0: entered promiscuous mode [ 21.565638][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.572756][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.579887][ T290] bridge_slave_1: entered allmulticast mode [ 21.586084][ T290] bridge_slave_1: entered promiscuous mode [ 21.616425][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.623560][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.630686][ T292] bridge_slave_0: entered allmulticast mode [ 21.636907][ T292] bridge_slave_0: entered promiscuous mode [ 21.649151][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.656234][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.663340][ T292] bridge_slave_1: entered allmulticast mode [ 21.669646][ T292] bridge_slave_1: entered promiscuous mode [ 21.700282][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.707363][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.714411][ T289] bridge_slave_0: entered allmulticast mode [ 21.720746][ T289] bridge_slave_0: entered promiscuous mode [ 21.727373][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.734412][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.741490][ T289] bridge_slave_1: entered allmulticast mode [ 21.747779][ T289] bridge_slave_1: entered promiscuous mode [ 21.789773][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.796834][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.804118][ T291] bridge_slave_0: entered allmulticast mode [ 21.810356][ T291] bridge_slave_0: entered promiscuous mode [ 21.829482][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.836559][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.843664][ T291] bridge_slave_1: entered allmulticast mode [ 21.849893][ T291] bridge_slave_1: entered promiscuous mode [ 21.978000][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.985063][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.992375][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.999414][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.009647][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.016689][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.023973][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.031024][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.041758][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.048817][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.056050][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.063099][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.084948][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.092022][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.099314][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.106343][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.149474][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.156780][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.164048][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.172020][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.179300][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.186428][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.193755][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.200936][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.216340][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.223411][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.233528][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.240584][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.251098][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.258170][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.266142][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.273188][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.288305][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.295367][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.303236][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.310278][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.329011][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.336046][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.343575][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.350617][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.391269][ T291] veth0_vlan: entered promiscuous mode [ 22.412418][ T292] veth0_vlan: entered promiscuous mode [ 22.429850][ T291] veth1_macvtap: entered promiscuous mode [ 22.439224][ T289] veth0_vlan: entered promiscuous mode [ 22.450273][ T290] veth0_vlan: entered promiscuous mode [ 22.465317][ T292] veth1_macvtap: entered promiscuous mode [ 22.483581][ T289] veth1_macvtap: entered promiscuous mode [ 22.491907][ T290] veth1_macvtap: entered promiscuous mode [ 22.524810][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.575438][ T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.682365][ T354] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 22.724137][ T355] netlink: 'syz.2.6': attribute type 13 has an invalid length. [ 22.749197][ T359] sit0: entered promiscuous mode [ 22.756679][ T359] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 22.767307][ T359] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8'. [ 22.927142][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 22.977210][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.017220][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 23.078499][ T10] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 23.088759][ T10] usb 2-1: config 7 interface 1 has no altsetting 0 [ 23.096787][ T10] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 23.106086][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.114129][ T10] usb 2-1: Product: syz [ 23.118446][ T10] usb 2-1: Manufacturer: syz [ 23.123403][ T10] usb 2-1: SerialNumber: syz [ 23.127179][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 23.133663][ T10] usb 2-1: selecting invalid altsetting 0 [ 23.134254][ T31] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 23.139795][ T10] rndis_host 2-1:7.0: probe with driver rndis_host failed with error -22 [ 23.148026][ T31] usb 3-1: config 179 has no interface number 0 [ 23.162614][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 23.173750][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 23.178187][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 23.185025][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 23.196201][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 23.207852][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 23.227592][ T31] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 23.228427][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.240895][ T31] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 23.240923][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.252631][ T9] usb 1-1: config 0 descriptor?? [ 23.260046][ T355] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 23.268576][ T361] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 23.338686][ T10] usb 2-1: USB disconnect, device number 2 [ 23.491902][ T31] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input4 [ 23.690952][ T45] usb 3-1: USB disconnect, device number 2 [ 23.690999][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 23.691031][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 23.691775][ T9] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 23.700240][ T45] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 23.731074][ T9] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 23.738822][ T9] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 23.746292][ T9] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 23.753880][ T9] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 23.762448][ T9] hid-generic 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 23.905003][ T9] usb 1-1: USB disconnect, device number 2 [ 23.917102][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.067111][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 24.074248][ T31] usb 4-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 24.084847][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 24.093794][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 24.112081][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.121180][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.129330][ T31] usb 4-1: Manufacturer: 騍檷咦ᬁ腶赳處㧷莵ખꆪ￰鵖绗פֿ璏㨜㆟േ陼⻒鑡༼渤蘍ꝿ欴꧓䖖ﮣ攎徼稐㰠왽율잋Ȅ问繱暈尩㐢堦ඎ뒇뎫蒘ﰺ䃃끩䠤撕瑸㝩鐹鍒䘸㍬呔ʹ춤뺲৭뛂ᬝ⍌레ম宫י녣㥟ἃ样᷾ﶕ铉褛 [ 24.247125][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.377094][ T45] usb 2-1: device descriptor read/64, error -71 [ 24.392883][ T31] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 24.399785][ T31] cdc_ncm 4-1:1.0: bind() failure [ 24.405757][ T31] usb 4-1: USB disconnect, device number 2 [ 24.577115][ T373] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.617181][ T45] usb 2-1: device descriptor read/64, error -71 [ 24.677142][ T392] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 24.729994][ T373] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 24.739105][ T373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.747277][ T373] usb 3-1: Product: syz [ 24.751447][ T373] usb 3-1: Manufacturer: syz [ 24.756026][ T373] usb 3-1: SerialNumber: syz [ 24.838403][ T392] usb 1-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 24.850043][ T392] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 24.861144][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 24.868694][ T392] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 24.878685][ T392] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 24.887830][ T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.911651][ T400] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.924102][ T400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 24.991708][ T373] rtl8150 3-1:1.0: couldn't reset the device [ 24.997925][ T373] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 25.007696][ T373] usb 3-1: USB disconnect, device number 3 [ 25.017153][ T45] usb 2-1: device descriptor read/64, error -71 [ 25.102406][ T396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.111049][ T396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.267075][ T45] usb 2-1: device descriptor read/64, error -71 [ 25.277435][ T397] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.307078][ T373] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 25.377279][ T45] usb usb2-port1: attempt power cycle [ 25.427084][ T397] usb 4-1: Using ep0 maxpacket: 32 [ 25.433374][ T397] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 25.441718][ T397] usb 4-1: config 0 has no interface number 0 [ 25.447965][ T397] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 25.458327][ T397] usb 4-1: config 0 interface 196 has no altsetting 0 [ 25.466556][ T397] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 25.475694][ T397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.483723][ T397] usb 4-1: Product: syz [ 25.488023][ T397] usb 4-1: Manufacturer: syz [ 25.492686][ T397] usb 4-1: SerialNumber: syz [ 25.497720][ T373] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.507719][ T373] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 25.520958][ T397] usb 4-1: config 0 descriptor?? [ 25.526330][ T415] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 25.526365][ T373] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.540707][ T373] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 25.549857][ T373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.558720][ T373] usb 3-1: config 0 descriptor?? [ 25.727072][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 25.748227][ T45] usb 2-1: device descriptor read/8, error -71 [ 25.878241][ T45] usb 2-1: device descriptor read/8, error -71 [ 25.942687][ T397] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 25.950337][ T397] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 25.959654][ T397] usb 4-1: USB disconnect, device number 3 [ 25.969399][ T373] magicmouse 0003:05AC:0265.0002: item fetching failed at offset 4/5 [ 25.977832][ T373] magicmouse 0003:05AC:0265.0002: magicmouse hid parse failed [ 25.985342][ T373] magicmouse 0003:05AC:0265.0002: probe with driver magicmouse failed with error -22 [ 26.117151][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 26.138116][ T45] usb 2-1: device descriptor read/8, error -71 [ 26.170931][ T397] usb 3-1: USB disconnect, device number 4 [ 26.268070][ T45] usb 2-1: device descriptor read/8, error -71 [ 26.377197][ T45] usb usb2-port1: unable to enumerate USB device [ 26.511987][ T424] netlink: 'syz.3.27': attribute type 10 has an invalid length. [ 26.519776][ T424] netlink: 5 bytes leftover after parsing attributes in process `syz.3.27'. [ 26.528800][ T424] bridge_slave_1: left promiscuous mode [ 26.534463][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.685994][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 26.686012][ T36] audit: type=1400 audit(1771963229.930:146): avc: denied { getopt } for pid=427 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.797551][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.927071][ T373] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 26.947080][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 26.953307][ T45] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 26.961550][ T45] usb 4-1: config 0 has no interface number 0 [ 26.967676][ T45] usb 4-1: config 0 interface 184 has no altsetting 0 [ 26.975968][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 26.985063][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.993162][ T45] usb 4-1: Product: syz [ 26.997471][ T45] usb 4-1: Manufacturer: syz [ 27.007168][ T45] usb 4-1: SerialNumber: syz [ 27.010130][ T36] audit: type=1400 audit(1771963230.260:147): avc: denied { append } for pid=429 comm="syz.1.30" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.027576][ T45] usb 4-1: config 0 descriptor?? [ 27.045783][ T45] smsc75xx v1.0.0 [ 27.057169][ T373] usb 3-1: device descriptor read/64, error -71 [ 27.194201][ T36] audit: type=1400 audit(1771963230.440:148): avc: denied { read write } for pid=434 comm="syz.1.32" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 27.222509][ T36] audit: type=1400 audit(1771963230.440:149): avc: denied { open } for pid=434 comm="syz.1.32" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 27.250835][ T36] audit: type=1400 audit(1771963230.440:150): avc: denied { ioctl } for pid=434 comm="syz.1.32" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 27.276937][ T36] audit: type=1400 audit(1771963230.500:151): avc: denied { name_bind } for pid=436 comm="syz.1.33" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.280275][ T439] Zero length message leads to an empty skb [ 27.307098][ T373] usb 3-1: device descriptor read/64, error -71 [ 27.390325][ T36] audit: type=1400 audit(1771963230.640:152): avc: denied { read } for pid=446 comm="syz.1.37" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.411304][ T36] audit: type=1400 audit(1771963230.640:153): avc: denied { open } for pid=446 comm="syz.1.37" path="net:[4026532301]" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.547118][ T373] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 27.562815][ T392] usb 1-1: string descriptor 0 read error: -71 [ 27.569568][ T392] hub 1-1:32.0: USB hub found [ 27.572734][ T36] audit: type=1400 audit(1771963230.820:154): avc: denied { create } for pid=456 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 27.574971][ T392] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 27.596603][ T457] IPv6: NLM_F_CREATE should be specified when creating new route [ 27.618168][ T36] audit: type=1400 audit(1771963230.870:155): avc: denied { write } for pid=456 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 27.619506][ T457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.638179][ T457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 27.648977][ T392] usb 1-1: USB disconnect, device number 3 [ 27.677479][ T373] usb 3-1: device descriptor read/64, error -71 [ 27.865902][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 27.876781][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 27.886332][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 27.897180][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 27.906837][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 27.917363][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 27.926788][ T45] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 27.935084][ T373] usb 3-1: device descriptor read/64, error -71 [ 27.944036][ T45] usb 4-1: USB disconnect, device number 4 [ 28.047274][ T373] usb usb3-port1: attempt power cycle [ 28.177315][ T463] rust_binder: Error in use_page_slow: ESRCH [ 28.177332][ T463] rust_binder: use_range failure ESRCH [ 28.183358][ T463] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 28.188918][ T463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 28.196843][ T463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:39 [ 28.387072][ T373] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 28.418144][ T373] usb 3-1: device descriptor read/8, error -71 [ 28.457099][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 28.513775][ T476] tmpfs: Invalid gid '0x00000000ffffffff' [ 28.548366][ T373] usb 3-1: device descriptor read/8, error -71 [ 28.587199][ T45] usb 2-1: device descriptor read/64, error -71 [ 28.797138][ T373] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 28.818298][ T373] usb 3-1: device descriptor read/8, error -71 [ 28.827331][ T45] usb 2-1: device descriptor read/64, error -71 [ 28.927134][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.948274][ T373] usb 3-1: device descriptor read/8, error -71 [ 29.057109][ T331] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.057250][ T373] usb usb3-port1: unable to enumerate USB device [ 29.071043][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 29.087108][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 29.093417][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.104417][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.114238][ T9] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 29.123324][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.132035][ T9] usb 4-1: config 0 descriptor?? [ 29.207071][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 29.207075][ T45] usb 2-1: device descriptor read/64, error -71 [ 29.219652][ T331] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 29.227896][ T331] usb 1-1: config 0 has no interface number 0 [ 29.234115][ T331] usb 1-1: config 0 interface 184 has no altsetting 0 [ 29.242567][ T331] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 29.251670][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.259682][ T331] usb 1-1: Product: syz [ 29.263863][ T331] usb 1-1: Manufacturer: syz [ 29.268488][ T331] usb 1-1: SerialNumber: syz [ 29.273858][ T331] usb 1-1: config 0 descriptor?? [ 29.279922][ T331] smsc75xx v1.0.0 [ 29.447087][ T45] usb 2-1: device descriptor read/64, error -71 [ 29.539320][ T9] hid-multitouch 0003:1FD2:6007.0003: unknown global tag 0xe [ 29.546808][ T9] hid-multitouch 0003:1FD2:6007.0003: item 0 1 1 14 parsing failed [ 29.555010][ T9] hid-multitouch 0003:1FD2:6007.0003: probe with driver hid-multitouch failed with error -22 [ 29.567136][ T45] usb usb2-port1: attempt power cycle [ 29.738641][ T492] usb 4-1: USB disconnect, device number 5 [ 29.881545][ T331] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 29.892400][ T331] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 29.907098][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 29.928172][ T45] usb 2-1: device descriptor read/8, error -71 [ 30.058502][ T45] usb 2-1: device descriptor read/8, error -71 [ 30.081817][ T331] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 30.092739][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 30.100256][ T331] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 30.109990][ T331] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 30.120304][ T331] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 30.129906][ T331] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 30.139364][ T331] usb 1-1: USB disconnect, device number 4 [ 30.251772][ T496] process 'syz.3.55' launched '/dev/fd/4' with NULL argv: empty string added [ 30.278371][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.288568][ T9] usb 3-1: config 0 has no interfaces? [ 30.294049][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.303230][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.307085][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 30.312492][ T9] usb 3-1: config 0 descriptor?? [ 30.338220][ T45] usb 2-1: device descriptor read/8, error -71 [ 30.468275][ T45] usb 2-1: device descriptor read/8, error -71 [ 30.577205][ T45] usb usb2-port1: unable to enumerate USB device [ 30.669002][ T9] usb 3-1: USB disconnect, device number 9 [ 31.032007][ T510] tmpfs: Invalid gid '0x00000000ffffffff' [ 31.248346][ T525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=525 comm=syz.1.64 [ 31.295332][ T529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 31.312118][ T527] FAULT_INJECTION: forcing a failure. [ 31.312118][ T527] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 31.315929][ T534] fuse: Unknown parameter 'rk' [ 31.328441][ T527] CPU: 1 UID: 0 PID: 527 Comm: syz.0.65 Not tainted syzkaller #0 2d062ab55dbbb5fe01543989d0c3f882a8d2e457 [ 31.328473][ T527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.328484][ T527] Call Trace: [ 31.328490][ T527] [ 31.328498][ T527] __dump_stack+0x21/0x30 [ 31.328527][ T527] dump_stack_lvl+0x140/0x1c0 [ 31.328549][ T527] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.328573][ T527] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 31.328594][ T527] dump_stack+0x19/0x20 [ 31.328615][ T527] should_fail_ex+0x3d7/0x530 [ 31.328636][ T527] should_fail_alloc_page+0xec/0x110 [ 31.328662][ T527] __alloc_pages_noprof+0x1c0/0x7e0 [ 31.328682][ T527] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 31.328703][ T527] ? __lruvec_stat_mod_folio+0x13f/0x1a0 [ 31.328730][ T527] pte_alloc_one+0x92/0x530 [ 31.328757][ T527] ? __cfi_pte_alloc_one+0x10/0x10 [ 31.328783][ T527] ? __kasan_check_write+0x18/0x20 [ 31.328804][ T527] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 31.328822][ T527] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 31.328841][ T527] __pte_alloc+0x79/0x440 [ 31.328862][ T527] ? __kasan_check_write+0x18/0x20 [ 31.328883][ T527] ? _raw_spin_lock+0x92/0x120 [ 31.328901][ T527] ? __cfi___pte_alloc+0x10/0x10 [ 31.328922][ T527] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 31.328941][ T527] ? percpu_counter_add_batch+0x18d/0x1a0 [ 31.328961][ T527] copy_page_range+0x33b6/0x39a0 [ 31.328988][ T527] ? __cfi_copy_page_range+0x10/0x10 [ 31.329011][ T527] ? mas_store+0x89d/0xce0 [ 31.329033][ T527] ? __kasan_check_read+0x15/0x20 [ 31.329055][ T527] ? __kasan_check_write+0x18/0x20 [ 31.329075][ T527] ? __cfi_vma_interval_tree_augment_rotate+0x10/0x10 [ 31.329102][ T527] ? __kasan_check_write+0x18/0x20 [ 31.329123][ T527] copy_mm+0x1066/0x1cf0 [ 31.329145][ T527] ? copy_signal+0x6a0/0x6a0 [ 31.329164][ T527] ? _raw_spin_lock+0x92/0x120 [ 31.329182][ T527] ? __asan_memset+0x39/0x50 [ 31.329203][ T527] ? __init_rwsem+0x110/0x1f0 [ 31.329225][ T527] ? copy_signal+0x4d4/0x6a0 [ 31.329245][ T527] copy_process+0x124a/0x3220 [ 31.329267][ T527] ? __cfi_copy_process+0x10/0x10 [ 31.329286][ T527] ? proc_fail_nth_write+0x184/0x220 [ 31.329307][ T527] kernel_clone+0x233/0x830 [ 31.329327][ T527] ? __cfi_kernel_clone+0x10/0x10 [ 31.329348][ T527] __x64_sys_clone+0x1b7/0x230 [ 31.329370][ T527] ? __cfi___x64_sys_clone+0x10/0x10 [ 31.329400][ T527] ? __kasan_check_read+0x15/0x20 [ 31.329422][ T527] x64_sys_call+0x2b3c/0x2ee0 [ 31.329446][ T527] do_syscall_64+0x57/0xf0 [ 31.329463][ T527] ? clear_bhb_loop+0x50/0xa0 [ 31.329481][ T527] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.329509][ T527] RIP: 0033:0x7f5055f9c629 [ 31.329525][ T527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.329541][ T527] RSP: 002b:00007f50549e2fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 31.329563][ T527] RAX: ffffffffffffffda RBX: 00007f5056215fa0 RCX: 00007f5055f9c629 [ 31.329577][ T527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.329589][ T527] RBP: 00007f50549e3090 R08: 0000000000000000 R09: 0000000000000000 [ 31.329601][ T527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 31.329613][ T527] R13: 00007f5056216038 R14: 00007f5056215fa0 R15: 00007ffcc4deaab8 [ 31.329629][ T527] [ 31.343654][ T535] fuse: Unknown parameter 'rk' [ 31.647058][ T331] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 31.826595][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 31.826614][ T36] audit: type=1400 audit(1771963235.070:189): avc: denied { create } for pid=554 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.852893][ T331] usb 3-1: Using ep0 maxpacket: 8 [ 31.854748][ T36] audit: type=1400 audit(1771963235.070:190): avc: denied { connect } for pid=554 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.859603][ T331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.878185][ T36] audit: type=1400 audit(1771963235.080:191): avc: denied { write } for pid=554 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.886184][ T331] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 64 [ 31.914344][ T331] usb 3-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 31.928476][ T331] usb 3-1: config 1 interface 0 has no altsetting 0 [ 31.936524][ T331] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.945681][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.953731][ T331] usb 3-1: Product: syz [ 31.957965][ T331] usb 3-1: Manufacturer: syz [ 31.962713][ T331] usb 3-1: SerialNumber: syz [ 31.969813][ T538] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.975384][ T557] overlayfs: empty lowerdir [ 31.987103][ T492] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.003581][ T559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 32.012421][ T397] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.039182][ T561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.092492][ T564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 32.147106][ T492] usb 1-1: Using ep0 maxpacket: 16 [ 32.153493][ T492] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 32.163872][ T492] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.174387][ T492] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.177072][ T397] usb 4-1: Using ep0 maxpacket: 16 [ 32.183636][ T492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.190334][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.196928][ T492] usb 1-1: Product: syz [ 32.207956][ T397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.212713][ T331] usb 3-1: bad CDC descriptors [ 32.223896][ T397] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.231468][ T331] usb 3-1: USB disconnect, device number 10 [ 32.246109][ T492] usb 1-1: Manufacturer: syz [ 32.246245][ T397] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.250769][ T492] usb 1-1: SerialNumber: syz [ 32.264436][ T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.273571][ T397] usb 4-1: config 0 descriptor?? [ 32.347064][ T45] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 32.459356][ T492] usb 1-1: 0:2 : does not exist [ 32.466677][ T492] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 32.477208][ T492] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 32.487628][ T492] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 32.497905][ T492] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 32.498178][ T45] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 32.512636][ T492] usb 1-1: USB disconnect, device number 5 [ 32.521457][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.523926][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.533210][ T45] usb 2-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 32.559313][ T45] usb 2-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 32.572578][ T45] usb 2-1: config 1 interface 1 has no altsetting 0 [ 32.580764][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.589957][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.597982][ T45] usb 2-1: Product: syz [ 32.602139][ T45] usb 2-1: Manufacturer: syz [ 32.606727][ T45] usb 2-1: SerialNumber: syz [ 32.614613][ T45] usb 2-1: bad CDC descriptors [ 32.682555][ T543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.691116][ T543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.702246][ T397] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 32.709574][ T397] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 32.716792][ T397] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 32.724526][ T397] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 32.731793][ T397] microsoft 0003:045E:07DA.0004: unknown main item tag 0x2 [ 32.739069][ T397] microsoft 0003:045E:07DA.0004: item fetching failed at offset 26/34 [ 32.747466][ T397] microsoft 0003:045E:07DA.0004: parse failed [ 32.753724][ T397] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 32.777291][ T569] FAULT_INJECTION: forcing a failure. [ 32.777291][ T569] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 32.790614][ T569] CPU: 1 UID: 0 PID: 569 Comm: syz.2.80 Not tainted syzkaller #0 2d062ab55dbbb5fe01543989d0c3f882a8d2e457 [ 32.790650][ T569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 32.790662][ T569] Call Trace: [ 32.790668][ T569] [ 32.790675][ T569] __dump_stack+0x21/0x30 [ 32.790695][ T569] dump_stack_lvl+0x140/0x1c0 [ 32.790711][ T569] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.790726][ T569] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 32.790740][ T569] dump_stack+0x19/0x20 [ 32.790754][ T569] should_fail_ex+0x3d7/0x530 [ 32.790768][ T569] should_fail_alloc_page+0xec/0x110 [ 32.790785][ T569] __alloc_pages_noprof+0x1c0/0x7e0 [ 32.790798][ T569] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 32.790812][ T569] ? __lruvec_stat_mod_folio+0x13f/0x1a0 [ 32.790831][ T569] pte_alloc_one+0x92/0x530 [ 32.790849][ T569] ? __cfi_pte_alloc_one+0x10/0x10 [ 32.790867][ T569] ? __kasan_check_write+0x18/0x20 [ 32.790881][ T569] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 32.790893][ T569] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 32.790906][ T569] __pte_alloc+0x79/0x440 [ 32.790920][ T569] ? __kasan_check_write+0x18/0x20 [ 32.790934][ T569] ? _raw_spin_lock+0x92/0x120 [ 32.790945][ T569] ? __cfi___pte_alloc+0x10/0x10 [ 32.790958][ T569] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 32.790970][ T569] ? percpu_counter_add_batch+0x18d/0x1a0 [ 32.790984][ T569] copy_page_range+0x33b6/0x39a0 [ 32.791002][ T569] ? __cfi_copy_page_range+0x10/0x10 [ 32.791017][ T569] ? mas_store+0x89d/0xce0 [ 32.791032][ T569] ? __kasan_check_read+0x15/0x20 [ 32.791047][ T569] ? __cfi_vma_interval_tree_augment_rotate+0x10/0x10 [ 32.791065][ T569] ? __kasan_check_write+0x18/0x20 [ 32.791079][ T569] copy_mm+0x1066/0x1cf0 [ 32.791093][ T569] ? copy_signal+0x6a0/0x6a0 [ 32.791106][ T569] ? _raw_spin_lock+0x92/0x120 [ 32.791117][ T569] ? __asan_memset+0x39/0x50 [ 32.791131][ T569] ? __init_rwsem+0x110/0x1f0 [ 32.791146][ T569] ? copy_signal+0x4d4/0x6a0 [ 32.791159][ T569] copy_process+0x124a/0x3220 [ 32.791174][ T569] ? __cfi_copy_process+0x10/0x10 [ 32.791186][ T569] ? proc_fail_nth_write+0x184/0x220 [ 32.791200][ T569] kernel_clone+0x233/0x830 [ 32.791213][ T569] ? __cfi_kernel_clone+0x10/0x10 [ 32.791227][ T569] __x64_sys_clone+0x1b7/0x230 [ 32.791241][ T569] ? __cfi___x64_sys_clone+0x10/0x10 [ 32.791257][ T569] ? __kasan_check_read+0x15/0x20 [ 32.791271][ T569] x64_sys_call+0x2b3c/0x2ee0 [ 32.791287][ T569] do_syscall_64+0x57/0xf0 [ 32.791299][ T569] ? clear_bhb_loop+0x50/0xa0 [ 32.791311][ T569] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.791329][ T569] RIP: 0033:0x7f7814d9c629 [ 32.791341][ T569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.791351][ T569] RSP: 002b:00007f7815ba9fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 32.791366][ T569] RAX: ffffffffffffffda RBX: 00007f7815015fa0 RCX: 00007f7814d9c629 [ 32.791383][ T569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.791391][ T569] RBP: 00007f7815baa090 R08: 0000000000000000 R09: 0000000000000000 [ 32.791399][ T569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 32.791407][ T569] R13: 00007f7815016038 R14: 00007f7815015fa0 R15: 00007ffcc9522888 [ 32.791417][ T569] [ 32.932096][ T492] usb 4-1: USB disconnect, device number 6 [ 32.943444][ T45] usb 2-1: USB disconnect, device number 11 [ 32.985537][ T573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.81'. [ 33.159863][ T36] audit: type=1400 audit(1771963236.410:192): avc: denied { read } for pid=575 comm="syz.0.82" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.185912][ T36] audit: type=1400 audit(1771963236.410:193): avc: denied { open } for pid=575 comm="syz.0.82" path="/20/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.213090][ T36] audit: type=1400 audit(1771963236.410:194): avc: denied { ioctl } for pid=575 comm="syz.0.82" path="/20/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.316612][ T36] audit: type=1400 audit(1771963236.560:195): avc: denied { create } for pid=577 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 33.335809][ T36] audit: type=1400 audit(1771963236.570:196): avc: denied { ioctl } for pid=577 comm="syz.2.83" path="socket:[5760]" dev="sockfs" ino=5760 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.427217][ T331] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 33.486519][ T587] mmap: syz.3.86 (587) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.498550][ T587] : renamed from vlan0 (while UP) [ 33.506692][ C1] BUG: TASK stack guard page was hit at ffffc9000e25fff8 (stack is ffffc9000e260000..ffffc9000e268000) [ 33.506711][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 33.506723][ C1] CPU: 1 UID: 0 PID: 587 Comm: syz.3.86 Not tainted syzkaller #0 2d062ab55dbbb5fe01543989d0c3f882a8d2e457 [ 33.506739][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 33.506745][ C1] RIP: 0010:kasan_check_range+0x13/0x2b0 [ 33.506768][ C1] Code: cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 b0 01 48 85 f6 0f 84 c0 01 00 00 55 48 89 e5 <41> 57 41 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 29 02 00 00 [ 33.506778][ C1] RSP: 0018:ffffc9000e260000 EFLAGS: 00010202 [ 33.506789][ C1] RAX: ffffea0004698201 RBX: 0000000000000000 RCX: ffffffff81d999a9 [ 33.506798][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0004698230 [ 33.506806][ C1] RBP: ffffc9000e260000 R08: ffff8881f6f72280 R09: 0000000000000002 [ 33.506813][ C1] R10: 0000000000000000 R11: 00000000fffffffc R12: ffffea0004698230 [ 33.506821][ C1] R13: dffffc0000000000 R14: ffffc9000e260080 R15: 1ffff92001c4c00c [ 33.506829][ C1] FS: 00007f37b8bf76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.506839][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.506847][ C1] CR2: ffffc9000e25fff8 CR3: 000000011c534000 CR4: 00000000003526b0 [ 33.506860][ C1] Call Trace: [ 33.506864][ C1] [ 33.506868][ C1] __kasan_check_read+0x15/0x20 [ 33.506882][ C1] check_new_pages+0x139/0x390 [ 33.506896][ C1] ? free_contig_range+0x260/0x260 [ 33.506910][ C1] ___rmqueue_pcplist+0x3ae/0x31b0 [ 33.506924][ C1] ? __kasan_check_read+0x15/0x20 [ 33.506936][ C1] ? __zone_watermark_ok+0x134/0x630 [ 33.506948][ C1] ? __cfi___zone_watermark_ok+0x10/0x10 [ 33.506960][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 33.506974][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 33.506984][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 33.506995][ C1] get_page_from_freelist+0x6f5/0x4a20 [ 33.507015][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 33.507026][ C1] ? static_key_count+0x45/0x70 [ 33.507037][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 33.507050][ C1] ? lruvec_init+0x261/0x280 [ 33.507066][ C1] __alloc_pages_noprof+0x35f/0x7e0 [ 33.507076][ C1] ? unwind_next_frame+0x3c1/0x750 [ 33.507089][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.507100][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 33.507127][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 33.507139][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 33.507160][ C1] stack_depot_save_flags+0x672/0x800 [ 33.507174][ C1] stack_depot_save+0x12/0x20 [ 33.507185][ C1] save_stack+0x133/0x240 [ 33.507202][ C1] ? free_contig_range+0x260/0x260 [ 33.507214][ C1] ? __reset_page_owner+0x450/0x450 [ 33.507238][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 33.507247][ C1] ? prep_new_page+0x20/0x120 [ 33.507257][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 33.507268][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 33.507279][ C1] ? stack_depot_save_flags+0x672/0x800 [ 33.507290][ C1] ? kasan_save_track+0x4f/0x80 [ 33.507304][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 33.507315][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 33.507330][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 33.507344][ C1] ? krealloc_noprof+0x8d/0x130 [ 33.507358][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 33.507383][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x3ed/0x1e70 [ 33.507402][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x1d1/0x6b0 [ 33.507425][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x3691/0x8520 [ 33.507444][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 33.507460][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 33.507484][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 33.507498][ C1] ? sched_clock_noinstr+0xd/0x30 [ 33.507511][ C1] __set_page_owner+0x8e/0x600 [ 33.507526][ C1] ? __kasan_check_read+0x15/0x20 [ 33.507538][ C1] ? __zone_watermark_ok+0x134/0x630 [ 33.507549][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 33.507564][ C1] ? __cfi___zone_watermark_ok+0x10/0x10 [ 33.507575][ C1] ? kasan_unpoison+0x4a/0x70 [ 33.507588][ C1] post_alloc_hook+0x3b8/0x3f0 [ 33.507598][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 33.507608][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 33.507621][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 33.507631][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 33.507641][ C1] prep_new_page+0x20/0x120 [ 33.507651][ C1] get_page_from_freelist+0x496e/0x4a20 [ 33.507663][ C1] ? _RNvMs3_NtCskDQVOo9v79Q_16rust_binder_main11range_allocINtB5_14RangeAllocatorNtNtB7_10allocation14AllocationInfoE11reserve_newB7_+0x23cc/0x3740 [ 33.507687][ C1] ? __asan_memcpy+0x5a/0x80 [ 33.507700][ C1] ? _RNvMs3_NtCskDQVOo9v79Q_16rust_binder_main11range_allocINtB5_14RangeAllocatorNtNtB7_10allocation14AllocationInfoE11reserve_newB7_+0x2684/0x3740 [ 33.507725][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 33.507736][ C1] ? static_key_count+0x45/0x70 [ 33.507746][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 33.507759][ C1] ? lruvec_init+0x261/0x280 [ 33.507774][ C1] __alloc_pages_noprof+0x35f/0x7e0 [ 33.507785][ C1] ? kernel_text_address+0xa9/0xe0 [ 33.507797][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.507809][ C1] ? unwind_get_return_address+0x51/0x90 [ 33.507820][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 33.507833][ C1] stack_depot_save_flags+0x672/0x800 [ 33.507845][ C1] kasan_save_track+0x4f/0x80 [ 33.507859][ C1] ? kasan_save_track+0x3e/0x80 [ 33.507873][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 33.507884][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 33.507898][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 33.507912][ C1] ? krealloc_noprof+0x8d/0x130 [ 33.507925][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 33.507945][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x3ed/0x1e70 [ 33.507964][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x1d1/0x6b0 [ 33.507986][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x3691/0x8520 [ 33.508005][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 33.508020][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 33.508039][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1277/0xa690 [ 33.508056][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 33.508069][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 33.508083][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 33.508097][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 33.508112][ C1] ? do_syscall_64+0x57/0xf0 [ 33.508122][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.508142][ C1] kasan_save_alloc_info+0x40/0x50 [ 33.508154][ C1] __kasan_kmalloc+0x96/0xb0 [ 33.508169][ C1] __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 33.508182][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 33.508203][ C1] krealloc_noprof+0x8d/0x130 [ 33.508217][ C1] _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 33.508243][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 33.508256][ C1] ? update_curr+0x6c1/0x9e0 [ 33.508271][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 33.508291][ C1] ? __kasan_check_write+0x18/0x20 [ 33.508303][ C1] ? mutex_unlock+0x90/0x240 [ 33.508316][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 33.508328][ C1] ? __enqueue_entity+0x58a/0x630 [ 33.508344][ C1] _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x3ed/0x1e70 [ 33.508365][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 33.508378][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 33.508397][ C1] ? kernel_text_address+0xa9/0xe0 [ 33.508410][ C1] ? __kernel_text_address+0x11/0x40 [ 33.508422][ C1] ? __kasan_check_write+0x18/0x20 [ 33.508434][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 33.508445][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 33.508456][ C1] ? stack_trace_save+0xaa/0x100 [ 33.508466][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 33.508479][ C1] ? stack_depot_save_flags+0x399/0x800 [ 33.508492][ C1] ? kasan_save_track+0x4f/0x80 [ 33.508506][ C1] ? kasan_save_track+0x3e/0x80 [ 33.508519][ C1] ? kasan_save_free_info+0x4a/0x60 [ 33.508531][ C1] ? __kasan_slab_free+0x5f/0x80 [ 33.508545][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 33.508558][ C1] ? audit_log_end+0x1f1/0x240 [ 33.508580][ C1] ? common_lsm_audit+0x14fe/0x18e0 [ 33.508600][ C1] ? slow_avc_audit+0x19f/0x220 [ 33.508622][ C1] ? avc_has_perm+0x1ec/0x240 [ 33.508642][ C1] ? selinux_binder_transfer_binder+0xa9/0xf0 [ 33.508665][ C1] ? security_binder_transfer_binder+0x54/0xf0 [ 33.508679][ T36] audit: type=1400 audit(1771963236.750:197): avc: denied { transfer } for pid=586 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 33.508688][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x363e/0x8520 [ 33.508723][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 33.508747][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 33.508779][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1277/0xa690 [ 33.508805][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 33.508825][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 33.508848][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 33.508870][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 33.508892][ C1] ? do_syscall_64+0x57/0xf0 [ 33.508909][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.508938][ C1] ? __kasan_slab_free+0x6a/0x80 [ 33.508960][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 33.508981][ C1] ? __wake_up+0x169/0x190 [ 33.509004][ C1] ? audit_log_end+0x1f1/0x240 [ 33.509027][ C1] ? audit_log_end+0x1f1/0x240 [ 33.509049][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 33.509070][ C1] ? common_lsm_audit+0x14fe/0x18e0 [ 33.509090][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 33.509111][ C1] ? __cfi_common_lsm_audit+0x10/0x10 [ 33.509130][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 33.509147][ C1] ? call_rcu_hurry+0x30/0x30 [ 33.509171][ C1] ? __cfi__RNvMs3_NtCskDQVOo9v79Q_16rust_binder_main10page_rangeNtB5_19ShrinkablePageRange13use_page_slow+0x10/0x10 [ 33.509198][ C1] ? avc_update_node+0x2f1/0x9c0 [ 33.509219][ C1] ? slow_avc_audit+0x19f/0x220 [ 33.509247][ C1] ? __cfi_slow_avc_audit+0x10/0x10 [ 33.509269][ C1] _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x1d1/0x6b0 [ 33.509304][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x10/0x10 [ 33.509339][ C1] ? selinux_binder_transfer_binder+0xa9/0xf0 [ 33.509361][ C1] ? bpf_lsm_binder_transfer_binder+0xd/0x20 [ 33.509381][ C1] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x3691/0x8520 [ 33.509421][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 33.509520][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 33.509541][ C1] ? kernel_text_address+0xa9/0xe0 [ 33.509563][ C1] ? stack_depot_save_flags+0x38/0x800 [ 33.509583][ C1] _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 33.509607][ C1] ? kasan_save_track+0x3e/0x80 [ 33.509629][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0xcb/0x650 [ 33.509674][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 33.509697][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 33.509719][ C1] ? do_syscall_64+0x57/0xf0 [ 33.509735][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.509760][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 33.509788][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 33.509806][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 33.509829][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 33.509850][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 33.509881][ C1] ? krealloc_noprof+0xfa/0x130 [ 33.509903][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xcb/0x200 [ 33.509933][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 33.509964][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 33.509988][ C1] ? __kasan_check_write+0x18/0x20 [ 33.510007][ C1] ? _raw_spin_lock+0x92/0x120 [ 33.510023][ C1] ? __asan_memset+0x39/0x50 [ 33.510042][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x26e/0x650 [ 33.510087][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 33.510108][ C1] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10 [ 33.510154][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 33.510176][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 33.510204][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 33.510238][ C1] ? __kasan_check_write+0x18/0x20 [ 33.510257][ C1] ? _raw_spin_lock+0x92/0x120 [ 33.510273][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.510289][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 33.510312][ C1] ? bpf_lsm_binder_transaction+0xd/0x20 [ 33.510331][ C1] _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 33.510365][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 33.510403][ C1] ? __kasan_check_write+0x18/0x20 [ 33.510423][ C1] ? _raw_spin_lock+0x92/0x120 [ 33.510438][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.510455][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1228/0xa690 [ 33.510481][ C1] ? __asan_memcpy+0x5a/0x80 [ 33.510500][ C1] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1277/0xa690 [ 33.510539][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 33.510615][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 33.510636][ C1] ? kernel_text_address+0xa9/0xe0 [ 33.510655][ C1] ? __kernel_text_address+0x11/0x40 [ 33.510673][ C1] ? unwind_get_return_address+0x51/0x90 [ 33.510691][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 33.510708][ C1] ? arch_stack_walk+0x10a/0x170 [ 33.510735][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 33.510756][ C1] ? kernel_text_address+0xa9/0xe0 [ 33.510775][ C1] ? __kernel_text_address+0x11/0x40 [ 33.510793][ C1] ? unwind_get_return_address+0x51/0x90 [ 33.510811][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 33.510828][ C1] ? arch_stack_walk+0x10a/0x170 [ 33.510854][ C1] ? stack_depot_save_flags+0x38/0x800 [ 33.510874][ C1] ? kasan_save_track+0x4f/0x80 [ 33.510895][ C1] ? kasan_save_track+0x3e/0x80 [ 33.510916][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 33.510934][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 33.510955][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 33.510977][ C1] ? krealloc_noprof+0x8d/0x130 [ 33.510998][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 33.511028][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x7fb/0x1cf0 [ 33.511054][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x460/0x5da0 [ 33.511074][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 33.511095][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 33.511117][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 33.511140][ C1] ? do_syscall_64+0x57/0xf0 [ 33.511156][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.511186][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 33.511204][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 33.511234][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 33.511256][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 33.511287][ C1] ? krealloc_noprof+0xfa/0x130 [ 33.511308][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 33.511341][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 33.511373][ C1] ? __kasan_check_write+0x18/0x20 [ 33.511392][ C1] ? _raw_spin_lock+0x92/0x120 [ 33.511408][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.511425][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0xe7b/0x1cf0 [ 33.511452][ C1] ? __asan_memcpy+0x5a/0x80 [ 33.511471][ C1] ? _raw_spin_unlock+0x45/0x60 [ 33.511486][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 33.511503][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x9e6/0x1cf0 [ 33.511532][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 33.511565][ C1] ? __asan_memset+0x39/0x50 [ 33.511586][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 33.511606][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main4node7NodeRefEEB16_+0xf6/0x490 [ 33.511637][ C1] ? avc_has_perm+0x155/0x240 [ 33.511657][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main4node7NodeRefEEB16_+0x10/0x10 [ 33.511688][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0xf9/0x1f0 [ 33.511719][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10 [ 33.511751][ C1] ? __kasan_check_write+0x18/0x20 [ 33.511770][ C1] ? _raw_spin_lock+0x92/0x120 [ 33.511786][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 33.511802][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x54c/0xa50 [ 33.511827][ C1] ? __asan_memcpy+0x5a/0x80 [ 33.511846][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x794/0xa50 [ 33.511876][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 33.511896][ C1] ? __kernel_text_address+0x11/0x40 [ 33.511915][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1019/0x5da0 [ 33.511935][ C1] ? __asan_memcpy+0x5a/0x80 [ 33.511955][ C1] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 33.511976][ C1] ? stack_trace_save+0xaa/0x100 [ 33.511992][ C1] ? stack_depot_save_flags+0x38/0x800 [ 33.512012][ C1] ? kasan_save_stack+0x4d/0x60 [ 33.512033][ C1] ? kasan_save_stack+0x3e/0x60 [ 33.512054][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 33.512072][ C1] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 33.512091][ C1] ? __call_rcu_common+0xd7/0x720 [ 33.512114][ C1] ? call_rcu+0x14/0x20 [ 33.512137][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 33.512157][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 33.512173][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 33.512189][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.512214][ C1] ? _raw_spin_unlock+0x45/0x60 [ 33.512237][ C1] ? call_rcu_nocb+0x6d7/0xc80 [ 33.512262][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 33.512283][ C1] ? kernel_text_address+0xa9/0xe0 [ 33.512302][ C1] ? __kernel_text_address+0x11/0x40 [ 33.512321][ C1] ? unwind_get_return_address+0x51/0x90 [ 33.512339][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 33.512356][ C1] ? arch_stack_walk+0x10a/0x170 [ 33.512381][ C1] ? stack_depot_save_flags+0x38/0x800 [ 33.512400][ C1] ? stack_trace_save+0xaa/0x100 [ 33.512417][ C1] ? kasan_save_track+0x4f/0x80 [ 33.512437][ C1] ? kasan_save_track+0x3e/0x80 [ 33.512458][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 33.512475][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 33.512497][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 33.512520][ C1] ? krealloc_noprof+0x8d/0x130 [ 33.512541][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 33.512571][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_open+0x268/0x18d0 [ 33.512591][ C1] ? do_dentry_open+0x97b/0x1510 [ 33.512607][ C1] ? vfs_open+0x86/0x240 [ 33.512622][ C1] ? path_openat+0x2bb1/0x34f0 [ 33.512645][ C1] ? do_filp_open+0x1f5/0x440 [ 33.512669][ C1] ? do_sys_openat2+0x134/0x1d0 [ 33.512685][ C1] ? __x64_sys_openat+0x13a/0x170 [ 33.512702][ C1] ? x64_sys_call+0xe69/0x2ee0 [ 33.512724][ C1] ? do_syscall_64+0x57/0xf0 [ 33.512739][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.512768][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 33.512789][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 33.512814][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 33.512838][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 33.512859][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 33.512885][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 33.512905][ C1] ? update_curr+0x6c1/0x9e0 [ 33.512928][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 33.512952][ C1] ? __calc_delta+0x280/0x280 [ 33.512975][ C1] ? update_entity_lag+0x28f/0x2c0 [ 33.513000][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 33.513025][ C1] ? tg_unthrottle_up+0x9a0/0x9a0 [ 33.513044][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 33.513061][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 33.513078][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 33.513102][ C1] ? __cfi_update_misfit_status+0x10/0x10 [ 33.513121][ C1] ? dequeue_entities+0x1d7/0x1400 [ 33.513143][ C1] ? sched_balance_newidle+0x31a/0xab0 [ 33.513164][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 33.513184][ C1] ? sched_clock_noinstr+0xd/0x30 [ 33.513204][ C1] ? __kasan_check_write+0x18/0x20 [ 33.513230][ C1] ? __switch_to+0xc4f/0x1300 [ 33.513252][ C1] ? __cfi___switch_to+0x10/0x10 [ 33.513273][ C1] ? psi_task_switch+0x4f2/0xa10 [ 33.513292][ C1] ? __kasan_check_write+0x18/0x20 [ 33.513311][ C1] ? finish_task_switch+0x1d9/0x760 [ 33.513329][ C1] ? __switch_to_asm+0x3d/0x70 [ 33.513351][ C1] ? __schedule+0x1357/0x1ea0 [ 33.513369][ C1] ? avc_has_extended_perms+0x80b/0xe70 [ 33.513389][ C1] ? __asan_memcpy+0x5a/0x80 [ 33.513409][ C1] ? avc_has_extended_perms+0x969/0xe70 [ 33.513430][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 33.513448][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 33.513471][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 33.513495][ C1] ? schedule+0xc5/0x240 [ 33.513512][ C1] ? futex_unqueue+0x136/0x160 [ 33.513534][ C1] ? ioctl_has_perm+0x39a/0x500 [ 33.513552][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 33.513570][ C1] ? futex_wait+0x2ac/0x7b0 [ 33.513592][ C1] ? __cfi_futex_wait+0x10/0x10 [ 33.513616][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 33.513634][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 33.513650][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 33.513671][ C1] ? do_futex+0x32a/0x510 [ 33.513690][ C1] ? __cfi_do_futex+0x10/0x10 [ 33.513709][ C1] ? __fget_files+0x2c5/0x340 [ 33.513733][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 33.513749][ C1] ? security_file_ioctl+0x3e/0x110 [ 33.513766][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 33.513786][ C1] __se_sys_ioctl+0x135/0x1b0 [ 33.513809][ C1] __x64_sys_ioctl+0x7f/0xa0 [ 33.513831][ C1] x64_sys_call+0x1878/0x2ee0 [ 33.513854][ C1] do_syscall_64+0x57/0xf0 [ 33.513870][ C1] ? clear_bhb_loop+0x50/0xa0 [ 33.513887][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.513912][ C1] RIP: 0033:0x7f37ba19c629 [ 33.513928][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.513942][ C1] RSP: 002b:00007f37b8bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.513962][ C1] RAX: ffffffffffffffda RBX: 00007f37ba415fa0 RCX: 00007f37ba19c629 [ 33.513975][ C1] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000009 [ 33.513987][ C1] RBP: 00007f37ba232b39 R08: 0000000000000000 R09: 0000000000000000 [ 33.513998][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.514010][ C1] R13: 00007f37ba416038 R14: 00007f37ba415fa0 R15: 00007ffcbe133458 [ 33.514025][ C1] [ 33.514031][ C1] Modules linked in: [ 33.514041][ C1] ---[ end trace 0000000000000000 ]--- [ 33.514049][ C1] RIP: 0010:kasan_check_range+0x13/0x2b0 [ 33.514081][ C1] Code: cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 b0 01 48 85 f6 0f 84 c0 01 00 00 55 48 89 e5 <41> 57 41 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 29 02 00 00 [ 33.514094][ C1] RSP: 0018:ffffc9000e260000 EFLAGS: 00010202 [ 33.514108][ C1] RAX: ffffea0004698201 RBX: 0000000000000000 RCX: ffffffff81d999a9 [ 33.514121][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0004698230 [ 33.514132][ C1] RBP: ffffc9000e260000 R08: ffff8881f6f72280 R09: 0000000000000002 [ 33.514144][ C1] R10: 0000000000000000 R11: 00000000fffffffc R12: ffffea0004698230 [ 33.514156][ C1] R13: dffffc0000000000 R14: ffffc9000e260080 R15: 1ffff92001c4c00c [ 33.514169][ C1] FS: 00007f37b8bf76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.514185][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.514198][ C1] CR2: ffffc9000e25fff8 CR3: 000000011c534000 CR4: 00000000003526b0 [ 33.514217][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 33.520039][ C1] Kernel Offset: disabled