last executing test programs: 1m32.1845057s ago: executing program 3 (id=2970): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffff0000000000000001ffe7ee0000000000000000020000", 0x56}, {0x0}], 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', 0x0, 0x1000080, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) read$FUSE(r4, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r4, &(0x7f0000002240)={0x20, 0x0, r5, {0x0, 0x10}}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x2, 0x0, 0x80c9}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_usb_connect$uac3(0x3, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1c, &(0x7f00000002c0)=@string={0x1c, 0x3, "f485f999cb55bd75051e294e60295339620c304e04f1e087fb01"}}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000003f00090000000000000800000300"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4) writev(r6, 0x0, 0x0) 1m29.060756843s ago: executing program 3 (id=2988): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m27.958222834s ago: executing program 3 (id=2991): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x10}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m27.710317007s ago: executing program 3 (id=2995): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) socket(0x10, 0x80002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m27.669021882s ago: executing program 3 (id=2997): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000002c40)={0x2020}, 0x2020) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={0x0}}, 0x14) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r4, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f0000000040)='./file1\x00', 0x32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) 1m26.970100046s ago: executing program 3 (id=3001): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000002c40)={0x2020}, 0x2020) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x14) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r4, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f0000000040)='./file1\x00', 0x32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) 1m26.36743019s ago: executing program 32 (id=3001): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000002c40)={0x2020}, 0x2020) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x14) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r4, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f0000000040)='./file1\x00', 0x32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) 59.665651682s ago: executing program 2 (id=3182): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595d, 0x1000, 0x20002, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x100000000000000, 0x1}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 59.503961536s ago: executing program 2 (id=3184): r0 = syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x48a440, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff03) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 59.242105829s ago: executing program 2 (id=3187): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 59.193079512s ago: executing program 2 (id=3188): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'}) 59.000207916s ago: executing program 2 (id=3190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@flushpolicy={0x18, 0x1d, 0xc04, 0x70bd2c, 0x25dfdbfe, "", [@proto={0x5, 0x19, 0x33}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x95) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100"/105], 0x190) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbba9bbbbaaaaaaaaaabb86dd6012000800108000000000000000000000000000bbff0200000000000000000000000000018600907800d5050040000000ff01000029ca1aaff653c584a076c6878ffc2b6703606f560be5d280673bdff36e072f2bc22d81e82207577dc9dced"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002000010000000000fcdbdf250a8000000000000332000300140001002001000000000000000000000000000105001600870000006b52a569aa58bc536c4a95d8156be0e7fedd"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390426bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000000000000000000000011400"/64], 0x5c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r5, 0x0, 0x0, 0x122, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) 56.394395169s ago: executing program 2 (id=3201): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000100001", @ANYBLOB="0305"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5, 0x1000000000, 0x5, 0x7fffffffffffffff, 0x80000000, 0x3, 0x2004d0, 0x0, 0xa19, 0x8, 0x5, 0x0, 0x3, 0x2, 0x5, 0x8000000000], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x80a0000, 0x9, 0x7, 0xff, 0x10, 0x80, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0x10, 0x0, 0x2, 0x0, 0xfd, 0xfe, 0x7, 0xff}, {0xb000, 0x8080000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x7, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0xfe, 0x6, 0x0, 0x80, 0x8, 0x3f, 0x6}, {0xb000, 0x30000, 0x9, 0x76, 0x2, 0x1, 0x2, 0x82, 0x0, 0xd, 0x6, 0x40}, {0xeeee8000, 0xeeee8000, 0x9, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4, 0xc}, {0x80a0000, 0x50000, 0xc, 0x8b, 0x0, 0x66, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x4000, 0x8cc}, {0xdddd1000, 0x40}, 0xddf8ffd3, 0x0, 0xddd8d000, 0x110, 0x7, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0x7f]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 55.576667856s ago: executing program 33 (id=3201): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000100001", @ANYBLOB="0305"], 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5, 0x1000000000, 0x5, 0x7fffffffffffffff, 0x80000000, 0x3, 0x2004d0, 0x0, 0xa19, 0x8, 0x5, 0x0, 0x3, 0x2, 0x5, 0x8000000000], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x80a0000, 0x9, 0x7, 0xff, 0x10, 0x80, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0x10, 0x0, 0x2, 0x0, 0xfd, 0xfe, 0x7, 0xff}, {0xb000, 0x8080000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x7, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0xfe, 0x6, 0x0, 0x80, 0x8, 0x3f, 0x6}, {0xb000, 0x30000, 0x9, 0x76, 0x2, 0x1, 0x2, 0x82, 0x0, 0xd, 0x6, 0x40}, {0xeeee8000, 0xeeee8000, 0x9, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4, 0xc}, {0x80a0000, 0x50000, 0xc, 0x8b, 0x0, 0x66, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x4000, 0x8cc}, {0xdddd1000, 0x40}, 0xddf8ffd3, 0x0, 0xddd8d000, 0x110, 0x7, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0x7f]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.169387998s ago: executing program 5 (id=3432): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000002c40)={0x2020}, 0x2020) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x0, 0x208, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", ""]}, 0x2c}}, 0x14) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r4, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f0000000040)='./file1\x00', 0x32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) 7.578994284s ago: executing program 5 (id=3440): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x10, 0xffeff024}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 6.731011834s ago: executing program 4 (id=3445): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x24000080) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xc}, {0xe, 0xfff1}, {0xd00, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.582094965s ago: executing program 5 (id=3446): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x1c) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0x269, 0x3, 0x54, "c8df2fcdd1649f8e4e4cfc930d2ecc9f215e9f"}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x8df0, 0x5, 0x10, 0x7, 0x7, "fdd216a48c6bbd4cb75b5bde11fb49502387be", 0x8, 0x2}) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x81, 0xb6, 0x77, 0x40, 0x61c, 0xc084, 0xda9f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x27, 0x7, 0x0, 0x5, "", [{{0x9, 0x4, 0xa5, 0xf5, 0x2, 0x42, 0xe5, 0x24, 0x60, [], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0x2, 0x9, 0x9}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x4, 0x3, 0x4}}]}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$evdev(0x0, 0x2, 0x903d01) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000002c0)=0xf) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x80) 6.54549048s ago: executing program 4 (id=3447): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000002c40)={0x2020}, 0x2020) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x0, 0x208, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", ""]}, 0x2c}}, 0x14) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r4, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f0000000040)='./file1\x00', 0x32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) 4.766228778s ago: executing program 1 (id=3453): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$igmp(0x2, 0x3, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="aa02b3d08e7f1e7bedd880518790c73788a1284eca25a235163b0a967d5f08b2078003dfbbfe730f7e54d7dc67cb5fdf01a7746decbb94a650b313e6b42e5061fd79d759dfe4448387e3321a09d99287"}) dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000740)=[@request_death], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) 3.411938738s ago: executing program 6 (id=3454): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.378293095s ago: executing program 4 (id=3455): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000002c40)={0x2020}, 0x2020) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x0, 0x208, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", ""]}, 0x2c}}, 0x14) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r4, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f0000000040)='./file1\x00', 0x32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) 3.258109752s ago: executing program 6 (id=3456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x21}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000300)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.18775697s ago: executing program 1 (id=3457): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='7777\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0\x00', 0x2) 3.115033079s ago: executing program 1 (id=3458): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/usb1/speed\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb2/speed\x00', 0x0, 0x0) read(r1, &(0x7f0000000240)=""/100, 0x64) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/usb/devices/1-1/speed\x00', 0x0, 0x0) read(r2, &(0x7f0000000340)=""/100, 0x64) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/speed\x00', 0x0, 0x0) read(r3, &(0x7f0000000400)=""/100, 0x64) 2.790028605s ago: executing program 5 (id=3459): r0 = socket$unix(0x1, 0x2, 0x0) r1 = fsopen(&(0x7f0000000300)='devpts\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000002300)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 2.148823757s ago: executing program 6 (id=3460): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x301400) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) pread64(r1, &(0x7f0000000340)=""/69, 0x45, 0x3) 1.881356202s ago: executing program 5 (id=3461): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x32012, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) sendto(r2, 0x0, 0xeffd, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 1.725066413s ago: executing program 0 (id=3462): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x110, 0x20004800}}], 0x1, 0x4001) eventfd2(0x1, 0x80001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000540)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x3, "000064640000001503fe00", '\x00', "00000099", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 1.622426376s ago: executing program 4 (id=3463): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@flushpolicy={0x18, 0x1d, 0xc04, 0x70bd2c, 0x25dfdbfe, "", [@proto={0x5, 0x19, 0x33}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x95) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100"/105], 0x190) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbba9bbbbaaaaaaaaaabb86dd6012000800108000000000000000000000000000bbff0200000000000000000000000000018600907800d5050040000000ff01000029ca1aaff653c584a076c6878ffc2b6703606f560be5d280673bdff36e072f2bc22d81e82207577dc9dced"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002000010000000000fcdbdf250a8000000000000332000300140001002001000000000000000000000000000105001600870000006b52a569aa58bc536c4a95d8156be0e7fedd"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390426bd7000010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000000000000000000000011400"/64], 0x5c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r5, 0x0, 0x0, 0x122, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) 1.592487299s ago: executing program 1 (id=3464): getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x2, 0x3, 0x4, 0x1}}, 0x2e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 891.012415ms ago: executing program 1 (id=3465): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x156, 0x0) r3 = dup2(r2, r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) syz_usbip_server_init(0x6) 842.541621ms ago: executing program 0 (id=3466): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, 0x16, 0x6b4e12c8a09f3155, 0x70bd2a, 0x25dfdbfe, {0xa}, [@generic="8d59"]}, 0x18}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x5, 0x9, 0x0, 0x1, 0x5, 0x28, 0x2, 0x0, 0xff, '\x00', 0x1, 0xec}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x46, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x1, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x10000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 842.292043ms ago: executing program 6 (id=3467): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x2040400) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x10, 0x2}, 0x48) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r1, &(0x7f0000001600)='2', 0x1) 791.990289ms ago: executing program 6 (id=3468): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0xa0, &(0x7f0000000000)={0x80, 0x6, 0xf801, 0x200}, 0x8, 0x8001, 0x0, 0x0, 0x108001, 0xdffffff9, 0x0}) keyctl$read(0xb, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000240)=0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x8043, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0xd, 0x87b, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x1, 0x3], 0x70000, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 772.434016ms ago: executing program 0 (id=3469): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf", 0x36}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 607.858929ms ago: executing program 4 (id=3470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10001, 0xf, 0xc}}}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 498.144211ms ago: executing program 0 (id=3471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x36, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 419.879741ms ago: executing program 4 (id=3472): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0xe3d1e1f660815c8) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0) 328.870899ms ago: executing program 6 (id=3473): socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setitimer(0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) alarm(0x5) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x5, 0x5, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x40040) 254.641903ms ago: executing program 5 (id=3474): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(r2, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 249.740276ms ago: executing program 0 (id=3475): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e03"], 0xffdd) close(r2) 121.05093ms ago: executing program 0 (id=3476): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 1 (id=3477): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='usbip-vudc.0', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='3', 0x1) kernel console output (not intermixed with test programs): bcdDevice= 0.00 [ 618.981472][T12821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.989824][T12821] usb 3-1: Product: syz [ 618.994140][T12821] usb 3-1: Manufacturer: syz [ 618.999245][T12821] usb 3-1: SerialNumber: syz [ 619.015900][T14473] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 619.024705][T14473] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 619.255921][T14473] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 619.264418][T14473] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 619.281954][T12821] usb 3-1: No status endpoint found [ 619.416906][T14486] netlink: 'syz.1.2605': attribute type 1 has an invalid length. [ 619.602523][T13855] usb 3-1: USB disconnect, device number 48 [ 619.697446][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 619.710370][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 619.720652][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 619.730773][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 621.554766][T14538] vxfs: unable to read disk superblock at 1 [ 621.561293][T14538] vxfs: unable to read disk superblock at 8 [ 621.567198][T14538] vxfs: can't find superblock. [ 621.988062][T14541] netlink: 'syz.2.2621': attribute type 1 has an invalid length. [ 622.245071][T14548] __nla_validate_parse: 1 callbacks suppressed [ 622.245107][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'. [ 622.265726][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'. [ 622.275945][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'. [ 622.286049][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'. [ 622.296514][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'. [ 623.119949][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2625'. [ 623.658830][T12821] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 624.206245][T14573] misc userio: Invalid payload size [ 624.260498][T12821] usb 3-1: unable to get BOS descriptor or descriptor too short [ 624.271129][T12821] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.286881][T12821] usb 3-1: string descriptor 0 read error: -22 [ 624.297267][T12821] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 624.307336][T12821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.510956][T14580] kvm: emulating exchange as write [ 624.596418][T14587] binder: 14586:14587 ioctl c0306201 2000000003c0 returned -14 [ 624.607743][ T5809] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 624.759628][ T5809] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.771489][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 624.783106][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 624.793414][ T5809] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.806852][ T5809] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 624.816277][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.827581][ T5809] usb 5-1: config 0 descriptor?? [ 624.867781][T13855] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 625.021108][T13855] usb 1-1: unable to get BOS descriptor or descriptor too short [ 625.031122][T13855] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 625.052090][T13855] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 625.061527][T13855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.065185][T14598] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 625.069630][T13855] usb 1-1: Product: syz [ 625.082658][T13855] usb 1-1: Manufacturer: syz [ 625.087288][T13855] usb 1-1: SerialNumber: syz [ 625.255033][ T5809] plantronics 0003:047F:FFFF.0025: ignoring exceeding usage max [ 625.273552][ T5809] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 625.324735][T13855] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 625.341443][T13855] usb 1-1: 2:1 : unsupported format bits 0xd6000008 [ 625.353459][T13855] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 625.424363][T13855] usb 1-1: USB disconnect, device number 40 [ 625.944815][T14613] netlink: 'syz.0.2646': attribute type 1 has an invalid length. [ 625.957778][ T5809] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 626.107745][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 626.114354][ T5809] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 626.122610][ T5809] usb 4-1: config 0 has no interface number 0 [ 626.130666][ T5809] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 626.143479][ T5809] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 626.162052][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.170217][ T5809] usb 4-1: Product: syz [ 626.174411][ T5809] usb 4-1: Manufacturer: syz [ 626.179117][ T5809] usb 4-1: SerialNumber: syz [ 626.187743][ T5809] usb 4-1: config 0 descriptor?? [ 626.202170][ T5809] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 626.212125][ T5809] em28xx 4-1:0.132: Video interface 132 found: [ 626.377484][T14623] lo speed is unknown, defaulting to 1000 [ 626.603287][ T5809] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 627.222602][ T5809] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 627.232536][ T5809] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 627.239243][ T5809] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 627.307735][ T5809] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 627.315692][ T5809] em28xx 4-1:0.132: analog set to bulk mode. [ 627.321979][ T5707] em28xx 4-1:0.132: Registering V4L2 extension [ 627.339640][ T5809] usb 4-1: USB disconnect, device number 46 [ 627.356082][T12821] usb 5-1: USB disconnect, device number 45 [ 627.368312][ T5809] em28xx 4-1:0.132: Disconnecting em28xx [ 627.467244][ T5707] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 627.476524][ T5707] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 627.496651][ T5707] em28xx 4-1:0.132: No AC97 audio processor [ 627.517373][ T5707] usb 4-1: Decoder not found [ 627.522082][ T5707] em28xx 4-1:0.132: failed to create media graph [ 627.528890][ T5707] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 627.547130][ T5707] em28xx 4-1:0.132: Remote control support is not available for this card. [ 627.566011][ T5809] em28xx 4-1:0.132: Closing input extension [ 627.601664][ T5809] em28xx 4-1:0.132: Freeing device [ 627.813073][T14654] fuse: root generation should be zero [ 627.915830][T14656] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 627.962993][ T30] audit: type=1400 audit(1785509340.849:1513): avc: denied { append } for pid=14662 comm="syz.3.2662" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 629.687534][T14713] xt_hashlimit: size too large, truncated to 1048576 [ 629.777155][T14719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2681'. [ 630.144508][ T30] audit: type=1400 audit(1785509343.029:1514): avc: denied { write } for pid=14707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.219201][T14559] usb 3-1: 1:1: usb_set_interface failed (-110) [ 630.232096][T13855] usb 3-1: USB disconnect, device number 49 [ 630.302537][ T30] audit: type=1400 audit(1785509343.189:1515): avc: denied { write } for pid=14741 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.517781][ T5809] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 630.561628][ T30] audit: type=1400 audit(1785509343.449:1516): avc: denied { mounton } for pid=14751 comm="syz.3.2686" path="/proc/1622/task" dev="proc" ino=46381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 630.591725][T14746] lo speed is unknown, defaulting to 1000 [ 630.677699][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 630.690500][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.714100][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.742414][ T5809] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 630.764909][ T30] audit: type=1400 audit(1785509343.649:1517): avc: denied { write } for pid=14748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.769408][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.836061][ T5809] usb 2-1: config 0 descriptor?? [ 630.873707][ T5809] hub 2-1:0.0: USB hub found [ 630.949652][ T30] audit: type=1400 audit(1785509343.839:1518): avc: denied { write } for pid=14769 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.078582][ T5809] hub 2-1:0.0: 1 port detected [ 631.736539][ T5809] hub 2-1:0.0: activate --> -90 [ 632.070787][T14796] netlink: 'syz.0.2693': attribute type 1 has an invalid length. [ 632.181448][ T5721] usb 2-1: USB disconnect, device number 51 [ 632.216749][ T5809] usb 2-1-port1: config error [ 632.329761][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 632.342084][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 632.352237][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 632.362369][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 632.372126][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 632.756988][T14806] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 634.544722][ T30] audit: type=1400 audit(1785509347.429:1519): avc: denied { write } for pid=14847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.676349][T14873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.879586][ T30] audit: type=1400 audit(1785509347.759:1520): avc: denied { write } for pid=14879 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.079028][ T5809] IPVS: starting estimator thread 0... [ 635.178798][T14895] IPVS: using max 43 ests per chain, 103200 per kthread [ 635.417745][T13855] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 635.565621][ T30] audit: type=1400 audit(1785509348.449:1521): avc: denied { write } for pid=14888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.598671][T13855] usb 3-1: Using ep0 maxpacket: 32 [ 635.611231][T13855] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 635.651307][T13855] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 635.663414][T13855] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 635.674597][T13855] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 635.691446][T13855] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 635.709493][T13855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.738983][T13855] usb 3-1: Product: syz [ 635.747446][T13855] usb 3-1: Manufacturer: syz [ 635.753439][T13855] usb 3-1: SerialNumber: syz [ 635.761751][ T30] audit: type=1400 audit(1785509348.639:1522): avc: denied { write } for pid=14929 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.764794][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 635.838671][T13855] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input45 [ 635.902209][T14939] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 636.017818][T13855] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 636.038460][T13855] (id 0x00) [ 636.147729][T13855] rc_core: IR keymap rc-imon-pad not found [ 636.167767][T13855] Registered IR keymap rc-empty [ 636.173165][T13855] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 636.199966][T13855] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 636.298797][T13855] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 636.337834][T13855] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input46 [ 636.366583][T13855] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:50> initialized [ 636.981648][T13855] usb 3-1: USB disconnect, device number 50 [ 636.987891][T14971] imon:send_packet: packet tx failed (-71) [ 637.027931][T14971] imon:vfd_write: send packet #1 failed [ 637.901843][ T30] audit: type=1400 audit(1785509350.789:1523): avc: denied { map } for pid=15001 comm="syz.2.2754" path="/dev/sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 637.926756][ T30] audit: type=1400 audit(1785509350.789:1524): avc: denied { execute } for pid=15001 comm="syz.2.2754" path="/dev/sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 638.315391][T15017] lo speed is unknown, defaulting to 1000 [ 638.724882][T15034] netlink: 'syz.2.2764': attribute type 1 has an invalid length. [ 638.828757][ T30] audit: type=1326 audit(1785509351.699:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15015 comm="syz.0.2760" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feea459e019 code=0x0 [ 639.455419][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2764'. [ 640.117521][T15069] netlink: 'syz.0.2773': attribute type 1 has an invalid length. [ 640.396150][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 640.409651][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 640.419809][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 640.429909][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 640.439621][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 643.394450][ T30] audit: type=1400 audit(1785509356.279:1526): avc: denied { listen } for pid=15136 comm="syz.2.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 643.416351][ T30] audit: type=1400 audit(1785509356.309:1527): avc: denied { accept } for pid=15136 comm="syz.2.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 644.290766][T15162] overlayfs: failed to clone upperpath [ 644.620049][T15176] input: syz0 as /devices/virtual/input/input47 [ 644.637625][T15171] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 644.796740][T15185] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2817'. [ 644.811514][T13855] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 644.968951][T13855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.980243][T13855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.990439][T13855] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 644.999512][T13855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.009758][T13855] usb 3-1: config 0 descriptor?? [ 645.157858][ T5721] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 645.309024][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 645.320597][ T5721] usb 5-1: no configurations [ 645.333728][ T5721] usb 5-1: can't read configurations, error -22 [ 645.337461][T15203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2824'. [ 645.364132][T15203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2824'. [ 645.467855][ T5721] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 645.637876][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 645.643767][ T5721] usb 5-1: no configurations [ 645.648711][ T5721] usb 5-1: can't read configurations, error -22 [ 645.655479][ T5721] usb usb5-port1: attempt power cycle [ 646.002196][ T5721] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 646.041284][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 646.047786][ T5721] usb 5-1: no configurations [ 646.062849][ T5721] usb 5-1: can't read configurations, error -22 [ 646.199541][ T5721] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 646.241469][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 646.247536][ T5721] usb 5-1: no configurations [ 646.252691][T13855] uclogic 0003:256C:006D.0026: v1 frame probing failed: -71 [ 646.270064][ T5721] usb 5-1: can't read configurations, error -22 [ 646.277357][T13855] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 646.285600][ T5721] usb usb5-port1: unable to enumerate USB device [ 646.292272][T13855] uclogic 0003:256C:006D.0026: probe with driver uclogic failed with error -71 [ 646.325248][T13855] usb 3-1: USB disconnect, device number 51 [ 646.655064][ T30] audit: type=1400 audit(1785509359.539:1528): avc: denied { write } for pid=15222 comm="syz.3.2832" name="functions" dev="configfs" ino=16046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 646.821009][T15227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2831'. [ 647.219488][T15233] binder: 15230:15233 ioctl c0306201 200000000000 returned -14 [ 649.176648][T15261] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2845'. [ 649.247792][T13855] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 649.425336][T15270] vfio-pci 0000:00:01.0: probe with driver vfio-pci failed with error -22 [ 649.439513][T13855] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.451208][T13855] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 649.475835][T13855] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 649.485619][T13855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.496117][T13855] usb 4-1: Product: syz [ 649.500941][T13855] usb 4-1: Manufacturer: syz [ 649.505640][T13855] usb 4-1: SerialNumber: syz [ 649.589667][ T5721] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 649.673636][T15277] fuse: fd is not a fuse device [ 649.721964][T15257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.749753][T15257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.767984][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 649.780040][T13855] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 649.792903][ T5721] usb 5-1: no configurations [ 649.833602][T13855] usb 4-1: USB disconnect, device number 47 [ 649.839586][ T5721] usb 5-1: can't read configurations, error -22 [ 649.977860][ T5721] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 650.100509][T12821] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 650.157726][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 650.163655][ T5721] usb 5-1: no configurations [ 650.168952][ T5721] usb 5-1: can't read configurations, error -22 [ 650.175532][ T5721] usb usb5-port1: attempt power cycle [ 650.259319][T12821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.270508][T12821] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 650.279743][T12821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.289394][T12821] usb 3-1: config 0 descriptor?? [ 650.357786][T13855] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 650.504273][T12821] usbhid 3-1:0.0: can't add hid device: -71 [ 650.507737][T13855] usb 4-1: Using ep0 maxpacket: 8 [ 650.516385][T12821] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 650.517259][T13855] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 650.532047][T12821] usb 3-1: USB disconnect, device number 52 [ 650.533272][ T5721] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 650.546615][T13855] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 650.557012][T13855] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 650.567097][T13855] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 650.576897][T13855] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 650.587117][T13855] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.598420][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 650.608309][ T5721] usb 5-1: no configurations [ 650.612926][ T5721] usb 5-1: can't read configurations, error -22 [ 650.620291][T13855] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.635292][T13855] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 650.645334][T13855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.758822][ T5721] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 650.801694][ T5721] usb 5-1: Using ep0 maxpacket: 16 [ 650.810656][ T5721] usb 5-1: no configurations [ 650.815285][ T5721] usb 5-1: can't read configurations, error -22 [ 650.825274][ T5721] usb usb5-port1: unable to enumerate USB device [ 650.867253][T13855] usb 4-1: usb_control_msg returned -32 [ 650.878735][T13855] usbtmc 4-1:16.0: can't read capabilities [ 650.889980][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.896029][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.902028][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.908038][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.914107][ C0] usbtmc 4-1:16.0: invalid notification: 11 [ 650.923337][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.929944][ C0] usbtmc 4-1:16.0: invalid notification: 2 [ 650.936207][ C0] usbtmc 4-1:16.0: invalid notification: 5 [ 650.942276][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.948292][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.954285][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.960297][ C0] usbtmc 4-1:16.0: invalid notification: 40 [ 650.966562][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.972669][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.978713][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.984688][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.991010][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 650.997103][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.003138][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.009185][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.015196][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.021199][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.027189][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.033205][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.039236][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.045232][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.051264][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.057281][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.063293][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.069317][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.075337][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.081346][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.087342][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.093324][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.099439][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.105455][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.111467][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.117464][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.123445][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.129427][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.135396][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.141371][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.147339][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.153319][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.159307][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.165249][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.171230][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.177181][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.183140][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.189123][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.195068][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.201029][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.207122][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.213113][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.219215][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.225194][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.231271][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.237255][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.243213][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.249362][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.255342][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.261340][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.267318][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.273324][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.279321][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.285269][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.291248][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.297218][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.307818][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.313829][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.319804][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.325767][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.332147][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.338133][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.344105][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.350083][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.356043][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.362010][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.367991][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.373946][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.379961][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.385947][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.391955][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.397961][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.403906][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.410030][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.416018][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.422001][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.427962][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.433923][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.439912][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.445873][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.451839][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.457838][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.463780][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.469748][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.475721][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.481707][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.487711][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.493813][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.499848][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.505809][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.511772][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.517747][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.523743][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.529719][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.535686][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.541672][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.547650][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.553635][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.559620][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.565569][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.571539][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.577525][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.583532][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.589545][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.595532][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.601550][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.607512][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.613471][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.619447][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.625405][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.631386][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.637344][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.643340][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.649488][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.655456][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.661424][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.667378][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.673373][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.679363][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.685328][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.691298][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.697280][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.703271][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.709252][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.715195][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.721162][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.727145][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.733128][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.739094][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.745037][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.750990][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.756949][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.762911][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.768883][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.774835][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.780819][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.786789][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.792769][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.798738][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.804678][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.810660][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.816628][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.822652][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.828644][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.834623][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.840590][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.846565][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.852523][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.858486][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.864420][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.870383][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.876330][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.882305][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.888288][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.894234][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.900186][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.906145][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.912114][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.918077][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.924005][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.929966][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.935911][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.941890][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.947863][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.953823][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.959841][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.965788][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.971775][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.977741][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.983710][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.989967][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 651.995935][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 652.001920][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 652.007893][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 652.013843][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 652.019811][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 652.025769][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 652.031724][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 652.038082][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 652.044072][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 652.050083][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 652.056059][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 652.061946][ T5345] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 652.231514][ T5345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.247702][ T5809] usb 4-1: USB disconnect, device number 48 [ 652.267291][ T5345] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 652.287786][ T5345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.307584][ T5345] usb 3-1: config 0 descriptor?? [ 652.993588][T15327] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 653.149597][ T5345] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 653.168525][ T5345] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input48 [ 653.443386][T15346] vxfs: unable to read disk superblock at 1 [ 653.449765][T15346] vxfs: unable to read disk superblock at 8 [ 653.455710][T15346] vxfs: can't find superblock. [ 653.501013][T15347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2872'. [ 653.973186][ T5809] usb 3-1: USB disconnect, device number 53 [ 653.973321][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 654.585729][ T30] audit: type=1400 audit(1785509367.469:1529): avc: denied { write } for pid=15369 comm="syz.2.2882" name="functions" dev="configfs" ino=16046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 654.633572][ T30] audit: type=1400 audit(1785509367.499:1530): avc: denied { write } for pid=15369 comm="syz.2.2882" name="c.1" dev="configfs" ino=14609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 654.666788][ T30] audit: type=1400 audit(1785509367.499:1531): avc: denied { write } for pid=15369 comm="syz.2.2882" name="c.1" dev="configfs" ino=14609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 655.075349][T15391] netlink: 'syz.0.2890': attribute type 12 has an invalid length. [ 655.930094][ T30] audit: type=1400 audit(1785509368.819:1532): avc: denied { write } for pid=15400 comm="syz.3.2893" name="functions" dev="configfs" ino=16046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 655.955299][ T30] audit: type=1400 audit(1785509368.839:1533): avc: denied { write } for pid=15400 comm="syz.3.2893" name="target" dev="configfs" ino=3485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 655.978883][ T30] audit: type=1400 audit(1785509368.839:1534): avc: denied { write } for pid=15400 comm="syz.3.2893" name="usb_gadget" dev="configfs" ino=51044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 656.279658][T15407] vxfs: unable to read disk superblock at 1 [ 656.285722][T15407] vxfs: unable to read disk superblock at 8 [ 656.291714][T15407] vxfs: can't find superblock. [ 656.363816][T15408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2894'. [ 656.797991][ T30] audit: type=1400 audit(1785509369.669:1535): avc: denied { write } for pid=15409 comm="syz.1.2896" name="uncompressed" dev="configfs" ino=14664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 656.823051][ T30] audit: type=1400 audit(1785509369.689:1536): avc: denied { write } for pid=15409 comm="syz.1.2896" name="u" dev="configfs" ino=51062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 657.473132][T15441] fuse: fd is not a fuse device [ 657.536028][ T30] audit: type=1400 audit(1785509370.419:1537): avc: denied { map } for pid=15442 comm="syz.4.2905" path="socket:[51087]" dev="sockfs" ino=51087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 657.631499][ T30] audit: type=1400 audit(1785509370.519:1538): avc: denied { read } for pid=15444 comm="syz.0.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 657.988248][T12821] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 658.149135][T12821] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 658.159124][T12821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 658.167338][T12821] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 658.177115][T12821] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 658.185383][T12821] usb 5-1: Product: syz [ 658.189641][T12821] usb 5-1: Manufacturer: syz [ 658.194248][T12821] usb 5-1: SerialNumber: syz [ 658.200477][T12821] usb 5-1: config 0 descriptor?? [ 658.213789][T12821] usb 5-1: selecting invalid altsetting 0 [ 658.237814][T13855] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 658.402671][T13855] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 658.467433][T13855] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 658.493425][T13855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 658.504597][T13855] usb 3-1: Product: syz [ 658.510479][T13855] usb 3-1: Manufacturer: syz [ 658.515195][T13855] usb 3-1: SerialNumber: syz [ 658.546728][ T5345] usb 5-1: USB disconnect, device number 54 [ 658.736501][T13855] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 658.969459][T15478] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 659.134504][ C0] usblp0: nonzero write bulk status received: -71 [ 659.198959][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'. [ 659.216307][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'. [ 659.226487][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'. [ 659.236548][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'. [ 659.246369][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'. [ 659.283999][T13855] usb 3-1: USB disconnect, device number 54 [ 659.567005][T13855] usblp0: removed [ 659.776784][T15493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2924'. [ 659.917714][ T5345] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 660.092447][ T5345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.121078][ T5345] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 660.141972][ T5345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.171300][ T5345] usb 4-1: config 0 descriptor?? [ 660.386514][ T5345] usbhid 4-1:0.0: can't add hid device: -71 [ 660.393208][ T5345] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 660.406465][ T5345] usb 4-1: USB disconnect, device number 49 [ 661.775317][T15529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2936'. [ 661.879795][ T5345] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 661.965551][T15544] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2943'. [ 661.976309][T15544] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2943'. [ 662.028265][T15546] fuse: fd is not a fuse device [ 662.049451][ T5345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.063396][ T5345] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 662.072861][ T5345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.084335][ T5345] usb 4-1: config 0 descriptor?? [ 662.100698][T15550] netlink: 'syz.0.2946': attribute type 1 has an invalid length. [ 662.126796][ T30] audit: type=1400 audit(1785509375.009:1539): avc: denied { read } for pid=15547 comm="syz.1.2944" path="socket:[51511]" dev="sockfs" ino=51511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 662.133703][T15550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 662.204461][T15550] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2946'. [ 662.247367][T15550] bond2: (slave geneve2): making interface the new active one [ 662.267726][T15550] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 662.297741][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.327946][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.337776][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.346714][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.834397][T15560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.898417][ T5345] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 662.919422][ T5345] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input49 [ 663.256288][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 663.264485][ T5345] usb 4-1: USB disconnect, device number 50 [ 663.787506][T15588] netlink: 'syz.1.2958': attribute type 1 has an invalid length. [ 663.959845][T15588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 664.061371][T15592] bond2: (slave geneve2): making interface the new active one [ 664.082866][T15592] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 664.128576][T14066] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.179624][T15599] IPv6: sit1: Disabled Multicast RS [ 664.185064][ T30] audit: type=1400 audit(1785509377.069:1540): avc: denied { write } for pid=15582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.208553][T15599] sit1: entered allmulticast mode [ 664.249778][T14066] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.406891][T15628] netlink: 'syz.1.2963': attribute type 1 has an invalid length. [ 664.416361][ T30] audit: type=1400 audit(1785509377.299:1541): avc: denied { write } for pid=15623 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.456820][T14072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.471757][T14072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.683582][T15640] __nla_validate_parse: 1 callbacks suppressed [ 664.683611][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 664.703729][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 664.713875][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 664.724209][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 665.576628][ T30] audit: type=1400 audit(1785509378.459:1542): avc: denied { write } for pid=15636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.768860][T15667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2970'. [ 666.332458][ T30] audit: type=1400 audit(1785509379.219:1543): avc: denied { write } for pid=15670 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 666.425980][T15680] vxfs: unable to read disk superblock at 1 [ 666.432361][T15680] vxfs: unable to read disk superblock at 8 [ 666.438322][T15680] vxfs: can't find superblock. [ 666.508995][T15681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2972'. [ 667.207730][T12525] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 667.359663][T12525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.371278][T12525] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 667.381690][T12525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.394878][T12525] usb 3-1: config 0 descriptor?? [ 667.654024][T12525] usbhid 3-1:0.0: can't add hid device: -71 [ 667.660722][T12525] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 667.673316][T12525] usb 3-1: USB disconnect, device number 55 [ 668.129871][T12525] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 668.289208][T12525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.300388][T12525] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 668.309500][T12525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.320250][T12525] usb 3-1: config 0 descriptor?? [ 668.379361][T12821] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 668.539318][T12821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.549686][T12821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 668.557990][T12821] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 668.567496][T12821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.575606][T12821] usb 2-1: Product: syz [ 668.579966][T12821] usb 2-1: Manufacturer: syz [ 668.584624][T12821] usb 2-1: SerialNumber: syz [ 668.591295][T12821] usb 2-1: config 0 descriptor?? [ 668.601234][T12821] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 668.614155][T12821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 668.624185][T12821] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 668.632933][T12821] usb 2-1: media controller created [ 668.647413][T12821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 668.687775][T12821] DVB: Unable to find symbol tda10046_attach() [ 668.694017][T12821] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 668.702776][T12821] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 668.747712][ T5809] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 668.927772][ T5809] usb 4-1: Using ep0 maxpacket: 8 [ 668.934189][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 668.945445][ T5809] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 668.954614][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.965146][ T5809] usb 4-1: config 0 descriptor?? [ 669.138218][T12525] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 669.186438][ T5809] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 669.215483][T12821] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 669.215964][T12525] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input50 [ 669.260311][T12821] usb 2-1: USB disconnect, device number 52 [ 669.414653][T15728] netlink: 'syz.0.2990': attribute type 13 has an invalid length. [ 669.455369][T12525] usb 4-1: USB disconnect, device number 51 [ 669.670180][T12821] usb 3-1: USB disconnect, device number 56 [ 669.670180][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 670.012105][T15753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2998'. [ 670.649520][T15763] vxfs: unable to read disk superblock at 1 [ 670.655976][T15763] vxfs: unable to read disk superblock at 8 [ 670.661954][T15763] vxfs: can't find superblock. [ 670.731401][T15764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3000'. [ 671.203596][T15774] fuse: fd is not a fuse device [ 671.375655][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 671.394408][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 671.402583][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 671.410915][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 671.419367][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 671.443658][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 671.455536][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 671.463794][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 671.471868][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 671.489644][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 671.500599][ T30] audit: type=1400 audit(1785509384.389:1544): avc: denied { mounton } for pid=15781 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 671.874279][T15781] lo speed is unknown, defaulting to 1000 [ 672.355449][T15781] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.362648][T15781] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.374571][T15781] bridge_slave_0: entered allmulticast mode [ 672.382461][T15781] bridge_slave_0: entered promiscuous mode [ 672.392683][T15781] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.400343][T15781] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.407927][T15781] bridge_slave_1: entered allmulticast mode [ 672.415442][T15781] bridge_slave_1: entered promiscuous mode [ 672.448147][T15781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.463123][T15781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.494541][T15781] team0: Port device team_slave_0 added [ 672.502464][T15781] team0: Port device team_slave_1 added [ 672.510054][ T30] audit: type=1400 audit(1785509385.399:1545): avc: denied { execmod } for pid=15820 comm="syz.0.3013" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=52968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 672.526941][T15781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.546378][T15781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.565867][ T30] audit: type=1400 audit(1785509385.429:1546): avc: denied { execute } for pid=15820 comm="syz.0.3013" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=52968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 672.572687][T15781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.611127][T15781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.618375][T15781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.645107][T15781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.692354][T15781] hsr_slave_0: entered promiscuous mode [ 672.699164][T15781] hsr_slave_1: entered promiscuous mode [ 672.705347][T15781] debugfs: 'hsr0' already exists in 'hsr' [ 672.711616][T15781] Cannot create hsr debugfs directory [ 673.058293][T15835] binder: 15834:15835 ioctl c0306201 0 returned -14 [ 673.185446][T15839] binder: 15834:15839 ioctl c0306201 0 returned -14 [ 673.287376][T15781] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 673.305081][T15781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 673.320189][T15781] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 673.338265][T15781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.348963][T15781] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 673.361037][T15781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.369713][T15781] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 673.383321][T15781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 673.556056][T15781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.575988][T15781] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.582868][ T50] Bluetooth: hci4: command tx timeout [ 673.606506][T14073] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.613648][T14073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.623680][T14073] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.630816][T14073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.744136][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3022'. [ 674.005140][T15781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.088037][ T5809] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 674.270351][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 674.291196][ T5809] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 674.304020][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.307792][T15781] veth0_vlan: entered promiscuous mode [ 674.316499][ T5809] usb 2-1: config 0 descriptor?? [ 674.331327][T15866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 674.349320][T15781] veth1_vlan: entered promiscuous mode [ 674.400006][T15781] veth0_macvtap: entered promiscuous mode [ 674.428609][T15781] veth1_macvtap: entered promiscuous mode [ 674.497701][T15781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.546554][T15781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.598307][T14068] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.732050][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.741504][T14073] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.760073][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.770614][T14073] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.773693][ T5809] hid_parser_main: 4011 callbacks suppressed [ 674.773710][ T5809] kye 0003:0458:0138.0027: unknown main item tag 0x0 [ 674.817886][T14073] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.823908][ T5809] kye 0003:0458:0138.0027: unknown main item tag 0x0 [ 674.857462][ T5809] kye 0003:0458:0138.0027: unknown main item tag 0x0 [ 674.876257][ T5809] kye 0003:0458:0138.0027: unknown main item tag 0x0 [ 674.897898][ T5809] kye 0003:0458:0138.0027: unknown main item tag 0x0 [ 674.905685][T15627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.906125][ T5809] kye 0003:0458:0138.0027: unknown main item tag 0x0 [ 674.921844][ T5809] kye 0003:0458:0138.0027: unexpected long global item [ 674.930155][ T5809] kye 0003:0458:0138.0027: parse failed [ 674.934526][T15627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.940646][ T5809] kye 0003:0458:0138.0027: probe with driver kye failed with error -22 [ 674.967577][ T30] audit: type=1400 audit(1785509387.849:1547): avc: denied { mounton } for pid=15781 comm="syz-executor" path="/root/syzkaller.zwkTRr/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 674.986026][ T5809] usb 2-1: USB disconnect, device number 53 [ 675.049877][ T30] audit: type=1400 audit(1785509387.849:1548): avc: denied { mounton } for pid=15781 comm="syz-executor" path="/root/syzkaller.zwkTRr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 675.158613][ T30] audit: type=1400 audit(1785509387.849:1549): avc: denied { mounton } for pid=15781 comm="syz-executor" path="/root/syzkaller.zwkTRr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=53469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 675.253531][ T30] audit: type=1400 audit(1785509387.889:1550): avc: denied { mounton } for pid=15781 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 675.358343][ T30] audit: type=1400 audit(1785509387.889:1551): avc: denied { mount } for pid=15781 comm="syz-executor" name="/" dev="gadgetfs" ino=6947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 675.468122][T15902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3030'. [ 675.537307][ T30] audit: type=1400 audit(1785509387.919:1552): avc: denied { mounton } for pid=15781 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 675.683039][ T50] Bluetooth: hci4: command tx timeout [ 675.881547][ T30] audit: type=1400 audit(1785509388.769:1553): avc: denied { ioctl } for pid=15903 comm="syz.5.3003" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 676.091053][T15908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3032'. [ 676.388399][T15920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.853311][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3040'. [ 676.873221][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3040'. [ 676.976489][ T30] audit: type=1400 audit(1785509389.859:1554): avc: denied { setopt } for pid=15933 comm="syz.2.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 677.747928][ T50] Bluetooth: hci4: command tx timeout [ 677.914645][T15956] vxfs: unable to read disk superblock at 1 [ 677.921167][T15956] vxfs: unable to read disk superblock at 8 [ 677.927099][T15956] vxfs: can't find superblock. [ 677.998238][T15958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3044'. [ 678.885893][T15980] netlink: 'syz.1.3050': attribute type 1 has an invalid length. [ 678.995786][T15980] bond3 (unregistering): Released all slaves [ 679.717748][ T5809] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 679.827770][ T30] audit: type=1400 audit(1785509392.709:1555): avc: denied { write } for pid=15997 comm="syz.5.3057" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 679.850498][T15935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 679.859545][ T50] Bluetooth: hci4: command tx timeout [ 679.971923][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 679.985294][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 680.021947][T16005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3056'. [ 680.076292][ T5809] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 680.106020][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.137223][ T5809] usb 2-1: Product: syz [ 680.169706][ T5809] usb 2-1: Manufacturer: syz [ 680.195890][ T5809] usb 2-1: SerialNumber: syz [ 680.276773][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.319074][ T5809] usb 2-1: config 0 descriptor?? [ 680.333060][ T5809] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 680.342610][ T5809] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 680.579728][T16014] binder: 16013:16014 ioctl c0306201 200000000040 returned -11 [ 680.589148][T16014] binder: 16013:16014 ioctl c0306201 200000000640 returned -22 [ 680.838684][ T30] audit: type=1400 audit(1785509393.719:1556): avc: denied { mount } for pid=16022 comm="syz.4.3065" name="/" dev="autofs" ino=53952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 680.866176][ T30] audit: type=1400 audit(1785509393.719:1557): avc: denied { read } for pid=16022 comm="syz.4.3065" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 680.911276][T16025] netlink: 'syz.5.3064': attribute type 1 has an invalid length. [ 680.943642][ T30] audit: type=1400 audit(1785509393.729:1558): avc: denied { open } for pid=16022 comm="syz.4.3065" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 681.022673][ T30] audit: type=1400 audit(1785509393.729:1559): avc: denied { ioctl } for pid=16022 comm="syz.4.3065" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 681.061965][ T5809] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 681.066847][ T30] audit: type=1400 audit(1785509393.729:1560): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 681.202772][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 681.219335][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 681.229912][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 681.242575][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 681.726839][ T30] audit: type=1400 audit(1785509394.609:1561): avc: denied { connect } for pid=16035 comm="syz.4.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 682.228527][T16045] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3071'. [ 682.563412][ T5809] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 682.583938][ T5809] em28xx 2-1:0.0: board has no eeprom [ 682.660344][ T5809] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 682.672554][ T5809] em28xx 2-1:0.0: dvb set to bulk mode. [ 682.681237][ T5707] em28xx 2-1:0.0: Binding DVB extension [ 682.704906][ T5809] usb 2-1: USB disconnect, device number 54 [ 682.735700][ T5809] em28xx 2-1:0.0: Disconnecting em28xx [ 682.921976][ T5707] em28xx 2-1:0.0: Registering input extension [ 682.977735][ T5809] em28xx 2-1:0.0: Closing input extension [ 683.140147][ T5809] em28xx 2-1:0.0: Freeing device [ 683.291565][T16058] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3076'. [ 683.501427][T16067] netlink: 'syz.0.3080': attribute type 1 has an invalid length. [ 683.645147][ T5809] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 683.765266][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 683.777939][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 683.787953][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 683.797915][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 684.141442][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.165227][ T5809] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 684.206537][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.229611][ T5809] usb 2-1: config 0 descriptor?? [ 684.463453][ T5809] usbhid 2-1:0.0: can't add hid device: -71 [ 684.479767][ T5809] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 684.501429][ T5809] usb 2-1: USB disconnect, device number 55 [ 684.555662][T16087] vxfs: unable to read disk superblock at 1 [ 684.562116][T16087] vxfs: unable to read disk superblock at 8 [ 684.568064][T16087] vxfs: can't find superblock. [ 685.203310][T16092] veth0_macvtap: Caught tx_queue_len zero misconfig [ 685.249339][ T5809] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 685.479582][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.490644][ T5809] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 685.500735][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.526307][ T5809] usb 2-1: config 0 descriptor?? [ 686.368362][ T5809] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 686.380109][ T5809] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input52 [ 686.694229][T16110] overlayfs: failed to clone upperpath [ 686.770139][T13855] usb 2-1: USB disconnect, device number 56 [ 686.770186][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 687.105231][T16114] overlayfs: upper fs does not support file handles, falling back to index=off. [ 687.416981][T16122] input: syz0 as /devices/virtual/input/input53 [ 687.426150][T16123] overlayfs: failed to clone upperpath [ 687.458634][ T30] audit: type=1400 audit(1785509400.339:1562): avc: denied { remount } for pid=16121 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 687.920712][ T30] audit: type=1400 audit(1785509400.809:1563): avc: denied { mounton } for pid=16145 comm="syz.1.3106" path="/621/file0" dev="tmpfs" ino=3357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 688.256251][T16152] vxfs: unable to read disk superblock at 1 [ 688.262687][T16152] vxfs: unable to read disk superblock at 8 [ 688.268657][T16152] vxfs: can't find superblock. [ 688.334709][T16153] __nla_validate_parse: 3 callbacks suppressed [ 688.334743][T16153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3107'. [ 689.480883][ T30] audit: type=1804 audit(1785509402.369:1564): pid=16168 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3111" name="file1" dev="tmpfs" ino=3650 res=1 errno=0 [ 689.632653][T16170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'. [ 689.670908][T16176] fuse: fd is not a fuse device [ 690.281839][ T30] audit: type=1400 audit(1785509403.169:1565): avc: denied { setopt } for pid=16211 comm="syz.0.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 690.368087][ T5809] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 690.557884][ T5809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 690.571167][ T5809] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 690.579123][ T5809] usb 3-1: can't read configurations, error -71 [ 691.180399][ T30] audit: type=1400 audit(1785509404.069:1566): avc: denied { mounton } for pid=16221 comm="syz.2.3129" path="/593/file0" dev="tmpfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 691.325161][T16231] fuse: fd is not a fuse device [ 691.477722][ T5721] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 691.627707][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 691.634447][ T5721] usb 5-1: config 0 has no interfaces? [ 691.642137][ T5721] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 691.652154][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.662277][ T5721] usb 5-1: Product: syz [ 691.666564][ T5721] usb 5-1: Manufacturer: syz [ 691.671537][ T5721] usb 5-1: SerialNumber: syz [ 691.683358][ T5721] usb 5-1: config 0 descriptor?? [ 691.721660][T16155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 691.913254][ T5721] usb 5-1: USB disconnect, device number 55 [ 692.029408][T16241] kvm: pic: level sensitive irq not supported [ 692.929804][ T30] audit: type=1400 audit(1785509405.819:1567): avc: denied { bind } for pid=16259 comm="syz.4.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 693.313189][ T30] audit: type=1400 audit(1785509406.199:1568): avc: denied { write } for pid=16265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.399188][ T5714] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 693.449657][ T30] audit: type=1400 audit(1785509406.339:1569): avc: denied { write } for pid=16290 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.577899][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 693.589305][ T5714] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 693.598779][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.611364][ T5714] usb 6-1: config 0 descriptor?? [ 693.633058][ T5714] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 693.748004][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 693.792281][ T30] audit: type=1400 audit(1785509406.679:1570): avc: denied { write } for pid=16298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.879407][ T30] audit: type=1400 audit(1785509406.769:1571): avc: denied { write } for pid=16312 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.919529][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 693.929500][ T30] audit: type=1400 audit(1785509406.809:1572): avc: denied { write } for pid=16313 comm="syz.4.3154" name="0x409" dev="configfs" ino=14604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.962956][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 693.977775][ T10] usb 2-1: config 0 has no interface number 0 [ 693.986812][ T30] audit: type=1400 audit(1785509406.839:1573): avc: denied { write } for pid=16313 comm="syz.4.3154" name="0x409" dev="configfs" ino=14604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.991500][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 694.067044][ T30] audit: type=1400 audit(1785509406.849:1574): avc: denied { remove_name } for pid=16313 comm="syz.4.3154" name="s1" dev="configfs" ino=55129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 694.073660][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.106736][ T30] audit: type=1400 audit(1785509406.849:1575): avc: denied { rmdir } for pid=16313 comm="syz.4.3154" name="s1" dev="configfs" ino=55129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 694.150726][ T30] audit: type=1400 audit(1785509406.849:1576): avc: denied { write } for pid=16313 comm="syz.4.3154" name="strings" dev="configfs" ino=16048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 694.152508][ T10] usb 2-1: Product: syz [ 694.221972][T16320] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 694.232793][ T10] usb 2-1: Manufacturer: syz [ 694.250821][ T10] usb 2-1: SerialNumber: syz [ 694.283857][ T10] usb 2-1: config 0 descriptor?? [ 694.303222][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 694.773140][T16350] tipc: Started in network mode [ 694.787507][T16350] tipc: Node identity 1000001, cluster identity 4711 [ 694.804858][T16350] tipc: Node number set to 16777217 [ 694.815670][T16350] tipc: Enabled bearer , priority 1 [ 694.844243][T16349] tipc: Resetting bearer [ 694.889246][T16349] tipc: Disabling bearer [ 695.357744][ T5721] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 695.457338][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.517779][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 695.534484][ T5721] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 695.658031][ T5714] gspca_vc032x: reg_w err -71 [ 695.661975][ T5721] usb 3-1: config 0 interface 0 has no altsetting 0 [ 695.665267][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.685278][ T5721] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 695.687652][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.704792][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.711610][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.730217][ T5721] usb 3-1: config 0 descriptor?? [ 695.740286][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.757449][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.773513][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.788038][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.794882][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.809196][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.824899][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.832013][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.842119][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.857871][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.863890][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.874814][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.887867][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.897732][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 695.907662][ T5714] gspca_vc032x: Unknown sensor... [ 695.917784][ T5714] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 695.938440][ T5714] usb 6-1: USB disconnect, device number 2 [ 696.191199][ T5721] hid (null): unknown global tag 0xc [ 696.222979][ T5721] magicmouse 0003:05AC:0269.0028: unexpected long global item [ 696.255208][ T10] gspca_spca1528: reg_r err -71 [ 696.268403][ T5721] magicmouse 0003:05AC:0269.0028: magicmouse hid parse failed [ 696.277506][ T10] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 696.290429][ T5721] magicmouse 0003:05AC:0269.0028: probe with driver magicmouse failed with error -22 [ 696.303384][ T10] usb 2-1: USB disconnect, device number 57 [ 696.327017][T16381] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3166'. [ 696.337797][T16381] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3166'. [ 696.470944][T12525] usb 3-1: USB disconnect, device number 59 [ 696.515171][T16388] fuse: fd is not a fuse device [ 696.630987][T16399] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3172'. [ 696.676986][T16401] netlink: 'syz.5.3173': attribute type 1 has an invalid length. [ 696.928588][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3173'. [ 696.941034][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3173'. [ 696.951274][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3173'. [ 696.963560][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3173'. [ 698.402246][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 698.402263][ T30] audit: type=1400 audit(1785509411.289:1582): avc: denied { write } for pid=16448 comm="syz.2.3188" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 700.330985][T16475] overlayfs: statfs failed on './file0' [ 700.426127][T16478] TC_ACT_REPEAT abuse ? [ 701.015375][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3199'. [ 701.284107][T16495] kvm: user requested TSC rate below hardware speed [ 701.565198][T16500] vxfs: unable to read disk superblock at 1 [ 701.571727][T16500] vxfs: unable to read disk superblock at 8 [ 701.577698][T16500] vxfs: can't find superblock. [ 701.647301][T16501] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3202'. [ 702.217752][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 702.249781][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 702.263627][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 702.272993][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 702.280825][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 702.346751][T16516] lo: Caught tx_queue_len zero misconfig [ 702.375508][T16516] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 702.655709][T14073] bridge_slave_1: left allmulticast mode [ 702.679146][T14073] bridge_slave_1: left promiscuous mode [ 702.707503][T14073] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.784368][T14073] bridge_slave_0: left allmulticast mode [ 702.793869][T14073] bridge_slave_0: left promiscuous mode [ 702.813347][T14073] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.856489][T14073] pim6reg: left allmulticast mode [ 703.036862][T16534] netlink: 'syz.1.3209': attribute type 1 has an invalid length. [ 703.805528][ T30] audit: type=1400 audit(1785509416.699:1583): avc: denied { write } for pid=16523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.027835][ T30] audit: type=1400 audit(1785509416.909:1584): avc: denied { write } for pid=16548 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.531178][ T5619] Bluetooth: hci1: command tx timeout [ 704.673470][T14073] bond0 (unregistering): (slave 30): Releasing backup interface [ 704.694341][T14073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.713308][T14073] bond0 (unregistering): Released all slaves [ 704.724883][T14073] bond1 (unregistering): Released all slaves [ 704.739548][T16540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3209'. [ 704.803978][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 704.891171][T14073] : left promiscuous mode [ 704.927891][ T5809] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 705.097758][ T5809] usb 6-1: Using ep0 maxpacket: 8 [ 705.109958][ T5809] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 705.150725][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.156645][T16511] lo speed is unknown, defaulting to 1000 [ 705.185836][ T5809] usb 6-1: Product: syz [ 705.209427][ T5809] usb 6-1: Manufacturer: syz [ 705.230681][T14073] tipc: Left network mode [ 705.234490][ T5809] usb 6-1: SerialNumber: syz [ 705.260886][ T5809] usb 6-1: config 0 descriptor?? [ 705.295302][ T5809] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 705.332968][ T5809] pctv452e: pctv452e_power_ctrl: 1 [ 705.332968][ T5809] [ 705.347574][ T5809] usb 6-1: selecting invalid altsetting 3 [ 705.363760][ T5809] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 705.363760][ T5809] [ 705.395292][ T5809] dvb-usb: bulk message failed: -22 (5/0) [ 705.421510][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 705.439461][ T5809] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 705.453206][ T5809] usb 6-1: media controller created [ 705.462790][ T5809] dvb-usb: bulk message failed: -22 (8/0) [ 705.472322][ T5809] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 705.480583][ T5809] dvb-usb: MAC address reading failed. [ 705.503908][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 705.601551][ T5809] DVB: Unable to find symbol stb0899_attach() [ 705.615367][ T5809] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 705.845812][ T30] audit: type=1400 audit(1785509418.729:1585): avc: denied { write } for pid=16571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.904882][T16607] vxfs: unable to read disk superblock at 1 [ 705.911424][T16607] vxfs: unable to read disk superblock at 8 [ 705.917354][T16607] vxfs: can't find superblock. [ 705.946493][T16607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3219'. [ 705.980506][ T5809] rc_core: IR keymap rc-tt-1500 not found [ 706.064490][ T5809] Registered IR keymap rc-empty [ 706.292916][ T5809] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 706.353989][ T5809] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input54 [ 706.415649][ T5809] dvb-usb: schedule remote query interval to 100 msecs. [ 706.431367][ T30] audit: type=1400 audit(1785509419.319:1586): avc: denied { map } for pid=16613 comm="syz.5.3221" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 706.460974][ T5809] pctv452e: pctv452e_power_ctrl: 0 [ 706.460974][ T5809] [ 706.490242][ T5809] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 706.530852][ T30] audit: type=1400 audit(1785509419.349:1587): avc: denied { call } for pid=16613 comm="syz.5.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 706.533633][ T5809] usb 6-1: USB disconnect, device number 3 [ 706.593812][T12821] dvb-usb: bulk message failed: -22 (4/0) [ 706.610381][ T5619] Bluetooth: hci1: command tx timeout [ 706.622871][T12821] dvb-usb: error -22 while querying for an remote control event. [ 706.627119][ T30] audit: type=1400 audit(1785509419.399:1588): avc: denied { write } for pid=16612 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.365240][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 707.558218][T16628] netlink: 'syz.0.3224': attribute type 1 has an invalid length. [ 707.576819][ T5809] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 707.750108][T14073] hsr_slave_0: left promiscuous mode [ 707.770891][T14073] hsr_slave_1: left promiscuous mode [ 707.921882][T14073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.272025][T14073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.707718][ T5619] Bluetooth: hci1: command tx timeout [ 708.778328][T14073] team0 (unregistering): Port device team_slave_1 removed [ 708.812103][T14073] team0 (unregistering): Port device team_slave_0 removed [ 708.977063][T16647] vxfs: unable to read disk superblock at 1 [ 708.983643][T16647] vxfs: unable to read disk superblock at 8 [ 708.989604][T16647] vxfs: can't find superblock. [ 709.056440][T16648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3227'. [ 709.377750][T13855] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 709.470440][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3224'. [ 709.528061][T13855] usb 2-1: Using ep0 maxpacket: 32 [ 709.551700][T13855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.602364][T13855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.641031][T16511] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.648358][T13855] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 709.665425][T16511] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.675508][T16511] bridge_slave_0: entered allmulticast mode [ 709.693494][T16511] bridge_slave_0: entered promiscuous mode [ 709.705258][T13855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.710525][T16511] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.730722][T16511] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.747124][T16511] bridge_slave_1: entered allmulticast mode [ 709.751453][T13855] usb 2-1: config 0 descriptor?? [ 709.760912][T16511] bridge_slave_1: entered promiscuous mode [ 709.796530][T13855] hub 2-1:0.0: USB hub found [ 709.883551][T16511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.919096][T16511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.005852][T16511] team0: Port device team_slave_0 added [ 710.017026][T16511] team0: Port device team_slave_1 added [ 710.025507][T13855] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 710.086272][T16511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.112042][T16511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.172609][T16511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.196223][T16511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.204918][ T30] audit: type=1400 audit(1785509423.089:1589): avc: denied { write } for pid=16656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.215163][T16511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.306108][T16511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.344633][T16675] netlink: 'syz.5.3232': attribute type 1 has an invalid length. [ 710.348885][ T30] audit: type=1400 audit(1785509423.239:1590): avc: denied { write } for pid=16672 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.459562][T16645] netlink: 'syz.1.3228': attribute type 1 has an invalid length. [ 710.520303][T16645] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3228'. [ 710.547170][T16511] hsr_slave_0: entered promiscuous mode [ 710.557227][T16511] hsr_slave_1: entered promiscuous mode [ 710.774998][ T5619] Bluetooth: hci1: command tx timeout [ 710.826791][T16511] debugfs: 'hsr0' already exists in 'hsr' [ 710.837552][T16511] Cannot create hsr debugfs directory [ 710.892456][T16681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3232'. [ 710.909759][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 710.987232][T13855] usbhid 2-1:0.0: can't add hid device: -71 [ 710.994677][T13855] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 711.056073][T13855] usb 2-1: USB disconnect, device number 58 [ 711.269494][T16691] kvm: kvm [16690]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 711.369875][ T30] audit: type=1400 audit(1785509424.259:1591): avc: denied { write } for pid=16684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.477407][ T30] audit: type=1400 audit(1785509424.359:1592): avc: denied { create } for pid=16698 comm="syz.5.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 711.519450][ T30] audit: type=1400 audit(1785509424.399:1593): avc: denied { write } for pid=16700 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.611935][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 711.642818][T16699] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3234'. [ 711.831224][T16708] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3237'. [ 711.916200][T16712] netlink: 'syz.0.3238': attribute type 1 has an invalid length. [ 712.042059][T16714] bridge0: port 1(wlan1) entered blocking state [ 712.074382][T16714] bridge0: port 1(wlan1) entered disabled state [ 712.100401][T16714] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 712.122469][T16714] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 712.607656][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3238'. [ 712.814674][T16511] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 712.863435][T16511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 712.888596][T16511] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 712.910992][T16511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 712.922175][T16511] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 712.956270][T16511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.974160][T16511] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 712.993627][T16511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 713.152742][T16511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.192885][T16511] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.230957][T14068] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.238773][T14068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.252841][T14068] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.260017][T14068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.791317][ T30] audit: type=1400 audit(1785509426.679:1594): avc: denied { listen } for pid=16779 comm="syz.5.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 713.846939][T16782] overlayfs: failed to clone upperpath [ 714.023005][T16794] fuse: fd is not a fuse device [ 714.063587][T16511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.227761][ T5721] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 714.307025][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3262'. [ 714.397683][ T5721] usb 2-1: Using ep0 maxpacket: 16 [ 714.411195][ T5721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.421359][ T30] audit: type=1400 audit(1785509427.299:1595): avc: denied { write } for pid=16790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.456197][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.493396][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.518295][ T30] audit: type=1400 audit(1785509427.399:1596): avc: denied { listen } for pid=16819 comm="syz.0.3265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 714.540959][ T5721] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 714.565089][ T5721] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.610577][ T5721] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 714.627177][ T5721] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 714.665074][ T5721] usb 2-1: Manufacturer: syz [ 714.684376][ T30] audit: type=1400 audit(1785509427.569:1597): avc: denied { write } for pid=16827 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.713614][ T5721] usb 2-1: config 0 descriptor?? [ 714.742076][T16511] veth0_vlan: entered promiscuous mode [ 714.786658][T16511] veth1_vlan: entered promiscuous mode [ 714.842994][T16511] veth0_macvtap: entered promiscuous mode [ 714.855596][T16511] veth1_macvtap: entered promiscuous mode [ 715.426165][T16511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.439030][T16511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.507747][T15627] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.517116][T15627] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.528504][ T5721] rc_core: IR keymap rc-hauppauge not found [ 715.549420][ T5721] Registered IR keymap rc-empty [ 715.575190][ T5721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 715.577037][T16848] netlink: 'syz.4.3268': attribute type 10 has an invalid length. [ 715.666762][ T30] audit: type=1400 audit(1785509428.549:1598): avc: denied { write } for pid=16844 comm="syz.4.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 715.688484][ T5721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 715.699265][T15620] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.722858][T16848] team0: Port device bridge1 removed [ 715.731913][ T5721] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 715.762211][ T5721] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input55 [ 715.788791][T16848] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 715.805948][ T5721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 715.898621][ T5721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 715.913797][T14068] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.956315][ T30] audit: type=1400 audit(1785509428.829:1599): avc: denied { write } for pid=16837 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 715.967760][ T5721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.068101][ T5721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.091960][T14068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.116177][T14068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.135760][ T5721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.156019][T14068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.164384][T14068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.172247][ T5721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.198897][ T30] audit: type=1400 audit(1785509429.079:1600): avc: denied { write } for pid=16866 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.199818][ T5721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.277769][ T5721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.309316][ T5721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.348734][ T5721] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 716.400637][ T5721] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 716.474763][ T5721] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 716.506496][ T5721] usb 2-1: USB disconnect, device number 59 [ 716.580908][T16879] vxfs: unable to read disk superblock at 1 [ 716.587686][T16879] vxfs: unable to read disk superblock at 8 [ 716.593603][T16879] vxfs: can't find superblock. [ 716.663014][T16880] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3203'. [ 717.047450][T16883] Bluetooth: (null): Non-link packet received in non-active state [ 717.752299][T16895] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 717.844221][T16895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 717.874012][T16897] bond3: (slave veth3): Enslaving as an active interface with a down link [ 718.379764][T16895] veth0_virt_wifi: entered promiscuous mode [ 718.389985][T16895] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 718.412760][T16895] bond3: (slave veth0_virt_wifi): Releasing active interface [ 718.797590][T16916] binder: 16915:16916 unknown command 0 [ 718.803366][T16916] binder: 16915:16916 ioctl c0306201 200000000080 returned -22 [ 718.816883][ T30] audit: type=1400 audit(1785509431.699:1601): avc: denied { transfer } for pid=16915 comm="syz.1.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 720.733266][T16943] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3292'. [ 722.431357][ T30] audit: type=1400 audit(1785509435.319:1602): avc: denied { read } for pid=16961 comm="syz.6.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 722.582411][T16967] 0: reclassify loop, rule prio 0, protocol 03 [ 722.782676][ T30] audit: type=1400 audit(1785509435.669:1603): avc: denied { read write } for pid=16968 comm="syz.5.3301" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 722.783548][T16969] orangefs_devreq_write_iter: userspace claims version0, minimum version required: 20903. [ 722.822459][ T30] audit: type=1400 audit(1785509435.669:1604): avc: denied { open } for pid=16968 comm="syz.5.3301" path="/59/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 723.703632][T16993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3307'. [ 724.363439][ T30] audit: type=1400 audit(1785509437.249:1605): avc: denied { write } for pid=16994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.082049][ T30] audit: type=1400 audit(1785509437.969:1606): avc: denied { write } for pid=17020 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 725.253625][T17025] bridge0: entered allmulticast mode [ 725.302978][T17025] bridge_slave_1: left allmulticast mode [ 725.320581][T17025] bridge_slave_1: left promiscuous mode [ 725.327199][T17022] kvm: pic: non byte write [ 725.334410][T17025] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.351769][T17022] kvm: vcpu 0: requested 52352 ns lapic timer period limited to 200000 ns [ 725.379175][T17025] bridge_slave_0: left allmulticast mode [ 725.385545][T17025] bridge_slave_0: left promiscuous mode [ 725.394672][T17025] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.750987][T17044] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 725.906112][T17048] bond3: (slave veth5): Enslaving as an active interface with a down link [ 725.948435][T17044] vlan2: entered allmulticast mode [ 725.963329][T17044] bond3: entered allmulticast mode [ 725.991082][T17044] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 726.042553][ T30] audit: type=1400 audit(1785509438.929:1607): avc: denied { write } for pid=17037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.205931][ T30] audit: type=1400 audit(1785509439.079:1608): avc: denied { write } for pid=17062 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.246703][T17064] usb_phy_generic pcspkr: dummy supplies not allowed for exclusive requests (id=vbus) [ 726.518965][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3323'. [ 726.643790][T17081] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3323'. [ 727.072202][T17087] futex_wake_op: syz.4.3324 tries to shift op by 144; fix this program [ 727.305060][T17102] overlayfs: failed to clone upperpath [ 727.338295][ T5721] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 727.347679][ T30] audit: type=1400 audit(1785509440.229:1609): avc: denied { write } for pid=17084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.541706][ T5721] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 727.552483][ T30] audit: type=1400 audit(1785509440.449:1610): avc: denied { write } for pid=17107 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.571016][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.631533][ T5721] usb 2-1: Product: syz [ 727.637481][ T30] audit: type=1400 audit(1785509440.479:1611): avc: denied { bind } for pid=17109 comm="syz.6.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 727.647557][ T5721] usb 2-1: Manufacturer: syz [ 727.673966][ T30] audit: type=1400 audit(1785509440.479:1612): avc: denied { setopt } for pid=17109 comm="syz.6.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 727.716317][ T5721] usb 2-1: SerialNumber: syz [ 727.751056][ T30] audit: type=1400 audit(1785509440.489:1613): avc: denied { listen } for pid=17109 comm="syz.6.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 727.820267][ T30] audit: type=1400 audit(1785509440.489:1614): avc: denied { connect } for pid=17109 comm="syz.6.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 727.890649][ T30] audit: type=1400 audit(1785509440.519:1615): avc: denied { accept } for pid=17109 comm="syz.6.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 727.951772][ T30] audit: type=1400 audit(1785509440.519:1616): avc: denied { write } for pid=17109 comm="syz.6.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 728.168965][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 728.220098][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 728.333217][ T30] audit: type=1400 audit(1785509441.219:1617): avc: denied { setattr } for pid=17125 comm="syz.4.3331" name="" dev="pipefs" ino=5425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 728.589940][ T30] audit: type=1400 audit(1785509441.469:1618): avc: denied { write } for pid=17117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.835753][ T30] audit: type=1400 audit(1785509441.719:1619): avc: denied { write } for pid=17141 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.886383][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 729.908381][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 729.943116][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 729.972269][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 730.006595][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 730.027127][ T5721] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 730.070158][ T5721] usb 2-1: USB disconnect, device number 60 [ 730.084954][T17161] fuse: fd is not a fuse device [ 730.279852][T17163] fuse: fd is not a fuse device [ 731.192610][T17177] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 731.287121][T17177] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 731.295715][T17177] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 731.303742][T17177] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 731.314787][T17177] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 731.917750][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 731.980941][T17194] VFS: Mount too revealing [ 732.090727][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 732.106916][ T10] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 732.123484][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 732.154945][ T10] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 732.174651][ T10] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 732.190625][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 732.266947][T17203] vxfs: unable to read disk superblock at 1 [ 732.273466][T17203] vxfs: unable to read disk superblock at 8 [ 732.279436][T17203] vxfs: can't find superblock. [ 732.351296][T17205] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3354'. [ 732.633288][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 732.647746][ T10] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 732.657982][ T10] usb 6-1: Product: syz [ 732.662592][ T10] usb 6-1: Manufacturer: syz [ 732.667292][ T10] usb 6-1: SerialNumber: syz [ 732.689341][ T10] usb 6-1: config 0 descriptor?? [ 732.703931][ T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 732.722608][T17208] netlink: 'syz.0.3356': attribute type 1 has an invalid length. [ 732.735607][ T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 732.988259][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 733.000955][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 733.011112][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 733.021493][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 733.031756][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 733.451583][T17214] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 733.468083][T17214] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 733.516522][ T5714] usb 6-1: USB disconnect, device number 4 [ 733.516538][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 733.523725][T17188] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 733.554941][T17216] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 733.603106][ T5714] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 733.852370][T17225] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3361'. [ 735.347584][ T30] audit: type=1400 audit(1785509448.229:1620): avc: denied { ioctl } for pid=17243 comm="syz.6.3368" path="socket:[60412]" dev="sockfs" ino=60412 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 735.516981][T17250] syzkaller0: entered promiscuous mode [ 735.523068][T17248] fuse: fd is not a fuse device [ 735.528941][T17250] syzkaller0: entered allmulticast mode [ 735.542116][T17250] tipc: Started in network mode [ 735.548566][T17250] tipc: Node identity 5270f97bfdd7, cluster identity 4711 [ 735.556334][T17250] tipc: Enabled bearer , priority 0 [ 735.574465][T17249] tipc: Resetting bearer [ 735.611125][T17249] tipc: Disabling bearer [ 735.800889][ T30] audit: type=1400 audit(1785509448.679:1621): avc: denied { unlink } for pid=17251 comm="syz.5.3372" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 735.899074][T17259] netlink: 'syz.6.3374': attribute type 1 has an invalid length. [ 736.030381][T17263] vxfs: unable to read disk superblock at 1 [ 736.036885][T17263] vxfs: unable to read disk superblock at 8 [ 736.042918][T17263] vxfs: can't find superblock. [ 736.111410][T17264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3375'. [ 736.363138][T17266] netlink: 'syz.4.3376': attribute type 1 has an invalid length. [ 736.621213][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3376'. [ 736.634131][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3376'. [ 740.528906][T12821] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 740.627445][T17320] binder_alloc: 17319: binder_alloc_buf, no vma [ 740.667702][T12525] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 740.809359][T12821] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 740.818253][T12525] usb 2-1: Using ep0 maxpacket: 32 [ 740.819106][T12821] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 740.826741][T12525] usb 2-1: config 32 has an invalid interface number: 85 but max is 0 [ 740.847846][T12821] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 740.853465][T12525] usb 2-1: config 32 has no interface number 0 [ 740.956892][T17326] __nla_validate_parse: 3 callbacks suppressed [ 740.956925][T17326] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3394'. [ 741.347462][T12821] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 741.349820][T12525] usb 2-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 741.356731][T12821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 741.368320][T12525] usb 2-1: config 32 interface 85 has no altsetting 0 [ 741.375725][T12821] usb 6-1: Product: syz [ 741.375746][T12821] usb 6-1: Manufacturer: syz [ 741.385991][T12525] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 741.386719][T12821] usb 6-1: SerialNumber: syz [ 741.391717][T12525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.413449][T12525] usb 2-1: Product: syz [ 741.419862][T12525] usb 2-1: Manufacturer: syz [ 741.424517][T12525] usb 2-1: SerialNumber: syz [ 741.477750][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 741.628271][T12821] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 741.650851][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 741.668587][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.691089][ T10] usb 5-1: config 0 descriptor?? [ 741.700230][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 741.708629][T17331] evm: overlay not supported [ 741.865949][T12821] usb 6-1: USB disconnect, device number 5 [ 741.936910][T17336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3396'. [ 742.368342][T12525] appletouch 2-1:32.85: Failed to request geyser raw mode [ 742.375860][T12525] appletouch 2-1:32.85: probe with driver appletouch failed with error -5 [ 742.391299][T12525] usb 2-1: USB disconnect, device number 61 [ 742.448321][T12821] usblp0: removed [ 742.763572][T17343] syzkaller0: entered promiscuous mode [ 742.769511][T17343] syzkaller0: entered allmulticast mode [ 743.799093][ T10] usb 5-1: USB disconnect, device number 56 [ 744.024838][T17371] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3409'. [ 744.398862][T17385] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.3413'. [ 744.741658][T17398] syzkaller0: entered promiscuous mode [ 744.747303][T17398] syzkaller0: entered allmulticast mode [ 744.766289][T17400] fuse: fd is not a fuse device [ 744.787734][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 745.365265][T17414] xt_nat: multiple ranges no longer supported [ 746.059448][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 746.070466][ T10] usb 6-1: config 0 has no interfaces? [ 746.090125][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 746.162137][T17419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3422'. [ 747.009924][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.022983][ T10] usb 6-1: Product: syz [ 747.027219][ T10] usb 6-1: Manufacturer: syz [ 747.032025][ T10] usb 6-1: SerialNumber: syz [ 747.039227][ T10] usb 6-1: config 0 descriptor?? [ 747.184297][T17432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.214480][T17432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.246932][T17434] xt_hashlimit: size too large, truncated to 1048576 [ 747.389828][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3425'. [ 747.763122][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 747.857958][T17434] netlink: 'syz.1.3427': attribute type 21 has an invalid length. [ 747.866877][T17434] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3427'. [ 747.877766][T17434] netlink: 'syz.1.3427': attribute type 4 has an invalid length. [ 747.885516][T17434] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3427'. [ 747.927703][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 747.936687][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 747.964637][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 747.992974][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 748.005780][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 748.027267][T17447] syzkaller0: entered promiscuous mode [ 748.034114][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.047267][T17447] syzkaller0: entered allmulticast mode [ 748.069487][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 748.080378][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.084081][T17449] Mass Storage Function, version: 2009/09/11 [ 748.091451][ T30] audit: type=1400 audit(1785509460.969:1622): avc: denied { write } for pid=17448 comm="syz.4.3430" name="functions" dev="configfs" ino=16046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 748.113258][T17449] LUN: removable file: (no medium) [ 748.148469][ T30] audit: type=1400 audit(1785509461.029:1623): avc: denied { write } for pid=17448 comm="syz.4.3430" name="c.1" dev="configfs" ino=14609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 748.201870][ T30] audit: type=1400 audit(1785509461.029:1624): avc: denied { write } for pid=17448 comm="syz.4.3430" name="c.1" dev="configfs" ino=14609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 748.269663][ T30] audit: type=1800 audit(1785509461.039:1625): pid=17450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3430" name="UDC" dev="configfs" ino=61991 res=0 errno=0 [ 748.325895][ T30] audit: type=1400 audit(1785509461.209:1626): avc: denied { write } for pid=17448 comm="syz.4.3430" name="functions" dev="configfs" ino=16046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 748.349775][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 748.360059][ T10] usbtmc 7-1:16.0: can't read capabilities [ 748.510808][T12821] usb 6-1: USB disconnect, device number 6 [ 748.642013][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.651525][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.660645][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.669752][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.678845][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.707803][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.716931][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.726019][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.787796][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.792448][T17450] udc dummy_udc.0: failed to start g1: -19 [ 748.796924][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.796965][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.848941][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.858058][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.867129][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.876200][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 748.891112][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 748.909775][T17450] UDC core: g1: couldn't find an available UDC or it's busy [ 749.013401][T12821] usb 7-1: USB disconnect, device number 2 [ 749.280327][T17462] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 749.877695][T12821] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 750.475157][T17471] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3436'. [ 750.689992][T12821] usb 7-1: unable to get BOS descriptor or descriptor too short [ 750.699490][T12821] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 750.705746][T17488] fuse: fd is not a fuse device [ 750.717685][T12821] usb 7-1: can't read configurations, error -71 [ 751.647946][ T5714] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 751.762770][T17508] syzkaller0: entered promiscuous mode [ 751.783478][T17508] syzkaller0: entered allmulticast mode [ 751.809526][ T5714] usb 6-1: unable to get BOS descriptor or descriptor too short [ 751.838505][ T5714] usb 6-1: not running at top speed; connect to a high speed hub [ 751.866018][ T5714] usb 6-1: config 39 has an invalid interface number: 165 but max is 0 [ 751.892247][ T5714] usb 6-1: config 39 has no interface number 0 [ 751.905427][ T30] audit: type=1400 audit(1785509464.769:1627): avc: denied { lock } for pid=17510 comm="syz.1.3450" path="socket:[60904]" dev="sockfs" ino=60904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 751.912110][ T5714] usb 6-1: config 39 interface 165 has no altsetting 0 [ 751.962391][ T5714] usb 6-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=da.9f [ 751.973141][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.981676][ T5714] usb 6-1: Product: syz [ 751.986145][ T5714] usb 6-1: Manufacturer: syz [ 751.991922][ T5714] usb 6-1: SerialNumber: syz [ 752.066949][T17516] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3449'. [ 754.021745][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3452'. [ 754.314806][T17532] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 754.385860][ T30] audit: type=1400 audit(1785509467.269:1628): avc: denied { write } for pid=17537 comm="syz.1.3457" name="cluster" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 754.434685][ T30] audit: type=1400 audit(1785509467.269:1629): avc: denied { write } for pid=17537 comm="syz.1.3457" name="node" dev="configfs" ino=60948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 754.713810][ T5714] usb 6-1: USB disconnect, device number 7 [ 754.737700][ T5809] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 754.918340][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 754.933303][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.963672][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 754.992875][ T5809] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 755.012478][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.043209][ T5809] usb 2-1: config 0 descriptor?? [ 755.380282][ T5809] usbhid 2-1:0.0: can't add hid device: -71 [ 755.403089][ T5809] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 755.438970][ T5809] usb 2-1: USB disconnect, device number 62 [ 755.802923][ T30] audit: type=1400 audit(1785509468.689:1630): avc: denied { write } for pid=17555 comm="syz.5.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 755.839723][ T30] audit: type=1400 audit(1785509468.729:1631): avc: denied { connect } for pid=17559 comm="syz.0.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 756.238236][T17566] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3463'. [ 756.785869][T17568] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 756.792656][T17568] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 756.805611][T17568] vhci_hcd vhci_hcd.0: Device attached [ 756.966558][T17579] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 756.981901][T17574] vhci_hcd: connection closed [ 756.999362][T15627] vhci_hcd vhci_hcd.1: stop threads [ 757.013490][T15627] vhci_hcd vhci_hcd.1: release socket [ 757.021390][T15627] vhci_hcd vhci_hcd.1: disconnect device [ 757.381639][T17593] syz.6.3473 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 757.579953][ T30] audit: type=1400 audit(1785509470.469:1632): avc: denied { write } for pid=17602 comm="syz.1.3477" name="functions" dev="configfs" ino=16046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.635586][ T30] audit: type=1400 audit(1785509470.519:1633): avc: denied { write } for pid=17602 comm="syz.1.3477" name="c.1" dev="configfs" ino=14609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 757.721520][T17606] usbip-vudc usbip-vudc.0: gadget not bound [ 757.834018][T17605] ================================================================== [ 757.842121][T17605] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 757.850379][T17605] Read of size 224 at addr ffffffff9ba55400 by task syz.1.3477/17605 [ 757.858446][T17605] [ 757.860773][T17605] CPU: 1 UID: 0 PID: 17605 Comm: syz.1.3477 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.860800][T17605] Tainted: [L]=SOFTLOCKUP [ 757.860808][T17605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 757.860820][T17605] Call Trace: [ 757.860829][T17605] [ 757.860838][T17605] dump_stack_lvl+0x100/0x190 [ 757.860863][T17605] print_report+0x13d/0x4b0 [ 757.860890][T17605] ? __virt_addr_valid+0x239/0x430 [ 757.860915][T17605] ? usb_copy_descriptors+0x18d/0x320 [ 757.860939][T17605] kasan_report+0xdf/0x1c0 [ 757.860965][T17605] ? usb_copy_descriptors+0x18d/0x320 [ 757.860992][T17605] kasan_check_range+0x10f/0x1e0 [ 757.861021][T17605] __asan_memcpy+0x23/0x60 [ 757.861040][T17605] usb_copy_descriptors+0x18d/0x320 [ 757.861064][T17605] usb_assign_descriptors+0xd2/0x470 [ 757.861088][T17605] f_audio_bind+0x243a/0x3950 [ 757.861119][T17605] ? __pfx_f_audio_bind+0x10/0x10 [ 757.861145][T17605] usb_add_function+0x219/0x890 [ 757.861167][T17605] ? composite_dev_prepare+0x1d1/0x420 [ 757.861195][T17605] configfs_composite_bind+0xd83/0x1960 [ 757.861221][T17605] ? kernfs_create_link+0x1bd/0x240 [ 757.861252][T17605] gadget_bind_driver+0x28c/0xbf0 [ 757.861282][T17605] ? __pfx_gadget_bind_driver+0x10/0x10 [ 757.861310][T17605] really_probe+0x241/0xa60 [ 757.861334][T17605] __driver_probe_device+0x20e/0x450 [ 757.861358][T17605] driver_probe_device+0x4a/0x140 [ 757.861382][T17605] __driver_attach+0x21f/0x5b0 [ 757.861404][T17605] ? __pfx___driver_attach+0x10/0x10 [ 757.861425][T17605] bus_for_each_dev+0x13e/0x1d0 [ 757.861443][T17605] ? __pfx_bus_for_each_dev+0x10/0x10 [ 757.861460][T17605] ? bus_add_driver+0x2b5/0x5b0 [ 757.861482][T17605] bus_add_driver+0x305/0x5b0 [ 757.861502][T17605] driver_register+0x1e2/0x360 [ 757.861527][T17605] usb_gadget_register_driver_owner+0x132/0x210 [ 757.861564][T17605] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 757.861590][T17605] configfs_write_iter+0x302/0x4e0 [ 757.861612][T17605] vfs_write+0x6ac/0x1050 [ 757.861643][T17605] ? __pfx_configfs_write_iter+0x10/0x10 [ 757.861667][T17605] ? __pfx_vfs_write+0x10/0x10 [ 757.861700][T17605] ksys_write+0x12a/0x250 [ 757.861727][T17605] ? __pfx_ksys_write+0x10/0x10 [ 757.861753][T17605] ? trace_syscall_enter+0xd9/0x110 [ 757.861781][T17605] do_syscall_64+0x115/0x870 [ 757.861802][T17605] ? clear_bhb_loop+0x40/0x90 [ 757.861823][T17605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.861843][T17605] RIP: 0033:0x7fb405f9e019 [ 757.861859][T17605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.861879][T17605] RSP: 002b:00007fb406eff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 757.861899][T17605] RAX: ffffffffffffffda RBX: 00007fb406226090 RCX: 00007fb405f9e019 [ 757.861912][T17605] RDX: 000000000000000c RSI: 0000200000000540 RDI: 0000000000000005 [ 757.861923][T17605] RBP: 00007fb40603500c R08: 0000000000000000 R09: 0000000000000000 [ 757.861935][T17605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.861945][T17605] R13: 00007fb406226128 R14: 00007fb406226090 R15: 00007ffc648ae888 [ 757.861964][T17605] [ 757.861971][T17605] [ 758.171058][T17605] The buggy address belongs to the variable: [ 758.177041][T17605] ac_header_desc+0x0/0x40 [ 758.181477][T17605] [ 758.183780][T17605] The buggy address belongs to the physical page: [ 758.190166][T17605] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ba55 [ 758.198901][T17605] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 758.206774][T17605] raw: 00fff00000002000 ffffea00006e9548 ffffea00006e9548 0000000000000000 [ 758.215343][T17605] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 758.223908][T17605] page dumped because: kasan: bad access detected [ 758.230297][T17605] page_owner info is not present (never set?) [ 758.236334][T17605] [ 758.238635][T17605] Memory state around the buggy address: [ 758.244241][T17605] ffffffff9ba55300: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 [ 758.252281][T17605] ffffffff9ba55380: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 758.260323][T17605] >ffffffff9ba55400: 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 758.268456][T17605] ^ [ 758.272757][T17605] ffffffff9ba55480: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 758.280794][T17605] ffffffff9ba55500: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 758.288830][T17605] ================================================================== [ 758.301089][T17605] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 758.308304][T17605] CPU: 0 UID: 0 PID: 17605 Comm: syz.1.3477 Tainted: G L syzkaller #0 PREEMPT(full) [ 758.319242][T17605] Tainted: [L]=SOFTLOCKUP [ 758.323560][T17605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 758.333610][T17605] Call Trace: [ 758.336882][T17605] [ 758.339806][T17605] dump_stack_lvl+0x100/0x190 [ 758.344500][T17605] vpanic+0x552/0x970 [ 758.348475][T17605] ? __pfx_vpanic+0x10/0x10 [ 758.352977][T17605] ? mark_held_locks+0x40/0x70 [ 758.357748][T17605] ? usb_copy_descriptors+0x18d/0x320 [ 758.363154][T17605] panic+0xd1/0xe0 [ 758.366876][T17605] ? __pfx_panic+0x10/0x10 [ 758.371290][T17605] ? usb_copy_descriptors+0x18d/0x320 [ 758.376660][T17605] ? preempt_schedule_common+0x42/0xc0 [ 758.382118][T17605] check_panic_on_warn.cold+0x19/0x34 [ 758.387490][T17605] end_report.part.0+0x3a/0x90 [ 758.392256][T17605] kasan_report.cold+0xe/0x18 [ 758.396934][T17605] ? usb_copy_descriptors+0x18d/0x320 [ 758.402307][T17605] kasan_check_range+0x10f/0x1e0 [ 758.407247][T17605] __asan_memcpy+0x23/0x60 [ 758.411656][T17605] usb_copy_descriptors+0x18d/0x320 [ 758.416856][T17605] usb_assign_descriptors+0xd2/0x470 [ 758.422169][T17605] f_audio_bind+0x243a/0x3950 [ 758.426850][T17605] ? __pfx_f_audio_bind+0x10/0x10 [ 758.431873][T17605] usb_add_function+0x219/0x890 [ 758.436720][T17605] ? composite_dev_prepare+0x1d1/0x420 [ 758.442179][T17605] configfs_composite_bind+0xd83/0x1960 [ 758.447725][T17605] ? kernfs_create_link+0x1bd/0x240 [ 758.452932][T17605] gadget_bind_driver+0x28c/0xbf0 [ 758.457966][T17605] ? __pfx_gadget_bind_driver+0x10/0x10 [ 758.463523][T17605] really_probe+0x241/0xa60 [ 758.468036][T17605] __driver_probe_device+0x20e/0x450 [ 758.473326][T17605] driver_probe_device+0x4a/0x140 [ 758.478354][T17605] __driver_attach+0x21f/0x5b0 [ 758.483117][T17605] ? __pfx___driver_attach+0x10/0x10 [ 758.488402][T17605] bus_for_each_dev+0x13e/0x1d0 [ 758.493247][T17605] ? __pfx_bus_for_each_dev+0x10/0x10 [ 758.498613][T17605] ? bus_add_driver+0x2b5/0x5b0 [ 758.503464][T17605] bus_add_driver+0x305/0x5b0 [ 758.508138][T17605] driver_register+0x1e2/0x360 [ 758.512901][T17605] usb_gadget_register_driver_owner+0x132/0x210 [ 758.519151][T17605] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 758.524786][T17605] configfs_write_iter+0x302/0x4e0 [ 758.529896][T17605] vfs_write+0x6ac/0x1050 [ 758.534231][T17605] ? __pfx_configfs_write_iter+0x10/0x10 [ 758.539862][T17605] ? __pfx_vfs_write+0x10/0x10 [ 758.544635][T17605] ksys_write+0x12a/0x250 [ 758.548966][T17605] ? __pfx_ksys_write+0x10/0x10 [ 758.553814][T17605] ? trace_syscall_enter+0xd9/0x110 [ 758.559019][T17605] do_syscall_64+0x115/0x870 [ 758.563602][T17605] ? clear_bhb_loop+0x40/0x90 [ 758.568267][T17605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.574139][T17605] RIP: 0033:0x7fb405f9e019 [ 758.578535][T17605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.598124][T17605] RSP: 002b:00007fb406eff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 758.606531][T17605] RAX: ffffffffffffffda RBX: 00007fb406226090 RCX: 00007fb405f9e019 [ 758.614484][T17605] RDX: 000000000000000c RSI: 0000200000000540 RDI: 0000000000000005 [ 758.622445][T17605] RBP: 00007fb40603500c R08: 0000000000000000 R09: 0000000000000000 [ 758.630409][T17605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.638358][T17605] R13: 00007fb406226128 R14: 00007fb406226090 R15: 00007ffc648ae888 [ 758.646313][T17605] [ 758.649505][T17605] Kernel Offset: disabled [ 758.653807][T17605] Rebooting in 86400 seconds..