last executing test programs: 2m13.210560272s ago: executing program 2 (id=507): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc80004ff7b7cdb242e1ff0aa6905446b3"}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 2m13.192305613s ago: executing program 2 (id=508): r0 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) 2m13.147183188s ago: executing program 2 (id=511): syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 2m13.116999461s ago: executing program 2 (id=512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 2m13.02130587s ago: executing program 2 (id=518): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m12.92772512s ago: executing program 2 (id=521): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000440)={0x4, 0x80000001, 0x2000, 0x2000, &(0x7f0000112000/0x2000)=nil}) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x6) 1m57.83191913s ago: executing program 32 (id=521): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000440)={0x4, 0x80000001, 0x2000, 0x2000, &(0x7f0000112000/0x2000)=nil}) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x6) 1m52.76517728s ago: executing program 1 (id=797): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc4c, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m52.730625013s ago: executing program 1 (id=799): lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x1) socket$igmp6(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd0500580008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1m52.666135219s ago: executing program 1 (id=800): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1m52.572227079s ago: executing program 1 (id=802): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9b) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 1m52.524116783s ago: executing program 1 (id=804): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1m52.109140555s ago: executing program 1 (id=805): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x10b240, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) ptrace$getregs(0xe, r0, 0x6a, &(0x7f0000000000)=""/213) 1m52.011382894s ago: executing program 33 (id=805): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x10b240, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) ptrace$getregs(0xe, r0, 0x6a, &(0x7f0000000000)=""/213) 41.493624174s ago: executing program 4 (id=1827): waitid(0x0, 0x0, 0x0, 0x8, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 40.044074118s ago: executing program 4 (id=1873): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, 0x0, 0x0) 40.041147788s ago: executing program 4 (id=1877): connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x200000000000000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'wg1\x00', 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39.332260998s ago: executing program 4 (id=1881): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='.\x00') 39.317805019s ago: executing program 4 (id=1882): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 38.821193918s ago: executing program 4 (id=1894): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 38.771176613s ago: executing program 34 (id=1894): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 2.599784353s ago: executing program 3 (id=2458): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r2, &(0x7f0000000280)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan1\x00') add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x40) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) vmsplice(r5, &(0x7f0000000140), 0x0, 0x0) 1.72282116s ago: executing program 0 (id=2467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1.645753237s ago: executing program 0 (id=2472): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffc, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0xf5}], 0x1, 0x22, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.177095054s ago: executing program 3 (id=2482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/60, 0x3c}], 0x1) 1.171586535s ago: executing program 3 (id=2483): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r2, 0xffffa000) 1.142957507s ago: executing program 6 (id=2484): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f00000001c0)=0x7, 0x4) readv(r0, &(0x7f0000001700)=[{&(0x7f00000013c0)=""/69, 0x45}, {0x0}, {&(0x7f0000001500)=""/33, 0x21}, {0x0}, {0x0}], 0x5) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x24000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.050902516s ago: executing program 6 (id=2485): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000dc0)=""/4101, 0x1005}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/184, 0xb8}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f00000005c0)=""/34, 0x22}], 0xa}, 0x5}], 0x3, 0x2100, 0x0) 997.685312ms ago: executing program 3 (id=2486): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xe51}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4100, 0x1004}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/211, 0xd3}, {&(0x7f00000035c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000000)=""/92, 0x5c}], 0x9}, 0x81}], 0x3, 0x2100, 0x0) 979.454813ms ago: executing program 6 (id=2488): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x7, 0x4) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', r0, &(0x7f0000000100)='./file0/../file0\x00', 0x145) 952.233176ms ago: executing program 6 (id=2490): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r2, &(0x7f0000000280)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan1\x00') add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x40) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) vmsplice(r5, &(0x7f0000000140), 0x0, 0x0) 925.648339ms ago: executing program 3 (id=2491): r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) listen(r7, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) 839.614837ms ago: executing program 3 (id=2495): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r2, &(0x7f0000000280)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan1\x00') add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x40) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) vmsplice(r5, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) 799.631031ms ago: executing program 0 (id=2496): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) 741.173157ms ago: executing program 0 (id=2497): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000200)={0x0}) 740.926597ms ago: executing program 0 (id=2498): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r2, 0x0, 0x4f) 323.063898ms ago: executing program 5 (id=2499): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x7, 0x4) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', r0, &(0x7f0000000100)='./file0/../file0\x00', 0x145) 307.79063ms ago: executing program 5 (id=2500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x2, 0x9, 0xc, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 276.547583ms ago: executing program 5 (id=2501): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/60, 0x3c}], 0x1) 276.048063ms ago: executing program 5 (id=2502): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x9, r3}, 0x10) 243.095056ms ago: executing program 5 (id=2503): r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan1\x00') 70.169463ms ago: executing program 6 (id=2504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/60, 0x3c}], 0x1) 69.899533ms ago: executing program 0 (id=2505): exit(0x3) 69.479173ms ago: executing program 5 (id=2506): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) 0s ago: executing program 6 (id=2507): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_usb_connect(0x0, 0x11a, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xfc, 0x19, 0x7e, 0x8, 0x5050, 0x8004, 0x1b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x34, 0x0, 0x9, 0xba, 0xf0, 0x1d, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0x4, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x7fff}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x8, 0x8, 0x1}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x7, 0x34, 0x8, [@generic={0x2, 0x10}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x2, 0x3f, 0x4, [@generic={0x24, 0x0, "0651b3c3159d29eaae0352f88d0a9cf59a550de4e18f0cc996601565135e9d7b5706"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0xd, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0xead2}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x5, 0x9, 0x1}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x9, 0x7, 0x3, [@generic={0x47, 0x4, "3061ca320ffaf26d23c040573172e64d145badd56e6023214fd17f3f1a859f1ab09b737ee9de1e63bf366f937c323b1572bd818a198826e7d5886b0abea7e05e3cc2a140be"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0xbe, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xd}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x2, 0x9, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0x6}]}}]}}]}}]}}, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 69.230184][ T351] usb 4-1: USB disconnect, device number 11 [ 69.658870][ T786] Bluetooth: hci0: command 0x1003 tx timeout [ 69.659122][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.072016][ T2128] kvm: requested 162590 ns i8254 timer period limited to 200000 ns [ 70.490798][ T2135] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.508605][ T2135] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.519092][ T2135] bridge_slave_0: entered allmulticast mode [ 70.535685][ T2135] bridge_slave_0: entered promiscuous mode [ 70.542539][ T2135] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.549798][ T2135] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.557008][ T2135] bridge_slave_1: entered allmulticast mode [ 70.563663][ T2135] bridge_slave_1: entered promiscuous mode [ 70.655795][ T2145] rust_binder: 378: no such ref 2 [ 70.674551][ T2145] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 70.711974][ T2135] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.719084][ T2135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.726420][ T2135] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.733509][ T2135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.796410][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.804836][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.846228][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.853344][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.878265][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.885388][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.939501][ T2135] veth0_vlan: entered promiscuous mode [ 70.962054][ T2135] veth1_macvtap: entered promiscuous mode [ 71.013218][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 71.013237][ T36] audit: type=1400 audit(1761021690.110:327): avc: denied { mount } for pid=2135 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.042933][ T36] audit: type=1400 audit(1761021690.120:328): avc: denied { mounton } for pid=2135 comm="syz-executor" path="/root/syzkaller.19hNQm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.098291][ T36] audit: type=1400 audit(1761021690.190:329): avc: denied { getopt } for pid=2169 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.298882][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 71.480552][ T31] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 71.489222][ T2198] kvm: user requested TSC rate below hardware speed [ 71.490024][ T31] usb 4-1: config 0 has no interface number 1 [ 71.502585][ T31] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 71.513677][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 71.525504][ T31] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 71.535095][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 71.543333][ T31] usb 4-1: SerialNumber: syz [ 71.550177][ T31] usb 4-1: config 0 descriptor?? [ 71.758784][ T31] usb 4-1: Found UVC 0.00 device (0002:0000) [ 71.766017][ T31] usb 4-1: No valid video chain found. [ 71.773340][ T31] usb 4-1: USB disconnect, device number 12 [ 71.808883][ T351] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 71.900419][ T2230] netlink: 44 bytes leftover after parsing attributes in process `syz.4.743'. [ 71.968911][ T351] usb 2-1: Using ep0 maxpacket: 32 [ 71.975106][ T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.986526][ T351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.996385][ T351] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 72.005470][ T351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.016520][ T351] usb 2-1: config 0 descriptor?? [ 72.426903][ T351] koneplus 0003:1E7D:2D51.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 72.833708][ T351] usb 2-1: USB disconnect, device number 8 [ 72.932425][ T2261] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967295 [ 72.940613][ T2261] rust_binder: Write failure EINVAL in pid:51 [ 73.061970][ T36] audit: type=1400 audit(1761022205.158:330): avc: denied { read } for pid=2271 comm="syz.4.763" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.090719][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 73.091230][ T36] audit: type=1400 audit(1761022205.158:331): avc: denied { open } for pid=2271 comm="syz.4.763" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 73.250284][ T9] usb 4-1: config index 0 descriptor too short (expected 60690, got 18) [ 73.259076][ T9] usb 4-1: config 15 has too many interfaces: 102, using maximum allowed: 32 [ 73.267910][ T9] usb 4-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 73.278901][ T9] usb 4-1: config 15 has 0 interfaces, different from the descriptor's value: 102 [ 73.288276][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 73.297510][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.782168][ T2289] mmap: syz.0.769 (2289) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.905118][ T9] usb 4-1: string descriptor 0 read error: -71 [ 73.921865][ T9] usb 4-1: USB disconnect, device number 13 [ 74.075159][ T36] audit: type=1400 audit(1761022206.168:332): avc: denied { execute } for pid=2298 comm="syz.0.775" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 74.549318][ T36] audit: type=1400 audit(1761022206.648:333): avc: denied { getopt } for pid=2331 comm="syz.3.788" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.250268][ T36] audit: type=1400 audit(1761022207.338:334): avc: denied { append } for pid=2353 comm="syz.3.796" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.447058][ T36] audit: type=1326 audit(1761022207.538:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2364 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917f8efc9 code=0x7ffc0000 [ 75.481076][ T36] audit: type=1326 audit(1761022207.538:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2364 comm="syz.4.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1917f8efc9 code=0x7ffc0000 [ 75.538852][ T351] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 75.699976][ T351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.719971][ T351] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.739823][ T351] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 75.757476][ T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 75.778876][ T351] usb 4-1: SerialNumber: syz [ 75.884832][ T208] erspan0: left allmulticast mode [ 75.901964][ T208] erspan0: left promiscuous mode [ 75.907114][ T208] bridge0: port 3(erspan0) entered disabled state [ 75.923426][ T208] bridge_slave_1: left allmulticast mode [ 75.929180][ T208] bridge_slave_1: left promiscuous mode [ 75.934831][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.949807][ T208] bridge_slave_0: left allmulticast mode [ 75.955867][ T208] bridge_slave_0: left promiscuous mode [ 75.961770][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.993433][ T351] usb 4-1: 0:2 : does not exist [ 76.010104][ T351] usb 4-1: USB disconnect, device number 14 [ 76.109317][ T208] veth1_macvtap: left promiscuous mode [ 76.115284][ T208] veth0_vlan: left promiscuous mode [ 76.236014][ T2383] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.243133][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.255478][ T2383] bridge_slave_0: entered allmulticast mode [ 76.266764][ T2383] bridge_slave_0: entered promiscuous mode [ 76.282916][ T2383] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.291472][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.298664][ T2383] bridge_slave_1: entered allmulticast mode [ 76.305290][ T2383] bridge_slave_1: entered promiscuous mode [ 76.436508][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.443646][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.462869][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.470066][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.535265][ T2383] veth0_vlan: entered promiscuous mode [ 76.555223][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 76.555243][ T36] audit: type=1400 audit(1761022208.648:345): avc: denied { mounton } for pid=2402 comm="syz.3.815" path="/proc/447/task" dev="proc" ino=19732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 76.640995][ T2383] veth1_macvtap: entered promiscuous mode [ 77.181006][ T36] audit: type=1400 audit(1761022209.248:346): avc: denied { read } for pid=2429 comm="syz.4.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.987379][ T36] audit: type=1400 audit(1761022210.078:347): avc: denied { add_name } for pid=2448 comm="syz.3.827" name="io.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.017069][ T36] audit: type=1400 audit(1761022210.078:348): avc: denied { create } for pid=2448 comm="syz.3.827" name="io.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.068901][ T36] audit: type=1400 audit(1761022210.078:349): avc: denied { associate } for pid=2448 comm="syz.3.827" name="io.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.020801][ T2480] syzkaller0: entered promiscuous mode [ 79.026355][ T2480] syzkaller0: entered allmulticast mode [ 79.083056][ T36] audit: type=1400 audit(1761022211.178:350): avc: denied { watch } for pid=2483 comm="syz.5.843" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 79.152118][ T2488] kvm: pic: level sensitive irq not supported [ 79.168951][ T330] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.192487][ T2488] kvm: pic: single mode not supported [ 79.209815][ T36] audit: type=1400 audit(1761022211.308:351): avc: denied { transfer } for pid=2491 comm="syz.3.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 79.330301][ T330] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.341314][ T330] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 79.352875][ T330] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.362005][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.370021][ T330] usb 5-1: Product: syz [ 79.374217][ T330] usb 5-1: Manufacturer: syz [ 79.378875][ T330] usb 5-1: SerialNumber: syz [ 79.385248][ T330] cdc_mbim 5-1:1.0: skipping garbage [ 79.478563][ T2496] fuse: root generation should be zero [ 79.489032][ T351] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 79.522851][ T36] audit: type=1400 audit(1761022211.618:352): avc: denied { read } for pid=2500 comm="syz.5.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.586286][ T2476] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 79.644814][ T351] usb 4-1: config 1 interface 0 has no altsetting 0 [ 79.652974][ T351] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 79.662152][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.670318][ T351] usb 4-1: Product: syz [ 79.674562][ T351] usb 4-1: Manufacturer: syz [ 79.679216][ T351] usb 4-1: SerialNumber: syz [ 80.195795][ T2476] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 80.203310][ T330] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 80.210947][ T330] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 80.289840][ T351] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 80.584385][ T36] audit: type=1400 audit(1761022212.678:353): avc: denied { mounton } for pid=2514 comm="syz.5.854" path="/17/file0" dev="incremental-fs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.646176][ T36] audit: type=1400 audit(1761022212.738:354): avc: denied { read write } for pid=2493 comm="syz.3.847" name="lp0" dev="devtmpfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 80.814699][ T330] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 80.821237][ T330] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 80.829179][ T330] wwan wwan0: port wwan0mbim0 attached [ 80.837473][ T330] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 52:cb:a8:93:9a:4c [ 80.851436][ T330] usb 5-1: USB disconnect, device number 2 [ 80.860468][ T330] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 80.923959][ T330] wwan wwan0: port wwan0mbim0 disconnected [ 81.535416][ T2574] input: syz1 as /devices/virtual/input/input11 [ 81.728934][ T1763] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.757954][ T2587] tipc: Started in network mode [ 81.762990][ T2587] tipc: Node identity ee2a46b099f, cluster identity 4711 [ 81.770495][ T2587] tipc: Enabled bearer , priority 0 [ 81.794884][ T2587] syzkaller0: entered promiscuous mode [ 81.800631][ T2587] syzkaller0: entered allmulticast mode [ 81.806662][ T2587] tipc: Resetting bearer [ 81.823917][ T2586] tipc: Resetting bearer [ 81.841358][ T2586] tipc: Disabling bearer [ 81.888869][ T1763] usb 5-1: Using ep0 maxpacket: 8 [ 81.895481][ T1763] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 81.903972][ T1763] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 81.912616][ T1763] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 81.922143][ T1763] usb 5-1: config 250 has no interface number 0 [ 81.928872][ T1763] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 81.942726][ T1763] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 81.953377][ T1763] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.963865][ T1763] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 81.978037][ T1763] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 81.991833][ T1763] usb 5-1: config 250 interface 228 has no altsetting 0 [ 82.000430][ T1763] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 82.009739][ T1763] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 82.018154][ T1763] usb 5-1: Product: syz [ 82.022423][ T1763] usb 5-1: SerialNumber: syz [ 82.029137][ T1763] hub 5-1:250.228: bad descriptor, ignoring hub [ 82.035472][ T1763] hub 5-1:250.228: probe with driver hub failed with error -5 [ 82.081808][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 82.081827][ T36] audit: type=1400 audit(1761022214.178:358): avc: denied { create } for pid=2604 comm="syz.0.882" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.108626][ T36] audit: type=1400 audit(1761022214.178:359): avc: denied { mounton } for pid=2604 comm="syz.0.882" path="/200/file0" dev="tmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.201341][ T36] audit: type=1400 audit(1761022214.298:360): avc: denied { unlink } for pid=524 comm="syz-executor" name="file0" dev="tmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.232291][ T1763] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 82.250943][ T31] usb 4-1: USB disconnect, device number 15 [ 82.260499][ T31] usblp0: removed [ 82.424507][ T36] audit: type=1400 audit(1761022214.518:361): avc: denied { getopt } for pid=2618 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.518935][ T330] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 82.559044][ T10] usb 5-1: USB disconnect, device number 3 [ 82.565667][ T10] usblp1: removed [ 82.668873][ T330] usb 1-1: Using ep0 maxpacket: 8 [ 82.675129][ T330] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 82.683606][ T330] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 82.692135][ T330] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 82.701215][ T330] usb 1-1: config 250 has no interface number 0 [ 82.707508][ T330] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 82.719156][ T330] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 82.729819][ T330] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.740171][ T330] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 82.750469][ T330] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 82.764384][ T330] usb 1-1: config 250 interface 228 has no altsetting 0 [ 82.777256][ T330] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 82.786523][ T330] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 82.794820][ T330] usb 1-1: Product: syz [ 82.799037][ T330] usb 1-1: SerialNumber: syz [ 82.809111][ T330] hub 1-1:250.228: bad descriptor, ignoring hub [ 82.815562][ T330] hub 1-1:250.228: probe with driver hub failed with error -5 [ 82.888866][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.013118][ T36] audit: type=1400 audit(1761022215.108:362): avc: denied { create } for pid=2609 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 83.027368][ T330] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 83.045701][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 83.054084][ T10] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 83.062634][ T10] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 83.071976][ T10] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 83.081452][ T10] usb 5-1: config 250 has no interface number 0 [ 83.087728][ T10] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 83.099514][ T10] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 83.110002][ T10] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.120336][ T10] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 83.130657][ T10] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 83.144194][ T10] usb 5-1: config 250 interface 228 has no altsetting 0 [ 83.152818][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 83.162012][ T10] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 83.170565][ T10] usb 5-1: Product: syz [ 83.174772][ T10] usb 5-1: SerialNumber: syz [ 83.181989][ T10] hub 5-1:250.228: bad descriptor, ignoring hub [ 83.188348][ T10] hub 5-1:250.228: probe with driver hub failed with error -5 [ 83.239088][ T330] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 83.263394][ T2636] netlink: 'syz.5.894': attribute type 6 has an invalid length. [ 83.306401][ T2640] netlink: 'syz.5.896': attribute type 27 has an invalid length. [ 83.383648][ T10] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 83.410397][ T10] usb 5-1: USB disconnect, device number 4 [ 83.417437][ T10] usblp1: removed [ 83.437273][ T2642] devpts: called with bogus options [ 83.461615][ T36] audit: type=1400 audit(1761022215.558:363): avc: denied { remount } for pid=2645 comm="syz.5.899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.619839][ T2659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.704616][ T2665] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1623045130 (207749776640 ns) > initial count (50292399872 ns). Using initial count to start timer. [ 83.761509][ T36] audit: type=1326 audit(1761022215.858:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2669 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 83.785281][ T36] audit: type=1326 audit(1761022215.858:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2669 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 83.809060][ T36] audit: type=1326 audit(1761022215.858:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2669 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 83.832373][ T36] audit: type=1326 audit(1761022215.858:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2669 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 83.929618][ T1763] usb 1-1: USB disconnect, device number 9 [ 83.937995][ T1763] usblp0: removed [ 84.130199][ T2694] kvm: pic: non byte write [ 84.842345][ T2810] netlink: 188 bytes leftover after parsing attributes in process `syz.4.939'. [ 85.718865][ T1763] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 85.878862][ T1763] usb 1-1: Using ep0 maxpacket: 8 [ 85.889770][ T1763] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.918868][ T1763] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.928672][ T1763] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.945149][ T1763] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 85.968849][ T1763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.978036][ T1763] usb 1-1: config 0 descriptor?? [ 86.392274][ T1763] ntrig 0003:1B96:0004.000D: unknown main item tag 0x0 [ 86.408865][ T1763] ntrig 0003:1B96:0004.000D: unknown main item tag 0x0 [ 86.415800][ T1763] ntrig 0003:1B96:0004.000D: item fetching failed at offset 2/5 [ 86.439083][ T1763] ntrig 0003:1B96:0004.000D: parse failed [ 86.445016][ T1763] ntrig 0003:1B96:0004.000D: probe with driver ntrig failed with error -22 [ 86.601987][ T1763] usb 1-1: USB disconnect, device number 10 [ 87.210119][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 87.210138][ T36] audit: type=1400 audit(1761022219.308:407): avc: denied { setattr } for pid=2879 comm="syz.5.973" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.613791][ T2893] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 87.624477][ T36] audit: type=1400 audit(1761022219.708:408): avc: denied { getattr } for pid=2892 comm="syz.0.979" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 87.639513][ T2893] incfs: Can't find or create .index dir in ./file0 [ 87.647292][ T36] audit: type=1400 audit(1761022219.738:409): avc: denied { mounton } for pid=2892 comm="syz.0.979" path="/215/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.653824][ T2893] incfs: mount failed -30 [ 88.068513][ T36] audit: type=1400 audit(1761022220.158:410): avc: denied { shutdown } for pid=2924 comm="syz.0.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.175638][ T36] audit: type=1400 audit(1761022220.268:411): avc: denied { attach_queue } for pid=2941 comm="syz.5.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 88.568877][ T1763] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 88.571442][ T36] audit: type=1400 audit(1761022220.668:412): avc: denied { create } for pid=2969 comm="syz.4.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 88.731965][ T1763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.744813][ T1763] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 88.760291][ T1763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.769773][ T1763] usb 1-1: config 0 descriptor?? [ 89.178486][ T1763] kovaplus 0003:1E7D:2D50.000E: item fetching failed at offset 0/3 [ 89.186919][ T1763] kovaplus 0003:1E7D:2D50.000E: parse failed [ 89.193230][ T1763] kovaplus 0003:1E7D:2D50.000E: probe with driver kovaplus failed with error -22 [ 89.382313][ T10] usb 1-1: USB disconnect, device number 11 [ 89.389545][ T330] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 89.538859][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 89.545428][ T330] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 89.553934][ T330] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 89.562799][ T330] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 89.571814][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.581507][ T330] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.591297][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 89.604358][ T330] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 89.613475][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.630537][ T330] usb 4-1: config 0 descriptor?? [ 89.655574][ T2990] kvm: pic: non byte write [ 89.839705][ T330] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 90.047533][ T1763] usb 4-1: USB disconnect, device number 16 [ 90.059034][ T1763] usblp0: removed [ 91.117980][ T3047] capability: warning: `syz.3.1036' uses 32-bit capabilities (legacy support in use) [ 91.221576][ T3052] netlink: 'syz.3.1038': attribute type 4 has an invalid length. [ 91.252858][ T3052] netlink: 'syz.3.1038': attribute type 4 has an invalid length. [ 91.646616][ T3064] netlink: 'syz.3.1043': attribute type 4 has an invalid length. [ 91.680104][ T3064] netlink: 'syz.3.1043': attribute type 4 has an invalid length. [ 91.846736][ T3076] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1046'. [ 91.919771][ T10] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 92.080100][ T10] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 92.090026][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.102115][ T10] usb 6-1: config 0 descriptor?? [ 92.309468][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 92.334625][ T3088] rust_binder: Error while translating object. [ 92.334693][ T3088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.341040][ T3088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:589 [ 92.470054][ T3093] kvm: kvm [3091]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 92.488500][ T3093] kvm: kvm [3091]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 92.500121][ T3093] kvm: kvm [3091]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 92.511968][ T3093] kvm: kvm [3091]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 92.521203][ T3093] kvm: kvm [3091]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 93.188873][ T351] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 93.340851][ T351] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 93.352314][ T351] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 93.365403][ T351] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.374731][ T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.382991][ T351] usb 5-1: Product: syz [ 93.387271][ T351] usb 5-1: Manufacturer: syz [ 93.392213][ T351] usb 5-1: SerialNumber: syz [ 93.398398][ T3112] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 93.857749][ T36] audit: type=1400 audit(1761022225.948:413): avc: denied { read } for pid=3152 comm="syz.3.1076" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.880942][ T36] audit: type=1400 audit(1761022225.948:414): avc: denied { open } for pid=3152 comm="syz.3.1076" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.132578][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 94.144259][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 94.155740][ T10] asix 6-1:0.0: probe with driver asix failed with error -71 [ 94.164119][ T10] usb 6-1: USB disconnect, device number 2 [ 94.498885][ T331] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 94.529859][ T3161] tipc: Enabled bearer , priority 0 [ 94.537251][ T3160] tipc: Resetting bearer [ 94.550058][ T3160] tipc: Disabling bearer [ 94.616469][ T351] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 94.622992][ T351] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 94.630533][ T351] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 94.662909][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.674021][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.683841][ T331] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 94.693069][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.703231][ T331] usb 4-1: config 0 descriptor?? [ 94.731273][ T36] audit: type=1400 audit(1761022226.828:415): avc: denied { read append } for pid=3172 comm="syz.0.1084" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.788891][ T36] audit: type=1400 audit(1761022226.828:416): avc: denied { open } for pid=3172 comm="syz.0.1084" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.827091][ T351] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 94.973674][ T36] audit: type=1400 audit(1761022227.068:417): avc: denied { write } for pid=3181 comm="syz.0.1088" name="tcp6" dev="proc" ino=4026532611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 95.034772][ T3186] SELinux: unknown common r [ 95.036255][ T36] audit: type=1400 audit(1761022227.128:418): avc: denied { load_policy } for pid=3185 comm="syz.5.1089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 95.039725][ T3186] SELinux: failed to load policy [ 95.118778][ T331] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 95.128122][ T331] hid-steam 0003:28DE:1142.000F: unknown main item tag 0x0 [ 95.135833][ T331] hid-steam 0003:28DE:1142.000F: item fetching failed at offset 2/5 [ 95.144283][ T331] hid-steam 0003:28DE:1142.000F: steam_probe:parse of hid interface failed [ 95.153146][ T331] hid-steam 0003:28DE:1142.000F: probe with driver hid-steam failed with error -22 [ 95.153518][ T3192] bridge0: port 3(macsec0) entered blocking state [ 95.169328][ T3192] bridge0: port 3(macsec0) entered disabled state [ 95.175849][ T3192] macsec0: entered allmulticast mode [ 95.181566][ T3192] veth1_macvtap: entered allmulticast mode [ 95.188052][ T3192] macsec0: entered promiscuous mode [ 95.193900][ T3192] bridge0: port 3(macsec0) entered blocking state [ 95.200364][ T3192] bridge0: port 3(macsec0) entered forwarding state [ 95.235228][ T351] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 95.248102][ T351] usb 5-1: USB disconnect, device number 5 [ 95.254907][ T351] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 95.321869][ T347] usb 4-1: USB disconnect, device number 17 [ 95.396781][ T330] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 95.412837][ T330] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.442623][ T3214] fido_id[3214]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.448353][ T3217] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.456220][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 95.463232][ T3217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.628883][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 95.635193][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 95.643430][ T31] usb 1-1: config 0 has no interface number 0 [ 95.649612][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 95.657714][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.667429][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.675797][ T31] usb 1-1: Product: syz [ 95.680063][ T31] usb 1-1: Manufacturer: syz [ 95.690815][ T31] usb 1-1: SerialNumber: syz [ 95.696355][ T31] usb 1-1: config 0 descriptor?? [ 95.702178][ T31] smsc75xx v1.0.0 [ 95.793963][ T3244] netlink: 'syz.4.1102': attribute type 11 has an invalid length. [ 95.863920][ T3248] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.970009][ T36] audit: type=1400 audit(1761022228.068:419): avc: denied { execute_no_trans } for pid=3259 comm="syz.4.1109" path="/101/bus/file1" dev="overlay" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.994215][ T330] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 96.047363][ T36] audit: type=1400 audit(1761022228.138:420): avc: denied { module_load } for pid=3266 comm="syz.4.1112" path="/bus" dev="ramfs" ino=24720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 96.047693][ T3267] Invalid ELF header magic: != ELF [ 96.150122][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.161154][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.171736][ T330] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 96.181084][ T330] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 96.189370][ T330] usb 6-1: Manufacturer: syz [ 96.196280][ T330] usb 6-1: config 0 descriptor?? [ 96.304294][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 96.316655][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 96.527701][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 96.538624][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 96.548394][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 96.558946][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 96.568407][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 96.578756][ T31] usb 1-1: USB disconnect, device number 12 [ 97.013092][ T330] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 97.673952][ T330] usb 6-1: USB disconnect, device number 3 [ 98.089804][ T36] audit: type=1400 audit(1761022230.188:421): avc: denied { connect } for pid=3305 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.211059][ T3316] futex_wake_op: syz.4.1132 tries to shift op by -1; fix this program [ 98.404253][ T3327] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 99.147095][ T36] audit: type=1400 audit(1761022231.238:422): avc: denied { unmount } for pid=460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 99.187999][ T3371] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1155'. [ 99.210214][ T3371] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1155'. [ 99.603676][ T36] audit: type=1400 audit(1761022231.698:423): avc: denied { read write } for pid=3387 comm="syz.0.1162" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.636617][ T36] audit: type=1400 audit(1761022231.718:424): avc: denied { open } for pid=3387 comm="syz.0.1162" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 99.664265][ T3388] kvm: pic: non byte write [ 99.668916][ T3388] kvm: pic: non byte write [ 99.673713][ T3388] kvm: pic: non byte write [ 99.678301][ T3388] kvm: pic: non byte write [ 99.683044][ T3388] kvm: pic: non byte write [ 99.687681][ T3388] kvm: pic: non byte write [ 99.692265][ T3388] kvm: pic: non byte write [ 99.696879][ T3388] kvm: pic: non byte write [ 99.864158][ T3392] tipc: Failed to remove unknown binding: 66,1,1/0:4141183653/4141183655 [ 99.873484][ T3392] tipc: Failed to remove unknown binding: 66,1,1/0:4141183653/4141183655 [ 99.882030][ T3392] tipc: Failed to remove unknown binding: 66,1,1/0:4141183653/4141183655 [ 99.940348][ T3398] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3065856872 (24526854976 ns) > initial count (12180970880 ns). Using initial count to start timer. [ 99.961921][ T3398] kvm: pic: non byte read [ 99.966619][ T3398] kvm: pic: non byte read [ 100.036364][ T3408] syz.0.1170 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.238861][ T3414] tipc: Started in network mode [ 100.243837][ T3414] tipc: Node identity 1e319c00f917, cluster identity 4711 [ 100.251278][ T3414] tipc: Enabled bearer , priority 0 [ 100.259246][ T3413] tipc: Resetting bearer [ 100.271198][ T3413] tipc: Disabling bearer [ 100.308874][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 100.428982][ T3425] kvm: pic: non byte write [ 100.459976][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.470124][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.479833][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.489034][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.497061][ T31] usb 1-1: SerialNumber: syz [ 100.708685][ T31] usb 1-1: 0:2 : does not exist [ 100.717133][ T31] usb 1-1: USB disconnect, device number 13 [ 100.877822][ T36] audit: type=1400 audit(1761022232.968:425): avc: denied { read write } for pid=3447 comm="syz.3.1186" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.901385][ T36] audit: type=1400 audit(1761022232.998:426): avc: denied { open } for pid=3447 comm="syz.3.1186" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.933979][ T36] audit: type=1400 audit(1761022233.018:427): avc: denied { ioctl } for pid=3447 comm="syz.3.1186" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.198845][ T331] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 101.354916][ T331] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.363004][ T331] usb 6-1: config 0 has no interface number 0 [ 101.377984][ T331] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.394885][ T331] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.410655][ T3458] kvm: pic: non byte write [ 101.415202][ T331] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 101.428854][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.449624][ T331] usb 6-1: config 0 descriptor?? [ 101.563856][ T36] audit: type=1400 audit(1761022233.658:428): avc: denied { mounton } for pid=3462 comm="syz.0.1193" path="/270/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 101.659369][ T36] audit: type=1400 audit(1761022233.758:429): avc: denied { setopt } for pid=3449 comm="syz.5.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.765734][ T3469] loop5: detected capacity change from 0 to 7 [ 101.881220][ T331] prodikeys 0003:041E:2801.0012: report_id 0 is invalid [ 101.888253][ T331] prodikeys 0003:041E:2801.0012: item 0 0 1 8 parsing failed [ 101.895958][ T331] prodikeys 0003:041E:2801.0012: hid parse failed [ 101.902532][ T331] prodikeys 0003:041E:2801.0012: probe with driver prodikeys failed with error -22 [ 102.086408][ T331] usb 6-1: USB disconnect, device number 4 [ 102.526643][ T3481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1199'. [ 102.573224][ T36] audit: type=1326 audit(1761022234.668:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.3.1202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x0 [ 102.788854][ T331] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.873315][ T3504] netlink: 'syz.0.1209': attribute type 8 has an invalid length. [ 102.881300][ T3504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'. [ 102.949985][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.961052][ T331] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.970383][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.979432][ T331] usb 5-1: config 0 descriptor?? [ 103.148870][ T347] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 103.196352][ T3522] overlayfs: failed to clone upperpath [ 103.218887][ T3524] overlayfs: failed to clone upperpath [ 103.427611][ T347] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 103.437598][ T347] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 103.481787][ T347] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 103.491111][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.499615][ T347] usb 1-1: Product: syz [ 103.504159][ T347] usb 1-1: Manufacturer: syz [ 103.510842][ T347] usb 1-1: SerialNumber: syz [ 103.522051][ T347] usb 1-1: config 0 descriptor?? [ 103.527551][ T3506] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.535305][ T3506] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.703472][ T331] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 103.720358][ T331] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0013/input/input12 [ 103.744356][ T3506] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.751606][ T3506] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 103.794436][ T331] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 104.026775][ T331] usb 5-1: USB disconnect, device number 6 [ 104.160314][ T347] Error reading MAC address [ 104.438471][ T36] audit: type=1400 audit(1761022236.528:431): avc: denied { rename } for pid=3543 comm="syz.3.1224" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 104.545549][ T3552] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 104.689064][ T3572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 104.837536][ T3582] SELinux: failed to load policy [ 105.078902][ T347] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.230753][ T347] usb 5-1: Using ep0 maxpacket: 8 [ 105.237113][ T347] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.247014][ T347] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.253677][ T347] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 105.263220][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.271989][ T347] usb 5-1: config 0 descriptor?? [ 105.680176][ T347] holtek 0003:1241:5015.0014: unknown main item tag 0x0 [ 105.687193][ T347] holtek 0003:1241:5015.0014: item fetching failed at offset 6/7 [ 105.695203][ T347] holtek 0003:1241:5015.0014: parse failed [ 105.701218][ T347] holtek 0003:1241:5015.0014: probe with driver holtek failed with error -22 [ 105.885830][ T31] usb 5-1: USB disconnect, device number 7 [ 105.918341][ T3602] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 105.935487][ T331] usb 1-1: USB disconnect, device number 14 [ 105.948365][ T36] audit: type=1400 audit(1761022238.048:432): avc: denied { write } for pid=3603 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 105.953303][ T3600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1248'. [ 105.986593][ T3600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1248'. [ 106.414252][ T3608] input: syz1 as /devices/virtual/input/input13 [ 107.338893][ T331] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 107.490097][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.501139][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.510914][ T331] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.523889][ T331] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.533088][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.541806][ T331] usb 1-1: config 0 descriptor?? [ 107.950630][ T331] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 107.963493][ T331] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 108.260356][ C1] plantronics 0003:047F:FFFF.0015: hid_field_extract() called with n (132) > 32! (swapper/1) [ 108.461856][ T331] usb 1-1: USB disconnect, device number 15 [ 109.626353][ T36] audit: type=1400 audit(1761022241.718:433): avc: denied { listen } for pid=3668 comm="syz.0.1274" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.101413][ T36] audit: type=1326 audit(1761022242.198:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.3.1281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f90ceb85e67 code=0x0 [ 110.179657][ T3702] netlink: 'syz.5.1286': attribute type 27 has an invalid length. [ 110.219263][ T3702] bridge0: port 3(macsec0) entered disabled state [ 110.225831][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.233086][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.354534][ T3702] veth1_macvtap: left allmulticast mode [ 110.404428][ T36] audit: type=1400 audit(1761022242.498:435): avc: denied { read } for pid=95 comm="acpid" name="event7" dev="devtmpfs" ino=616 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 110.411308][ T3705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'. [ 110.463599][ T36] audit: type=1400 audit(1761022242.498:436): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=616 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 110.538841][ T36] audit: type=1400 audit(1761022242.498:437): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=616 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 111.119998][ T36] audit: type=1400 audit(1761022243.218:438): avc: denied { lock } for pid=3734 comm="syz.3.1296" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 111.191343][ T3740] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 111.200603][ T3740] overlayfs: missing 'lowerdir' [ 111.228835][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 111.378827][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 111.391098][ T31] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 111.413652][ T31] usb 1-1: config 0 has no interface number 0 [ 111.433406][ T31] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 111.463321][ T31] usb 1-1: config 0 interface 196 has no altsetting 0 [ 111.483525][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 111.497189][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.505786][ T31] usb 1-1: Product: syz [ 111.518275][ T31] usb 1-1: Manufacturer: syz [ 111.525324][ T31] usb 1-1: SerialNumber: syz [ 111.535536][ T31] usb 1-1: config 0 descriptor?? [ 111.541135][ T3728] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.331839][ T31] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 112.349492][ T31] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 112.386647][ T36] audit: type=1400 audit(1761022244.478:439): avc: denied { create } for pid=3763 comm="syz.4.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.402368][ T3764] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 112.556397][ T3706] usb 1-1: USB disconnect, device number 16 [ 112.606045][ T3706] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 112.678855][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 112.833130][ T36] audit: type=1400 audit(1761022244.928:440): avc: denied { watch watch_reads } for pid=3806 comm="syz.5.1312" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 112.840370][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.865339][ T31] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.874725][ T31] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.888828][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.908418][ T31] usb 4-1: config 0 descriptor?? [ 112.934975][ T36] audit: type=1400 audit(1761022245.028:441): avc: denied { execmem } for pid=3812 comm="syz.5.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 112.951570][ T3811] netfs: Couldn't get user pages (rc=-14) [ 112.960450][ T3811] netfs: Zero-sized read [R=2] [ 113.121528][ T3833] netlink: 'syz.5.1324': attribute type 12 has an invalid length. [ 113.261567][ T36] audit: type=1400 audit(1761022245.358:442): avc: denied { setopt } for pid=3834 comm="syz.0.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.468717][ T3843] overlayfs: failed to clone upperpath [ 114.560995][ T3881] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 114.684693][ T3892] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1344'. [ 114.693706][ T3892] 0ªî{X¹¦: renamed from bridge_slave_1 (while UP) [ 114.701422][ T3892] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 115.172518][ T3909] VFS: Mount too revealing [ 115.449650][ T435] usb 4-1: USB disconnect, device number 18 [ 115.853848][ T3947] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.353075][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 116.353094][ T36] audit: type=1326 audit(1761022248.448:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917f8efc9 code=0x7ffc0000 [ 116.409397][ T36] audit: type=1326 audit(1761022248.488:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f1917f8efc9 code=0x7ffc0000 [ 116.448377][ T36] audit: type=1326 audit(1761022248.488:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917f8efc9 code=0x7ffc0000 [ 116.472162][ T36] audit: type=1326 audit(1761022248.488:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f1917f8efc9 code=0x7ffc0000 [ 116.495679][ T36] audit: type=1326 audit(1761022248.488:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917f8efc9 code=0x7ffc0000 [ 116.519446][ T36] audit: type=1326 audit(1761022248.488:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1917f8efc9 code=0x7ffc0000 [ 116.573828][ T36] audit: type=1326 audit(1761022248.488:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917f8efc9 code=0x7ffc0000 [ 116.625471][ T36] audit: type=1326 audit(1761022248.488:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1917f8efc9 code=0x7ffc0000 [ 116.668830][ T36] audit: type=1326 audit(1761022248.488:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917f8efc9 code=0x7ffc0000 [ 116.708886][ T36] audit: type=1326 audit(1761022248.488:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3972 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1917f8d810 code=0x7ffc0000 [ 116.948955][ T3990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'. [ 117.014858][ T3994] fuse: Bad value for 'group_id' [ 117.028838][ T3994] fuse: Bad value for 'group_id' [ 117.039704][ T3994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 117.058943][ T3994] bridge_slave_1: left allmulticast mode [ 117.069204][ T3994] bridge_slave_1: left promiscuous mode [ 117.079206][ T3994] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.097414][ T3994] bridge_slave_0: left allmulticast mode [ 117.110331][ T3994] bridge_slave_0: left promiscuous mode [ 117.121318][ T3994] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.414069][ T4011] overlayfs: failed to clone upperpath [ 117.479602][ T4018] netlink: 'syz.4.1393': attribute type 4 has an invalid length. [ 118.038835][ T435] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 118.108854][ T3706] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 118.190053][ T435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.201106][ T435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.210893][ T435] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.224290][ T435] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.233374][ T435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.242760][ T435] usb 4-1: config 0 descriptor?? [ 118.258863][ T3706] usb 1-1: Using ep0 maxpacket: 32 [ 118.265160][ T3706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.276110][ T3706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.285937][ T3706] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 118.295083][ T3706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.305879][ T3706] usb 1-1: config 0 descriptor?? [ 118.403270][ T4034] overlayfs: failed to clone upperpath [ 118.653268][ T435] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 118.662834][ T435] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 118.717150][ T3706] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x0 [ 118.724385][ T3706] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x0 [ 118.731782][ T3706] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x7 [ 118.738972][ T3706] koneplus 0003:1E7D:2D51.0017: item fetching failed at offset 4/5 [ 118.747038][ T3706] koneplus 0003:1E7D:2D51.0017: parse failed [ 118.753095][ T3706] koneplus 0003:1E7D:2D51.0017: probe with driver koneplus failed with error -22 [ 118.920376][ T31] usb 4-1: USB disconnect, device number 19 [ 118.924917][ T3706] usb 1-1: USB disconnect, device number 17 [ 119.630368][ T4086] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.808837][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 119.970033][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.988273][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.008130][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.017541][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.025770][ T31] usb 1-1: SerialNumber: syz [ 120.243303][ T31] usb 1-1: 0:2 : does not exist [ 120.265243][ T31] usb 1-1: USB disconnect, device number 18 [ 120.752395][ T4118] tipc: Started in network mode [ 120.757366][ T4118] tipc: Node identity 4, cluster identity 4711 [ 120.763613][ T4118] tipc: Node number set to 4 [ 120.785962][ T351] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 120.949929][ T351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.962581][ T351] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.972909][ T351] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.994674][ T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.012244][ T351] usb 4-1: SerialNumber: syz [ 121.235194][ T351] usb 4-1: 0:2 : does not exist [ 121.267257][ T351] usb 4-1: USB disconnect, device number 20 [ 121.888849][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 121.888869][ T36] audit: type=1326 audit(1761022253.978:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.3.1441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90ceb8efc9 code=0x0 [ 122.149857][ T4156] overlayfs: failed to clone upperpath [ 122.168473][ T4159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4159 comm=syz.5.1445 [ 122.660323][ T4167] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.053492][ T36] audit: type=1400 audit(1761022255.148:535): avc: denied { write } for pid=4179 comm="syz.5.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.122029][ T36] audit: type=1400 audit(1761022255.168:536): avc: denied { nlmsg_write } for pid=4179 comm="syz.5.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.587186][ T4187] netlink: 'syz.3.1455': attribute type 27 has an invalid length. [ 123.711598][ T4196] netlink: 'syz.5.1459': attribute type 4 has an invalid length. [ 123.721935][ T4196] netlink: 'syz.5.1459': attribute type 4 has an invalid length. [ 123.828957][ T4206] Zero length message leads to an empty skb [ 123.856958][ T4210] loop5: detected capacity change from 0 to 7 [ 123.868862][ T435] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.039019][ T435] usb 5-1: Using ep0 maxpacket: 16 [ 124.045532][ T435] usb 5-1: config 0 interface 0 has no altsetting 0 [ 124.052358][ T435] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 124.061726][ T435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.079140][ T435] usb 5-1: config 0 descriptor?? [ 124.088976][ T351] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 124.240014][ T351] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 124.249368][ T351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.258260][ T351] usb 1-1: config 0 descriptor?? [ 124.469476][ T351] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 124.499563][ T435] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0018/input/input16 [ 124.512798][ T435] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0018/input/input17 [ 124.527578][ T435] kye 0003:0458:5013.0018: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 124.912017][ T36] audit: type=1400 audit(1761022257.008:537): avc: denied { create } for pid=4238 comm="syz.3.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.931791][ T36] audit: type=1326 audit(1761022257.008:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 124.955315][ T36] audit: type=1326 audit(1761022257.008:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 124.978925][ T36] audit: type=1326 audit(1761022257.008:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 125.002715][ T36] audit: type=1326 audit(1761022257.008:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 125.026580][ T36] audit: type=1326 audit(1761022257.008:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 125.050019][ T36] audit: type=1326 audit(1761022257.018:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz.3.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 125.089292][ T435] usb 5-1: USB disconnect, device number 8 [ 125.153260][ T4248] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.838860][ T435] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 125.989981][ T435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.002726][ T435] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 126.011883][ T435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.019985][ T435] usb 5-1: Product: syz [ 126.024197][ T435] usb 5-1: Manufacturer: syz [ 126.028944][ T435] usb 5-1: SerialNumber: syz [ 126.034611][ T435] usb 5-1: config 0 descriptor?? [ 126.040618][ T435] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 126.047019][ T435] usb 5-1: No valid video chain found. [ 126.241380][ T31] usb 5-1: USB disconnect, device number 9 [ 126.432213][ T4262] kvm: pic: single mode not supported [ 126.432227][ T4262] kvm: pic: level sensitive irq not supported [ 126.438143][ T4262] kvm: pic: single mode not supported [ 126.520560][ T4265] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 126.535919][ T4265] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 126.543894][ T4265] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 126.551841][ T4265] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 126.559778][ T4265] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 126.567627][ T4265] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 126.575513][ T4265] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 126.583380][ T4265] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 126.591392][ T4265] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 126.599387][ T4265] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 126.680424][ T351] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 126.690544][ T351] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 126.701751][ T351] asix 1-1:0.0: probe with driver asix failed with error -71 [ 126.710622][ T351] usb 1-1: USB disconnect, device number 19 [ 126.723915][ T4269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.724496][ T4269] rust_binder: 4269 RLIMIT_NICE not set [ 127.066023][ T4301] rust_binder: Failed copying into alloc: EFAULT [ 127.071680][ T4301] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 127.078155][ T4301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 127.086662][ T4301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:873 [ 127.190094][ T351] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 127.206761][ T4310] syzkaller1: entered promiscuous mode [ 127.212528][ T4310] syzkaller1: entered allmulticast mode [ 127.370718][ T351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.381949][ T351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.394063][ T351] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.407674][ T351] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.418289][ T351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.431405][ T351] usb 5-1: config 0 descriptor?? [ 127.494273][ T4323] netlink: 'syz.0.1502': attribute type 27 has an invalid length. [ 127.545342][ T4323] bridge0: port 2(30ªî{X¹¦) entered disabled state [ 127.552292][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.865189][ T351] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 127.901068][ T351] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 127.940154][ T351] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 128.269990][ T351] usb 5-1: USB disconnect, device number 10 [ 128.433264][ T4346] overlayfs: failed to clone upperpath [ 128.568008][ T4356] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaa [ 129.057702][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 129.057724][ T36] audit: type=1400 audit(1761022261.148:580): avc: denied { create } for pid=4378 comm="syz.5.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 129.179177][ T435] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 129.187440][ T435] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.383497][ T36] audit: type=1400 audit(1761022261.478:581): avc: denied { getopt } for pid=4392 comm="syz.4.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.309748][ T4419] netlink: 'syz.5.1541': attribute type 27 has an invalid length. [ 130.340895][ T4419] veth0_vlan: left promiscuous mode [ 130.346545][ T4419] veth0_vlan: entered promiscuous mode [ 130.354136][ T4419] veth1_macvtap: left promiscuous mode [ 130.367209][ T4419] veth1_macvtap: entered promiscuous mode [ 130.373092][ T4419] veth1_macvtap: entered allmulticast mode [ 130.381641][ T2745] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.388717][ T2745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.396863][ T2745] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.403966][ T2745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.431788][ T2745] bridge0: port 3(macsec0) entered blocking state [ 130.438308][ T2745] bridge0: port 3(macsec0) entered forwarding state [ 130.538820][ T36] audit: type=1400 audit(1761022262.628:582): avc: denied { ioctl } for pid=4429 comm="syz.4.1545" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.065045][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1555'. [ 131.094055][ T4458] can0: slcan on ttyS3. [ 131.358858][ T435] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 131.508823][ T435] usb 5-1: Using ep0 maxpacket: 32 [ 131.520737][ T435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.543916][ T435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.563920][ T435] usb 5-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 131.583181][ T435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.602873][ T435] usb 5-1: config 0 descriptor?? [ 131.804132][ T4506] tipc: Enabled bearer , priority 10 [ 132.059672][ T4458] can0 (unregistered): slcan off ttyS3. [ 132.075396][ T435] usbhid 5-1:0.0: can't add hid device: -71 [ 132.091628][ T435] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.111444][ T435] usb 5-1: USB disconnect, device number 11 [ 132.928942][ T3706] tipc: Node number set to 2010793648 [ 133.019138][ T435] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 133.169969][ T435] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 133.178297][ T435] usb 4-1: config 0 has no interface number 0 [ 133.185876][ T435] usb 4-1: config 0 interface 41 has no altsetting 0 [ 133.194609][ T435] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 133.204068][ T435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.234797][ T435] usb 4-1: Product: syz [ 133.239076][ T435] usb 4-1: Manufacturer: syz [ 133.243700][ T435] usb 4-1: SerialNumber: syz [ 133.257163][ T435] usb 4-1: config 0 descriptor?? [ 134.066055][ T435] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 134.578831][ T36] audit: type=1326 audit(1761022266.598:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.5.1588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe68cf8efc9 code=0x0 [ 134.631132][ T36] audit: type=1326 audit(1761022266.728:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 134.655450][ T36] audit: type=1326 audit(1761022266.728:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 134.695813][ T36] audit: type=1326 audit(1761022266.748:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 134.719331][ T36] audit: type=1326 audit(1761022266.748:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 134.743076][ T36] audit: type=1326 audit(1761022266.748:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 134.766551][ T36] audit: type=1326 audit(1761022266.748:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 134.790253][ T36] audit: type=1326 audit(1761022266.778:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 134.814065][ T36] audit: type=1326 audit(1761022266.778:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 134.837665][ T36] audit: type=1326 audit(1761022266.778:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.0.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 135.149386][ T435] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 135.160138][ T435] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 135.170057][ T435] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 135.180170][ T435] usb 4-1: USB disconnect, device number 21 [ 135.224957][ T4605] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaaa [ 135.299479][ T4612] vlan1: entered promiscuous mode [ 135.304880][ T4612] vlan1: entered allmulticast mode [ 135.314303][ T4612] veth0_vlan: entered allmulticast mode [ 135.395223][ T4618] overlayfs: failed to clone upperpath [ 135.718880][ T347] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 136.002026][ T347] usb 5-1: Using ep0 maxpacket: 16 [ 136.033473][ T347] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 136.041761][ T347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.051944][ T347] usb 5-1: config 0 has no interface number 0 [ 136.058058][ T347] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 136.069903][ T347] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 136.081435][ T347] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 136.092381][ T347] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 136.121948][ T347] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 136.135231][ T347] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 136.144625][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.157083][ T347] usb 5-1: config 0 descriptor?? [ 136.162992][ T4615] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 136.171993][ T4633] GUP no longer grows the stack in syz.3.1605 (4633): 200000001000-200000c01000 (200000000000) [ 136.182535][ T4633] CPU: 1 UID: 0 PID: 4633 Comm: syz.3.1605 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 136.182571][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.182596][ T4633] Call Trace: [ 136.182604][ T4633] [ 136.182615][ T4633] __dump_stack+0x21/0x30 [ 136.182655][ T4633] dump_stack_lvl+0x10c/0x190 [ 136.182687][ T4633] ? __cfi_dump_stack_lvl+0x10/0x10 [ 136.182713][ T4633] ? find_vma+0xcd/0x110 [ 136.182730][ T4633] dump_stack+0x19/0x20 [ 136.182751][ T4633] __get_user_pages+0x1e34/0x22d0 [ 136.182772][ T4633] ? __kasan_check_write+0x18/0x20 [ 136.182804][ T4633] ? down_read_killable+0x79/0xf0 [ 136.182822][ T4633] ? populate_vma_page_range+0x230/0x230 [ 136.182843][ T4633] ? kernel_text_address+0xa9/0xe0 [ 136.182865][ T4633] ? unwind_get_return_address+0x51/0x90 [ 136.182884][ T4633] __gup_longterm_locked+0xcb1/0x1580 [ 136.182908][ T4633] ? stack_depot_save_flags+0x38/0x800 [ 136.182927][ T4633] gup_fast_fallback+0x12ae/0x14a0 [ 136.182948][ T4633] ? kasan_save_track+0x3e/0x80 [ 136.182964][ T4633] ? __kmalloc_cache_noprof+0x24c/0x490 [ 136.182979][ T4633] ? futex_lock_pi+0x77a/0xa10 [ 136.183001][ T4633] ? get_user_pages_fast_only+0xc0/0xc0 [ 136.183024][ T4633] get_user_pages_fast+0x73/0xb0 [ 136.183044][ T4633] get_futex_key+0x24d/0x930 [ 136.183070][ T4633] ? __cfi_get_futex_key+0x10/0x10 [ 136.183085][ T4633] ? futex_lock_pi+0x77a/0xa10 [ 136.183104][ T4633] ? futex_setup_timer+0xb4/0xd0 [ 136.183118][ T4633] futex_lock_pi+0x1c0/0xa10 [ 136.183137][ T4633] ? futex_unqueue+0x136/0x160 [ 136.183153][ T4633] ? __cfi_futex_lock_pi+0x10/0x10 [ 136.183173][ T4633] ? __cfi_futex_wake_mark+0x10/0x10 [ 136.183194][ T4633] ? futex_setup_timer+0xb4/0xd0 [ 136.183209][ T4633] ? __cfi_futex_wake_mark+0x10/0x10 [ 136.183229][ T4633] ? __seccomp_filter+0x433/0x1a70 [ 136.183245][ T4633] do_futex+0x25c/0x500 [ 136.183261][ T4633] ? __cfi_do_futex+0x10/0x10 [ 136.183277][ T4633] ? vm_mmap_pgoff+0x145/0x4e0 [ 136.183292][ T4633] __se_sys_futex+0x28f/0x300 [ 136.183311][ T4633] ? __x64_sys_futex+0x110/0x110 [ 136.183330][ T4633] __x64_sys_futex+0xe9/0x110 [ 136.183347][ T4633] x64_sys_call+0x227f/0x2ee0 [ 136.183371][ T4633] do_syscall_64+0x58/0xf0 [ 136.183391][ T4633] ? clear_bhb_loop+0x50/0xa0 [ 136.183409][ T4633] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 136.183425][ T4633] RIP: 0033:0x7f90ceb8efc9 [ 136.183445][ T4633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.183459][ T4633] RSP: 002b:00007f90cfa81038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 136.183490][ T4633] RAX: ffffffffffffffda RBX: 00007f90cede5fa0 RCX: 00007f90ceb8efc9 [ 136.183512][ T4633] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 136.183527][ T4633] RBP: 00007f90cec11f91 R08: 0000000000000000 R09: 0000000000000002 [ 136.183543][ T4633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.183559][ T4633] R13: 00007f90cede6038 R14: 00007f90cede5fa0 R15: 00007ffe8c3e3c68 [ 136.183574][ T4633] [ 136.497852][ T347] usb 5-1: USB disconnect, device number 12 [ 136.647626][ T4650] bridge0: port 3(ip6gretap0) entered blocking state [ 136.657256][ T4650] bridge0: port 3(ip6gretap0) entered disabled state [ 136.664933][ T4650] ip6gretap0: entered allmulticast mode [ 136.672811][ T4650] ip6gretap0: entered promiscuous mode [ 136.678621][ T4650] bridge0: port 3(ip6gretap0) entered blocking state [ 136.685389][ T4650] bridge0: port 3(ip6gretap0) entered forwarding state [ 137.623369][ T4694] fuse: Bad value for 'fd' [ 137.637671][ T4694] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 137.656661][ T4694] overlayfs: failed to set xattr on upper [ 137.673014][ T4694] overlayfs: ...falling back to redirect_dir=nofollow. [ 137.689290][ T4694] overlayfs: ...falling back to metacopy=off. [ 137.706040][ T4694] overlayfs: ...falling back to uuid=null. [ 138.248866][ T347] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 138.314496][ T4735] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 138.388848][ T347] usb 5-1: device descriptor read/64, error -71 [ 138.628869][ T347] usb 5-1: device descriptor read/64, error -71 [ 138.730031][ T4754] incfs: ino conflict with backing FS 1 [ 138.868849][ T347] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 138.998838][ T347] usb 5-1: device descriptor read/64, error -71 [ 139.230843][ T4771] kvm: emulating exchange as write [ 139.248879][ T347] usb 5-1: device descriptor read/64, error -71 [ 139.368860][ T347] usb usb5-port1: attempt power cycle [ 139.608036][ T4786] /dev/loop0: Can't lookup blockdev [ 139.708861][ T347] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 139.729846][ T347] usb 5-1: device descriptor read/8, error -71 [ 139.739838][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 139.862852][ T347] usb 5-1: device descriptor read/8, error -71 [ 139.900872][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 139.911045][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 139.922692][ T10] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 139.934102][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.942472][ T10] usb 4-1: Product: syz [ 139.946721][ T10] usb 4-1: Manufacturer: syz [ 139.951485][ T10] usb 4-1: SerialNumber: syz [ 139.956922][ T10] usb 4-1: config 0 descriptor?? [ 139.962258][ T4782] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 139.969496][ T4782] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 140.108858][ T347] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 140.129907][ T347] usb 5-1: device descriptor read/8, error -71 [ 140.178918][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.187581][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.196066][ T4782] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 140.203458][ T4782] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 140.259922][ T347] usb 5-1: device descriptor read/8, error -71 [ 140.369041][ T347] usb usb5-port1: unable to enumerate USB device [ 140.611899][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 141.217911][ T10] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 141.230197][ T10] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, ce:f2:c4:49:71:01 [ 141.246870][ T10] usb 4-1: USB disconnect, device number 22 [ 141.259366][ T10] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 141.347869][ T4824] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1678'. [ 141.358448][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 141.420785][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 141.420807][ T36] audit: type=1400 audit(1761022273.518:616): avc: denied { bpf } for pid=4829 comm="syz.0.1681" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.559537][ T4838] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4838 comm=syz.0.1685 [ 141.645680][ T36] audit: type=1400 audit(1761022273.738:617): avc: denied { bind } for pid=4841 comm="syz.0.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.992323][ T36] audit: type=1400 audit(1761022274.088:618): avc: denied { unmount } for pid=4859 comm="syz.0.1695" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 142.082606][ T36] audit: type=1400 audit(1761022274.178:619): avc: denied { ioctl } for pid=4863 comm="syz.4.1696" path="socket:[33365]" dev="sockfs" ino=33365 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.193513][ T36] audit: type=1400 audit(1761022274.288:620): avc: denied { rename } for pid=4866 comm="syz.4.1697" name="file5" dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.267317][ T4862] veth0_virt_wifi: entered allmulticast mode [ 142.322622][ T36] audit: type=1400 audit(1761022274.418:621): avc: denied { write } for pid=4874 comm="syz.4.1700" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 142.322633][ T4875] random: crng reseeded on system resumption [ 142.586117][ T36] audit: type=1400 audit(1761022274.678:622): avc: denied { read } for pid=4887 comm="syz.4.1706" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.610777][ T36] audit: type=1400 audit(1761022274.708:623): avc: denied { open } for pid=4887 comm="syz.4.1706" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.634598][ T36] audit: type=1400 audit(1761022274.708:624): avc: denied { ioctl } for pid=4887 comm="syz.4.1706" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.701949][ T4859] veth0_virt_wifi: left allmulticast mode [ 142.781877][ T4901] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1711'. [ 142.785113][ T4903] IPv6: syztnl0: Disabled Multicast RS [ 142.791010][ T36] audit: type=1400 audit(1761022274.878:625): avc: denied { nlmsg_read } for pid=4900 comm="syz.3.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.829661][ T4907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1714'. [ 142.834335][ T4909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:984 [ 142.852896][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 142.887490][ T4913] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1717'. [ 142.896537][ T4913] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1717'. [ 142.905718][ T4913] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 143.011712][ T4928] netlink: 'syz.0.1724': attribute type 6 has an invalid length. [ 143.019842][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 143.040283][ T4930] ip6gretap0: mtu less than device minimum [ 143.958938][ T347] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 144.109891][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.119765][ T347] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 144.128846][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.137537][ T347] usb 5-1: config 0 descriptor?? [ 144.148831][ T31] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 144.300060][ T31] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 144.308336][ T31] usb 4-1: config 1 has no interface number 0 [ 144.314644][ T31] usb 4-1: config 1 interface 105 has no altsetting 0 [ 144.322953][ T31] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 144.332167][ T31] usb 4-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 144.340759][ T31] usb 4-1: Product: syz [ 144.345036][ T31] usb 4-1: Manufacturer: syz [ 144.350136][ T31] usb 4-1: SerialNumber: syz [ 144.554418][ T347] logitech-djreceiver 0003:046D:C71F.001B: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 144.752666][ T3706] usb 5-1: USB disconnect, device number 17 [ 144.970644][ T31] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 144.981656][ T31] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 144.990644][ T31] usb 4-1: USB disconnect, device number 23 [ 145.495361][ T5076] raw_sendmsg: syz.3.1789 forgot to set AF_INET. Fix it! [ 145.499169][ T435] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 145.519696][ T5078] tipc: Enabling of bearer rejected, failed to enable media [ 145.668819][ T435] usb 5-1: Using ep0 maxpacket: 32 [ 145.675135][ T435] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.685552][ T435] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.694770][ T435] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 145.706051][ T435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.715306][ T435] usb 5-1: config 0 descriptor?? [ 145.858881][ T351] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 145.926315][ T31] usb 5-1: USB disconnect, device number 18 [ 146.010276][ T351] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.018994][ T351] usb 4-1: config 64 has an invalid interface number: 43 but max is 0 [ 146.027298][ T351] usb 4-1: config 64 has no interface number 0 [ 146.036602][ T351] usb 4-1: config 64 interface 43 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 146.048167][ T351] usb 4-1: config 64 interface 43 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 146.059924][ T351] usb 4-1: config 64 interface 43 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 146.070426][ T351] usb 4-1: config 64 interface 43 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 146.081615][ T351] usb 4-1: config 64 interface 43 has no altsetting 0 [ 146.111475][ T351] usb 4-1: string descriptor 0 read error: -22 [ 146.127987][ T351] usb 4-1: New USB device found, idVendor=0af0, idProduct=8120, bcdDevice=5e.47 [ 146.152005][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.162001][ T5092] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.170153][ T351] usbhid 4-1:64.43: couldn't find an input interrupt endpoint [ 146.379105][ T3706] usb 4-1: USB disconnect, device number 24 [ 146.446566][ T5140] netlink: 'syz.4.1821': attribute type 1 has an invalid length. [ 146.454577][ T5140] netlink: 'syz.4.1821': attribute type 2 has an invalid length. [ 146.735806][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 146.735824][ T36] audit: type=1400 audit(1761022278.828:630): avc: denied { shutdown } for pid=5159 comm="syz.5.1831" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.788928][ T351] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 146.910746][ T36] audit: type=1400 audit(1761022279.008:631): avc: denied { ioctl } for pid=5167 comm="syz.3.1835" path="socket:[33785]" dev="sockfs" ino=33785 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.949940][ T351] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 146.960234][ T351] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 146.971632][ T351] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 146.980872][ T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.988916][ T351] usb 5-1: Product: syz [ 146.993149][ T351] usb 5-1: Manufacturer: syz [ 146.997763][ T351] usb 5-1: SerialNumber: syz [ 147.003181][ T351] usb 5-1: config 0 descriptor?? [ 147.008806][ T5152] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.016096][ T5152] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.224365][ T5152] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.231771][ T5152] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.286270][ T5174] tipc: Started in network mode [ 147.291267][ T5174] tipc: Node identity 7ff, cluster identity 4711 [ 147.297703][ T5174] tipc: Node number set to 2047 [ 147.449532][ T351] Error reading MAC address [ 147.457086][ T351] usb 5-1: USB disconnect, device number 19 [ 147.506915][ T5193] IPv4: Oversized IP packet from 127.0.0.1 [ 147.512933][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 147.533565][ T5195] 9pnet_fd: Insufficient options for proto=fd [ 147.691757][ T5222] overlayfs: failed to clone lowerpath [ 147.854591][ T5239] netlink: 'syz.0.1866': attribute type 27 has an invalid length. [ 147.882412][ T5239] veth0_vlan: left promiscuous mode [ 147.887828][ T5239] veth0_vlan: entered promiscuous mode [ 147.894979][ T5239] veth1_macvtap: left promiscuous mode [ 147.901479][ T5239] veth1_macvtap: entered promiscuous mode [ 147.912366][ T2717] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.919468][ T2717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.927377][ T2717] bridge0: port 2(30ªî{X¹¦) entered blocking state [ 147.934133][ T2717] bridge0: port 2(30ªî{X¹¦) entered forwarding state [ 148.288867][ T351] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 148.438820][ T351] usb 4-1: Using ep0 maxpacket: 8 [ 148.445087][ T351] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 148.453487][ T351] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 148.461613][ T351] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 148.470779][ T351] usb 4-1: config 0 has no interface number 0 [ 148.476900][ T351] usb 4-1: config 0 has no interface number 1 [ 148.483217][ T351] usb 4-1: config 0 interface 52 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 148.494248][ T351] usb 4-1: config 0 interface 52 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 148.505297][ T351] usb 4-1: config 0 interface 52 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 148.516001][ T351] usb 4-1: config 0 interface 52 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.526891][ T351] usb 4-1: config 0 interface 52 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 148.540189][ T351] usb 4-1: too many endpoints for config 0 interface 48 altsetting 97: 202, using maximum allowed: 30 [ 148.551244][ T351] usb 4-1: config 0 interface 48 altsetting 97 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 148.562605][ T351] usb 4-1: config 0 interface 48 altsetting 97 has a duplicate endpoint with address 0xD, skipping [ 148.573510][ T351] usb 4-1: config 0 interface 48 altsetting 97 has 2 endpoint descriptors, different from the interface descriptor's value: 202 [ 148.586810][ T351] usb 4-1: config 0 interface 48 has no altsetting 0 [ 148.595100][ T351] usb 4-1: New USB device found, idVendor=5050, idProduct=8004, bcdDevice= 1.b3 [ 148.604226][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.612257][ T351] usb 4-1: Product: syz [ 148.616415][ T351] usb 4-1: Manufacturer: syz [ 148.621277][ T351] usb 4-1: SerialNumber: syz [ 148.626556][ T351] usb 4-1: config 0 descriptor?? [ 148.633361][ T351] ftdi_sio 4-1:0.52: FTDI USB Serial Device converter detected [ 148.641406][ T351] usb 4-1: Detected SIO [ 148.646181][ T351] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 148.786706][ T5277] netlink: 'syz.5.1886': attribute type 27 has an invalid length. [ 148.800593][ T5277] vlan1: left promiscuous mode [ 148.805859][ T5277] vlan1: left allmulticast mode [ 148.810920][ T5277] veth0_vlan: left allmulticast mode [ 148.847976][ T351] ftdi_sio 4-1:0.48: FTDI USB Serial Device converter detected [ 148.869845][ T351] usb 4-1: Detected SIO [ 148.884066][ T351] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 148.910684][ T351] usb 4-1: USB disconnect, device number 25 [ 148.926359][ T2745] tipc: Left network mode [ 148.941587][ T351] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.952693][ T2745] veth1_macvtap: left promiscuous mode [ 148.958263][ T2745] veth0_vlan: left promiscuous mode [ 148.964836][ T351] ftdi_sio 4-1:0.52: device disconnected [ 148.988844][ T36] audit: type=1400 audit(1761022281.078:632): avc: denied { append } for pid=5284 comm="syz.5.1890" name="file0" dev="tmpfs" ino=2083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.016128][ T351] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 149.038277][ T36] audit: type=1400 audit(1761022281.078:633): avc: denied { open } for pid=5284 comm="syz.5.1890" path="/372/file0" dev="tmpfs" ino=2083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.049095][ T351] ftdi_sio 4-1:0.48: device disconnected [ 149.173602][ T36] audit: type=1326 audit(1761022281.268:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 149.226689][ T36] audit: type=1326 audit(1761022281.268:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 149.281300][ T36] audit: type=1326 audit(1761022281.298:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 149.334989][ T36] audit: type=1326 audit(1761022281.308:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 149.379627][ T36] audit: type=1326 audit(1761022281.308:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 149.420658][ T36] audit: type=1326 audit(1761022281.308:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 149.601952][ T5300] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.625423][ T5300] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.651045][ T5300] bridge_slave_0: entered allmulticast mode [ 149.665324][ T5300] bridge_slave_0: entered promiscuous mode [ 149.691280][ T5300] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.710742][ T5300] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.735830][ T5300] bridge_slave_1: entered allmulticast mode [ 149.760405][ T5300] bridge_slave_1: entered promiscuous mode [ 150.033489][ T2704] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.040605][ T2704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.061284][ T2745] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.068362][ T2745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.122999][ T5300] veth0_vlan: entered promiscuous mode [ 150.150553][ T5300] veth1_macvtap: entered promiscuous mode [ 150.268717][ T5321] netlink: 'syz.3.1901': attribute type 4 has an invalid length. [ 150.378918][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 150.728910][ T351] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 150.889363][ T351] usb 4-1: Using ep0 maxpacket: 32 [ 150.895819][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.907082][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.917388][ T351] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 150.926700][ T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.941529][ T351] usb 4-1: config 0 descriptor?? [ 151.309002][ T5359] netlink: 'syz.0.1924': attribute type 4 has an invalid length. [ 151.352889][ T351] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x0 [ 151.356676][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1916'. [ 151.365596][ T351] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x0 [ 151.370512][ T5363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 151.378456][ T351] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x7 [ 151.400520][ T351] koneplus 0003:1E7D:2D51.001C: item fetching failed at offset 4/5 [ 151.408757][ T351] koneplus 0003:1E7D:2D51.001C: parse failed [ 151.415570][ T351] koneplus 0003:1E7D:2D51.001C: probe with driver koneplus failed with error -22 [ 151.600905][ T10] usb 4-1: USB disconnect, device number 26 [ 151.817085][ T5380] overlayfs: failed to clone upperpath [ 152.400790][ T5393] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.515234][ T5398] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.101317][ T5407] overlayfs: failed to clone upperpath [ 153.919714][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 154.036898][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 154.036917][ T36] audit: type=1326 audit(1761022286.128:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 154.086435][ T36] audit: type=1326 audit(1761022286.148:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 154.109914][ T10] usb 7-1: config index 0 descriptor too short (expected 70, got 36) [ 154.118041][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.126245][ T36] audit: type=1326 audit(1761022286.148:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 154.132549][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.153327][ T36] audit: type=1326 audit(1761022286.148:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 154.185907][ T36] audit: type=1326 audit(1761022286.148:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 154.185997][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.209394][ T36] audit: type=1326 audit(1761022286.148:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 154.225062][ T10] usb 7-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 154.249210][ T36] audit: type=1326 audit(1761022286.148:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 154.254940][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.277910][ T36] audit: type=1326 audit(1761022286.148:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 154.299278][ T10] usb 7-1: config 0 descriptor?? [ 154.317938][ T36] audit: type=1326 audit(1761022286.148:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 154.341833][ T36] audit: type=1326 audit(1761022286.168:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b8efc9 code=0x7ffc0000 [ 154.731696][ T10] pantherlord 0003:0810:0002.001D: unknown main item tag 0x0 [ 154.739266][ T10] pantherlord 0003:0810:0002.001D: unknown main item tag 0x0 [ 154.746696][ T10] pantherlord 0003:0810:0002.001D: unknown main item tag 0x0 [ 154.754205][ T10] pantherlord 0003:0810:0002.001D: unknown main item tag 0x0 [ 154.761672][ T10] pantherlord 0003:0810:0002.001D: unknown main item tag 0x0 [ 154.769111][ T10] pantherlord 0003:0810:0002.001D: unknown main item tag 0x0 [ 154.776524][ T10] pantherlord 0003:0810:0002.001D: unknown main item tag 0x0 [ 154.784703][ T10] pantherlord 0003:0810:0002.001D: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.6-1/input0 [ 154.796340][ T10] pantherlord 0003:0810:0002.001D: no output reports found [ 154.975836][ T10] usb 7-1: USB disconnect, device number 2 [ 154.981804][ T5495] netlink: 'syz.3.1971': attribute type 27 has an invalid length. [ 155.654440][ T5518] tipc: Cannot configure node identity twice [ 155.675481][ T5521] netlink: 'syz.3.1980': attribute type 4 has an invalid length. [ 155.690519][ T5521] netlink: 'syz.3.1980': attribute type 4 has an invalid length. [ 157.766620][ T5555] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 157.873341][ T5558] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.873931][ T5558] rust_binder: 5558 RLIMIT_NICE not set [ 157.912281][ T5560] kvm: pic: single mode not supported [ 157.917860][ T5560] kvm: pic: level sensitive irq not supported [ 157.923792][ T5560] kvm: pic: single mode not supported [ 158.848816][ T10] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 159.020320][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 159.029791][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.039666][ T10] usb 4-1: config 0 descriptor?? [ 159.250583][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 159.531039][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 159.531059][ T36] audit: type=1400 audit(1761022291.628:717): avc: denied { remove_name } for pid=5608 comm="syz.5.2013" name="core" dev="incremental-fs" ino=33996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.560952][ T36] audit: type=1400 audit(1761022291.628:718): avc: denied { unlink } for pid=5608 comm="syz.5.2013" name="core" dev="incremental-fs" ino=33996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 160.085484][ T36] audit: type=1326 audit(1761022292.178:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5620 comm="syz.0.2018" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c02b8efc9 code=0x0 [ 160.272247][ T5633] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaa [ 160.298666][ T5635] netlink: 'syz.6.2025': attribute type 27 has an invalid length. [ 160.659050][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 160.820112][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.831151][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.841035][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.854096][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.863294][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.875982][ T9] usb 7-1: config 0 descriptor?? [ 161.304047][ T9] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xd [ 161.320004][ T9] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 161.337142][ T9] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 161.481048][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 161.492593][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 161.503997][ T10] asix 4-1:0.0: probe with driver asix failed with error -71 [ 161.516219][ T10] usb 4-1: USB disconnect, device number 27 [ 161.562485][ T351] usb 7-1: USB disconnect, device number 3 [ 162.226108][ T36] audit: type=1326 audit(1761022294.318:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.6.2031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8f63d85e67 code=0x0 [ 162.328824][ T9] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 162.480136][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 162.489340][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.498243][ T9] usb 4-1: config 0 descriptor?? [ 162.713919][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 162.918370][ T5669] netlink: 'syz.5.2038': attribute type 27 has an invalid length. [ 163.528882][ T435] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 163.690059][ T435] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.702458][ T435] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 163.711582][ T435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.719675][ T435] usb 7-1: Product: syz [ 163.723864][ T435] usb 7-1: Manufacturer: syz [ 163.728478][ T435] usb 7-1: SerialNumber: syz [ 163.733895][ T435] usb 7-1: config 0 descriptor?? [ 163.740610][ T435] usb 7-1: Found UVC 0.00 device syz (18ec:3288) [ 163.747045][ T435] usb 7-1: No valid video chain found. [ 163.933707][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 163.943886][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 163.947125][ T347] usb 7-1: USB disconnect, device number 4 [ 163.954192][ T9] asix 4-1:0.0: probe with driver asix failed with error -71 [ 163.969926][ T9] usb 4-1: USB disconnect, device number 28 [ 164.485251][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2057'. [ 164.666387][ T5728] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaa [ 166.579476][ T5792] netlink: 'syz.6.2091': attribute type 27 has an invalid length. [ 166.682937][ T5811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2098'. [ 167.401096][ T5829] netlink: 'syz.3.2104': attribute type 27 has an invalid length. [ 167.602116][ T36] audit: type=1326 audit(1761022299.698:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 167.652223][ T36] audit: type=1326 audit(1761022299.698:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 167.698389][ T36] audit: type=1326 audit(1761022299.698:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 167.745107][ T36] audit: type=1326 audit(1761022299.698:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 167.817419][ T36] audit: type=1326 audit(1761022299.698:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 167.888809][ T36] audit: type=1326 audit(1761022299.698:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 167.949032][ T36] audit: type=1326 audit(1761022299.698:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 167.995375][ T36] audit: type=1326 audit(1761022299.698:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 168.048917][ T36] audit: type=1326 audit(1761022299.698:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 168.084120][ T36] audit: type=1326 audit(1761022299.698:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5840 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90ceb8efc9 code=0x7ffc0000 [ 169.995537][ T5859] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaaa [ 170.271148][ T5863] netlink: 'syz.0.2117': attribute type 27 has an invalid length. [ 170.289095][ T5865] vlan1: entered promiscuous mode [ 170.294354][ T5865] vlan1: entered allmulticast mode [ 170.300941][ T5865] veth0_vlan: entered allmulticast mode [ 170.334817][ T5865] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 171.552519][ T5903] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaaa [ 171.601651][ T5911] overlayfs: failed to clone upperpath [ 175.719333][ T5948] vlan1: entered promiscuous mode [ 175.736131][ T5948] vlan1: entered allmulticast mode [ 175.748809][ T5948] veth0_vlan: entered allmulticast mode [ 175.785354][ T5948] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 175.817080][ T5953] vlan1: entered promiscuous mode [ 175.823399][ T5953] vlan1: entered allmulticast mode [ 175.828833][ T5953] veth0_vlan: entered allmulticast mode [ 175.837122][ T5955] overlayfs: failed to clone upperpath [ 175.867414][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 175.867436][ T36] audit: type=1326 audit(1761022307.958:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.5.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 175.872961][ T5953] overlay: filesystem on ./bus not supported as upperdir [ 175.878832][ T36] audit: type=1326 audit(1761022307.958:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.5.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 175.934849][ T36] audit: type=1326 audit(1761022307.998:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.5.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 175.980286][ T36] audit: type=1326 audit(1761022307.998:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.5.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 176.004449][ T36] audit: type=1326 audit(1761022307.998:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.5.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 176.027993][ T36] audit: type=1326 audit(1761022307.998:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.5.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 176.051272][ T36] audit: type=1326 audit(1761022308.008:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.5.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 176.074854][ T36] audit: type=1326 audit(1761022308.008:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.5.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 176.098481][ T36] audit: type=1326 audit(1761022308.008:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.5.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 176.121886][ T36] audit: type=1326 audit(1761022308.008:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.5.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68cf8efc9 code=0x7ffc0000 [ 176.586605][ T5979] bridge0: port 4(ip6gretap0) entered blocking state [ 176.593445][ T5979] bridge0: port 4(ip6gretap0) entered disabled state [ 176.597604][ T5975] overlay: filesystem on ./bus not supported as upperdir [ 176.607853][ T5979] ip6gretap0: entered allmulticast mode [ 176.614190][ T5979] ip6gretap0: entered promiscuous mode [ 176.619922][ T5979] bridge0: port 4(ip6gretap0) entered blocking state [ 176.626668][ T5979] bridge0: port 4(ip6gretap0) entered listening state [ 176.833656][ T5982] overlayfs: failed to clone upperpath [ 176.892044][ T5993] fuse: Bad value for 'fd' [ 176.910645][ T5993] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 176.929220][ T5993] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 176.954957][ T5993] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 176.975467][ T5993] overlayfs: failed to set xattr on upper [ 176.981322][ T5993] overlayfs: ...falling back to redirect_dir=nofollow. [ 176.992964][ T5993] overlayfs: ...falling back to metacopy=off. [ 176.999373][ T5993] overlayfs: ...falling back to uuid=null. [ 177.033410][ T6006] incfs: ino conflict with backing FS 1 [ 177.121460][ T6014] overlay: filesystem on ./bus not supported as upperdir [ 177.312311][ T6029] fuse: Bad value for 'fd' [ 177.324275][ T6029] overlayfs: upper fs does not support tmpfile. [ 177.768189][ T6064] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6064 comm=syz.5.2212 [ 177.952992][ T6089] netlink: 'syz.6.2207': attribute type 27 has an invalid length. [ 177.969141][ T6089] vlan1: left promiscuous mode [ 177.974026][ T6089] vlan1: left allmulticast mode [ 177.979044][ T6089] veth0_vlan: left allmulticast mode [ 178.628434][ T6121] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6121 comm=syz.3.2221 [ 178.916706][ T6194] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2266'. [ 178.942121][ T6201] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2269'. [ 178.955640][ T6201] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2269'. [ 178.991269][ T6201] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 179.211754][ T6233] netlink: 'syz.5.2283': attribute type 6 has an invalid length. [ 179.222178][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'. [ 179.231238][ T6232] ip6gretap0: mtu less than device minimum [ 179.298943][ T6247] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2292'. [ 179.320387][ T6247] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2292'. [ 179.333492][ T6247] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 179.393660][ T6265] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2298'. [ 179.769332][ T6320] netlink: 'syz.6.2323': attribute type 6 has an invalid length. [ 179.778887][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2323'. [ 180.283649][ T6327] veth0_virt_wifi: entered allmulticast mode [ 180.537629][ T6310] veth0_virt_wifi: left allmulticast mode [ 181.267664][ T6384] ip6gretap0: mtu less than device minimum [ 181.438902][ T6396] tipc: Enabling of bearer rejected, failed to enable media [ 181.520459][ T6378] veth0_virt_wifi: entered allmulticast mode [ 181.803880][ T6372] veth0_virt_wifi: left allmulticast mode [ 183.875996][ T6590] tipc: Started in network mode [ 183.884270][ T6590] tipc: Node identity _0000000, cluster identity 4711 [ 183.894374][ T6590] tipc: Enabling of bearer rejected, failed to enable media [ 186.466045][ T6672] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 186.481581][ T6672] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 186.496500][ T6672] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 186.506901][ T6672] overlayfs: failed to set xattr on upper [ 186.535021][ T6672] overlayfs: ...falling back to uuid=null. [ 187.991031][ T6744] ------------[ cut here ]------------ [ 187.996571][ T6744] WARNING: CPU: 1 PID: 6744 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 188.004676][ T6744] Modules linked in: [ 188.008621][ T6744] CPU: 1 UID: 0 PID: 6744 Comm: syz.5.2506 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 188.020220][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 188.030348][ T6744] RIP: 0010:drop_nlink+0xce/0x110 [ 188.035607][ T6744] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 188.055335][ T6744] RSP: 0018:ffffc90003ff71f0 EFLAGS: 00010283 [ 188.061719][ T6744] RAX: ffffffff81ee1a7e RBX: ffff888110e32080 RCX: 0000000000080000 [ 188.069757][ T6744] RDX: ffffc90002214000 RSI: 00000000000009fd RDI: 00000000000009fe [ 188.077763][ T6744] RBP: ffffc90003ff7218 R08: 0000000000000003 R09: 0000000000000004 [ 188.085964][ T6744] R10: dffffc0000000000 R11: fffff520007fee34 R12: dffffc0000000000 [ 188.094028][ T6744] R13: 1ffff110221c6419 R14: ffff888110e320c8 R15: 0000000000000000 [ 188.102062][ T6744] FS: 00007fe68de3b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 188.111075][ T6744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.117689][ T6744] CR2: 0000200000001000 CR3: 000000011cde2000 CR4: 00000000003526b0 [ 188.125724][ T6744] Call Trace: [ 188.129052][ T6744] [ 188.132004][ T6744] simple_rmdir+0x153/0x260 [ 188.136544][ T6744] vfs_rmdir+0x3dd/0x560 [ 188.141057][ T6744] dir_rmdir+0x236/0x320 [ 188.145335][ T6744] ? __cfi_dir_rmdir+0x10/0x10 [ 188.150201][ T6744] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 188.155267][ T6744] vfs_rmdir+0x3dd/0x560 [ 188.159576][ T6744] ovl_workdir_cleanup+0x192/0x780 [ 188.164733][ T6744] ? dentry_revalidate+0x2e0/0x370 [ 188.169904][ T6744] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 188.175577][ T6744] ? lookup_one+0x2d2/0x2e0 [ 188.180155][ T6744] ? __cfi_lookup_one+0x10/0x10 [ 188.185042][ T6744] ovl_workdir_create+0x2af/0x750 [ 188.190148][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.195322][ T6744] ? ovl_statfs+0x2d0/0x2d0 [ 188.199904][ T6744] ? _raw_spin_lock+0x8c/0x120 [ 188.204712][ T6744] ? _raw_spin_unlock+0x45/0x60 [ 188.209642][ T6744] ? mnt_want_write+0x321/0x510 [ 188.214541][ T6744] ovl_get_workdir+0x328/0x1650 [ 188.219497][ T6744] ? ovl_fill_super+0x36f0/0x36f0 [ 188.224563][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.229764][ T6744] ? _raw_spin_lock+0x8c/0x120 [ 188.234573][ T6744] ? __cfi__raw_spin_lock+0x10/0x10 [ 188.239846][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.245000][ T6744] ? _raw_spin_lock+0x8c/0x120 [ 188.249840][ T6744] ? __cfi__raw_spin_lock+0x10/0x10 [ 188.255077][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.260279][ T6744] ? up_read+0x26/0x1d0 [ 188.264504][ T6744] ? _raw_spin_unlock+0x45/0x60 [ 188.269438][ T6744] ? ovl_inuse_trylock+0xbd/0x110 [ 188.274490][ T6744] ovl_fill_super+0x133f/0x36f0 [ 188.279497][ T6744] ? xas_nomem+0x71/0x2d0 [ 188.283865][ T6744] ? ida_alloc_range+0xa12/0xa50 [ 188.288886][ T6744] ? __cfi_ovl_fill_super+0x10/0x10 [ 188.294118][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.299333][ T6744] ? mutex_unlock+0x8b/0x240 [ 188.304101][ T6744] ? __cfi_mutex_unlock+0x10/0x10 [ 188.309203][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.314368][ T6744] ? _raw_spin_lock+0x8c/0x120 [ 188.319316][ T6744] ? sget_fc+0x9ce/0xad0 [ 188.323681][ T6744] ? __cfi_set_anon_super_fc+0x10/0x10 [ 188.329321][ T6744] get_tree_nodev+0xcb/0x170 [ 188.334105][ T6744] ? __cfi_ovl_fill_super+0x10/0x10 [ 188.339377][ T6744] ovl_get_tree+0x20/0x30 [ 188.343743][ T6744] vfs_get_tree+0x9e/0x290 [ 188.348203][ T6744] do_new_mount+0x251/0xb40 [ 188.352784][ T6744] ? security_capable+0xcf/0xf0 [ 188.357676][ T6744] path_mount+0x688/0x1050 [ 188.362157][ T6744] ? putname+0x113/0x150 [ 188.366435][ T6744] __se_sys_mount+0x2bd/0x480 [ 188.371178][ T6744] ? __x64_sys_mount+0xf0/0xf0 [ 188.375979][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.381195][ T6744] ? fpregs_restore_userregs+0x11d/0x260 [ 188.386870][ T6744] __x64_sys_mount+0xc3/0xf0 [ 188.391514][ T6744] x64_sys_call+0x2021/0x2ee0 [ 188.396235][ T6744] do_syscall_64+0x58/0xf0 [ 188.400745][ T6744] ? clear_bhb_loop+0x50/0xa0 [ 188.405476][ T6744] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 188.411517][ T6744] RIP: 0033:0x7fe68cf8efc9 [ 188.415979][ T6744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.435651][ T6744] RSP: 002b:00007fe68de3b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.444152][ T6744] RAX: ffffffffffffffda RBX: 00007fe68d1e5fa0 RCX: 00007fe68cf8efc9 [ 188.452242][ T6744] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 188.460517][ T6744] RBP: 00007fe68d011f91 R08: 0000200000000180 R09: 0000000000000000 [ 188.468508][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.476629][ T6744] R13: 00007fe68d1e6038 R14: 00007fe68d1e5fa0 R15: 00007ffd31660678 [ 188.484668][ T6744] [ 188.487740][ T6744] ---[ end trace 0000000000000000 ]--- [ 188.493946][ T6744] ------------[ cut here ]------------ [ 188.499494][ T6744] WARNING: CPU: 0 PID: 6744 at fs/dcache.c:774 dput+0x3cd/0x510 [ 188.507202][ T6744] Modules linked in: [ 188.511159][ T6744] CPU: 0 UID: 0 PID: 6744 Comm: syz.5.2506 Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 188.524250][ T6744] Tainted: [W]=WARN [ 188.528072][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 188.538186][ T6744] RIP: 0010:dput+0x3cd/0x510 [ 188.542991][ T6744] Code: e1 98 ff 48 b8 00 00 00 00 00 fc ff df 48 8b 4d d0 0f b6 04 01 84 c0 0f 85 21 01 00 00 80 0b 40 e9 a8 fe ff ff e8 93 e1 98 ff <0f> 0b e9 9c fe ff ff e8 87 e1 98 ff 48 89 df e8 2f 01 00 00 84 c0 [ 188.562675][ T6744] RSP: 0018:ffffc90003ff7488 EFLAGS: 00010283 [ 188.568826][ T6744] RAX: ffffffff81ed1d1d RBX: ffff888115552990 RCX: 0000000000080000 [ 188.576830][ T6744] RDX: ffffc90002214000 RSI: 0000000000077684 RDI: 0000000000077685 [ 188.584874][ T6744] RBP: ffffc90003ff74b8 R08: 0000000000000003 R09: 0000000000000004 [ 188.592909][ T6744] R10: dffffc0000000000 R11: fffff520007fee80 R12: 00000000ffffff80 [ 188.600948][ T6744] R13: ffff888115552a14 R14: ffff888115552a10 R15: 1ffff11022aaa542 [ 188.608977][ T6744] FS: 00007fe68de3b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 188.617936][ T6744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.624605][ T6744] CR2: 000000110c2ed22c CR3: 000000011cde2000 CR4: 00000000003526b0 [ 188.632657][ T6744] Call Trace: [ 188.635957][ T6744] [ 188.638925][ T6744] path_put+0x3d/0x70 [ 188.642953][ T6744] dentry_release+0x53/0xb0 [ 188.647531][ T6744] ? __cfi_dentry_release+0x10/0x10 [ 188.652792][ T6744] __dentry_kill+0x22b/0x5f0 [ 188.657430][ T6744] ? lock_for_kill+0xae/0x230 [ 188.662164][ T6744] dput+0x3f2/0x510 [ 188.666010][ T6744] ovl_workdir_create+0x2bf/0x750 [ 188.671083][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.676231][ T6744] ? ovl_statfs+0x2d0/0x2d0 [ 188.680779][ T6744] ? _raw_spin_lock+0x8c/0x120 [ 188.685593][ T6744] ? _raw_spin_unlock+0x45/0x60 [ 188.690542][ T6744] ? mnt_want_write+0x321/0x510 [ 188.695450][ T6744] ovl_get_workdir+0x328/0x1650 [ 188.700355][ T6744] ? ovl_fill_super+0x36f0/0x36f0 [ 188.705444][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.710667][ T6744] ? _raw_spin_lock+0x8c/0x120 [ 188.715484][ T6744] ? __cfi__raw_spin_lock+0x10/0x10 [ 188.720736][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.725979][ T6744] ? _raw_spin_lock+0x8c/0x120 [ 188.730812][ T6744] ? __cfi__raw_spin_lock+0x10/0x10 [ 188.736044][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.741252][ T6744] ? up_read+0x26/0x1d0 [ 188.745463][ T6744] ? _raw_spin_unlock+0x45/0x60 [ 188.750384][ T6744] ? ovl_inuse_trylock+0xbd/0x110 [ 188.755441][ T6744] ovl_fill_super+0x133f/0x36f0 [ 188.760350][ T6744] ? xas_nomem+0x71/0x2d0 [ 188.764730][ T6744] ? ida_alloc_range+0xa12/0xa50 [ 188.769718][ T6744] ? __cfi_ovl_fill_super+0x10/0x10 [ 188.774941][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.780101][ T6744] ? mutex_unlock+0x8b/0x240 [ 188.784712][ T6744] ? __cfi_mutex_unlock+0x10/0x10 [ 188.789784][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.794935][ T6744] ? _raw_spin_lock+0x8c/0x120 [ 188.799775][ T6744] ? sget_fc+0x9ce/0xad0 [ 188.804087][ T6744] ? __cfi_set_anon_super_fc+0x10/0x10 [ 188.809610][ T6744] get_tree_nodev+0xcb/0x170 [ 188.814241][ T6744] ? __cfi_ovl_fill_super+0x10/0x10 [ 188.819534][ T6744] ovl_get_tree+0x20/0x30 [ 188.823895][ T6744] vfs_get_tree+0x9e/0x290 [ 188.828356][ T6744] do_new_mount+0x251/0xb40 [ 188.832977][ T6744] ? security_capable+0xcf/0xf0 [ 188.837879][ T6744] path_mount+0x688/0x1050 [ 188.842389][ T6744] ? putname+0x113/0x150 [ 188.846680][ T6744] __se_sys_mount+0x2bd/0x480 [ 188.851480][ T6744] ? __x64_sys_mount+0xf0/0xf0 [ 188.856325][ T6744] ? __kasan_check_write+0x18/0x20 [ 188.861500][ T6744] ? fpregs_restore_userregs+0x11d/0x260 [ 188.867178][ T6744] __x64_sys_mount+0xc3/0xf0 [ 188.871837][ T6744] x64_sys_call+0x2021/0x2ee0 [ 188.876558][ T6744] do_syscall_64+0x58/0xf0 [ 188.881027][ T6744] ? clear_bhb_loop+0x50/0xa0 [ 188.885732][ T6744] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 188.891670][ T6744] RIP: 0033:0x7fe68cf8efc9 [ 188.896108][ T6744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.915874][ T6744] RSP: 002b:00007fe68de3b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.924399][ T6744] RAX: ffffffffffffffda RBX: 00007fe68d1e5fa0 RCX: 00007fe68cf8efc9 [ 188.932495][ T6744] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 188.940560][ T6744] RBP: 00007fe68d011f91 R08: 0000200000000180 R09: 0000000000000000 [ 188.948548][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.956574][ T6744] R13: 00007fe68d1e6038 R14: 00007fe68d1e5fa0 R15: 00007ffd31660678 [ 188.964631][ T6744] [ 188.967834][ T6744] ---[ end trace 0000000000000000 ]--- [ 188.973663][ T6744] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 188.983412][ T6744] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 191.658823][ C0] bridge0: port 4(ip6gretap0) entered learning state