last executing test programs: 36m7.558093372s ago: executing program 32 (id=38): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x10007ffd) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stat\x00') lseek(r1, 0x10001, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 35m44.338739825s ago: executing program 33 (id=145): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0xfffffffffffff339, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0x7fff, 0x6, [0x5, 0x8, 0x10, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x6, 0x0, 0x7, 0x1, 0x14, @struct={0x103, 0xf}, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0x2000000000f, 0x2]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0xffffffff, 0x1ff}, 0x1, 0x800, [0x9, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000200106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001900010000000000000000a20af3ff000500f8ff00000000040002"], 0x20}}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000000a00)=[{{&(0x7f0000000080)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="1b2f2441a633ea4f9e8b21ee9b6500ad2c773e1f05385b9f0647e174bc8c2f4d17d4cbd1b5556f9c267e8d39dd73b157fa7093459f490cc6d6c371fc430c57cbc97a", 0x42}, {&(0x7f0000000180)="bb55649d4404de7616e9995a7a725885dd149eefc314bfb3faf7019462007431ddf8d4e0ccd6a8f0c4dc6f7ff7ee30e39b3c4a8a9c9447faf45cbd22be9005de3a1e8a47be1587af07e4acc127ccb811c01ec9", 0x53}, {&(0x7f0000000200)="262c52ba26bbaeac099d7e3c5d7d157f9ffc856ab937c33c13da24a8", 0x1c}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="e800000000000000110100000700000062f9208a396c7b10153863ec7fe7ff118a527f20c30fc4afaefeedc76e07e64c1543d2d450a2b5e7a5ee768e8fd349bf2ffc90b3be4e1f6aea26f016eea3f4829991ca8ca8f3b43a7f3599425f26ab40c709000000000000002c368ec13f5f8cf65bd8bc5547551f1ae3e0a70fd15d2ad627b8496532ec8f0150f1a9fdefaaec48d2edb93771e804ddaa5fbf4b0c6abd4092af010596fe1344bf18c9501d7881e9864da9102547fdee9f226e73903c239980c4d48d946b8c1b23229a9d1682dbbf4820359a3354f7344b55eedd2128a6c6d1e0522f5ca7001000000000000000030100000900000000010000000000001801000000000100a76885cdebad31034e33be0bcb29655ce2122ff9d69b16d20d558deefa552fe140dbcc468fd04bc10459a9372ccf56f554387788499b0b480eaedece1c68c78c2b633de7a5e8d054015f62c89da4830f078aa66ee06151d1291a0750df806fe03c764b50fb561c44598a3a72f48ad38a3e67b5418fb1c9165579ebcb120ecbc9a5fd19c79ac667e1ef2a74a1e754c4eb46534aa4a2619031653f0da20bfece6df2efc2e61396311f2963c5ed7aef6f4e10f02be24d8d26859a79446c44418e3d7eb9442553f0f19a048a1eec3a433f61f279091cea521bce4900cc7a1d0a315c2224cb0ef7f90c2f97038b171f697b9a38000000000000001001000000080000d9f536bc0b3f0661aeb2be1791843565409482d72185605aaeb883daf313102d8ac31795407d4f7a"], 0x230}}, {{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000580)="55f9539c0e061557415448b7327560690589ca15d02aa99f9a65bb67705186c91c0061e097ea2b33a16c6b9fa936748b87dd7ab647433596d58a68d22c", 0x3d}, {&(0x7f00000005c0)="27f1dc8ae41590e6d5049e7679c55367b3391af418dee9d0ee173c7c4f87dea00331bb9e831b42e3fd63f181fa1b8b302491aff2500783b94f8e074b6c9e5ffc074ca09ab015785c7dd20050823ec6afd22d83a01b34d992017a9b4511b4e76ac6fb0ba16a38193253821d3f11cf9af176770cb51da5f412854668e1100d42624b622bd438da0e111d3b1495487fdcb31179f76db7a5918caf72d3fabb0630a7a4d9d1d0a571a14935e842230ff51635abcba146f255889e8414b7c726921857a02832e18cfb915b4c87e9f46a31ff8ab8195dd9fd01c8d447eaac254170da0d9b87edbabc39b0778b4896beb5a3", 0xee}, {&(0x7f00000006c0)="4565bdc2a91925093d833dadffc36285dd0d5bf723107c26a5d529d68503c91af747d1df1d8c192f7010e78428a321831c00a6207b1cd075d6e7917daeeaa63da7b5cba50ec1b1c35fb5c3ab1523db0fa500902fc752d4b5a6aa4ba4f7d9d1f1921f2bd817cab9eb2f9c17a5fc2992c2e0f94d45194da02cc8e27d353c2989521bbff7e7bd82bdd4b5124fa450dd3cfd74467aa7", 0x94}, {&(0x7f0000000780)="261b77880b73d22fdd3ad17ae52905f05eaa61992fc1c349f8530834eb70eab7e09f646efe46241ce1e71932c31f7abe348803116d10c29152b6fcfd68172097957d21e65f291d30770aa3cc5cef17c7d9e3bc251205792864ad4f1ae43d072a82faa8c4b7c5a63f4e2f09c5db429a0b2543cb70b1c9b43d1c585cfbfd40f994a87c6ce10bafb00e733ec3431b721d6709748ba89ae2c359c36d9356d7f475cd6d7827435ce591a9ab4d31d1d1ca1bb735313e57e3047707a69e884cb5d041631e2ffe5ef91fa0abb9895b48d3655d275f1e78d7a636e501c3cd1d", 0xdb}, {&(0x7f0000000880)="fea0be89a516dcf963ddcbdcd5112c2fe93cb86944310513dc2dba0eb943122aa18021c6360d6a2f8102cdac6796812bc6b6692d67e3276b6fd97c7ed5818f5d8582c35ffbe3d8f67196767cf42468c503ec327be57523e6b1ea17ed88836adc51ce4051c714e00701", 0x69}, {&(0x7f0000000900)="6b1aa25d2aa6defe5f31f4a28c6992a3dedba66a003502ee7904a4efb88ba15b1b06c076c9b79c56f464cae76d4a191f00af367d8bcff36867db65c8fe6009bd9e4f5085de7ea95f44937323075136a51f503eacce6aeef368f6da996d7b72", 0x5f}], 0x6}}], 0x2, 0x20000050) 35m11.950761762s ago: executing program 34 (id=975): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x801, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x138a, 0xb}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 34m1.463344945s ago: executing program 35 (id=2214): r0 = syz_open_dev$loop(&(0x7f0000000500), 0x7, 0x880) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000540)=0x8) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x800, 0x0) (async) memfd_secret(0x80000) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) sendfile(r2, r2, 0x0, 0x1200000000000) (async) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_get_self_attr(0xdc, &(0x7f0000000000)={0x0, 0x0, 0x6e, 0x4e, ""/78}, &(0x7f00000000c0)=0x6e, 0x1) socketpair(0xf, 0x3, 0xb83e, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0) 33m33.446500389s ago: executing program 36 (id=2517): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e) mmap(&(0x7f00004cd000/0x2000)=nil, 0x2000, 0x558af6cc015a28aa, 0x12, r0, 0x5bc7000) 32m29.510376338s ago: executing program 37 (id=3030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x49, 0x8, 0x11}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 30m45.162203594s ago: executing program 38 (id=4356): r0 = socket$inet(0x2, 0x2, 0x1) mount$bpf(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x800000, &(0x7f0000006240)={[{}]}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08c67925c883ce9e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x2004000) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) flistxattr(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 28m16.423266593s ago: executing program 39 (id=6391): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x2804cdc, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 28m1.842002735s ago: executing program 40 (id=6546): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "6271be4d"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x17, 0x4a, "b4ff84caba9a58d45e502590fd9bbe4efcb39d2bcd53ed3c7264bef01175a9c5e5666fd2c66d8e529ab1d854538bd543cc6a3780442ed6d3b1558ae8971bc43014b88871931e581d5a72"}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x83, "f904f221417e4299c52ceef447c50aabf755204a44cf95cdd948e50c3b37b22a7a37b7916b867061890ac3de3d68e2584ce2fe96bbc5b4140a2a678b90d9e807c573263a228bf767d9f2df6b3bc4025b84ea43d90911c93355e78ac9a2f6767b698276912660d674e1db309618b69725d8eb00b71a540fa5ae55da38ced4a5a74afdd7"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x6}}) lstat(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 27m28.201918193s ago: executing program 41 (id=7058): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) (async) 26m36.0159929s ago: executing program 42 (id=8243): readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/207, 0xcf) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/62, 0x3e) (async) setxattr$incfs_size(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=0xf, 0x8, 0x0) (async) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x6e, 0x80000) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x8, &(0x7f0000004480)=[0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xee01]) read$FUSE(0xffffffffffffffff, &(0x7f00000044c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000006500)='./file0\x00', &(0x7f0000006540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() statx(0xffffffffffffffff, &(0x7f00000065c0)='./file0\x00', 0x0, 0x100, &(0x7f0000006600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000006700)={0x1e0, 0x0, r2, [{{0x1, 0x2, 0x7ff, 0x0, 0x1, 0x758, {0x4, 0x6, 0x2, 0x9, 0x10000, 0x6, 0x436, 0x8, 0x7, 0x2000, 0xfb, r3, r5, 0x9, 0x80}}, {0x6, 0x3, 0x1, 0xfffffffc, '\xa2'}}, {{0x4, 0x1, 0xfffffffffffffffa, 0xc813, 0x6, 0x8, {0x3, 0x0, 0x2, 0x0, 0xffffffffffffffc4, 0xfffffffffffffff9, 0x5, 0xb5, 0x4, 0x2000, 0x7fffffff, r6, r8, 0x800, 0x6}}, {0x6, 0x4, 0x0, 0x4d}}, {{0x2, 0x0, 0x29, 0x9, 0x2, 0x19, {0x0, 0x800, 0x1000, 0x101, 0x1, 0xfffffffffffffff9, 0x5, 0xff, 0x81, 0x0, 0x58ee, r9, r11, 0x8001, 0x4}}, {0x6, 0x7, 0x0, 0xfd28}}]}, 0x1e0) (async) mount$9p_unix(&(0x7f0000006900)='./file0\x00', &(0x7f0000006940)='./file0\x00', &(0x7f0000006980), 0xe010, &(0x7f00000069c0)={'trans=unix,', {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x2}}, {@loose}, {@access_client}, {@access_user}, {@access_uid={'access', 0x3d, r7}}, {@ignoreqv}, {@mmap}, {@privport}], [{@dont_appraise}, {@flag='async'}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fsname={'fsname', 0x3d, 'user.incfs.size\x00'}}, {@fowner_eq={'fowner', 0x3d, r7}}]}}) (async) r12 = socket$inet(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000007100)=@filter={'filter\x00', 0xe, 0x3, 0x5fa, [0x0, 0x200000006b00, 0x200000006c56, 0x200000006c86], 0x0, &(0x7f0000006ac0), &(0x7f0000006b00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x95, 0x88f8, 'veth0_to_hsr\x00', 'gretap0\x00', 'vlan0\x00', 'geneve1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0xff, 0x0, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0xae, 0xde, 0x126, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x2, 0xf6, 0x1, 0xe907, 0xc}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xf7, 0x1, {0x2}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x3, 0x8, 0x0, 'nicvf0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', 'batadv0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="291743ed2d5f", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x1ee, 0x266, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:chkpwd_exec_t:s0\x00'}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x101, 'syz0\x00', {0x6}}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x1000, 0x0, 0x0, 0x0, 0x0, "57e3ec3d4c7b1f7304403b06fbfdffa5bd7af533d78e1391ec100dea22f9e8e6dbc03050aa2f04856cc039e3cd01a69a4bd3640e8fff636bbbf40b8b285a69fe"}}}}, {0x9, 0x61, 0x8808, 'pim6reg1\x00', 'veth1_to_batadv\x00', 'ipvlan0\x00', 'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xae, 0xae, 0x1de, [@time={{'time\x00', 0x0, 0x18}, {{0x1, 0x3, 0x57c8, 0x98ff, 0xfffffffe, 0x9, 0x3}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x5, 'system_u:object_r:xconsole_device_t:s0\x00'}}}}]}]}, 0x672) (async) r13 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$PTP_PEROUT_REQUEST2(r13, 0x40383d0c, &(0x7f0000007180)={{0x8, 0x2}, {0x1, 0x9}, 0x1}) mount$tmpfs(0x0, &(0x7f00000071c0)='./file0\x00', &(0x7f0000007200), 0x800000, &(0x7f0000007240)={[{@inode32}, {@huge_advise}, {@gid={'gid', 0x3d, r4}}], [{@euid_gt={'euid>', r10}}, {@fowner_gt={'fowner>', r9}}]}) connect$inet6(0xffffffffffffffff, &(0x7f00000072c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1ff}, 0x1c) (async) r14 = open$dir(&(0x7f0000007300)='./file0\x00', 0x8280, 0xc) renameat2(r14, &(0x7f0000007340)='./file0\x00', r13, &(0x7f0000007380)='./file0/file0\x00', 0x6) (async) setsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f00000073c0)={{{@in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x4dce, 0x4e22, 0xfc01, 0x2, 0xa0, 0xa0, 0x6, 0x0, r6}, {0x4, 0x4, 0x3, 0x100, 0x6188, 0x401, 0x3, 0x1}, {0x9, 0x4, 0x5, 0xe7a}, 0x2, 0x6e6bb9, 0x0, 0x1, 0x2, 0x1}, {{@in6=@private1, 0x4d5, 0x32}, 0xa, @in=@multicast2, 0x3506, 0x2, 0x2, 0x8, 0x8}}, 0xe8) (async) link(&(0x7f00000074c0)='./file0/file0\x00', &(0x7f0000007500)='./file0/file0\x00') (async) shutdown(r13, 0x1) (async) read$FUSE(r13, &(0x7f0000007540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000009580)={0x18, 0x0, r15}, 0x18) (async) recvmsg(0xffffffffffffffff, &(0x7f0000009740)={&(0x7f00000095c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000009700)=[{&(0x7f0000009640)=""/173, 0xad}], 0x1}, 0x40000001) (async) sendmsg$nl_xfrm(r13, &(0x7f0000009980)={&(0x7f0000009780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000009940)={&(0x7f0000009880)=@delpolicy={0x8c, 0x14, 0x10, 0x70bd26, 0x25dfdbfe, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x5, 0x4e20, 0xf, 0xa, 0x60, 0x20, 0x73, 0x0, r6}, 0x6e6bbe}, [@replay_val={0x10, 0xa, {0x70bd26, 0x70bd2a, 0xd}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2a, 0xffffffff}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e23, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) 23m59.090805117s ago: executing program 43 (id=11154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 32) r1 = socket(0xa, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0x3, 0x0, {[0x200, 0x5, 0xbe, 0x81, 0x3, 0xc9, 0x54900000000, 0x7]}}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)={0x1}}) r7 = socket(0xa, 0x1, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) (async, rerun: 64) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000010) (async, rerun: 64) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$inet6_buf(r8, 0x29, 0xcd, &(0x7f0000000340)="9076fa29919834bbbd379f2d521bff55bdb0b528fff6fb8b7826b770c3c0827e1e4f3f73de29caf6", 0x28) bind$inet6(r7, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x1002) 23m35.826736316s ago: executing program 44 (id=11292): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1, 0x1, 0x10}, 0x18) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0xc6) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mknodat(r2, &(0x7f0000000280)='./file0\x00', 0x80, 0x3) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000002c0)={0x1f, @none}, 0x8) ppoll(&(0x7f0000000300)=[{r2, 0x429}, {r3, 0x108}, {}, {r3, 0x8}, {r1, 0x108}], 0x5, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)={[0x84]}, 0x8) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000003c0)={0x3, 0x8cbe, "f9c0aa", 0x3, 0x9}) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x7, @private2, 0x10001}, 0x1c) r4 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r4, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, 0x8, 0x0, 0x30}, 0x10, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x1}, 0x200140c4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000500)=@arm64={0xb, 0x1, 0x0, '\x00', 0x3ff}) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000010580)={0x4000, 0x10, 0x8}, 0x18) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0xa0d) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000105c0)={@remote, @loopback}, &(0x7f0000010600)=0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000010680), r5) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000010780)={&(0x7f0000010640)={0x10, 0x0, 0x0, 0x530230b2bc965ef0}, 0xc, &(0x7f0000010740)={&(0x7f00000106c0)={0x5c, r6, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7f}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xa1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20008815) sendto$inet6(r3, &(0x7f00000107c0)="ac2150352a75664d35325e52c4941602fb00c6fbf942ca7751e4558d00405bb83d3bec2be971eb122c6782d46096e359ee9c55812b76e4becddb7e9bf0081d6c29aef614638c2ff1ff598a5b601f47ffd19fbb536e9f85b25cc8dd73ab8ab211d40e1df9267db40b994c19b71607dd53f65db47b55d853886c49781802233ac02c86f88dca96624bd488d34f52afeb00a208826af44b2c2c48a36d2c11b8fe5bba69a02c96707e8a79462b8a0ebdf220637aa024fd8b8667ca2537439877864e340ca9", 0xc3, 0x20040000, &(0x7f00000108c0)={0xa, 0x4e24, 0x4a57, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) truncate(&(0x7f0000010900)='./file0\x00', 0x8ad) recvmsg(r3, &(0x7f0000012c40)={&(0x7f0000010940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000012b00)=[{&(0x7f00000109c0)=""/4096, 0x1000}, {&(0x7f00000119c0)=""/39, 0x27}, {&(0x7f0000011a00)=""/58, 0x3a}, {&(0x7f0000011a40)=""/4096, 0x1000}, {&(0x7f0000012a40)=""/89, 0x59}, {&(0x7f0000012ac0)=""/37, 0x25}], 0x6, &(0x7f0000012b80)=""/152, 0x98}, 0x0) sendmsg$tipc(r5, &(0x7f0000012f00)={&(0x7f0000012c80)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x2}}, 0x10, &(0x7f0000012e00)=[{&(0x7f0000012cc0)="f864e8b124e62cf4b02fbb5bdf8aa88c470b5f08ffc5cd15ed6777d3358b91d11aed11e75c0d3a8bdd415e9c57e0555e929f2cc795eaf6c796c67470023bedb2f3321de5bc9bbdc902ed3d40378fcd0048c5ca9322ba182e3c459d1513afa7f6eaa10842d0cee61a2cf885cab6cf186a97d841e808e4d8af455251956486fcafbabd004f658333085ac076a3a254f01fc251c0e2ae16a31d4809a878a5d0233d1775ca25cf95d0960a72470e846c88dcb7c2c717a1f4ee91a2fbe6337b14f72469d1738450c9398442082a6333f215c15376c6f4981835eaa8ed5969d9", 0xdd}, {&(0x7f0000012dc0)="99777e2aa82b3adadd135bc2ef441798842533c3ab404d24305eb4d5a30877bc685901395a97de93562bc0e57af45d2448d83d26924df3efa1d280f18654f1f5", 0x40}], 0x2, &(0x7f0000012e40)="cc94dccf11ed2e73cc77560822fe429fe89c68f3c8182e8985c9cb688afa2200282ccd4fb5331bf69b7920ac7fcfb1b9d6c4b92af2b0e352a3c4bfbf00a14f25f441011800db01f184b2355953b37e7cee5a80f8ef3b157ff134842304e4f2f8fe10c22ba5a306cceb3cd9851b0336185289bdf434e0b8046e38b73cf34a2510355e02a4bf518b136cf0fc5085bbe3f73787932b51741273a5f5eb1356fded51255ee60ef51d9c0a31069b5fee8f09b71cc8", 0xb2, 0x4040080}, 0x8000) r8 = open(&(0x7f0000012f40)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200040, 0x10) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000025900)={'syztnl2\x00', &(0x7f0000025880)={'ip6gre0\x00', r7, 0x4, 0x99, 0x13, 0x5, 0x6, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x10, 0x7, 0x3c4}}) sendmmsg$inet6(r9, &(0x7f0000025e00)=[{{&(0x7f0000022f80)={0xa, 0x4e23, 0x4369, @mcast2, 0x6}, 0x1c, &(0x7f0000023100)=[{&(0x7f0000022fc0)='!t', 0x2}, {&(0x7f0000023000)="cb5cce0e874a0a339fb0d0ef2def5eed583368a2c039fbeec39cc06c9c6915f3be79ee7d46a6f1ea8bcd46b3c9fef863c9ceb7715718106880d69f03b96a5aae0cc2dd4b5106ca5faa4febc157ee8078ae367d15844f46659adb8928e65e394dd76d5f469217c330ac87e2f5d758f11a130908d9efcdb739e9f2b31052c0e17221f0933c38ff01bede47ca4e8d3eea5d669ec313e7e7f28dfdb3c51ea2c023d73ec843bd5f82eb97e6f636fe0e2c6046b300902db6551defde6e3a4fd0aa4730f254610008fa560be5d0930c0cbdc7a81bf5ecca0518c1af5073e408", 0xdc}], 0x2, &(0x7f0000023140)=[@rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0x9d, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}}}, @rthdr={{0x38, 0x29, 0x39, {0x73, 0x4, 0x2, 0xe, 0x0, [@loopback, @rand_addr=' \x01\x00']}}}], 0x70}}, {{&(0x7f00000231c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xbf9}, 0x1c, &(0x7f0000023440)=[{&(0x7f0000023200)="7f3b445e2fb26edc0e91cdc8c9c862826539affff324e6652546202ab84944c215969ff04e8e132392f35a3cdb9f9217cf411380331276e4c89168dbaeec7baed31ea74e89048378f21bae7668d75d362bae1d11e530d4b4b0458c8b0d10af8328856e9c69f2bfb76c3a4571c5c5c4b453fb39a151e4d389", 0x78}, {&(0x7f0000023280)="1aeb4feb51f86d3a9a7109eb0e461691fb39562ffcc8e16367dd90e506f829b3cf67139e3d6ab2d159530730f7f844058b0034608d183cfc447c1b1a2e95b0cc0e52bb88e6e91b8bd3a4a687fb78343846f6e1419a620797d1d23a39540fa275bb5caa2b616240841c3f619f33c321e244288a247575c5fbfe40d638847ff60ac04397ec6df6d0344b66d79698", 0x8d}, {&(0x7f0000023340)="9923c41bac94a15c41b364575dd8d34a94a87bb2d3a6c971ad1a9c858a189299d08304f4336abc297cec4091349898143608376da19f1a4c471fe3e26611b8ef5634e2541e6e0c1a951126c5f0155c30a135e1c5db7cd2a0089db377877eaf3def55dbc821db4196d61d3f92c270d795f47d88a3100559c5994ba1cf94e1bae605c822cc01d548b39f354d9314f4a44fded3a6b6758fdfa593136573dadd511bcde3711b772c386a0b4245bb414ab92577acf1c89cc6173eba23c3e668bcd49a2a75f17f9bcdd10d19d1576ca59d38581085be24fff9e5f32fb7c87037623c03bb6e5d3b5817b85d73faad9cef036e", 0xef}], 0x3, &(0x7f0000023480)=[@tclass={{0x14, 0x29, 0x43, 0x3}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x3c, 0xa, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x8, 0x2a, [0x0, 0x8]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x1, [0x9, 0x8]}}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0xfffa}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0xb0}}, {{&(0x7f0000023540)={0xa, 0x4e24, 0x2, @mcast1, 0x7f}, 0x1c, &(0x7f0000023940)=[{&(0x7f0000023580)="642a152bd2932c83199ccd9ed9f539999eddb77a31e565306324b5cb13709310a0725119d9f9abc28598264a9695f244d09f207d973da4b9c5852fa31ab7b631dce224acf18bc3e71a231f6adc29de92f544fc9bd4d4fe01fc287b8f2aeb3d71a51b98ffb88f9ef64db2ce49ee857961427709076b7f22bc66b2bb2e349166b4bbede15d4cd1bf9ccf6961160b6ace0c9ba60be911b17b", 0x97}, {&(0x7f0000023640)="3308f96a46970b03617ab49823fe3ffff55d4b0f6e641e6ed2fee2358a22d534d2b9bc563e78649e17853a577f8efe9c8c5231f095b965a5d4ee4f3f7ecfb8d241955232a00884b87adf631b5a8505c9bf4a76cf27691b22c3250b42ad3b0062691fb6de6e2227ef75b6f41eae9fdedaa6cd77cc751c6b0af486d9ec2fb20e322f666f5cfa2dcc089ae1f61e26f764fcbdca021ba7", 0x95}, {&(0x7f0000023700)="8d9d60f9dc8d28965015a0ca7746623fac3a13a96369a9dbe25f4550997b0c59b5c4b48f3f3b6e98d35c5a3104a6b4d0859371f11490c46dff1183a774e082", 0x3f}, {&(0x7f0000023740)="9803316e8b2e6db54fb7a8456218c0bda7a1ccb6d15b560b0d07371d2a4acc86f060373277acba7de3efdcea84c7de76f553f6366cf04e5980a65b0f34d11ba035d85c0967fcd49087c100eeffec3fe017b48df7c7726c2ac941146377", 0x5d}, {&(0x7f00000237c0)="b4f220efc661d98f0ea04e", 0xb}, {&(0x7f0000023800)="5d32624aed1abebb40aba889b08c2d032897e6472cc4ca96077dfd5207ab218f315509a61c69d980d8c97ceca8aa331557fbfb4ac83c8abb513ab705cfb8b0d43ef4a209723ed2c141387d546c3de1b06d7564439f70c0a4b149597fc9d4f4a200697205619c7b57b30bbfa746d21abbf317855b29663d2bbe0659afe8", 0x7d}, {&(0x7f0000023880)="858758e11358d73c36ad5293cba3836b4ab779d72277b57938128117b71453d3c5", 0x21}, {&(0x7f00000238c0)="c6b606b178034a41fb78e4829557fa4c5a923c00fe71c3c33814ff4ff7be12b4475156971697a6c182d12e8163b24af454f35ee87f7844bd18012accd1d430d3cfa9bc36", 0x44}], 0x8, &(0x7f00000239c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts={{0x38, 0x29, 0x36, {0x3c, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7fffffff}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0xc, 0x3, [0x16ce]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x81}}, @dstopts={{0x20, 0x29, 0x37, {0x88, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffe}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x3b, 0x1, '\x00', [@jumbo, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}], 0xd8}}, {{&(0x7f0000023ac0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}, 0x1c, &(0x7f0000024c40)=[{&(0x7f0000023b00)="3a80ef281881e9e4f7b8c80cac204062ffe47669ea2dca6dc19072e73634fa0840e4f935d3cfcc53089ba75e748893218b06a3a6094dc097ab1d4c41d59fce877372433a2e29196954e071254733d2ee4c57c719cec2885eb891bda9005db6036d1e6043c25c3f456eb413ab4e51efb6ea29f471c9ab6836a1b314d4a45e8419605ef90320b99e9aad9f296ad761425ad829eb957bbe46855b26c69b4c2cf1424e008eafa9", 0xa5}, {&(0x7f0000023bc0)="1a1de0ab3114a7069b13a55bd4d6c731b154935cc2da14e382ff4a44e171fe55", 0x20}, {&(0x7f0000023c00)="b2b68c13ad6899507c148d5ab61259d4a5c8188b91640ad703d6341edc6bce564f84736b9f27b2a61d237a1dd0b1ba", 0x2f}, {&(0x7f0000023c40)="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", 0x1000}], 0x4, &(0x7f0000024c80)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r7}}}, @rthdrdstopts={{0x1d0, 0x29, 0x37, {0x32, 0x36, '\x00', [@jumbo, @enc_lim={0x4, 0x1, 0x10}, @generic={0x0, 0xab, "c1568ed29243cc318a68e0999cd743137fe51fffa535dde5922153d99d6c26bd842b20307845c59f7845543fe035479ce39433783fd508a387e9f84d4022ea2becf48a58b34ba084057f65b018389a76a5093919e7d7b3512cd30e9d9035a2ee2acf9d9bc9e3747c046f319f614a5e47e6ba4415bd8586db056cf9184205cc04e60b027773662d5f7bcfae7d84b6706645e4e2596fcf0cf30eb6f12f7461b781be7cc987722755ec160dc3"}, @generic={0x1, 0xeb, "0b7b0e0b34cef5731cdacbd76dbe313182e0581e5005499bbf2294914d4e3aee0cd55dc806923906510d18b55025e8c81cbc2286fdacec9b84c4466698b95f3acb8b35c5892f86f03ee798e134ae5b61fadfb835eb05a8b50f855ff75b43fd0f6d4693757781d6da1b1ffc507e24b88a3a7e26f37a56f6c017cc560edf5a4fb4d0cfccb489e05e9c1b4154369576bc75c3f5c31f4e525d018b6a731264694af74f87663076ac2b956b76d150cbf939fcee1c6aed74db29e796fd3fa0b0d4dad79d637b4c22f3f64be4c8178170598af9a159fcf3a24f525a798c1e20b8266d5b59b81ea0bded19a6684e5b"}, @enc_lim={0x4, 0x1, 0x1}, @padn, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x8}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x2c, 0x1, '\x00', [@ra={0x5, 0x2, 0xa}, @generic={0x5}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0xe}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9ba14391}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x2f, 0x7, '\x00', [@ra={0x5, 0x2, 0x8}, @pad1, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x5b}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x2}]}}}], 0x290}}, {{&(0x7f0000024f40)={0xa, 0x4e21, 0x297, @dev={0xfe, 0x80, '\x00', 0x37}, 0x400}, 0x1c, &(0x7f00000256c0)=[{&(0x7f0000024f80)="93ec33b3bab7356ebd786b76b362102610676c9d938e777d253706ebe55712df205667428ba7749655b67b7017564dc49ce4774d561b362bcaa037fb8ec48112ce100f4802d97ef5b770cb9f6fdad4af8b414d79950e54816bc1e04d209c3cdcc0a062d32b9280ababb5e898600245e0e5ebef8f7445a57912ab11dab8fbddbd9d066e065241def465a81c66fb814c2d279328d0f392924bbf631b749947481a7cf53e9931e5981d2300aaf28e22e95fb4661dd45c8b4d16bde08c38d5c7012a17ff14425a03c09e", 0xc8}, {&(0x7f0000025080)="34dccd25a9dbbaf6cee7776f958c11e63b58d20d707b45102ad63ceaf95a7c8a2ec1a99e8c3f5a13c646df3eb2020641ae5c11690bbf0ebe5d3eadc4407293ec4b638b4395ce25263a04c7d0eabfe36133936f849724bd53082257d4de15de9741b6708cd7684fdd5881723f55ca0411dc6af70e83afa18c2c5cdb7b2e870d9e4769d458f68950e6ea6421d5cf74dc2855d9ee01c82ae2370e9162646361c610", 0xa0}, {&(0x7f0000025140)="69f166a1fffeef6de6b74122715e5c55c5642f3848f11bdeb8b7dd7cf5082a40620d3449310472c9132fbf5ee2185518eb3aa103bc1066f1d233fc943ef311fdc2943d70eb8a7dfafd198d7c8ba394e81fdc0103b9784ee8a96ecfe34de7918de6a2e70519bbaaa85e2fa0d6e26e2fdc22aa341a79e5720866341537c7b8066edfd110b32d977c0da5a78e8e85263b1bf10b91d1b0d20f75901cc6c774db500b59bba37db250b89621a08737a0ae7dfeb00c5c28abe627dcd718498814de54eedd067f3ff7e7106f5758a85894c5d1387b18f5bc79e1cb5b08866447df42ed586618f8721f175d0c00c0e0e364552c", 0xef}, {&(0x7f0000025240)="e3bc04a0a199909347df52dbb8ea15122f9680ca9c09df899b68b2f6ec30ce8947cde48aa563033c6dbd9289b4aa1a6248a7859e0c510a8357157783cdab52301e439234ddf0bfca9f8bfe51f329c7777bee7c521ebb723df4dde15e904ed983349f44171cfea6a8ce7615eca5d9c904c7f1932dbdf361bc19e0be06e26f4b83a8550b6cfc899cc3d8bd3cddef7b09493d5dea6d780554259731ac61ff4f895cc64f4c5f7d142ac8a738811449257ba572afa60c5e5d8c4dfd53004aa3523670bbb8bf0d537835795e276b7c7ca2a78bc753f7935d977264292fc36cb0625e584c8f6ace24fa68b1d43387", 0xeb}, {&(0x7f0000025340)="c5ba730982bfc00a0e0a8ca5f63b5357642627b6d05dc4224c7353cc2ec8e070cc6b1009f7086872844f76a913e64a3c8239cf839fa32271e8f56832a96967780837d8242566fde5b9ce417e99fd80c32dca04d5d3e27a877f9190f55ce15825a2db81052ef756b2c033a6c8e1d840f4", 0x70}, {&(0x7f00000253c0)="b3fd0eb4821fd4030572ff4ef93f4024349d338503b6e7cb40d472426b3df83c10e2ae0b76aa3f380ee9e846447d7fcdda5a7d350fb95c22bbd692f5dab5ab4cfa6e515e4a3850b9d624be5ec2e3c6ccb2d9ca597a2eb84533dc", 0x5a}, {&(0x7f0000025440)="017da92b28f5f508cb5b314a3a91d889f41e75d4736ab6b2a8d64f40959a589e4cdca54038699cc3cb879bf1e8cadb90336f0b7927e6dbcaa1f7405959c3715f7c568c23dc92345127d4d101814747ac1207a4d90688f4e5c2d3aaf47babc6917c2893bcef1fe440", 0x68}, {&(0x7f00000254c0)="8a8867d427430179c76aaf1279c9904efdf77ba1e291fef35206f1c2056b1e1620c18755e7dc263c23ec31ee7a486074f54a8918f510859885a6d090e7450812f8a399c355062188da7e9a17940bba3cb5fb5e301c82870e09be4397893f23a45dc9891c5cce869fc2afef0015f90155b092b79398759cc3600f376ef4da59e8210cc9bbbd52319ac94c8c0cd1872c2d9b34b50c3845186611caf5c9ff23fd2f5b1f81eec56cc86e3d58e6e857c4e43bef501d01230d9d74814170f4527681938c1e841662e78a3a8faeb16ef1e963b94852e71964ecfa", 0xd7}, {&(0x7f00000255c0)="a5fb0593492fc16da2e8ec05ee0633303aefc19e2428d14c25997e1dcdbf63e65a01295e21fb1670f74e6d1c447c8a4f4db656a4b3fd9bf639ca33808f91e3958faa7b2a9dc3d55266eb669c04087611c6fbd010f8c40d5c14deba0e03dc0d81b1533bed9c2da3be2bf9e460218f8f8e0e421537bbb125dfeed6458fd5a4277ea00bff8a74ece51e62d738545bac336fbc28505781a23e5b4a4d4a27d25b73a4297680a78af7b191ebdc3573f7a1f15765e92e278021c9f94dbdaeaeace597d8010e2ca58b319f9a82ae4c796a4c03444ff97fe7ee3e04cd", 0xd8}], 0x9}}, {{&(0x7f0000025780)={0xa, 0x4e20, 0x9, @mcast2, 0xff}, 0x1c, &(0x7f0000025840)=[{&(0x7f00000257c0)="adaf983c691e145fcc0d3484a8e00cfba741a339de06b1a9fd2bb9ad9822321f2abed97d0cd66a0ae96aae1a2e282542ba1cd06e626324af8e9c93a233ce9d0ca9ffae6190b1c9969b49c185b5f4ec1081de3fa5e566d1c9fea28c08b8ca70594c726af71d98c4c667bd2928e408461822a5e1fa4554a4c1f1c1b2dde39576", 0x7f}], 0x1, &(0x7f0000025940)=[@hopopts={{0x30, 0x29, 0x36, {0x62, 0x2, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x6, 0x3, [0xea73]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2e, 0x4, 0x2, 0x13, 0x0, [@rand_addr=' \x01\x00', @mcast1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8000}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r10}}}], 0xc0}}, {{&(0x7f0000025a00)={0xa, 0x4e21, 0x8503, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000025d00)=[{&(0x7f0000025a40)="bd2b1114e4a3c2ef822b933b8015c82b7d258351336663ddfae59888f8cd8036b6f861e4e15dc676ed96a22c65bf81b1cc56c45d581ff807b646cdb3466bee22debf8116c33e969f", 0x48}, {&(0x7f0000025ac0)="af009f9ef2d8ba897f2d", 0xa}, {&(0x7f0000025b00)="f380e1aa3c7257e696a9d9eb329f820b447354aec44b4c27e26d3fbdbf792001d28c327bfd78a46b3f2c4d7177f9f8ce925b0dbf3e6e348f420f4a9b0c5703fd84ebe85f58b33a023199745e05043def208ed3c8608fd503f38d80bae2c76e2b30ba45caa851db34e58d0ed110b2b76d21e18c9d3e71b8a2a3cfbc5893ecef9c92da2761b396f089805ee33ed6d34319830e050fd9f0425f625961950ec7876b193266f102fe7bf2ed218b2ad8d771a41403927c9856e2e4ec98a3df135a23709f1b67fc5a94749439b2", 0xca}, {&(0x7f0000025c00)="40610a1f9e1e768ea9777d616fa6f907137df134c613ae03cfca6b1b7b71f2857e62b22387b52f176a1a7cbf7162b4e4614a", 0x32}, {&(0x7f0000025c40)="999a61ca35393b9a403e7319dde6a93325c6110e3c558923b291b6a2f8cf7daf6a72478811b4e40b9524c6059142a6b38678cfa139952cf1093007ed900fdd2aebb50fc22baa9c37ecc94a7fa6d0e1923022ec0bc9544939368336961e1280f900b72921d43e3b3b3b32df1489039a9e5ba98f598304a449835677a456774e3d61cfd8e853a65daf4d041a7b391ed3cc53ecc57038b458b7e64770c6695e006550320ea4", 0xa4}], 0x5, &(0x7f0000025d80)=[@hopopts_2292={{0x78, 0x29, 0x36, {0x3b, 0xb, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @pad1, @generic={0x6, 0x4, "85baff53"}, @jumbo={0xc2, 0x4, 0x10000}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1d}}, @ra={0x5, 0x2, 0x55}]}}}], 0x78}}], 0x7, 0x80) 22m47.39910601s ago: executing program 45 (id=11869): ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000001100)={[0x1, 0x7, 0x80000000, 0x3, 0x9779, 0x1, 0xfffffffc, 0x7, 0x9, 0xe2, 0xacde, 0x5, 0x4, 0x1, 0x4, 0x8, 0x3, 0x6, 0x8, 0xfa8, 0x1, 0x0, 0xfff, 0xa8, 0x6, 0x1, 0x5, 0x40000000, 0x5, 0x800, 0x3ff, 0x6d1, 0x7, 0x5, 0x4, 0xfffffff8, 0x7fffffff, 0x7fffffff, 0x96e, 0x53, 0x4, 0xff, 0x87, 0x3, 0xef, 0x1a, 0x5, 0x9, 0x7, 0x7, 0xfffffff8, 0x5, 0x1, 0x10, 0x19e1, 0x3, 0xfffffffc, 0x7, 0x7, 0x3, 0x9d18, 0x7fffffff, 0x2, 0x3eef, 0x81, 0x3, 0xd, 0x800, 0x7000000, 0x6, 0x7, 0x101, 0x1, 0x5, 0x4, 0x7, 0x16, 0x0, 0x6, 0x7, 0x7, 0x80000000, 0x3, 0x7, 0xfffffff9, 0xfffffffe, 0x9, 0x5d, 0x9, 0x1, 0xe9, 0x0, 0xfff, 0x7, 0xe, 0x3ff, 0x1, 0x5, 0x3, 0xc59, 0xe, 0x5, 0x4a, 0xf0, 0x1, 0x81, 0xe, 0x8000, 0x8, 0x3, 0x3d1f, 0x7, 0x5, 0xa, 0x9, 0x80, 0x0, 0x81, 0x10, 0x3, 0x7, 0xc, 0x0, 0x1, 0x1ff, 0x6, 0x7, 0x9, 0x1, 0x6, 0x9, 0xf33d, 0x8, 0x80, 0x5, 0x3, 0x2, 0x0, 0x1, 0x3ff, 0x30, 0x0, 0x18, 0x1, 0xd, 0xfffffff9, 0x5, 0x1, 0xf8a, 0x7f, 0x8e, 0x7, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0x1, 0x3, 0x7, 0x3, 0x27800000, 0x1ff, 0x4, 0x48, 0x99b, 0x8, 0x1, 0x2, 0x9, 0x5, 0x3, 0x8, 0xd7d, 0x3ff, 0xf, 0x6, 0xfffffffe, 0x8, 0xcef, 0xc, 0x4, 0x4, 0xf4, 0x9, 0x5, 0x101, 0x7389, 0x0, 0x7f, 0x5, 0x803, 0x5, 0x6, 0xcf8, 0x401, 0x3, 0x5, 0x8000, 0x8, 0x8, 0x8, 0x2, 0xfff, 0x7, 0x2, 0x8, 0x8a7, 0x0, 0xf480, 0x10001, 0x7, 0xfff, 0xd650, 0x200000, 0x3, 0x6b9, 0xe, 0x4, 0x5590, 0x6, 0x4, 0x8, 0x400, 0x6b7, 0x6, 0x2, 0x2, 0x10001, 0xc, 0xe, 0xffffffff, 0x400, 0xff, 0xfffffffd, 0x6, 0x8000, 0x23, 0xffffffff, 0x6, 0x92, 0x4, 0x6, 0x7, 0x6, 0x6, 0xa9e, 0x61, 0x8, 0x8, 0x5, 0xfffffffe, 0x10, 0x2, 0x8, 0x5, 0x2, 0x6, 0x1f2, 0x400, 0x2, 0x2, 0x4, 0x4, 0x5, 0xf9, 0x2e8c, 0x3ff, 0x8, 0x10, 0x6c, 0x2, 0x513, 0xffffffff, 0x5, 0x9, 0x5e16, 0x5, 0x2, 0xb, 0x4, 0x4, 0x9, 0x10000, 0xe5, 0x6, 0x0, 0x1, 0x423, 0x5, 0x40, 0x9, 0xfffffffe, 0x8001, 0x1000, 0x0, 0x6, 0x7, 0x8, 0xc00, 0x6, 0x9, 0x1ff, 0x1410, 0xd7, 0xfffffff9, 0x7, 0xffff, 0x10, 0x1, 0x1, 0x4, 0x1, 0x3e000000, 0x1, 0xfffffffd, 0x4, 0x3ef, 0x2, 0x7, 0x2, 0x5, 0x80000001, 0x80000000, 0x1, 0x101, 0x3, 0x8000, 0x9, 0xff, 0xed2, 0x5, 0xd930, 0x2, 0x2, 0x1bc, 0x5, 0x5, 0x0, 0x5, 0x2, 0x4, 0x0, 0xa79, 0x5, 0x2, 0x3, 0x4, 0x10000, 0x8, 0xa, 0xf, 0x8, 0x8, 0x9, 0x9, 0x40, 0xc, 0x1, 0x2, 0x4, 0xefdb, 0xe4, 0xb38, 0x400, 0xc00, 0x8, 0x9, 0x4, 0x200, 0x261a9112, 0x401, 0x3, 0x8, 0xf32, 0xf, 0x4, 0x3, 0x5, 0x9, 0x1ff, 0x0, 0x1, 0x9, 0x4, 0x9, 0x8f21, 0x4, 0x59, 0x5, 0x7, 0x0, 0x10000, 0x9, 0x0, 0xd, 0x100, 0x6, 0x1, 0x9, 0x8001, 0xd, 0x55, 0x1, 0x9, 0x8, 0x40, 0x3b4c5288, 0xfffffffd, 0x0, 0x29d0, 0x3, 0x7, 0x8, 0xffffffd6, 0x4, 0x9, 0x40000000, 0xf, 0x5, 0x3, 0x80000001, 0x0, 0x8, 0x9, 0x4, 0x8, 0xfb3b, 0x0, 0x200, 0xfffffff7, 0x2, 0x4, 0xf42, 0x6, 0xf2cc, 0x3, 0x81, 0x9, 0xb, 0xe10a, 0xd, 0x40, 0xfc, 0x0, 0x7, 0x3, 0x4, 0x3ff, 0xfffffffc, 0x1, 0x3, 0xfffffff8, 0x3, 0xfffffffb, 0x2, 0x4, 0x9, 0x5, 0x7, 0x40, 0x7f, 0x8, 0x0, 0x1000, 0x8001, 0xfffffffe, 0x0, 0x200, 0x0, 0x4, 0x8, 0x3, 0x3, 0x8, 0x1, 0x7, 0x7ff, 0x9b5, 0x3, 0x2, 0xfffffe00, 0x7, 0x3, 0x9, 0x8, 0x1, 0x100, 0xff, 0x7f, 0x8, 0x0, 0x6, 0x7fffffff, 0x3, 0x5, 0x6, 0x8, 0x3ff, 0xb88, 0x3, 0x1, 0x1, 0x4, 0x9, 0x0, 0x7, 0x1ff, 0x1f57, 0xfc1, 0x5, 0x7, 0x1, 0x400000, 0x650, 0x7ba, 0x6, 0xc5, 0x9, 0xf, 0x7f, 0x0, 0x98d, 0xffff, 0x1, 0xffff, 0xffff, 0x0, 0x80000001, 0x7, 0x0, 0x6, 0x36, 0x8, 0x2, 0xa, 0x1, 0x6, 0xfffffffd, 0x800, 0xc6, 0xc4, 0x3, 0x0, 0x5, 0xd, 0x2, 0xfffffffc, 0x6, 0x4, 0x1, 0xffff, 0x6, 0x75, 0x6, 0x7, 0x47, 0x8, 0x9, 0x0, 0x5, 0x8, 0x8, 0x2, 0x7, 0x7ff, 0x8, 0x4da7, 0x1ff, 0x779, 0x8, 0x4, 0x81, 0x8, 0x7, 0xa4, 0x0, 0x0, 0x9, 0x5, 0x6, 0xb1f7, 0x800, 0x5, 0x9, 0x8, 0x100, 0x3, 0x4, 0xff, 0xffffffff, 0x532d, 0x36, 0x9, 0x6, 0xe7e5, 0x400, 0x8, 0x7, 0x7fff, 0x0, 0xf, 0x5, 0x7fff, 0x5, 0x1, 0xa88d, 0x7, 0xffff, 0x1a1, 0x8, 0x9, 0xb1, 0x7, 0x2, 0x8, 0x9, 0x2, 0xffffffc0, 0x4, 0x6, 0x3, 0x2, 0x6, 0x40, 0x3d2, 0x2, 0x282, 0x9, 0x6, 0x0, 0x6, 0x7, 0x200, 0x8, 0x8, 0x92, 0xfff, 0x3ff, 0x6, 0xfc22, 0xa41, 0xffff7fff, 0x3, 0x2, 0x4, 0x64400, 0xaaf, 0x3, 0x7, 0x6, 0x4, 0x10001, 0xda18, 0x1, 0x9, 0x4, 0x7, 0x2, 0x800, 0x2, 0x7, 0x200, 0x0, 0x5, 0x1, 0x8def, 0x40, 0x1, 0x6, 0x3, 0x8d, 0xffffffff, 0x2, 0xffff4331, 0x5, 0x4, 0x8, 0x80, 0x5, 0x9, 0x4, 0x6, 0x7, 0x9ce6, 0x80000001, 0x5, 0x3, 0x5, 0xcf0, 0x8, 0x7, 0xfffffffd, 0xf6, 0x8, 0x52d, 0x9, 0x38fa, 0x0, 0x8, 0x2, 0xa, 0x100, 0xa, 0x1, 0x7, 0x10000, 0x4, 0xe38, 0x1, 0xa1, 0x8, 0x1, 0x5, 0x1d6f, 0x80, 0x6, 0xd, 0x1, 0x70000000, 0x9fba, 0x81, 0x7f, 0x2, 0x3, 0x6, 0xfffffff8, 0xf, 0x40, 0xa, 0x4c8, 0x5, 0x7a6a, 0x81, 0x7, 0x2, 0x7, 0x9bc00, 0x100, 0x1, 0x9, 0x1, 0x70cd, 0x0, 0x1, 0x40, 0x4, 0x4, 0x2, 0x1, 0x1, 0x7, 0x7, 0x6, 0xcd2, 0xfffff18d, 0x1000, 0x6, 0x92, 0x0, 0xfffeffff, 0xbde8, 0x7f, 0x4, 0x8ae, 0xe7b0, 0x100, 0x1, 0x8000, 0x3, 0x401, 0x8001, 0x9, 0xfffffff9, 0xfffff801, 0x1, 0x21, 0xd, 0x6, 0xffffffc0, 0x3b, 0x3, 0x6, 0x4624, 0x9, 0x3, 0x3, 0x1ff, 0xb, 0x800, 0x7f, 0x6b69, 0x3, 0x3, 0xfffff001, 0x2d, 0xfff, 0x800, 0x6, 0xff, 0x0, 0x18b, 0x15, 0x5, 0x9, 0x0, 0x2, 0x0, 0x80, 0x10, 0x4, 0x1, 0xfffffffb, 0x5, 0x1000, 0xea6, 0x4, 0xe8b, 0x8, 0x8, 0x1, 0x7, 0x7d, 0x7, 0x1, 0x1, 0x4, 0x9, 0x4, 0xa, 0x5, 0x2, 0xa, 0xc41, 0x81, 0x80000000, 0x3ff, 0x4, 0x7f, 0x0, 0x4, 0x8, 0xe, 0x3, 0x7f, 0xffff, 0x51e1, 0x8001, 0x2, 0xf5, 0x7, 0x1, 0x4, 0x9, 0x6, 0x0, 0x9321, 0x7, 0xffff, 0xfffffffc, 0x9, 0x5, 0x7, 0x400, 0x8, 0x1000, 0x5, 0x7, 0x101, 0x0, 0x3, 0xdefd, 0x5, 0xb8, 0xffff, 0x2012, 0x5, 0x9, 0xb82, 0x9, 0x20d5d2ae, 0x5, 0x7, 0x5d, 0x2, 0x81, 0x0, 0x4, 0x80000001, 0x2, 0xbc9, 0x9, 0x101, 0x1, 0x6, 0x3, 0x6, 0x6, 0x1, 0x2d9f, 0x0, 0x81, 0x3, 0x4, 0x9, 0xffff, 0x4, 0x10001, 0x1, 0x1, 0x6, 0x1000, 0x5, 0x7f8000, 0x800, 0xfffffff7, 0xdfe, 0x40, 0x1, 0xfffffff7, 0x5, 0xd, 0xa, 0x5f, 0x7, 0x7fff, 0x9, 0x6, 0x0, 0xfb, 0x5, 0x40, 0x2d471b3, 0x5, 0x4, 0x1ff, 0x7f, 0x10, 0x5, 0xe657, 0x4, 0x40, 0x5, 0x3ff, 0x6, 0xf59, 0xac2, 0xfffffce5, 0xc6, 0x1, 0xf30, 0x4, 0x80000000, 0x5, 0x4, 0xff, 0x100, 0x3, 0x400, 0x4fb7, 0x9, 0x5, 0x14000000, 0x7, 0x7f, 0x0, 0x1, 0x5, 0x2, 0x80, 0x8, 0x774, 0x8001, 0x4, 0x66, 0x9, 0x4, 0x6, 0x5b, 0xffffffff, 0x3, 0x6, 0x40000000, 0xfffffe01, 0xffffffff, 0x4, 0x4, 0x6, 0x6, 0x92, 0x4, 0x8, 0xe4f, 0x66, 0x2123, 0x1, 0xf60, 0x10, 0x3, 0x7ff, 0x5, 0xd, 0x2, 0xf0, 0xe20, 0x7, 0x0, 0x5, 0x9, 0x5, 0x7, 0x3, 0xf48f, 0x0, 0x2, 0x6, 0x8, 0x3, 0xced9, 0xfffffffb, 0xf46d, 0x4, 0x6, 0x7]}) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f00000000c0)=""/157) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 22m30.659973033s ago: executing program 46 (id=12041): getrandom(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$ptys(0xc, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa0800, 0x0) 22m25.527728852s ago: executing program 47 (id=12106): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000480), 0x82084, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xa) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$TCFLSH(r0, 0x540b, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000480), 0x82084, 0x0) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xa) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) ioctl$TCFLSH(r0, 0x540b, 0x0) (async) write$FUSE_INIT(r1, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) (async) 22m19.467925429s ago: executing program 48 (id=12175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r2, 0x3) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000df000000010040"]) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) (async) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) (async) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r8, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) (async, rerun: 64) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) (async, rerun: 64) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000000c0)={{'\x00', 0x2}, {0x6}, 0x0, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)="d74ee63dac203dcca4cd7e28c36da4908855f850dd299e31f79adeea99e7ecb859ace6ed658f431c5917a21ed0a5923f4299a594e9d8bbd8f7735816ed4187e55759d579cc17782c9a0a58dcfb5345027ae1492f88bbd1b49a961d4ef026f2ba08a6c0fd61aef33531a7eee2c30e394033fb3674d99dcc8f79250779a43f083fabb85ca715a6abbd7bd320c46f341de89a29ddab8207dcc2c23610385ffa1e6d8b3a26e1d0914f97d4076105f84add9c22f886714ff60eb644cf854a52734b7cd88a870359ed138947c7c732880e26515fc575d8b7db415f6e9939", 0xdb, 0x0, &(0x7f0000000540)={0x2, 0x1cd, {0x1, 0xc, 0xd0, "a95160f33635957b80640e95ca51a2937973100cf2f5b7af778b93c1828f021adf163da304ebc40706aeea2ba2b55104f2bb46e323df50aa50d0fcbfbfd5339210271e4e55725da1ad6985dce8f4021a40ad6291fe5cf15be8eabe4328c3691119bb06c9795fefaa870ce33632cfe4b37e85b2d857286375784c512f91aa01dab9509a8936cc0feee5763e9820c8c0b2af9fa4e6c4c9c3a59798e361218176b0195ed2e05d3b497f3b36dbc223ce70ef59d248de114e9d58716f48954ec2f07babd0d5cdcc42ca4278530182b3ee0fb0", 0xf0, "ed7f02cc73ad7369bd1c7dc43d77e9a426264462fb7ad145d0f645bc892fe89a4ca159fd774585e9e794069cf4f7ee59b5019467f488ee1afb74d341cddf6d11392bfab13ccc991b50f96dd5bf7d5268015d904a42efea12cd3f53a324953813d3acb5538ede907dafa027e60f921336578d64637a52ec41c2ddef5eee64fa49e355dd14f3a8ecb9c05b707cb6433cc31b202235bf93d6800352eca13ab75a2bff5dca8de9d55852a436910a1dcaf02aa6f0a5fcf6e29d3cb9f5c01900fa2a977939bb2d67eed97e5d2a517a75a7a0152ee7021de065c3683d76a0641a1b4503378eb855afa196297762a87a27466925"}, 0xc0, "0bac58f6346dc28d97c8a33aab338ba68266d8e791697af43dbb94d0ae8a9fe0b53374628f3678f75cb0c073ebc242f3b5be8702f37584d835f075e6d7fe41f85ed4d09709f41e057ca1c5d1a2716091c3579d04c14d141ae25e7cf3c03da288c3cfb89dd192652d968fce45eea25f1014d519c83a3c8518bb2c2eab989100e636fd1b5511188bd6f287ac856bcb1298edd2fdb331577d6a113a2e98b65a3c1a8a7290740cfb4f8aad130f2fb64dcf0e15dae4371e6a4286e2eebc19ce97cf04"}, 0x299}) 22m15.986681336s ago: executing program 49 (id=12229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x400, 0x3, &(0x7f0000000040)=0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x49}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x400, 0x3, &(0x7f0000000040)=0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x49}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) (async) 22m15.053982404s ago: executing program 50 (id=12256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@mcast1}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) io_setup(0xffff, &(0x7f0000000080)) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 20m11.315944951s ago: executing program 51 (id=14542): fsync(0xffffffffffffffff) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@out_dx={0xaa, 0x28, {0x1b58, 0x0, 0x1}}, @wr_crn={0x46, 0x20, {0x0, 0x80000001}}, @cpuid={0x14, 0x18, {0xb676, 0x2}}, @uexit={0x0, 0x18, 0x8c33}], 0x78}) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000000c0)={[0xfffffff7, 0x0, 0x6, 0x8000, 0x2, 0x1, 0x1ff, 0x7f34, 0x7, 0x2, 0x3, 0xfff, 0x1, 0x5, 0x9, 0x2, 0x7, 0xe56, 0xffffffff, 0x1, 0x9, 0x4, 0x2, 0x80, 0x6, 0x6, 0x1, 0x1000, 0x1000, 0x1, 0x8, 0x37, 0x2, 0x6, 0x3, 0xc77, 0x3, 0x4a, 0x8, 0x8, 0x5, 0x5, 0x5, 0x9, 0xc, 0x5, 0x0, 0x4, 0xfffffeff, 0xdc78, 0x7, 0xd65, 0x4768, 0xf, 0x8, 0x343ac409, 0x5, 0xc, 0x800, 0x3, 0x6, 0x9, 0x62, 0x1, 0xfd6, 0xe, 0xf, 0x4cb31d2e, 0xa4d, 0x100, 0x3, 0xfffffeec, 0x10001, 0x1, 0x408, 0xfffffffa, 0x3, 0x1, 0xfff, 0x1, 0x8, 0x6, 0x9, 0x26, 0x5, 0x1, 0xffffffb4, 0x6, 0x8001, 0x8, 0x4, 0x800, 0x4, 0x800, 0x7fff, 0x100, 0x80, 0x7, 0x369c, 0x9b2c, 0x4, 0x5, 0x9, 0x9, 0x7f, 0x7, 0x800, 0xfff, 0x3, 0x3, 0x100, 0x1000, 0xa, 0x6b, 0x6, 0x4, 0x7, 0x9, 0xf90, 0x9, 0x22aa, 0x5, 0x84f, 0xc, 0x8, 0xfffffffd, 0x2, 0x5a, 0x7, 0x3, 0xff, 0x5, 0x7, 0x5, 0x0, 0x2, 0x1, 0x1, 0xd, 0x3ff, 0x2, 0x2, 0xd8, 0x6, 0x100, 0x7, 0x7ff, 0x2, 0x5, 0x139, 0x1, 0x5, 0x200, 0x42d, 0x2, 0x5, 0x400, 0x1, 0xc2, 0xffff7fff, 0x7, 0x3, 0x7fff, 0x8, 0x4, 0xd3, 0xa, 0x5, 0x5, 0x5, 0x0, 0xc58, 0x10001, 0x80000001, 0x6, 0x101, 0x9, 0xcb, 0x8000, 0xcf25, 0x100, 0x10001, 0x1, 0xfffffffa, 0x86, 0x8, 0x10, 0x3307, 0x10, 0x4, 0x6, 0x2, 0x6, 0x6b, 0x0, 0x61, 0x81, 0x2, 0x8, 0xca20, 0x8001, 0x5, 0x5b, 0x8, 0x5, 0xfffffffb, 0x9, 0x7, 0x5, 0x0, 0x1, 0x1, 0xbd7, 0x9, 0xfffffffb, 0x2, 0x7fff, 0x2, 0xf, 0x3, 0xa, 0x9, 0x4641, 0x0, 0x0, 0x10001, 0xc, 0x7, 0x7, 0xfff, 0x1, 0x0, 0x9, 0x1, 0x648d659, 0x4, 0x4, 0x2, 0x2466, 0x3, 0x3, 0x7, 0xe12, 0xfffffffc, 0x0, 0x101, 0x7, 0x6, 0xfffffffa, 0x80, 0xa, 0x6, 0x0, 0x3, 0x3, 0x8, 0xc, 0x4e, 0x1, 0x8000, 0xfffffffe, 0x6, 0x8000000, 0x7, 0x1ff, 0x7, 0xa, 0x53, 0x4, 0x0, 0x241, 0x1, 0x80000000, 0x7, 0x1, 0x7fffffff, 0x7ff, 0x2008, 0x3, 0x9, 0x4, 0x5, 0x6, 0xf, 0x4, 0xffffffff, 0x2, 0x10001, 0x16dc, 0x3, 0x7, 0x816b44d1, 0x2, 0x101, 0x9, 0x1ff, 0x9, 0xfffffffd, 0x7fffffff, 0x1, 0x8, 0x2, 0x2, 0x3, 0x6, 0x200, 0x2, 0x5, 0x7, 0x1000, 0x0, 0x1, 0x1, 0x5d, 0x5, 0x10001, 0x5, 0x8, 0x1, 0x93, 0x0, 0x400, 0x4b, 0x37, 0x3ff, 0x6, 0x4, 0x0, 0x5, 0x6, 0x8, 0x8e, 0x2, 0x4, 0x4, 0xcf5, 0x32, 0x6, 0x261, 0x80000000, 0x5, 0x1, 0x6, 0x8, 0xe, 0x3, 0x0, 0xdee6, 0x1, 0x8, 0x40, 0xfffffff7, 0x1, 0x6, 0x5, 0x8000, 0x0, 0xe0000, 0x0, 0x9, 0x0, 0x8, 0xff, 0xfffffffa, 0x80, 0x4, 0x4, 0x1, 0x3, 0x4, 0x24d, 0x80000001, 0xb, 0x1, 0x0, 0x6, 0x512a73ec, 0xfffffffe, 0x9, 0x6, 0x7, 0xa, 0x6, 0x9, 0x1, 0x10000, 0x8001, 0x9, 0x9, 0xc, 0x5, 0x8, 0x0, 0x9, 0x9964, 0x8, 0x7fff, 0x6, 0x80, 0x0, 0x1ff, 0x7, 0x1, 0x5, 0x800, 0xfff, 0xbab7, 0x3d1, 0xb2a, 0x6, 0x4, 0x96bd, 0xa, 0x1000, 0x6, 0x9, 0x0, 0x4, 0x0, 0x7, 0x8, 0x8, 0x58, 0x1, 0x3, 0x7ff, 0x7fff, 0x3ff, 0x7, 0xe9, 0x1, 0x65a, 0x56, 0xfffffff8, 0x7, 0x101, 0xc, 0xfffffffc, 0x7, 0xb6e, 0x4, 0xfffffff8, 0x200, 0x80, 0x5, 0x7, 0x8, 0x7fffffff, 0x9, 0x9, 0x8, 0x5, 0xbf60, 0x0, 0x9, 0x7f, 0x7, 0x1, 0x8001, 0x1, 0xfffffffa, 0x553, 0x5, 0x206f2b2, 0xfffffffb, 0xff, 0x5, 0x7f, 0x7, 0x9898, 0xfffffd4c, 0x7, 0x0, 0x200, 0x81, 0x80000000, 0x9, 0xd34, 0x8437, 0x7fff, 0x10001, 0xfff, 0x200, 0x6, 0x1ff, 0x9, 0x4, 0x5, 0xf, 0x9300000, 0xa32, 0x5, 0x0, 0xffffffbe, 0x1000, 0x6, 0x1, 0x9, 0x3, 0x9, 0xfffffff1, 0x37ec, 0xffffffff, 0x7, 0x4b5c57ed, 0x9, 0x0, 0x3, 0x9, 0xb, 0x0, 0x2, 0x9, 0x7, 0x1800, 0xfffffffb, 0x1, 0x9, 0x7fff, 0x4, 0x2, 0x3, 0x2, 0x6, 0xb6dc, 0x4, 0x64, 0x9, 0x2, 0x0, 0x1, 0x9, 0x6, 0xf9f4, 0x4, 0xb494, 0x7f, 0x5, 0xffffffff, 0x1, 0x4, 0x7, 0x0, 0xf8, 0x101, 0x10, 0x7fff, 0x7fff, 0x10, 0xfffffffa, 0x0, 0x4, 0x9, 0x869, 0x2, 0xfff, 0x1, 0x7, 0x4, 0x4, 0x8, 0x8, 0x3, 0x6, 0xef5, 0x12c, 0x80000001, 0x10, 0xe0, 0x6, 0x2, 0x10, 0x8, 0x4, 0xffffffee, 0x1, 0x8, 0x6, 0x3, 0xc, 0x5, 0x2, 0x2, 0xc6e4, 0x1, 0x2, 0xffff, 0xf, 0x4, 0x1, 0xfffffab2, 0x6, 0x7, 0x49, 0x1, 0x2ded, 0x5, 0x5, 0xe9da, 0x1, 0x39f, 0x1, 0x5, 0xd4, 0x6, 0x3, 0xfff, 0x5, 0xf, 0x8, 0x5, 0xd, 0x4, 0x100, 0x6bb3, 0x9, 0x8, 0x3, 0x37510fbb, 0xffffffdb, 0x9, 0x8, 0x5, 0x0, 0x4d, 0x4, 0x7, 0x0, 0x0, 0x1, 0x7fffffff, 0x3, 0x80000001, 0x400, 0x40, 0x2, 0x9, 0x0, 0x3, 0xaa1, 0x8, 0x5, 0xffffffff, 0xe0d6, 0x9, 0x0, 0x3, 0x0, 0xfe000000, 0x5, 0x4, 0x0, 0x7, 0x4, 0x55, 0xffff0000, 0x1, 0x2, 0x1ff, 0x8, 0x8, 0x9, 0xf, 0x1, 0x9ef9, 0x7, 0x200, 0x7, 0x2, 0xd91c, 0xf79, 0x4, 0x4, 0x8001, 0x8, 0x2, 0x5, 0x7ff, 0x81, 0xffff, 0x6f8a, 0x0, 0x6, 0x6, 0x4, 0x5, 0x4, 0xd78f, 0x6, 0x10000, 0x8, 0x1, 0x80000001, 0x7fff, 0x9e0d000, 0x8000, 0x9, 0x6, 0x5, 0x7fff, 0x4, 0x6, 0x4, 0x7, 0xfffff296, 0x80000000, 0x7f, 0x3, 0x101, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x10001, 0x0, 0xe, 0xd200, 0x6, 0x558d, 0x3, 0x4, 0x6, 0x4000, 0x400, 0xffffffff, 0x1000, 0x1000, 0x3, 0x7, 0x30, 0x3, 0x3185, 0x200, 0x5, 0x3, 0x10, 0x8, 0xa, 0xc, 0x74, 0xfff, 0x2, 0x53, 0x1ff, 0x0, 0x9, 0x4, 0xfffff4c7, 0x3, 0x3, 0x9, 0xa, 0xf, 0x24d, 0x98d0, 0x7, 0x62e3, 0xfffffffb, 0x90, 0x0, 0x9, 0x1, 0x4, 0xfc1, 0xfffffff8, 0xbd5c, 0x3, 0xffffff01, 0x2, 0x101, 0xffffffff, 0x33, 0x5, 0x85, 0x7, 0xb7d, 0xfb, 0x1d7a1925, 0x0, 0x420, 0x7fff, 0x8259, 0xc176, 0x3, 0x4, 0x5, 0x8, 0x200, 0x2, 0xb6, 0x8, 0x80000001, 0x6000000, 0x0, 0x80, 0x2, 0x0, 0x761a, 0x2, 0x5, 0x0, 0x6, 0xffffffff, 0xd, 0x7fff, 0x7, 0x5, 0x78, 0xa, 0xde8, 0xd, 0xba, 0x800, 0xfffffff8, 0x8, 0x0, 0x7, 0x9, 0x9, 0x3, 0x5, 0xce6, 0x4, 0x0, 0x0, 0x4, 0x4, 0x2, 0x3, 0x7, 0x6, 0x4bf3, 0xbed, 0x167f, 0xc10, 0x5, 0x0, 0xbedd, 0x8, 0x74e2, 0x4, 0x400, 0x9, 0x5, 0x6, 0x4, 0x9, 0xda2, 0x4, 0x2, 0x70000, 0x8ae0, 0x37d8, 0x80000001, 0xf, 0x1ab1, 0x3, 0x8, 0xfffff001, 0x5, 0x8, 0x300000, 0x401, 0x4, 0x2, 0x5, 0x1ff, 0xa1, 0x0, 0x7, 0x8, 0x0, 0xa, 0xa85, 0x7, 0x91, 0x52d9, 0x359, 0x0, 0x8001, 0xffffff29, 0x1, 0x2, 0xb81, 0x6, 0xb344, 0xc, 0x8, 0x9, 0x6, 0x5da, 0x1, 0x8, 0x9, 0x3, 0x7fffffff, 0x7, 0xfffffffd, 0xe, 0x8, 0x401, 0x7, 0x7, 0xfffffff9, 0x4, 0x3, 0x7, 0x400, 0xfffffbf7, 0x39d, 0x4, 0x3, 0x7, 0x7, 0xd10d, 0x2, 0x7ff, 0x3, 0x602, 0xffffffff, 0x9, 0x9, 0x7, 0x4, 0x5, 0x3, 0x5, 0xa, 0x8, 0xffff, 0xf, 0x1, 0x7fff, 0x6, 0x1c2, 0x2, 0xfffffff8, 0x7, 0x38e3, 0x6b, 0x1, 0x9, 0x8, 0x3, 0xa164, 0x10, 0x400, 0xdba, 0x5, 0x5, 0x6, 0x2, 0x5, 0x70, 0x6, 0x8, 0xd, 0x1, 0x8, 0x7fff, 0x7, 0x76, 0xfffffff7, 0xfffffffc, 0x8, 0x1, 0x4, 0xf, 0x0, 0x707, 0x3, 0x3, 0x400, 0xfffffff9, 0x7672, 0x8, 0xc74, 0xb, 0x1, 0x800, 0xb, 0x8, 0xc, 0x7fffffff, 0x1, 0x6, 0x1, 0x4, 0x1, 0x80, 0x8000, 0x6, 0xe, 0x9, 0x1, 0x4, 0x7, 0xd, 0x4, 0x4, 0x4, 0x1, 0xc1, 0x9, 0x80000000, 0x7, 0x3, 0x80, 0x7, 0x4, 0x4, 0xf, 0x5, 0xa9, 0x8, 0xfff, 0x6, 0x7fffffff, 0x9cee, 0x1, 0x101, 0x217, 0x587e]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000104}, 0x40800) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000001240), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x54, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0xc055) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x24, r4, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10000001) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4b}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @from_mac=@broadcast, {0x8}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x38, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x400c000) clock_gettime(0x0, &(0x7f0000001600)={0x0, 0x0}) setitimer(0x0, &(0x7f0000001640)={{r5, r6/1000+10000}, {0x77359400}}, &(0x7f0000001680)) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) clock_gettime(0x0, &(0x7f0000001700)={0x0, 0x0}) utimensat(r1, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001740)={{}, {r7, r8/1000+10000}}, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001780), 0xc, &(0x7f0000001c00)={&(0x7f00000017c0)={0x434, 0x3f3, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x1, 0xe, [0x6, 0x10001, 0x6, 0x3, 0x2, 0x8, 0x1, 0x3, 0x7, 0x8, 0x6, 0x0, 0x1, 0x7, 0x1, 0x10000, 0x6, 0x5, 0x3, 0x8, 0x400, 0x1800, 0x8, 0x3, 0x40, 0x3, 0xea, 0x6, 0x4, 0x7, 0x1000, 0x7, 0xcc1, 0x2, 0x5, 0xffe00000, 0x7fffffff, 0x9dbd, 0xe, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x8, 0x7, 0x3, 0x9, 0x3f, 0x8, 0x3ff, 0x4, 0x7fffffff, 0xbb, 0xfffff33c, 0x9, 0x9, 0x7f, 0x275, 0x6, 0x2, 0x7, 0xf85, 0x7fff], [0x3, 0x22, 0x400, 0x4, 0x6, 0x1, 0x5, 0x6, 0x3, 0x7, 0x2, 0x6c5, 0x10000, 0x5, 0xfffffff1, 0x1, 0x9, 0x5, 0x0, 0x8, 0x0, 0x0, 0x3, 0x8c, 0x2, 0x6, 0x7f, 0x7, 0xfac, 0xa6, 0x2, 0x1, 0xe, 0x9, 0xd, 0x1, 0x0, 0xffffffff, 0x9, 0x7fffffff, 0xfffffffc, 0x26, 0x7f, 0x0, 0x9, 0x8, 0xe, 0x0, 0x2, 0x4, 0x9, 0x8, 0xd64, 0x8, 0x0, 0x7fffffff, 0xfffffffa, 0x0, 0x3ff, 0x7fffffff, 0x3, 0xe79b, 0xc, 0x81], [0xfffffffc, 0x4, 0xffffffff, 0x2, 0x0, 0x10000, 0x0, 0x9, 0x6, 0x80, 0x80, 0x5, 0x8000, 0x5, 0x2, 0x400, 0x1, 0x4, 0xa013, 0x7f, 0x2, 0xb52, 0x2, 0x2, 0x9, 0x0, 0x200, 0xffff41b4, 0x7, 0x7, 0x101, 0x318, 0x7f, 0x2, 0x7f, 0x7, 0xe9, 0x80000000, 0x4, 0x1, 0x0, 0x8, 0xfffffc00, 0xc47, 0x3, 0x8, 0x1, 0x9, 0x6, 0x6, 0x8, 0x1, 0x5, 0x101e01fb, 0x17a00000, 0x9b, 0x6da, 0x4, 0x6, 0x4, 0xd, 0x401, 0x9, 0x6], [0x80000001, 0x1, 0x5, 0x0, 0x9, 0x3, 0x800, 0x5, 0x6, 0x5, 0x4, 0x42d4cdfa, 0x4, 0xffffffff, 0xe, 0x3, 0x8, 0x2910, 0xea04, 0x101, 0xf0a, 0x101, 0x1, 0xda32, 0x4, 0x38, 0x40004000, 0x0, 0xfffffff5, 0x9, 0x200, 0x1, 0x5, 0x4, 0x7, 0x3, 0x9, 0x7, 0x5, 0x7, 0x1, 0x8000, 0x1, 0x4, 0x80000001, 0x1, 0x5, 0x6, 0x5, 0x80000000, 0x7, 0x5, 0x6, 0x1, 0xa, 0x9, 0x5, 0x7, 0x6, 0xd6, 0xfffffffd, 0x1, 0x0, 0x100], 0x11, ['SMC_PNETID\x00', '\xff\xff\xff\xff\xff\xff']}, ["", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r9 = socket(0x1a, 0x1, 0x1) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000001c80)=0xffffffffffffffff) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001cc0), 0x4000, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0xa8, r4, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7776298232b7cd340578e00fa9"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x12, 0x4, "9e952ab33b771bbac39a3e1b81be"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c54cd35e3de0925b8b35bd1f00"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5455b90383"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e6ad002463"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3704b20477a3e4ea34c6b59e45"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x54}, 0x4008800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r1) sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x50, r11, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000002040)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000002000)={0xffa0, 0x0, 0x1}}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000020c0), r9) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x2c, r12, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x25}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) r13 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r13, &(0x7f00000024c0)={0x0, &(0x7f00000021c0)=[@uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x7ff}, @rdmsr={0x32, 0x18, {0x2cb}}, @rdmsr={0x32, 0x18, {0x832}}, @uexit={0x0, 0x18, 0x2}, @wr_crn={0x46, 0x20, {0x3, 0x6}}, @wr_crn={0x46, 0x20, {0x4, 0xa0000000}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x40, {"0f01c366ba6100b025eef080765c000f01f8400f8800000000f4440f00592c0f0745d2d60f20e035400000000f22e0"}}, @out_dx={0xaa, 0x28, {0x36dd, 0xc, 0x7fffffffffffffff}}, @code={0xa, 0x78, {"66baa000b80c000000efc4e2c99a150e00000067430f0948b8c8360000000000000f23c80f21f8350800c0000f23f866bad104b080ee66baf80cb8d8240580ef66bafc0cb804000000efc461511239b9c10400000f32c4616459a200180000b8010000000f01c1"}}, @uexit={0x0, 0x18, 0x5}, @in_dx={0x82, 0x20, {0x86a4, 0x2}}, @wrmsr={0x1e, 0x20, {0x223}}, @in_dx={0x82, 0x20, {0x1b8e, 0x2}}, @wrmsr={0x1e, 0x20, {0x60, 0x2}}, @in_dx={0x82, 0x20, {0x6550, 0x1}}, @wr_crn={0x46, 0x20, {0x3, 0xec2c}}, @cpuid={0x14, 0x18, {0x2, 0x186cd03e}}, @rdmsr={0x32, 0x18, {0x209}}, @wrmsr={0x1e, 0x20, {0x85a, 0x6}}], 0x2f0}) socket$inet6_udplite(0xa, 0x2, 0x88) 20m10.497721276s ago: executing program 52 (id=14559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2]) getsockopt(0xffffffffffffffff, 0xff, 0x100000000000001, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2]) (async) getsockopt(0xffffffffffffffff, 0xff, 0x100000000000001, 0x0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) (async) 20m7.543223083s ago: executing program 53 (id=14600): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x1a1081, 0x18) write$khugepaged_scan(r2, &(0x7f0000000080), 0x8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/33, 0x308000, 0x800, 0x40000000, 0x3}, 0x1e) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) userfaultfd(0x801) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000aa6000/0x400000)=nil) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00007a8000/0x4000)=nil, 0x4000}, 0xc}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000500)={0x107, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x3, r9, 0x30}, 0x49) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xfde, 0x9, 0x9, 0xfd, "0080f100df0000bca77200"}) syz_open_pts(r0, 0x42) 19m54.102747823s ago: executing program 54 (id=14577): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) futex(&(0x7f0000000180)=0x1, 0x9, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) (async) futex(&(0x7f0000000180)=0x1, 0x9, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x2, 0x2) (async) 17m45.12868508s ago: executing program 55 (id=16637): r0 = socket$inet(0x2, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) fsetxattr$security_capability(r0, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x4}], 0xffffffffffffffff}, 0x18, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000180)={0x1, r4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) r6 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x9c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xfffffffffffffff8, 0x1, 0x17}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/107, 0x6b, 0x2, 0x5}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/128, 0x80, 0x0, 0x5}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}, 0x1000}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r5}, @flat=@handle={0x73682a85, 0x1215, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x6}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) 15m51.705846579s ago: executing program 56 (id=18309): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) 14m29.280372999s ago: executing program 57 (id=19869): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000240)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x42, 0x1, 0x7, 0x400000000000005, 0x85, 0x7ea8, 0x4, 0xffffffffffffffff, 0x80000001, 0x20010000000000, 0x5, 0x7, 0xffffffffffffffea, 0xe6, 0x100000000000001], 0x6000, 0x2815c2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) listen(r1, 0xc71911b5) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f00000001c0)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x0, 0x36}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0xf) wait4(r5, 0x0, 0x2, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000240)={r5, 0x0, 0x3}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3003, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, 0x1c) 14m11.968125222s ago: executing program 58 (id=20193): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, r3, &(0x7f0000000000)) 13m11.161561174s ago: executing program 59 (id=21103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) execve(0x0, &(0x7f0000000300)={[&(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00']}, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) syz_clone(0xa000100, &(0x7f00000000c0), 0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000240)="efdb30449fb6f21b00a044357bc7ab1d430acca01aff0a042969309dfb3ce2f60504229670b7560218b4a07c57e4") mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101201, 0x0) 12m43.958847617s ago: executing program 60 (id=21505): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}]}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc31}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x180}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x90}, 0x8010) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) ftruncate(r1, 0x3) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) 12m33.497766159s ago: executing program 61 (id=21695): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r1 = socket$inet6(0xa, 0x80002, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000480)={r2}) (async) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000480)={r2}) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="880000000101010800000000000000000a000005740002802c00018014000300fe80000000000000000000000000002414000400fc02000000000000000000000000000006000340000000000c000280050001002f00000006000340000200000c00028005000100010000000c000280050001008800000006000340000200000600034000030000cab1b1fd00bb2bd8a2066b7bf05a6597f5143515e0bc9848d876d3f21f04c3"], 0x88}, 0x1, 0x0, 0x0, 0x40090}, 0x50) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="880000000101010800000000000000000a000005740002802c00018014000300fe80000000000000000000000000002414000400fc02000000000000000000000000000006000340000000000c000280050001002f00000006000340000200000c00028005000100010000000c000280050001008800000006000340000200000600034000030000cab1b1fd00bb2bd8a2066b7bf05a6597f5143515e0bc9848d876d3f21f04c3"], 0x88}, 0x1, 0x0, 0x0, 0x40090}, 0x50) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x0, 0x10000}) (async) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x0, 0x10000}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x9, 0x7, 0x48, @empty, @empty, 0x80, 0x40, 0x1, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x9, 0x7, 0x48, @empty, @empty, 0x80, 0x40, 0x1, 0x5}}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@empty, @in6=@private2}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e20, 0x2, 0x4e22, 0x0, 0x8, 0x20, 0x80, 0x3b, r6, r8}, {0xff, 0x1, 0x1f0, 0x3, 0x101, 0x1, 0x5, 0x5}, {0x52, 0x1, 0x0, 0x3}, 0x0, 0x6e6bbb, 0x2, 0x0, 0x2}, {{@in=@empty, 0x4d6, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x4, 0x0, 0x5, 0x6, 0xbe, 0xfffffff8}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 12m15.624052893s ago: executing program 62 (id=22021): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301010100000000000000000300000808000840000000000800154000000002fdca49225be93992ee33afa9df566d39907a676347c82d178069dbaf8eec94e81be324a545a40c8ec6e09073877f739ecab143f067a6b77b7ebc447699369f5c157cb6ca3baacc6cf94e6f3b308ba702b87fe155d6ed14797efd593e4ffc8a86c1e6d9c30455e7ab22511653c66ecefd704903b807bd7ec84c447afb056f0ae479bfd16ddaf25cc745ab2499c6c2e05cd6a3722933d8c22454aa519755ab7754c27cd0496645c125b450a8559bd097313754aae5533c4b1f8cbba536"], 0x24}, 0x1, 0x0, 0x0, 0x400c840}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x3b, &(0x7f0000000100)=""/190, &(0x7f0000000040)=0xbe) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 12m13.486070614s ago: executing program 63 (id=22048): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff1) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x11, r0, 0x8dd76000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0, 0x0) (async) r2 = syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace(0x420e, r2) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async) r3 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffc8a, 0x101300) ioctl$BLKRASET(r3, 0x1262, &(0x7f0000000040)=0x3) 12m11.407563254s ago: executing program 64 (id=22075): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="c8050000200019", 0x7}], 0x45) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = memfd_create(&(0x7f0000000580)='}\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00b\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\xd7{\x01vR\x01\x80\x00\x00\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\x00\x00\x00\x00\x10\xfaK\x1f\x96l\v\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13t\xafNx\xc0$\x85\x9f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x94vz\xe1\x84\x99%\xa8\xbc\x18\xb2\xcd\"\x10\xd6\x84\xd0\xf1\x1bWE\x9e\x1d\xaf\v\x95\x80\x86\xaa\x82\x12}\xa1H\xd4e\x9et\'\\\xfa\x81J3N\xaa\xb0]\xb2\xb1\xd3\x14\x82\x875\xd0\xa9\x03\xc8\xb1\xf6\x1d\xf4\x8b\xbd\xbd-\xf9R4\xc4\xc5\x89(\x97\xd8\xd3\xb8-&p\xca\xc6\t\x8f=h\xe2\xdf\x9d\xf5\xb4(\x87\xf2\xa5X\x9f\x92\x06o\x10/\x0f~\xa9Q\xd9\xfd\xcaw\x17db\xfcD\xa0D\x85\x9d!\"/;\x13\xf3\x19\x9d\xe2\x9b\x9b4\xb4jt\xb7\x00'/618, 0x2) ftruncate(r2, 0xffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r4], 0x0) fcntl$addseals(r2, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0xff28, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) socketpair(0x1f, 0x0, 0x101, &(0x7f0000000000)={0xffffffffffffffff}) syz_create_resource$binfmt(&(0x7f0000000540)='./file0\x00') clock_gettime(0x0, &(0x7f00000004c0)) recvmmsg(r8, &(0x7f0000000080)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @private}, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)=""/225}, {&(0x7f0000000380)=""/118}, {&(0x7f0000000400)=""/79}, {&(0x7f0000000800)=""/239}, {&(0x7f0000000900)=""/115}]}, 0x6d38}], 0x1, 0x40000000, &(0x7f0000000500)={0x77359400}) 11m53.97023712s ago: executing program 65 (id=22349): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) accept$unix(r1, 0x0, &(0x7f00000000c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/psched\x00') r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xb8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') (async) fchdir(r1) (async) accept$unix(r1, 0x0, &(0x7f00000000c0)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/psched\x00') (async) openat(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) fchown(r3, 0x0, 0xee01) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xb8) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) (async) 11m27.262600805s ago: executing program 66 (id=22663): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, 0x0, &(0x7f0000d23000)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=@newsa={0x180, 0x1a, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x16, 0x6c}, @in=@multicast2, {0x0, 0x0, 0x0, 0xffffffe7ffffffff, 0x0, 0xfffffffffffffffc, 0x1000000000000000, 0x80}, {0x0, 0x4, 0x0, 0x1}, {0x0, 0x5}, 0x0, 0x1, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'ctr-aes-neon\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) r4 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000700)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000740)=0x0) r7 = fcntl$getown(r0, 0x9) statx(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup\x00', 0x4000, 0x20, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0xee00]) sendmsg$netlink(r1, &(0x7f0000000b80)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc, &(0x7f0000000980)=[{&(0x7f0000000240)={0x10, 0x2d, 0x8, 0x70bd2d, 0x25dfdbff}, 0x10}, {&(0x7f0000000540)={0x16c, 0x27, 0x4, 0x70bd2d, 0x25dfdbff, "", [@nested={0x15b, 0x4e, 0x0, 0x1, [@generic="c6925f9a56ede2a8ab5a8de2cae2ef8c7e0480e48bb670510b5360832f60f2c1bc4ae53deb62422d40d765937f362d278e7aaafe6f3697f37bd2194e", @generic="02a0453eec906a8af078fb72aa5b96b055f02c3f2d0e6e6e01f8ecd1c65644383128dcca56f9f466dc47d6e5bf369e88ceed9a2cb803c5f999d10408c6940c1b5f0f63d8177ddcafe35acefabea9c1a2fec39146a066e922588fc72a16ba2b36f8f8f35109d0a4fe6bd3d78c49fd9ecc2b12064bb38cdcd9c9582b99bb2e593685a23ea37cdb5265b85ab3551f9326438325f0f3d1117c83b2dc3b88e86a56c4e4597db1985237095d87b0aa2cb3a1ba1eaf26adab087d6479c390b60bc9bfc8c7ce430781f7b1a653", @generic="30d65e59ee72643e8c8df50b3447b594014d3f552503c52cfd6d8f7796ccb6b04c4ddf6ad7d730e5ecd8ea76efb4dbaad5a658a0ea54886577f10dadc27b88d88759", @typed={0xc, 0xc7, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0x11f}]}]}, 0x16c}, {&(0x7f0000000780)={0x1c8, 0x33, 0x300, 0x70bd28, 0x25dfdbfe, "", [@nested={0x8b, 0x70, 0x0, 0x1, [@nested={0x4, 0xa4}, @typed={0x9, 0xfe, 0x0, 0x0, @str='f2fs\x00'}, @generic="17e02cb680d896779dce2b205b0762eca7503e6677b6c8a49cb910a1d50f21c49788f131f4b135ddebe0ee90c2669db5c6159dbe53ae3b891f79fefba78f5990516b69a4a5140ce27e884ea6d6bda6977332fa4f92f1f9091443ee58ef7429e2e05c0d321cdf222ef1167691e53372261193b89d8fb110"]}, @typed={0x8, 0xdc, 0x0, 0x0, @fd=r3}, @nested={0x6d, 0x63, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @pid=r4}, @typed={0x4, 0x61}, @nested={0x4, 0x27}, @generic="f34d0d531b816d931b43dfabc5d4eb4b1e7d99e67f990b3c433e5f9233fca853169242c57628150a45663eb82a1ae27a469c10dae4f4c15b9348b816519578bc4f1154924a2e906c03ab72f641c7998b2f1e2c01a46ecc6a96"]}, @typed={0x8, 0x14f, 0x0, 0x0, @pid=r5}, @generic="7341d18dc2d1a614bc88646198f61ddc877df3227d6307a4353f5e0c55dea486e6ee0d47848930583b17e1af70c05cfe8156cfd1443b52054d5517dd8d838222f4fec0e7220de97ce0aff13f9de047f8397a1470a0704f510d126002a3ab0115e3fb5c7c75a5c8dee363f157385fd3392b2d74f38327bf0cd6d31a8eea9fb3ecbc690be94be99e96238616c0d369f59b8c6a935d091671652bc4cb243d39075a5809", @typed={0x8, 0xe9, 0x0, 0x0, @pid=r6}]}, 0x1c8}], 0x3, &(0x7f0000000b40)=[@rights={{0x1c, 0x1, 0x1, [r2, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x40, 0x8000}, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000100)=@sr0, r10, &(0x7f0000000180)) 10m48.620300398s ago: executing program 67 (id=23253): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) 10m37.15002761s ago: executing program 68 (id=23384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r2, &(0x7f0000000140), 0x48) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x3, 0x7}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) close_range(r0, 0xffffffffffffffff, 0x0) 9m46.543100514s ago: executing program 69 (id=23978): lsm_set_self_attr(0x65, &(0x7f0000000240)={0x6b, 0x52f9, 0x20}, 0x20, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 9m36.131252894s ago: executing program 70 (id=24103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f00000002c0)) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000400)=0x4, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x18}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000100)='./bus\x00', 0x40) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_follow}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x2000, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532342c616e616d653d637075616363742e75736167655f737973002c74696d656f75743d3078303030303030303030303030303030352c706f73697861636c2c00a92e419ffce23c8d7d5f5cd1937996b4fef9353ecb0229600f49631a48e1eb60ddc16f147c929e71752e924c57bb01dd67c6d02ca38df652c1da54865c1e9fe522b80f"]) (async) mmap(&(0x7f000018c000/0x2000)=nil, 0x2000, 0x1, 0x1010, r3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bd7000fbdbdf250300000008000300000000002400068008000300ac1414bb08000600120000000500020081000000060005004e230000050005000700e2ff07000300f09300000500050006000000040001803e4a1b271ba738699e98581045fcc1e532561705f4eaf00b58091270a016aa094fd9823a358b082ff9047785b755226a97833c0f267bc5e9b8232125357f5376e06a66fa5a23c3d9249f50671d6eed1adac1d83d9369d073de90001f08550f278fcd21c1bebd0231549ae6db80444c32601603107df3bf47a0a7f9db0ad7a142d62966d4e891c85861ae715782", @ANYRES64=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4004084) read$FUSE(r4, &(0x7f0000006300)={0x2020}, 0x2020) mount$cgroup(0x0, 0x0, 0x0, 0x100000, 0x0) (async) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300), 0x64a482, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffff3) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0) (async) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>') (async) dup(r6) ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) (async) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) 6m55.461649709s ago: executing program 71 (id=26585): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB='huge=advise,']) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x1) openat(r1, &(0x7f0000000080)='./file0\x00', 0x200140, 0xe0) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2074) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB='huge=advise,']) (async) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x1) (async) openat(r1, &(0x7f0000000080)='./file0\x00', 0x200140, 0xe0) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2074) (async) 6m13.890118049s ago: executing program 72 (id=27420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x1e) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m45.147338458s ago: executing program 73 (id=28335): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x8, 0x0, 0x0, 0x1, 0xe, "0062ba7d02000000000000f7ffffff00"}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 4m18.722175147s ago: executing program 74 (id=28491): r0 = socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x196) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/85, 0x55}, {&(0x7f00000002c0)=""/140, 0x8c}], 0x2, 0x2, 0x7) bind$unix(r0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='max`00000000000017777777777,\x00']) (async) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='max`00000000000017777777777,\x00']) 4m14.107445396s ago: executing program 8 (id=28543): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x4, 0x80010, r0, 0x16941000) 4m14.082075426s ago: executing program 8 (id=28544): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000c80)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x200404, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc814}, 0x40001) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="b7eb290aca"], 0x20000600}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x48000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r9 = syz_open_pts(r8, 0x0) read(r9, 0x0, 0x2006) dup2(r9, r8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m12.484795037s ago: executing program 8 (id=28564): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x4b, 0x0, &(0x7f0000000440)) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x48) (async) mmap(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x2, 0x40010, r2, 0xffffc000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 4m12.452281268s ago: executing program 8 (id=28565): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/1110], 0x456) 4m12.364875429s ago: executing program 8 (id=28566): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) alarm(0x80000001) alarm(0x80000001) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000003c0), 0x6) writev(r1, &(0x7f0000000040), 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x801, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001400110200000000fcdbdf65280068fdfa"], 0x28}}, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) close_range(r2, 0xffffffffffffffff, 0x0) 4m12.313320001s ago: executing program 8 (id=28567): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000004c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00') r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) read$FUSE(r1, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x5420, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9e4d2236078f0080000004ff98023dffffffff"}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000001a80)={'IDLETIMER\x00'}, &(0x7f0000001ac0)=0x1e) poll(&(0x7f0000000180)=[{r4, 0x4}], 0x1, 0x9) 4m12.270057161s ago: executing program 75 (id=28567): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000004c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00') r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) read$FUSE(r1, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x5420, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9e4d2236078f0080000004ff98023dffffffff"}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000001a80)={'IDLETIMER\x00'}, &(0x7f0000001ac0)=0x1e) poll(&(0x7f0000000180)=[{r4, 0x4}], 0x1, 0x9) 3m51.722375957s ago: executing program 1 (id=28828): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x94}) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x4080101}, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m51.662483948s ago: executing program 1 (id=28829): syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12015001000000106b1d010140000102030109029a00030100e0000904000000010100000a24010000000201020c240200000000000e0000000524050000082404030f8bf8ae0c2407", @ANYRES16], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f000060d000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x132) creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000300000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 3m50.316591004s ago: executing program 1 (id=28838): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x200000, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff007}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3m50.199495366s ago: executing program 1 (id=28840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000f3, 0x0, 0x32feb97c}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) 3m50.167491567s ago: executing program 5 (id=28841): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x119000, 0x0) (async) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x119000, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000380), 0x0) (async) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000380), 0x0) sync_file_range(r0, 0xf1ad, 0x2, 0x0) (async) sync_file_range(r0, 0xf1ad, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000080)=0xd5d56000) socket(0x10, 0x803, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) socket$inet6(0xa, 0x802, 0x0) (async) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) sendmmsg$inet6(r6, &(0x7f0000004280)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c, 0x0}}], 0x1, 0x24000010) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000580)={@val={0x0, 0x88a2}, @void, @eth={@multicast, @broadcast, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x67, 0x0, 0x39, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0xfa, 0x0, 0x0, 0x1, 0x7, 0xa4}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2001, {{0x4, 0x2, 0x8, 0x1, 0x0, 0x0, 0x4, 0x1}, 0x2, {0xbd, 0xfff7, 0x1, 0x16, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x6e) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000180)='./cgroup\x00', 0xffffffffffffffff, r9) lsm_set_self_attr(0x65, &(0x7f0000002200)={0x0, 0x1, 0x11c, 0xfc, "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"}, 0x11c, 0x0) (async) lsm_set_self_attr(0x65, &(0x7f0000002200)={0x0, 0x1, 0x11c, 0xfc, "4cb45f36094b0549faece41cb5efe45a93a9d63243872abc6cc2241a345775b043ce12d90832bb38823d2165e165cb315fd07f5d587478a1a0142316db45c3863338e30b44478d59650d6050b7ec5664e84d5bbd385d6871d53f0d3d2643caa8bb2c6acf36ecb2123e64fa51708023a2e9e175fd92fea4c664f5ddda964585b2644bb3001e9be108ba06bfc1b50035eae0172024fa84c5b6c4bafffa7166b813583ef10f9a24a31dbb35fef636d69bb8ef680f4779a62b2e59d3e63ca8a34a253bfe8b49d76e140ffff2e53cb1a13964d92308950b8552a5b0c9433da7527023ab6cca9f1f09fc6289ea07cc3bcf932a13a5c757f19ed7f5689bb6da"}, 0x11c, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:cron_spool_t:s0\x00', 0x22, 0x0) 3m49.920187022s ago: executing program 1 (id=28842): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f00000000c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) 3m49.919569352s ago: executing program 5 (id=28843): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4000, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdir(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000280)={'0000000000000000000000000000000', 0x31}, 0x20, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write(r1, &(0x7f00000002c0)='u', 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES8=r2, @ANYBLOB="05"], 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 3m49.885876782s ago: executing program 1 (id=28844): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000010000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000401000000000000000000"], 0x80}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 3m49.860845263s ago: executing program 76 (id=28844): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000010000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000401000000000000000000"], 0x80}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 3m48.108204447s ago: executing program 5 (id=28862): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x169001, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) prlimit64(r0, 0xe, &(0x7f0000000140)={0xb1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) 3m47.93210507s ago: executing program 5 (id=28866): r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24000081}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 3m47.636084415s ago: executing program 5 (id=28870): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x8442, 0x50, 0x4}, 0x18) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 3m47.496162288s ago: executing program 5 (id=28872): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0xffffffffffffff25, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 3m47.44204345s ago: executing program 77 (id=28872): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000d0000000600000001000000030000000600000000040000050005000000000000000000000000f29ecaca111c14d9753bf12a364ec79f167440f8950d6ac4c4c4493da6e39a420b8f933496e316c0ee431005227d54b10871eb5b799c9101f8c90aa7de9754fa82202d1bc0326f7beeb99af43e86a1deb2725195369c50b58ff1ba0eb3d9664ae8fad88e0c78506d497f732ccd60b61b4c504482707abb0e01f17c85a31285d045a47787eb8c6b0feb0a848db7a0f38138f13bda042960a74ab5798cc9b5c6953b44720500afbab2c8bae0861d895b2605cb21cb17fdc5dab6d6b85c455f511deb76579f0a68e8de348a01135c5453e15d4b545b4aa1bfb0950b8ec640bb2cd1a1bd33c9bea992a871fcb3d0c6ff1cadadd3308e1a0a9e31a6081c404e288f18b9273f5f58c0e50f23ff7099c7af5a44abd25aec2f5523072b870e4785bd05578d8d319914f2460b9e5e5108294532d78d0866f02599daf3989dae3b0ebff79502b66c9d2caee3b3797134696dfa5742c324c6cfd0e9abfde3476ecc3bebe2e4cf106aa55bb01a6c403052947db1ec3b2a04569b5b202f31ad7f70ded7d934e07ce29dd4a3804a7d2d0a0e42fa33ea"]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0xffffffffffffff25, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 3m25.571810481s ago: executing program 7 (id=29041): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000000c0)=0x1003, 0x4) (async) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) sendfile(r0, r0, 0x0, 0x7ffff000) 3m25.516742792s ago: executing program 7 (id=29042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xb8, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x19}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5a5}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008894}, 0x44001) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000245000/0x2000)=nil, 0x2000, 0x2, 0x28011, r3, 0xffffc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) utimensat(0xffffffffffffffff, &(0x7f000000a300)='./file1\x00', 0x0, 0x631e84ec02c57dd7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(r2, 0x0, 0xfffffffffffffd8c) 3m25.468276363s ago: executing program 7 (id=29043): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) setresuid(0x0, 0x0, r1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e22, 0x6, 0x2, 0x20, 0x20, 0x4, 0x0, r1}, {0x72, 0x0, 0x9, 0xec9, 0x800000, 0x2, 0x100000000, 0x100000000}, {0x4, 0x6d33, 0x4, 0x100000001}, 0x37, 0x6e6bb6, 0x2, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x4d4, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3507, 0x1, 0x2, 0x9e, 0xf, 0x3, 0x2400000}}, 0xe8) chdir(&(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r2, 0x82081fc) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r3, 0x800000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000142000/0x2000)=nil, 0x2000, 0x8, 0x10, r3, 0x8000000) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 3m25.392008634s ago: executing program 7 (id=29044): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x7}, 0x10010000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000840)={{'\x00', 0x3}, {0x2}, 0x84, 0x0, 0x0, &(0x7f0000000680)='./file0/../file0\x00', &(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000700)="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", 0x13a, 0x0, &(0x7f0000000b00)={0x2, 0x105e, {0x0, 0xc, 0x51, "dc999aec12b522d4d77f605b7c52e97f2710d39d96cdcaa1f6855796492c2b2d660a1c6fa7436489ff858648670aff1d346a3ee299f6da65b40da916906313d4c3afe1bcd42a2599b77f55b2b801de30a6", 0x1000, "35a68b0349671af8170db1a4685669927fb235cab4451e7038b370ea8ef8ea9b96b41158fc918851dd78b350e73b53523b04509cc3b0903e8ebe0b1e45e14a0dac12ae5235b002b331d5dec82c73f805c161947f6430d6d5206b1e37f66985a3dc5610f0b216ddbd17a04f4fb8aff7579ff203100e689c883d153ccca51a7d06dd49058652e4bb66b31d72f9dfefe541a4ae729b06dc4cfcb825a99264f148aaa96d287a52a23e02bb5380a6a8d0ba73d64ec0209b7bd550c6557155cb12e1e607f2230a642776874d8256b058ae1c43ecf8f0a38d30dea4fd67efa1d3cf2fe4577d99096e407d70692e061ec8663884fa0cbc537d1eb1eb04b034f164d5a60af3445b7e22a6911c31e7e731edc6389ef95463c4e443c8ba66761774095660fd20c91d0d05085d1f250a935bd84b2498a62013525460ea0e7e036b5cfe04a6ded1e8aa1048a31c5e9ab78e416d731525218a88331673479cf749891d3d7dd0be02b8f95159ac0a3ad1fbe24b0cc850019c52b51ada5c5edad1e1b18cb3a684037e6fbc64a534f347ded91dd4e1ac0e984974c8e6dc4ce122e7e667df4858df2e99f1c9f7b4047f8edfc3cf6ebacf2f16d41dbba3fc0ee3c33d93642f8b9d6a772a068feb5f43eba82036cb0ea53557afcc69f1d05aed3f2114e44e594f2820584c4fec076a25e92921f5be8614bfa42d8f0b74f40ca867fa19ee9a5dd74fda5b5e623d8b17a419edfc8cd986cefd70931da8663055a206ec9884d16659fd9ad634c61e05ba6a9a5f0393a244da1373cfa5632da60c8b8fa6862f0ab08f428a07329cfb7806620a019ee2173f1fade663b3fc0e44c7c8f9ce169b95bee8d1dc4accad8dd29b306c5fa9a8eef274a60f50713883ad96771c43ee41e57043f663e6b5adaab2ac63ad3b52853198c806f8bf07ce0c7f1435728205e9f863b52bb9bbaaf7c6fe97dfff13f8c6ae9353405da0902d712d288adaa0f9fdfbc6d740730c6ce50d6eb9daccfb638ce21cdf82f50a692e169e54fccc28bd5c027128233c35f9d2ef43b51653f23f87de2d48356ac406bfeaf3e4b722a24fcb8723775c6a4d9bb785c6964bab234d9a95432e92c2b1aa1e83d907ecf5df426de1a498afe3778641b3ca58cc29546fef342915754186ce256aac36990f98c6f23476140af8ca4d3f6d9ce78afcf9d48c4ed317c8c78413eff07997b74e0eb2d3d37b14c6b7d9a70f7a30ea58e42ab6fecd83852070d69f2f71721564ead2d5c11df748d4a42f198e4589b6f496424e819cbebc688f0a07c900ff1396722b3fbee12f9d6fe5caa8b2de542231940c39942b66d7cb51db45332bdd71df7cf75d81e3ec1024ff6059897ecad933c5ab9bdc49078e27410f5f22ffe8cb18b49edc151996c3638673792592bcd34743ab02db30e31d36bb85a9c2b9cc9096393bd9a6662686276303b6cfb79ef7644601651e3942f3a7733f6a565b82d57a0ee8b6b1ca20e09909edb83a09e31df29415160e7b87daf05fb0e077110eb797ee3d38be48845236cd8ed5ba2dd5d21fc3308d85794836b83887d6c1337a454f8515e76fea2622f22425e7517b071eb1a54a9b8b59a1798459d5820e40d0d3f1457dae876526801ff6a49cbd342cdcb0c3ee667806f80bbba44a9347355214459a1c7158322c00466fc2a6034206621d97100d56fd01dc83d299c6b6f6a61c1bffaaa8cf531337b4161e88d306c70edd3e269f4b73579320747198dc361541f676b3ec804d8dfef10ef7bd09d5ab4c785406230dade19dbb228e4185a4a7f246c94994fa3fe60fd7f1667d70c050ab90aa3101883aba67e3c7f33028fddf29d1043fff61e4108266b4e02478c5145ca175727599cea9a2d5a3721bced95ddfe91b5271187fa4ab17255983cfbbc7250b8a2ec416ec91b9bcfbd44dc0ad128df4c212fc14a8f1a5a005d33f5c88cac5f073d2af7db218b8e5a3ce436b2a82f41391e7b87d30f2515cfbe01635d8989dfc45b56de3b17a9cc2a5c4ca066a6ac5ec488ae19aef1a030386f18901e31ddc103e6ea9c02b49f4c7cb83b1977cd9beb02c49e4e1d212c7945c7aa941e7e1ff0146b6a97652d833a78ab54dfa451b2bf9b014e7bd43bc2c38508e00dd66ed0ad738c435883e09f58dfb16c0bd09e842bea493c5043c4b518386ca4020dac7d9865303ddbf6116b261b2379aa94e312f288707b2e4754bdf6643217caff2d613ef7c9f1c48697238c47613022461902d103f51878e2f910c29491d97ae8aaca522941d2ea2fc9cdb679dce1b3c9b4b5d5e4664d52b3d72b81cc0b1a4045fa576d3f5273035579c9818df70299ade5d44d4d92984799d93b1c2d25c094d4e47748928a7f533040ae2b00ddc57284490308b3a7e73b66703b06a507b7ff7dc3c8a881cd60f5ae325d23b8b5cb3bd7b296d612626de93e64d3b18edb3d42c9f9a8a63fbc7d53e834b972169de88e912bad2447ff53d0e9dd3f7294c2673822622ccefe7168cedb54e77d082e3d5362f7b33a4f4aa1d67b53f50654fa21a02c46c06d9cfb2e9c20518ce231c4d8137c6f7e3d931fcd330d398cac87f3b0aa1705c0e6d4e2753263c086b53d8dcfeb3c533cd89a3692069d5676447bb331dd7d0ad098117635e3570cd4d2eb78ba33c567cf26e6b29186d890c74ccce1b3fdb8c47dc088f48ec0fe6a456800ff1d9a1e488777b13f5891546d9034df804e9efaf3affb9464ec3522340695534ed2ae2ab2d3190dc9ac075d7af22070990ab13ef699cbabaff955f4720c0ab3e9d3c2d0a69304c9a19ebb84c88c5d80ecbb93b874119e034d6a390ac9f32dee7311efeae94ae1c4bb3440530d4a8930180146182afb718faecd9ef8939959dee172dddedeb0e1579c9b07b08b852fdc20ce5b9540c8c71139e6a48b0a9071ce8013a97dc821c3323b394bbd5cdad2b9dc68e6818c5f82a8fda7225090640557ecd354fbc9b55be8135e496e26841bbe2d9ba64a1cf0b054ed8f25e72cbf5605e7cf126c0126bad14dc679b80c150d4f9f7ab7e042f03467249e97a833b6d260468c48d0dbc6f630f422d615ac50b9aa18ca1cc78f778f41a2f3df2887e9e7960fb284b7fdd4b3f0bcdddf3e42f69b273cc9cb58e5050c5ae0a3cbc11b217bfd625cc475e4dc7e31e8f2bd2d2ff3d805de2a19bd2803c2674cb4e4255e4a1a54938669798cb16f30ab85041235e61053bf07e6d45231dd6c340e649101385b56f59a958f1b23bf1966da240f239a3e5196d0f0a1978732beb892494a0dbf3dd5a75c961e2c16db298f1325196ebc2f4cfbd2ed93267e618faf9f117076dee170a25afa023eb0a771fcde90ff901308d7cf14f5b72898b3dd50e239ae55a39c49fb70fe9dfd47400af6b40a79ec2304503787fb593c7ec3a60fe9f6db34fe56d217a2e7275e8083442457abc124e04ec610e0934ea1c29be8b6269696ac619e4769f4066ff45811b5d3b981359edc659ad7dd3f8f8885e62a26a024ec0325e203d1709f23281bebcefc777c5c8857fe5da1601598f3b55572b0b9f117728804d72378486244afc501bfee0941c583199a9322716d298855c41cd0b73818db495f365d2299a77b3f97083b5bef9321a8f451b6c98c18e6df5f02bcce961b2e5e283569b197349c40e44d641701c66b302a913b151a2fca1a2893c82def0c9caaa25eebbdd6de08331cb3ffe22ebaf00f0971f863250da030464f8bc72498e9f1fa4a9cf3c46819e0406858a2b523857fcd0847063f66b46889e1ab4f050a5de19463d0f5c38affa10eef4ba743a617b8233b0e347386e12980fb46b83c353a383b9965ec6d03fdbabf36ff94bd2ac81fbbd3004e1350b4bcff34f9a0bdf4e4e24d69ea4930b6436733e0905831010065818e9950e2235c73005d841fb0135ac834e9ea30e15ff9f6599596dfad782c222da1303fc7e9c3e177f59f06913bad19294d27da7f31dd7902a1fc0efa3eb3f27628f1b617aea3c6204ad40c77110f1f1b41262cbe689718b841bfe9fe99e3343c425f16e9ab07039d993199655bd0cfd3a0fab4a1cb9efab5ad97da63d51cf059aa45b01008bb64772b2890f3571647049407778e48bcb9a720639afacec74b88db3b3e8b4baac8a8d2b192b064615b2729ae55324641ede7ad06b4adc139aaed6751741c31fc7f509df0bc1e1297885a8e351063242e63266f8c46484f4e11f7509f1d0505b7db0ba1709dfa50c7020b3cd1ae4b6aa0bfa3a34f638ce1094519c5554375bf79f9672de77b9d2f57e27d2475b0bf62b6a09767f95534a06220e9257d38e2b3fbd2ac802c2d8c0f06639c21a790341ffb89b52186d4a56d9147f0f68ca762f528079fa2d6d8021010b7d3e6b814de239a62c297c73094df1f5cc07b66bf2063ce09d97242d75c769eba67b48ab16b896008b37ba2735ef8757b62f62257de2a2153078664dff33f1e7c26b6dcef578b48427cb287182415000aa8bb5d939065280bcc63ff09a6192cff80e28cd273279c8f161cf9b3691ba49bfc523eb884fc606a71bfcaf5b14a7bdbf9c92528421475093340801f770e21a10a52f16a1e136474a2b226a0df3231385c944463851ee60843644425c17fd0841a52430104ffc32aa15ee2447dead29da8fabb28de755088d8a2c52b11a4d78b2d7b68e937908c379bde10359a7ee89dca4f01ea3ce06ebb19ac24e958441eb2369c6fcaf0f8dceacebec234c99a4fdea1eb4fcd5da65c6bf8200b17d91275a2466d379a483aa69ac046a78753ffa74436aabc481f1a5a27af6041e04f88a8cc5b97f4529b3f6ad7fe428233befc119ec88ad09199bb93240503956f0ea73184a5187ce48e0b51789d40bf0e2933341b5bdee81c0c378de05d8c4ded93995d5931d009767d7a2b3a1847a66f0f49eb783ce716d08413e71608099a3ecade3ad5864f894530fd88ec345be173768d55263511ca7fb2cadd1b95164d117fa68dca1397d2cfbf3fe79eeaf507049a32daf7adb8a7755746ddaad7a8039015b785b004fa6ed75acaf4a116d96ee34db93d3219629bdc1d65f3a29718245884d880effe596c16fff4bb6a5c8a4a2f3a2f4629ff084aab25a1a8709e0e225f25c2df69a4073eb57cd79fc389df9b98373104f2c6bc1de70cfedb3e02c9abec27b6108079b3e39efc0aed06a7cb9dcdef55ec34ee0338287296b92ff9851727a14034029545323396b1b322d6ebdba77f2f6f056b5d3d4b18187e1400648153ed388ff486b29e087fca3157529053aa543253b50dcc8174ffed72deb5cacaf55774c54e7e6f4ee4faa576feac7ce98d6dd94a618c532ee0c0894ff59ecb64059876980de192b56ae4dad6997f841ff33a9c960ebc907a45f74bbefdabd4a860104ecec759dc713c61b7b15f6aa2adb4ea81838f893a22b0ebcfd427f196e8d5f17f6a37850acca9ef81daa664cdc8f39ac610ed7432bcf125e5fcfedea0b00b9f1aa3507c32195faae8dc59cf80429039f85088546f200d3acd5078664f0abd3d1ebc227e3fa545878926671c130f365b1053dadf7bae207f6ac606a2dcb4e6020e1822d15dde39214f7177eecbc9e0b1f12ee5fdd5028fd9f31dab52d1f3b4b9f4c1a562a2f77585beb34e6aa7ebd543848cc6af430aad22d9f1e0b7a470a322fcfebf5cf21f2ca46ab5712137fe79f169038dc94f00d8a09dd98bf241dbe8249f5def7a0947bcec21f1ed464dc99d48cc91f3ecd9aeb19262bb2425cd71a39c97f5d7dec606e7c01285d7354243b7ba0bc70bbe60bcf55058ddc968f4d16883255719cf127"}, 0x3a, "e74ac0883d31a6f6356a5af595f8a7f74bc9d7fbca1ef489a1890248557026c211d74d7e3d5a55a3e6a12511923a770968893a401d3206847cfb"}, 0x10a4}) stat(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x66, 0x0, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140), 0x1220404, &(0x7f0000000900)=ANY=[@ANYRESDEC=r4, @ANYRES64=r4, @ANYBLOB="2c7766646e6f39cd2f811acbd16ce90337095ad23f98f0f1b900c2a3e5511fc29f37109b9c9d03bcfd7e531cd42a51c6f94f39b7de9f6ef9d1f39bd7255d80237e81debbb70dbdf8dc51a66e84d18349d1fe770dafeb615d94f17a1e77eedd023333a4babb81387a57b2c1fbe188c2de28f68d46a19bdda5720dbbaac29d4d81c501ad4bab17da53be86d6426c8a7e6c6e575ae92829b77bf45da1c7aaaee01bb2ae2892258e247e6d303eb27c74c3db3cbdee17c1cd3b747895f47baaabcc5fb3f6a0041c668e65f1489f90894fb9c053f88abe41fb6111fc1426613b8b88dc9b6858c7f1eb5ad7545a914fa6971a8f302ff34c151ba8d1389bfca6f700"/269, @ANYRESHEX=r1, @ANYBLOB=',cache=fscache,access=', @ANYRESHEX=r2, @ANYBLOB=',directio,acbess=user,noxattr,access=client,cache=fscache,cache=miap,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',c\x00\x00role=/:,\x00'/29]) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000600)={0x400000, 0x32, 0x1}, 0x18) readlinkat(r5, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000640)=""/16, 0x10) writev(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)="870bbf613f752ce1b823aca42be05e2051", 0x11}, {&(0x7f0000000500)="d482bfa6cbfd8ad95336fd0a9f388f145a1613680f29d1012d5beca23eaafadf08742be42a975c824e87a272652e8d09ecd415e54503920e52753e01b7c9051be4f1c78f316eeba0a634f7b194a78f1cea06274dec300ce4d30bc960f367a5c7b63efe67388fc4af92e36b6b3152869166a863c6ddb350a48c1865a5c8d6e2282adc40b969e69835d86bcb292ef726d1dfc16cb6ae0d1098dcf37ae1dbf4", 0x9e}], 0x2) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) r6 = accept4$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14, 0x0) getsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 3m25.387268514s ago: executing program 7 (id=29045): r0 = socket(0x5, 0x3, 0x9) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x10, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x7, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m25.306552216s ago: executing program 7 (id=29046): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xa01, 0x5) r2 = socket(0xa, 0x801, 0x0) getsockopt(r2, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x50, r2, 0x57243000) r3 = openat2(r1, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)={0x2, 0x51, 0x1}, 0x18) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0], 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x100000a, 0x12, r5, 0x4c9a7000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_NAME(r5, 0x40087707, &(0x7f0000000ec0)='\x00\x00\xff\x02\x01\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="400cc2000000c20633a76b8ab67dcf812fe3461fcfe0d42f2ff4670180000000000000243ae9fe447e4480fb5bb9196f80438b1c4f695cff2532fd30c165362422"], 0x0, &(0x7f00000008c0)=ANY=[], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x6, 0x3, "b971d9c0", "20936b61"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x1, 0x2, 0x1, 0x80, 0x80, 0xff7f}}}, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0xe0, 0x40}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x101}, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "d8f3"}, 0x0, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xa}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x5}}) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) openat$incfs(r1, &(0x7f0000000240)='.log\x00', 0x40280, 0x4) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) 3m25.272681216s ago: executing program 78 (id=29046): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xa01, 0x5) r2 = socket(0xa, 0x801, 0x0) getsockopt(r2, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x50, r2, 0x57243000) r3 = openat2(r1, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)={0x2, 0x51, 0x1}, 0x18) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0], 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x100000a, 0x12, r5, 0x4c9a7000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_NAME(r5, 0x40087707, &(0x7f0000000ec0)='\x00\x00\xff\x02\x01\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="400cc2000000c20633a76b8ab67dcf812fe3461fcfe0d42f2ff4670180000000000000243ae9fe447e4480fb5bb9196f80438b1c4f695cff2532fd30c165362422"], 0x0, &(0x7f00000008c0)=ANY=[], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x6, 0x3, "b971d9c0", "20936b61"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x1, 0x2, 0x1, 0x80, 0x80, 0xff7f}}}, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0xe0, 0x40}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x101}, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "d8f3"}, 0x0, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0xa}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x5}}) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) openat$incfs(r1, &(0x7f0000000240)='.log\x00', 0x40280, 0x4) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) 3m11.252225836s ago: executing program 6 (id=29214): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40101, 0x0) r1 = socket(0x28, 0x5, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 3m11.217027757s ago: executing program 6 (id=29215): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x102) mkdirat(r0, &(0x7f0000000100)='./cgroup\x00', 0x1a1) 3m11.136263609s ago: executing program 6 (id=29216): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000000)=0xe8) r2 = socket$packet(0x11, 0x3, 0x300) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid={'access', 0x3d, r6}}]}}) setreuid(r1, r6) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x66053000) 3m11.095558379s ago: executing program 6 (id=29217): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x420, 0x3f4, 0x4, 0x70bd2b, 0x25dfdbff, {0x4, 0x1, 0x5, [0x8, 0x2, 0x80000001, 0x5, 0x6, 0x7ff, 0x2, 0x800, 0x8, 0x8, 0x6, 0x8, 0x7fff, 0x6, 0x3, 0x8, 0x800, 0x8f89, 0x3, 0x0, 0x80, 0x4f2a, 0x8a7, 0x2, 0x0, 0x6, 0x6, 0x8000, 0xfa1, 0x4, 0x7, 0xfffff800, 0xa459, 0x1, 0x401, 0x7, 0xfffffeff, 0x7fffffff, 0x2, 0x101, 0x7, 0x8, 0x7, 0x180000, 0xfffffffb, 0x5, 0x2, 0x37, 0xb, 0x6, 0xb, 0xfffffffd, 0x0, 0x80000001, 0x4, 0x6, 0x1, 0x5d6, 0xffffffff, 0x6, 0x2, 0x2, 0x3, 0x3], [0x5, 0xfffffff0, 0x8, 0x26, 0x9, 0x1, 0xfffffff9, 0x6, 0xe, 0x3, 0x10001, 0x8, 0x100, 0x698c, 0x6, 0xa, 0x0, 0x3, 0x1425, 0x2, 0x1, 0x8, 0x100, 0x40, 0x3, 0x5, 0x7, 0x4, 0x7, 0x6, 0x3355, 0xa, 0x6, 0xff, 0x40, 0x8, 0xfffff001, 0x2, 0x7981d514, 0x80, 0xb, 0x8, 0x200, 0x5, 0x8, 0xffffffff, 0x0, 0x2, 0x7, 0xfffffffd, 0x5, 0x4, 0x5, 0xe8, 0x6, 0x8, 0x5, 0x24083025, 0x2, 0x800, 0x2, 0x9, 0xc, 0xea6], [0x2, 0x4, 0x7, 0x2, 0x48, 0x6, 0xffffffff, 0x3, 0x7ff, 0x7c9f, 0x2, 0xa, 0x0, 0x0, 0xff, 0x10000, 0x8, 0x3, 0x1, 0x7e, 0x81, 0x1ff, 0x3, 0xfffffff8, 0x51918090, 0x3, 0x5, 0xfffffffa, 0x8000, 0x101, 0x7fff, 0x56de, 0x5, 0x9, 0xff, 0x7, 0x2, 0x9, 0x72c, 0x9, 0x9, 0xffffffff, 0x0, 0x5, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x5, 0x7, 0x8, 0x3, 0x6, 0x80000000, 0x8, 0xc6b, 0x5, 0x2, 0x3, 0x6, 0x1000, 0x6, 0x5], [0x8, 0x8, 0x100, 0x2, 0x3b, 0x35df4793, 0x7, 0x0, 0x3, 0x6, 0xffff89ec, 0x9, 0xbef, 0x3, 0x9, 0x8, 0x4, 0x4, 0x3, 0x7, 0xff, 0xff, 0x9, 0x6, 0x9b3, 0xfffffffd, 0x6, 0xd4f, 0x8, 0x9, 0x8, 0x5, 0x6, 0xf0e, 0x7fff, 0x2, 0x4, 0x0, 0x0, 0xffffffff, 0x3, 0xa93, 0xfff, 0x9, 0x7ff, 0x100, 0x4, 0x8000, 0xfffffff8, 0x5, 0x3, 0x6f98, 0x1, 0x9, 0x100, 0x1, 0x1, 0xffffffff, 0xffffff7a, 0x9, 0x5, 0x9, 0x7f, 0xffff]}}, 0x420}, 0x1, 0x0, 0x0, 0x40000a0}, 0x5000) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a3f4300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0xfffff000, 0x0, 0x9e5e111c47e3504f) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@getsa={0x34, 0x12, 0x1, 0x70bd27, 0x25dfdbff, {@in6=@local, 0x4d4, 0x2, 0x33}, [@mark={0xc, 0x15, {0x35075a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000804) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000000400)=""/194, 0xc2}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f0000000140)=""/16, 0x10}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f00000016c0)=""/168, 0xa8}], 0x9, &(0x7f0000001840)=""/148, 0x94}, 0x1) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000001900)={@local, 0x0}, &(0x7f0000001940)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001980)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8, 0x634, 0x1, 0x100, 0xa9f9, 0x200041, r4}) read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) 3m10.944276602s ago: executing program 6 (id=29219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r1, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7933707fe9bce142b8971a5f2be0a4b035a87c58f573ded724070800010002"], 0x150}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) 3m10.911278823s ago: executing program 6 (id=29221): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = epoll_create(0x3) ppoll(&(0x7f0000000200)=[{r2, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @remote}}}, 0x109) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="2f0404020d200800ff020000000000000000000000000001200100000000000000000000000022fc"], 0x28) (async) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="2f0404020d200800ff020000000000000000000000000001200100000000000000000000000022fc"], 0x28) 3m10.806584715s ago: executing program 79 (id=29221): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = epoll_create(0x3) ppoll(&(0x7f0000000200)=[{r2, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @remote}}}, 0x109) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="2f0404020d200800ff020000000000000000000000000001200100000000000000000000000022fc"], 0x28) (async) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="2f0404020d200800ff020000000000000000000000000001200100000000000000000000000022fc"], 0x28) 42.826705045s ago: executing program 2 (id=31226): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) capget(&(0x7f0000002040)={0x19980330}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) link(0x0, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) sendmmsg$inet6(r1, &(0x7f0000000c40)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @private2, 0x7fff}, 0x1c, &(0x7f0000000a00)=[{&(0x7f00000001c0)="0f43fdabed71282cc317eeadc84dcd3ab9a4bbf818df33bf317c8fd447847d4e606ca90b4046b0e2c9ca165ee1cfe3a484464b10558576378ca0466d90b25923a2ff7b449841b37d78131a8c1507956c68757b", 0x53}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f00000003c0)="5e6f5ee9f908b16f47b85b1110f5185ae732ca0a01e7d88f0ca7d326760a31fd56589449867c84c7a9a4c4edad45ff13238942fef0cc2fd09b9e421590507ef20534e6ec17d9d9786676e8fa2af32b84e1bdb57d492e15e1d644d97c", 0x5c}, {&(0x7f0000000580)="103fb27dc067388e44965d6ac2b3bc5e5194f9badc4ba31360d8094a9b368ea36970736d994239b7647a164655257d6d53330d92e8a01965280d035807054a45c074f9f512efae467b64b10b9315ca552361bec37bfd495f6e784071d4d169dc5284e77832", 0x65}, {&(0x7f0000000640)="f7155d6554af206a3b6239ea674fe1f5eebce69f0135a8cf61ad950063fb46763c467d5338aec5bfa106646d9649a5d15ec59650c255137c3ee22293cc1df0849dda6098047239a260bd4b2a172d8be97e09b61414a3c49d08b9a439e22c68030e8c993309b0a68c073a6132043c280aeeb94ce03da2df9c34bad61b873d71340a13", 0x82}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000000340)='IB', 0x2}, {&(0x7f0000000780)="5d8dcb5eb3b82ff2c565ab9a763b0a58b2778db9ee776946d62727102555d3680586e489f27624dce38cd393a0b98cf56c36c80895beb3ae1ba7856dd3b9a56f94e2", 0x42}, {&(0x7f0000000800)="7ea5ac9d594770c0fa28af09d0a8d695ca864a3d2e91b50bc042ca2c70942eb871061e9eb8aec9227cfee36de81c571c4bcd4a0abd1f5c271f7369c5c646efc4b76bd448ff844b2779911a764f0229fc71371eda0205f7eb959479f303be1e2fc80f624375f6580b7dca085b3b58ba735110b1432c0a3219f68f7ca747e508aeb9d28907783d00f727b70055249afe26225ed54ea9ca269cc4268c8e8fd5d5a0f7aeebf8b60f0c422868fe1e413df3a5d6ea42df09d3e49bcdbf5d35f34740f87890f408f1761e8c3b67848abbd1deb131848b76bafba804c0104e485274636e7a957efc789fb561", 0xe8}, {&(0x7f0000000900)="6a45f3b57d106e3bdd3ef49b096a40d46421adefe9d3da1180c6608811297ed6856c7ab3779770008c9b8f7f25fb006e16799b422bfc01b6a10ae95261d940c5c0380c2699bb1a6b7eb5bd384dd328b9aee1541dd87e2b046f8e998cf4014f2bfe185cbe83e144ed7966ac8e1ea2a6fdaefdd69b16debb69eb2ca64c654b920e9f3bdb2182da0cf058c586e59a5f61da8ebc6ac34227cee51cb218e2b5ea0d5a3ec723db9069605b33bfcc815257cfa873f3f0f32d1b5f8af189b982319060b1849ff0763f081109b9a82f9f7bef03a564c8935e8f3289843f6f488ff132a4dd187e4425d6d84dd7903df4f557894f702dd898d64dc6f1", 0xf7}], 0xa}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000ac0)="6033dab4c9c4e81a786a0ad397ab62604d2479a611c5cd11f5ff6ec806ae1e5d4ef4214a565573f8e514ae830fa275a76bdc6451ca2e6ca7893666373605ba2f53b2e5a43289ba9443d7dec91a0fa73542454ca5c2fe9dbe97fef852495df2d9c895f076e9eadb8c2d47abf5fb6c469970e30d6609453c298ee146c0d76c884751b0cd57d46b669d28f9987de2b10ca715be7f346a949289f8aaa8068ea8629842cec3aa13860f0f71d8a33c0f40022954d22085b6e893fc3da85ab70af3fbe37146f8751dec64653a3a8df680a418c50953b443be203f4e6b547eb0013a1c45f75fe0bc8307b09fe3cdb04aa1628681ae4c24fd", 0xf4}], 0x1, &(0x7f0000000bc0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x1d, 0x6, 0x2, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private1, @mcast2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x60}}], 0x2, 0x4801) (async) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4000) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000080)=0xffff, 0x4) (async) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r6, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x2000000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) mount$incfs(&(0x7f0000000180)='./bus\x00', &(0x7f0000000380)='./bus\x00', &(0x7f0000000440), 0x204050, &(0x7f0000000540)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0xdbd}}]}) (async) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0xa8d58000) 42.800297035s ago: executing program 2 (id=31227): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x46042, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) r1 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x0, 0x0) 42.682089668s ago: executing program 2 (id=31230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) 42.55989805s ago: executing program 2 (id=31232): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0xa300) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110a, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_get$pid(0x2, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f00000000c0)) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) close_range(r0, 0xffffffffffffffff, 0x0) 42.503924691s ago: executing program 2 (id=31234): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) 42.426868742s ago: executing program 2 (id=31236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448c1) r3 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000380)=""/52) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x4, &(0x7f0000000200)=""/123, 0x7b, 0x1, 0x26}, @flat=@handle={0x73682a85, 0x3001, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448c1) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000380)=""/52) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x4, &(0x7f0000000200)=""/123, 0x7b, 0x1, 0x26}, @flat=@handle={0x73682a85, 0x3001, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 26.270398403s ago: executing program 80 (id=31236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448c1) r3 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000380)=""/52) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x4, &(0x7f0000000200)=""/123, 0x7b, 0x1, 0x26}, @flat=@handle={0x73682a85, 0x3001, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448c1) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) (async) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000380)=""/52) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x4, &(0x7f0000000200)=""/123, 0x7b, 0x1, 0x26}, @flat=@handle={0x73682a85, 0x3001, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 4.100132671s ago: executing program 4 (id=31786): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESOCT=r1, @ANYRES16=r2], 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) 4.086091151s ago: executing program 4 (id=31788): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x8, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') write(0xffffffffffffffff, &(0x7f00000003c0)="1f0f9fbd34d869be62e7032d4500b9e7d68f9f7b876328321f25a4b742020da047aa89815d1e29ffbe61bb83b792471242dd7dd7facad44581672e303eec3e0d573e7062000000006c00000000b0bb0d7565387e760cf9e124c19bab5b9fd4595f859e270ba4f15ca02f659175d265c5307bdd21f400"/133, 0x85) r4 = open(&(0x7f0000000280)='./file1/file0\x00', 0x206640, 0x0) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', './file1', [{0x20, '/dev/ptmx\x00'}, {0x20, 'mounts\x00'}, {0x20, 'overlay\x00'}]}, 0x27) bind$can_raw(r3, &(0x7f0000000180), 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) 3.957778234s ago: executing program 4 (id=31792): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000340)=0x14, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) r2 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0100001a00130400000000fbdbdf25fe8000000000000000000000000000bb7f00000100000000000000000000000000004be64e2400000200002000090000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414110000000000000000000000000000000f32000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffffffcffffffffffff070800000000020000000000000000000038000000000000000800000000000000cc000000000000000000000000000000f5000000000000000010000000000000040000000a00020100000000000000004c001200726663"], 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000080)={0x3}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1fe, 0x2, 0x0, 0x2000, &(0x7f00004ef000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x80800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 3.356190095s ago: executing program 3 (id=31798): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r1, &(0x7f0000001580)=[{&(0x7f00000000c0)='\x00', 0xfffffeb0}], 0x1) (async) read(r1, &(0x7f0000000180)=""/240, 0xf0) timerfd_create(0x4, 0x80000) (async) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.355668145s ago: executing program 3 (id=31799): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88880, 0x0) read$FUSE(r1, 0x0, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x9}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) pread64(r2, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 3.338562465s ago: executing program 3 (id=31800): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000000000000000000000000000ff0200000000000000000001e50000000000000000000000fe8000000000000000000000000000aa3c040000020000000a0002002ebd80a09c64e4c2591572ee6508bb097bab1620c30fbf8d140129fbe5ca618e9e8e1524305ea8398263f8785c7ed6d5291b1ff73d87ce806304a18b4fc57b66cfaaca329a1a2d0b556ecb42084531fc7ecdbd66dcee35fe79bc6ebaba8e30311311e1c8d0fba40000000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x88001, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x66, &(0x7f0000000240), 0x4) (async) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000006c0)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r10, 0x10, 0x70bd28, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x4814) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000003c0)=""/156, &(0x7f0000000040)=0x9c) 3.329831616s ago: executing program 3 (id=31801): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x5c93c2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000200100000000000008000f0001000000", 0x24) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000780)=""/219, 0xdb}], 0x1, 0x3b, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 3.263336337s ago: executing program 3 (id=31802): openat$kvm(0xffffffffffffff9c, &(0x7f0000000fc0), 0x311800, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x42, 0x70, 0xc7, 0x40, 0x7c4, 0xa002, 0xd7cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0x40, 0x9, [{{0x9, 0x4, 0x95, 0xf4, 0x0, 0x5c, 0xf2, 0xf5, 0x2}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r2, 0x8, r3) tkill(r0, 0x13) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000001080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 2.906041814s ago: executing program 4 (id=31805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x40) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x1}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988a8fb", 0xf}, {&(0x7f00000008c0)="a33d07b995", 0x5}], 0x2) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 2.748307007s ago: executing program 4 (id=31806): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r1, 0x25, &(0x7f0000000a40)) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000280)=[{&(0x7f0000000000)="2d74115fd9", 0x2}], 0x1, 0x4, 0xa) unshare(0x62040200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r3, &(0x7f0000000200)=""/4087, 0xff7, 0x3) r4 = syz_clone3(&(0x7f0000001200)={0x200000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xc}, &(0x7f00000000c0)=""/29, 0x1d, &(0x7f0000000140)=""/24, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(r4, &(0x7f00000001c0)='net/rt_acct\x00') 2.56759924s ago: executing program 4 (id=31808): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x96, 0xf, 0x3, 0x7fff}]}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100ffe840e5130100534e0000000109021b"], 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 1.222467786s ago: executing program 9 (id=31820): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x8c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x402}, @NL80211_ATTR_SCAN_SSIDS={0x5c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x19, 0x0, @random="c3d52bc596e57a5bd4501d6476e85648159608a6b1"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1320}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x800}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00'], 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r1, 0x9) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000280)='./file0\x00', r3, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x20, 0x5, 0x6, 0xa00, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x80001}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440), 0xa0082, 0x0) write$vga_arbiter(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock mo'], 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000001400)={'vlan1\x00', @remote}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r7, &(0x7f0000000400)="421d9900", 0x5e0, 0x4004, &(0x7f0000000200)={0x11, 0x8100, r8, 0x1, 0xe0}, 0x14) recvfrom(r2, &(0x7f0000000000)=""/16, 0x10, 0x2, &(0x7f0000000280)=@can={0x1d, r8}, 0x80) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x6003) write$binfmt_script(r4, &(0x7f00000004c0)={'#! ', '', [], 0xa, "d943f459535ea6824ac85972d7"}, 0x11) sendfile(r1, r4, &(0x7f0000000100)=0x10, 0x746) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x1000003, 0x12, r0, 0xca639000) 1.195952027s ago: executing program 9 (id=31821): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r1}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'sha256-arm64\x00'}}, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x18, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000100)=0x6e, 0x800) (async) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fadvise64(r4, 0x1, 0xb36, 0x3) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) (async) mmap(&(0x7f00000fa000/0x10000)=nil, 0x10000, 0x0, 0x20010, r6, 0x2ec7b000) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, '\x00', "fe4f47bafbb67ae68dc462427bd5a94a", "a4dd10c8", "96499e2301e9d879"}, 0x28) (async) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000380)="eb", 0x1}], 0x1) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000440)=0x4000000, 0x4) (async) recvmmsg$unix(r3, &(0x7f0000004100)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/121, 0x79}, {&(0x7f0000000680)=""/202, 0xca}, {&(0x7f0000000380)=""/5, 0x5}, {&(0x7f00000004c0)=""/20, 0x14}, {&(0x7f0000000780)=""/97, 0x61}], 0x6, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000a00)=""/98, 0x62}, {&(0x7f0000000a80)=""/30, 0x1e}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/66, 0x42}, {&(0x7f0000001b40)=""/129, 0x81}, {&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x9, &(0x7f0000003d80)}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f0000004040)=[{&(0x7f0000003e40)=""/194, 0xc2}, {&(0x7f0000003f40)=""/198, 0xc6}], 0x2, &(0x7f0000004080)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}], 0x3, 0x2041, &(0x7f00000041c0)={0x77359400}) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x3) write$cgroup_devices(r7, &(0x7f00000000c0)={'b', ' *:* ', 'w\x00'}, 0x8) 1.168141237s ago: executing program 9 (id=31822): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @dead_binder_done, @exit_looper, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 1.096171589s ago: executing program 9 (id=31823): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x2, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) 1.094421048s ago: executing program 9 (id=31824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) r1 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7a40, &(0x7f0000000840)={0x0, 0xfb01, 0x40, 0x0, 0x3be, 0x0, r1}, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="02112d39f367000027bd7000fedbdf2505001a00fc010000000009000000000000000001000000000000000000000000000000012800081c030007003c20000002004e22640101010000000000100000"], 0x50}}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000600"], 0x48}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = syz_clone(0x20048000, &(0x7f0000000400)="f23d2d32ba53de66dad26c80500ea152afa05b0faf8b6dce27ec0525c7b7854491626b2d1b0ffd74f849250ffe1958feef6b967a90fb19aa3ed5eb25af7742b11120359952624cec", 0x48, &(0x7f0000000240), &(0x7f00000004c0), &(0x7f0000000480)="8391de87643c6e248a0f083846bf301b9d2acddf7172ccefd4ad") r8 = syz_open_procfs(r7, &(0x7f0000000000)='net/netlink\x00') mkdirat(r8, &(0x7f0000000380)='./file0\x00', 0xcd) r9 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r9, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) getsockopt$sock_timeval(r9, 0x1, 0x0, &(0x7f0000000040), &(0x7f0000000100)=0x10) write$FUSE_INIT(r8, 0x0, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) r10 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r10, 0x80284504, &(0x7f0000000000)=""/56) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400add427ab62201745b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003fffffffffffffffff7ffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 831.805314ms ago: executing program 0 (id=31825): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setown(r5, 0x8, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000080)) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x3ff]}, &(0x7f00000001c0), 0x8) getrusage(0x0, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x8) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) fcntl$setown(r5, 0x8, 0x0) (async) fcntl$getownex(r5, 0x10, &(0x7f0000000080)) (async) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x3ff]}, &(0x7f00000001c0), 0x8) (async) getrusage(0x0, &(0x7f0000000280)) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) 699.031346ms ago: executing program 0 (id=31826): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x400) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x200) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x1c, 0x4) sendmsg(r1, 0x0, 0x400c050) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)={0x2c, r2, 0x333, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}}, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000002600)={0x2}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x901041, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000001c0)="c71d89e665a2b82e7baa28c62f4b42df5154b3a70ed99edc4203e249a62b7e11125a1473dcfd", 0x26}], 0x1) ioctl$KVM_SET_MSRS(r8, 0x4140aecd, &(0x7f0000000100)) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)) fcntl$getownex(r0, 0x10, &(0x7f0000002c00)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='totmaps\x00') pwrite64(r9, &(0x7f0000000200)="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", 0x1000, 0x71) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r7, 0x942e, 0x0) read$FUSE(r9, &(0x7f0000006b40)={0x2020}, 0x206e) 656.468487ms ago: executing program 0 (id=31827): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001240)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0), 0x4020, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r3}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 607.949078ms ago: executing program 0 (id=31828): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000000000001000000060000006a34c81fb000cf6f"]) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000240)={"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"}) connect$inet6(r1, &(0x7f0000000080), 0x1c) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8, 0x1, 0x9, 0x6, {{0x17, 0x4, 0x3, 0x1, 0x5c, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, {[@timestamp_addr={0x44, 0x24, 0xdf, 0x1, 0x6, [{@rand_addr=0x64010101, 0x99b2}, {@remote, 0x9}, {@loopback, 0x4}, {@multicast1, 0x6}]}, @noop, @rr={0x7, 0x23, 0xb8, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @private=0xa010102, @broadcast, @broadcast, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x21c, r5, 0x333, 0x0, 0x0, {0x1c}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x21c}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r10 = fcntl$dupfd(r1, 0x0, r1) sendmsg$IPVS_CMD_GET_CONFIG(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "8ba672dad0f6323f", '\a\x00', "ee862ce0", "982a2b89f61f0617"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe00000000000029", 0x29) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r11, 0xc008ae09, &(0x7f00000000c0)={0x66666666666689b}) ioctl$PIO_SCRNMAP(r10, 0x4b41, &(0x7f0000000000)="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") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 607.295758ms ago: executing program 0 (id=31829): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) (async, rerun: 64) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (rerun: 64) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 561.271619ms ago: executing program 0 (id=31830): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x2, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) process_mrelease(r1, 0x0) 464.760341ms ago: executing program 9 (id=31831): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73bf8284303500"], 0x7) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000040) r7 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="02010000312f2640392aa03fe72e7733030109f500001000090400002d40958e8b0071f8"], 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r10 = syz_open_procfs(r8, &(0x7f0000000180)='mountstats\x00') syz_usb_control_io(r7, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000480)={'ip6_vti0\x00', 0x7342}) 0s ago: executing program 3 (id=31832): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) sendmmsg$inet6(r4, 0x0, 0x0, 0x20044000) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r3, &(0x7f0000003b40)=[{{&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[], 0x1010}}], 0x1, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{{0x3, 0x0, 0x0, 0x1}, {0x4}}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}, {{0x4, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x20) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100001097fb7400000000f7c824760300"/29, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r9 = open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)="d0c4c6", 0x3}], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000080)={0x2}) sendto$inet6(r6, &(0x7f0000000180)="d413aa9d3a47d47760aa193f1f9f16eb47d507f515dfec2096e7594952ed6c64461b3b674dfafe197984cf4413ca03a9612e060ec186cc7e0769b099e33fb1465420e5d993723003e4789140dde94e583da6f0f70933d95717a3", 0x5a, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffc, @loopback, 0x6}, 0x1c) kernel console output (not intermixed with test programs): t 0003:045E:07DA.0072: unknown main item tag 0x0 [ 2023.616474][T21323] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 2023.626391][T21323] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0072/input/input183 [ 2023.646427][T21323] microsoft 0003:045E:07DA.0072: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2023.666630][T29214] usb 10-1: USB disconnect, device number 124 [ 2023.687996][T19877] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 2023.733613][T19877] usb 3-1: USB disconnect, device number 126 [ 2023.762889][ T942] usb 1-1: USB disconnect, device number 13 [ 2023.774244][T25462] fido_id[25462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0072/report_descriptor': No such file or directory [ 2023.847237][T25465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147 [ 2023.932874][T25469] netlink: 8 bytes leftover after parsing attributes in process `syz.9.29322'. [ 2024.087708][T25475] rust_binder: Write failure EFAULT in pid:157 [ 2024.385074][T25488] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2024.401826][T25489] netlink: 108 bytes leftover after parsing attributes in process `syz.2.29332'. [ 2024.460880][ T4527] rust_binder: 25484: removing orphan mapping 0:4096 [ 2024.478309][ T6442] Bluetooth: hci0: Frame reassembly failed (-84) [ 2024.517821][T25496] tipc: Started in network mode [ 2024.522698][T25496] tipc: Node identity , cluster identity 4711 [ 2024.542843][T25496] tipc: Failed to obtain node identity [ 2024.548333][T25496] tipc: Enabling of bearer rejected, failed to enable media [ 2024.610759][ T36] kauditd_printk_skb: 1440 callbacks suppressed [ 2024.610820][ T36] audit: type=1400 audit(8100668117.404:123348): avc: denied { read write } for pid=25502 comm="syz.0.29337" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2024.640789][ T36] audit: type=1400 audit(8100668117.404:123349): avc: denied { read write open } for pid=25502 comm="syz.0.29337" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2024.666166][ T36] audit: type=1400 audit(8100668117.423:123350): avc: denied { read } for pid=25502 comm="syz.0.29337" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2024.689578][ T36] audit: type=1400 audit(8100668117.423:123351): avc: denied { read open } for pid=25502 comm="syz.0.29337" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2024.713611][ T36] audit: type=1400 audit(8100668117.423:123352): avc: denied { create } for pid=25502 comm="syz.0.29337" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2024.734785][ T36] audit: type=1400 audit(8100668117.423:123353): avc: denied { read write } for pid=25500 comm="syz.2.29336" name="binder1" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2024.758489][ T36] audit: type=1400 audit(8100668117.423:123354): avc: denied { read write open } for pid=25500 comm="syz.2.29336" path="/dev/binderfs/binder1" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2024.784244][ T36] audit: type=1400 audit(8100668117.423:123355): avc: denied { create } for pid=25500 comm="syz.2.29336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.805213][ T36] audit: type=1400 audit(8100668117.423:123356): avc: denied { create } for pid=25500 comm="syz.2.29336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.826168][ T36] audit: type=1400 audit(8100668117.423:123357): avc: denied { write } for pid=25500 comm="syz.2.29336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.862205][T25504] block device autoloading is deprecated and will be removed. [ 2024.962523][T25510] veth1: entered allmulticast mode [ 2025.022249][T25511] veth1: left allmulticast mode [ 2025.338095][T21323] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2025.497955][T21323] usb 1-1: Using ep0 maxpacket: 8 [ 2025.504864][T21323] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2025.513503][T21323] usb 1-1: config 179 has no interface number 0 [ 2025.519788][T21323] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2025.531008][T21323] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2025.542406][T21323] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 2025.553717][T21323] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 2025.565117][T21323] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2025.578423][T21323] usb 1-1: config 179 interface 65 has no altsetting 0 [ 2025.585301][T21323] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2025.594335][T21323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.607331][T21323] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input184 [ 2025.657912][ T95] input input184: unable to receive magic message: -110 [ 2025.700813][T24652] input input184: unable to receive magic message: -32 [ 2025.776151][ T95] input input184: unable to receive magic message: -32 [ 2025.834789][T21323] usb 1-1: USB disconnect, device number 14 [ 2025.852217][T21323] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2026.649100][T20316] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2026.649114][ T4612] Bluetooth: hci0: command 0x1003 tx timeout [ 2026.862212][T25541] fuse: Unknown parameter 'dN50x0000000000000003' [ 2026.886589][T25547] /dev/rnullb0: Can't lookup blockdev [ 2026.945662][T25550] input: syz0 as /devices/virtual/input/input185 [ 2026.964546][T25550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2026.971833][T25550] IPv6: NLM_F_CREATE should be set when creating new route [ 2026.979054][T25550] IPv6: NLM_F_CREATE should be set when creating new route [ 2027.044962][T25552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=25552 comm=syz.2.29354 [ 2027.096437][T25552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=25552 comm=syz.2.29354 [ 2027.327575][T19877] rust_binder: 25565: removing orphan mapping 0:4096 [ 2027.403777][T25583] fuseblk: Unknown parameter '|s +na{;2MooR' [ 2027.701988][T25608] proc: Unknown parameter 'max' [ 2027.715167][T19877] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2027.912542][T25611] IPv6: NLM_F_CREATE should be specified when creating new route [ 2027.916679][T19877] usb 3-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 2027.979685][T19877] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2028.018319][T19877] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2028.052085][T19877] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 2028.068833][T19877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.078511][T19877] usb 3-1: Product: syz [ 2028.092637][T19877] usb 3-1: Manufacturer: syz [ 2028.103797][T19877] usb 3-1: SerialNumber: syz [ 2028.116444][T19877] usb 3-1: config 0 descriptor?? [ 2028.322536][T29214] usb 10-1: new high-speed USB device number 125 using dummy_hcd [ 2028.349617][T19877] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 2028.363126][T19877] usb 3-1: No valid video chain found. [ 2028.371308][T19877] usb 3-1: USB disconnect, device number 127 [ 2028.493055][T29214] usb 10-1: Using ep0 maxpacket: 32 [ 2028.500941][T29214] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2028.512312][T29214] usb 10-1: config 0 has no interface number 0 [ 2028.519179][T29214] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2028.530796][T29214] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2028.541184][T29214] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2028.550723][T29214] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.560105][T29214] usb 10-1: config 0 descriptor?? [ 2028.988522][T25640] binder: Bad value for 'stats' [ 2029.129720][T25649] netlink: 'syz.3.29387': attribute type 27 has an invalid length. [ 2029.141819][T25649] 0{X: left allmulticast mode [ 2029.147911][T25642] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 2029.234047][T29214] uclogic 0003:28BD:0094.0073: failed retrieving string descriptor #100: -71 [ 2029.248135][T29214] uclogic 0003:28BD:0094.0073: failed retrieving pen parameters: -71 [ 2029.256880][T29214] uclogic 0003:28BD:0094.0073: pen probing failed: -71 [ 2029.264903][T29214] uclogic 0003:28BD:0094.0073: failed probing parameters: -71 [ 2029.272649][T29214] uclogic 0003:28BD:0094.0073: probe with driver uclogic failed with error -71 [ 2029.282770][T29214] usb 10-1: USB disconnect, device number 125 [ 2030.027115][ T36] kauditd_printk_skb: 705 callbacks suppressed [ 2030.027134][ T36] audit: type=1400 audit(8100668122.489:124063): avc: denied { ioctl } for pid=25664 comm="syz.2.29394" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2030.050617][T25672] rust_binder: 179: no such ref 0 [ 2030.083136][T25672] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2030.089375][ T36] audit: type=1400 audit(8100668122.489:124064): avc: denied { read write } for pid=24630 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2030.151736][ T36] audit: type=1400 audit(8100668122.498:124065): avc: denied { read write open } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2030.209629][ T36] audit: type=1400 audit(8100668122.498:124066): avc: denied { ioctl } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2030.214645][T25678] rust_binder: Failed copying remainder into alloc: EFAULT [ 2030.261014][T25678] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 2030.271300][T25678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2030.293472][T25678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:181 [ 2030.307554][ T36] audit: type=1400 audit(8100668122.508:124067): avc: denied { read } for pid=25671 comm="syz.9.29395" name="binder1" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2030.367358][ T36] audit: type=1400 audit(8100668122.508:124068): avc: denied { read open } for pid=25671 comm="syz.9.29395" path="/dev/binderfs/binder1" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2030.416559][ T36] audit: type=1400 audit(8100668122.508:124069): avc: denied { ioctl } for pid=25671 comm="syz.9.29395" path="/dev/binderfs/binder1" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2030.484335][T25686] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2030.506294][T25686] audit: audit_lost=98 audit_rate_limit=0 audit_backlog_limit=64 [ 2030.514606][ T36] audit: type=1400 audit(8100668122.508:124070): avc: denied { set_context_mgr } for pid=25671 comm="syz.9.29395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2030.976567][ T942] usb 10-1: new full-speed USB device number 126 using dummy_hcd [ 2031.141537][ T942] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2031.148329][ T942] usb 10-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 2031.157520][ T942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.167871][ T942] usb 10-1: config 0 descriptor?? [ 2031.400707][ T942] apple 0003:05AC:0267.0074: unknown main item tag 0x2 [ 2031.408938][T25702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.418081][T25702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2031.426842][ T942] apple 0003:05AC:0267.0074: hidraw0: USB HID v1.01 Device [HID 05ac:0267] on usb-dummy_hcd.9-1/input0 [ 2031.622679][T25702] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 2031.622702][T25702] rust_binder: Error while translating object. [ 2031.633919][T25702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2031.640290][T25702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 2031.649995][T21323] usb 10-1: USB disconnect, device number 126 [ 2033.269965][T25757] input: syz1 as /devices/virtual/input/input186 [ 2033.401641][T25759] rust_binder: Write failure EFAULT in pid:202 [ 2033.417449][T29210] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2033.609228][T29210] usb 3-1: Using ep0 maxpacket: 16 [ 2033.616211][T29210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2033.627115][T29210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2033.636864][T29210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2033.649690][T29210] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2033.658776][T29210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.668183][T29210] usb 3-1: config 0 descriptor?? [ 2033.710957][T25766] netlink: 76 bytes leftover after parsing attributes in process `syz.0.29426'. [ 2033.720105][T25766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29426'. [ 2034.109227][T29210] microsoft 0003:045E:07DA.0075: ignoring exceeding usage max [ 2034.123776][T29210] microsoft 0003:045E:07DA.0075: ignoring exceeding usage max [ 2034.131271][T29210] microsoft 0003:045E:07DA.0075: usage index exceeded [ 2034.143331][T29210] microsoft 0003:045E:07DA.0075: item 0 0 2 2 parsing failed [ 2034.150888][T29210] microsoft 0003:045E:07DA.0075: parse failed [ 2034.162724][T29210] microsoft 0003:045E:07DA.0075: probe with driver microsoft failed with error -22 [ 2034.330901][ T1613] usb 3-1: USB disconnect, device number 2 [ 2034.389272][T25829] rust_binder: Failed copying remainder into alloc: EFAULT [ 2034.389295][T25829] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 2034.396621][T25829] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2034.430044][T25829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:208 [ 2034.568110][T25851] fuse: Bad value for 'user_id' [ 2034.582256][T25851] fuse: Bad value for 'user_id' [ 2034.583002][T25853] netlink: 6048 bytes leftover after parsing attributes in process `syz.0.29453'. [ 2034.695012][T25858] rust_binder: Write failure EFAULT in pid:215 [ 2034.739641][T25854] netlink: 1351 bytes leftover after parsing attributes in process `syz.3.29451'. [ 2034.819705][T25874] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 2035.255717][T25900] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 2035.450994][ T36] kauditd_printk_skb: 617 callbacks suppressed [ 2035.451013][ T36] audit: type=1400 audit(8117445572.580:124687): avc: denied { create } for pid=25908 comm="syz.0.29472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2035.494145][ T36] audit: type=1400 audit(8117445572.580:124688): avc: denied { map } for pid=25908 comm="syz.0.29472" path="socket:[380562]" dev="sockfs" ino=380562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2035.517920][ T36] audit: type=1400 audit(8117445572.580:124689): avc: denied { read } for pid=25908 comm="syz.0.29472" path="socket:[380562]" dev="sockfs" ino=380562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2035.541840][ T36] audit: type=1400 audit(8117445572.580:124690): avc: denied { create } for pid=25908 comm="syz.0.29472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2035.562590][ T36] audit: type=1400 audit(8117445572.580:124691): avc: denied { setopt } for pid=25908 comm="syz.0.29472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2035.566967][T25918] netlink: 596 bytes leftover after parsing attributes in process `syz.3.29475'. [ 2035.582616][ T36] audit: type=1400 audit(8117445572.589:124692): avc: denied { ioctl } for pid=25908 comm="syz.0.29472" path="socket:[380563]" dev="sockfs" ino=380563 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2035.582652][ T36] audit: type=1400 audit(8117445572.599:124693): avc: denied { create } for pid=25910 comm="syz.3.29473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2035.639688][ T36] audit: type=1400 audit(8117445572.599:124694): avc: denied { create } for pid=25910 comm="syz.3.29473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2035.659701][ T36] audit: type=1400 audit(8117445572.599:124695): avc: denied { bind } for pid=25910 comm="syz.3.29473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2035.679953][ T36] audit: type=1400 audit(8117445572.599:124696): avc: denied { name_bind } for pid=25910 comm="syz.3.29473" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 2035.689022][T25919] 9pnet_fd: Insufficient options for proto=fd [ 2035.982194][T25932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.29480'. [ 2036.021602][T25941] 9p filesystem being mounted at /151/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 2036.108458][T25948] overlayfs: missing 'lowerdir' [ 2036.116449][T25948] netlink: 92 bytes leftover after parsing attributes in process `syz.0.29487'. [ 2036.165644][T25955] 8021q: VLANs not supported on ip_vti0 [ 2036.239302][T25966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2036.239337][T25966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 2036.970728][T26019] overlayfs: failed to clone upperpath [ 2037.147925][ T2694] usb 10-1: new high-speed USB device number 127 using dummy_hcd [ 2037.307798][ T2694] usb 10-1: Using ep0 maxpacket: 16 [ 2037.317741][ T2694] usb 10-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2037.326976][ T2694] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.335120][ T2694] usb 10-1: Product: syz [ 2037.339382][ T2694] usb 10-1: Manufacturer: syz [ 2037.344200][ T2694] usb 10-1: SerialNumber: syz [ 2037.469103][T26037] overlay: ./file0 is not a directory [ 2037.855602][T21323] rust_binder: 26054: removing orphan mapping 0:4096 [ 2038.012824][ T2694] snd-usb-audio 10-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 2038.108452][T24652] udevd[24652]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2038.331100][T21323] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 2038.442442][ T1613] usb 10-1: USB disconnect, device number 127 [ 2038.479035][T26098] overlayfs: missing 'workdir' [ 2038.484943][T26097] overlayfs: missing 'workdir' [ 2038.493103][T21323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2038.503522][T21323] usb 3-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.00 [ 2038.513330][T21323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.522979][T21323] usb 3-1: config 0 descriptor?? [ 2038.960862][T26070] 9pnet_fd: p9_fd_create_unix (26070): problem connecting socket: ./file0: -30 [ 2038.971359][T26070] binder: Bad value for 'stats' [ 2038.971463][T26071] binder: Bad value for 'stats' [ 2038.983508][T21323] usbhid 3-1:0.0: can't add hid device: -71 [ 2038.989466][T21323] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2039.020434][T21323] usb 3-1: USB disconnect, device number 3 [ 2046.955680][ T36] kauditd_printk_skb: 560 callbacks suppressed [ 2046.955699][ T36] audit: type=1400 audit(8117445583.362:125257): avc: denied { mounton } for pid=26128 comm="syz.9.29551" path="/92" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2046.960512][T26136] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaaa [ 2046.962008][ T36] audit: type=1400 audit(8117445583.362:125258): avc: denied { mount } for pid=26128 comm="syz.9.29551" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2047.002112][T26136] rust_binder: Write failure EFAULT in pid:193 [ 2047.040812][ T36] audit: type=1326 audit(8117445583.362:125259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26128 comm="syz.9.29551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4093f8eec9 code=0x0 [ 2047.064642][T26142] rust_binder: Write failure EFAULT in pid:195 [ 2047.073540][ T36] audit: type=1400 audit(8117445583.381:125260): avc: denied { create } for pid=26134 comm="syz.2.29550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2047.101666][ T36] audit: type=1400 audit(8117445583.381:125261): avc: denied { mounton } for pid=26134 comm="syz.2.29550" path="/64/file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2047.136001][ T36] audit: type=1400 audit(8117445583.418:125262): avc: denied { read } for pid=26134 comm="syz.2.29550" name="binder1" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2047.161515][ T36] audit: type=1400 audit(8117445583.418:125263): avc: denied { read open } for pid=26134 comm="syz.2.29550" path="/dev/binderfs/binder1" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2047.201197][ T36] audit: type=1400 audit(8117445583.418:125264): avc: denied { ioctl } for pid=26134 comm="syz.2.29550" path="/dev/binderfs/binder1" dev="binder" ino=43 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2047.222321][T26153] tipc: Started in network mode [ 2047.232358][T26153] tipc: Node identity 52bc4711275f, cluster identity 4711 [ 2047.233374][ T36] audit: type=1400 audit(8117445583.456:125265): avc: denied { read write } for pid=25164 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2047.255415][T26153] tipc: Enabled bearer , priority 0 [ 2047.264828][ T36] audit: type=1400 audit(8117445583.456:125266): avc: denied { execmem } for pid=26138 comm="syz.3.29552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2047.292507][T26153] tipc: Disabling bearer [ 2047.314562][T26166] veth1_macvtap: left promiscuous mode [ 2047.320086][T26166] macsec0: entered allmulticast mode [ 2047.326620][T26166] veth1_macvtap: entered promiscuous mode [ 2047.332447][T26166] veth1_macvtap: entered allmulticast mode [ 2047.338652][T26166] macsec0: left allmulticast mode [ 2047.343749][T26166] veth1_macvtap: left allmulticast mode [ 2047.365995][T26170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29561'. [ 2047.453277][T26173] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2047.453308][T26173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 2047.482452][T26177] 9p filesystem being mounted at /382/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 2047.585523][T26183] binder: Bad value for 'max' [ 2047.896356][T26187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2047.896783][T26189] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 2047.988204][T26191] 9p filesystem being mounted at /94/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 2048.296679][T26205] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=26205 comm=syz.9.29571 [ 2048.323791][T26204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29572'. [ 2048.427959][T25100] Bluetooth: hci0: Frame reassembly failed (-84) [ 2048.437549][T25100] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 2048.491756][T26213] overlayfs: missing 'lowerdir' [ 2048.574742][T26213] netlink: 5 bytes leftover after parsing attributes in process `syz.2.29575'. [ 2048.851178][ T2694] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2048.967796][T26225] netlink: 'syz.0.29579': attribute type 13 has an invalid length. [ 2048.976118][T26225] erspan0: refused to change device tx_queue_len [ 2049.011069][ T2694] usb 3-1: Using ep0 maxpacket: 32 [ 2049.018839][ T2694] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2049.029652][ T2694] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2049.038609][ T2694] usb 3-1: New USB device found, idVendor=056a, idProduct=0021, bcdDevice= 0.00 [ 2049.048774][ T2694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.061698][ T2694] usb 3-1: config 0 descriptor?? [ 2049.225347][T26255] overlayfs: failed to clone upperpath [ 2049.287973][T26218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.307164][T26218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.539339][ T2694] wacom 0003:056A:0021.0076: unknown main item tag 0x0 [ 2049.546312][ T2694] wacom 0003:056A:0021.0076: unknown main item tag 0x0 [ 2049.553195][ T2694] wacom 0003:056A:0021.0076: unknown main item tag 0x0 [ 2049.560568][ T2694] wacom 0003:056A:0021.0076: unknown main item tag 0x0 [ 2049.567465][ T2694] wacom 0003:056A:0021.0076: unknown main item tag 0x0 [ 2049.574509][ T2694] wacom 0003:056A:0021.0076: unknown main item tag 0x0 [ 2049.582255][ T2694] wacom 0003:056A:0021.0076: Unknown device_type for 'HID 056a:0021'. Assuming pen. [ 2049.592643][ T2694] wacom 0003:056A:0021.0076: hidraw0: USB HID v5.59 Device [HID 056a:0021] on usb-dummy_hcd.2-1/input0 [ 2049.605364][ T2694] input: Wacom Intuos 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0021.0076/input/input187 [ 2049.754926][T26218] /dev/rnullb0: Can't lookup blockdev [ 2049.761085][ T4527] usb 3-1: USB disconnect, device number 4 [ 2049.840948][T26294] netlink: 'syz.0.29602': attribute type 1 has an invalid length. [ 2049.851582][T26294] netlink: 152 bytes leftover after parsing attributes in process `syz.0.29602'. [ 2049.893621][T26296] netlink: 'syz.0.29603': attribute type 1 has an invalid length. [ 2050.074148][T26308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26308 comm=syz.3.29607 [ 2050.320494][T26313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29608'. [ 2050.329553][T26313] bridge_slave_1: left allmulticast mode [ 2050.335242][T26313] bridge_slave_1: left promiscuous mode [ 2050.340931][T26313] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.349102][T26313] bridge_slave_0: left allmulticast mode [ 2050.354840][T26313] bridge_slave_0: left promiscuous mode [ 2050.360461][T26313] bridge0: port 1(bridge_slave_0) entered disabled state [ 2050.609909][T20316] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2050.616074][ T4612] Bluetooth: hci0: command 0x1003 tx timeout [ 2050.694929][T26340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29616'. [ 2050.880983][T26359] rust_binder: Error while translating object. [ 2050.881024][T26359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2050.887254][T26359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 2050.959684][T26365] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2051.047914][T26369] rust_binder: 246: no such ref 0 [ 2051.053364][T26369] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2051.060643][T26369] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2051.512946][T26382] binder: Unknown parameter 'context[7' [ 2051.560958][T26384] rust_binder: Error while translating object. [ 2051.560992][T26384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2051.567204][T26384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296 [ 2051.626682][T26388] binder: Bad value for 'max' [ 2051.700328][T26390] overlayfs: failed to clone upperpath [ 2051.821000][T26399] 9pnet_fd: Insufficient options for proto=fd [ 2051.827771][T26399] 9pnet_fd: Insufficient options for proto=fd [ 2051.835245][T26399] 9pnet_fd: Insufficient options for proto=fd [ 2052.239521][T26418] netlink: 7 bytes leftover after parsing attributes in process `syz.0.29645'. [ 2052.254897][T26420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:259 [ 2052.300159][ T36] kauditd_printk_skb: 569 callbacks suppressed [ 2052.300177][ T36] audit: type=1400 audit(8117445588.391:125836): avc: denied { read } for pid=26423 comm="syz.2.29648" dev="nsfs" ino=4026533188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2052.338345][ T36] audit: type=1400 audit(8117445588.391:125837): avc: denied { read open } for pid=26423 comm="syz.2.29648" path="net:[4026533188]" dev="nsfs" ino=4026533188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2052.367652][ T36] audit: type=1400 audit(8117445588.391:125838): avc: denied { create } for pid=26423 comm="syz.2.29648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2052.408372][ T36] audit: type=1400 audit(8117445588.391:125839): avc: denied { accept } for pid=26423 comm="syz.2.29648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2052.429353][ T36] audit: type=1400 audit(8117445588.400:125840): avc: denied { getopt } for pid=26423 comm="syz.2.29648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2052.456364][ T36] audit: type=1400 audit(8117445588.400:125841): avc: denied { create } for pid=26423 comm="syz.2.29648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2052.481714][ T36] audit: type=1400 audit(8117445588.410:125842): avc: denied { write } for pid=26423 comm="syz.2.29648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2052.504099][ T36] audit: type=1400 audit(8117445588.410:125843): avc: denied { read } for pid=26423 comm="syz.2.29648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2052.526585][ T36] audit: type=1400 audit(8117445588.410:125844): avc: denied { read } for pid=26423 comm="syz.2.29648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2052.547798][ T36] audit: type=1400 audit(8117445588.410:125845): avc: denied { create } for pid=26423 comm="syz.2.29648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2052.599148][T26445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:273 [ 2052.603122][T26445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2052.619707][T26445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:273 [ 2052.689845][T26451] netlink: 'syz.0.29657': attribute type 22 has an invalid length. [ 2052.858871][T21323] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2052.959013][T26479] rust_binder: Error while translating object. [ 2052.959056][T26479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2052.965249][T26479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 2053.031319][T21323] usb 10-1: config 1 has an invalid descriptor of length 84, skipping remainder of the config [ 2053.051105][T21323] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2053.061362][T21323] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2053.070503][T21323] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2053.078692][T21323] usb 10-1: SerialNumber: syz [ 2053.243335][T26497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2053.243737][T26497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:302 [ 2053.309205][T21323] usb 10-1: 0:2 : does not exist [ 2053.323600][T21323] usb 10-1: unit 45 not found! [ 2053.332640][T21323] usb 10-1: USB disconnect, device number 2 [ 2053.370727][T26180] udevd[26180]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2053.539586][T26504] 9pnet_fd: Insufficient options for proto=fd [ 2053.773058][T26531] netlink: 182 bytes leftover after parsing attributes in process `syz.3.29681'. [ 2053.784990][T26531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29681'. [ 2053.817436][T26536] 9pnet_fd: Insufficient options for proto=fd [ 2054.093617][T26548] netlink: 'syz.0.29689': attribute type 2 has an invalid length. [ 2054.205663][T26563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2054.205697][T26563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 2054.373991][T26569] rust_binder: 315: no such ref 65536 [ 2054.388729][T26569] rust_binder: 315: no such ref 2 [ 2054.394121][T26569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 2054.394157][T26569] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2054.403568][T26569] rust_binder: Read failure Err(EFAULT) in pid:315 [ 2054.414119][T26572] rust_binder: 315: no such ref 65536 [ 2054.426536][T26573] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2054.433853][T26573] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2054.442198][T26572] rust_binder: 315: no such ref 2 [ 2054.448490][T26572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 2054.448523][T26572] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2054.458710][T26572] rust_binder: Read failure Err(EFAULT) in pid:315 [ 2054.508622][T26581] rust_binder: Write failure EFAULT in pid:319 [ 2054.527289][T26584] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.29702'. [ 2054.542749][T26584] netlink: 280 bytes leftover after parsing attributes in process `syz.3.29702'. [ 2054.552616][T26583] netlink: 32 bytes leftover after parsing attributes in process `syz.3.29702'. [ 2054.910496][T26601] kvm_intel: kvm [26600]: vcpu5, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x8900480001ff [ 2055.113931][T26606] netlink: 'syz.9.29708': attribute type 27 has an invalid length. [ 2055.125110][T26606] /dev/rnullb0: Can't lookup blockdev [ 2055.178846][T26610] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=26610 comm=syz.9.29709 [ 2055.197502][T26610] __vm_enough_memory: pid: 26610, comm: syz.9.29709, bytes: 18014402804453376 not enough memory for the allocation [ 2055.210658][T26611] __vm_enough_memory: pid: 26611, comm: syz.9.29709, bytes: 18014402804453376 not enough memory for the allocation [ 2055.295727][T26614] rust_binder: Error in use_page_slow: ESRCH [ 2055.295752][T26614] rust_binder: use_range failure ESRCH [ 2055.303423][T26613] rust_binder: Error in use_page_slow: ESRCH [ 2055.308142][T26618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29712'. [ 2055.308891][T26613] rust_binder: use_range failure ESRCH [ 2055.319597][T26614] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 2055.325186][T26613] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 2055.329576][T26614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2055.338607][T26613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2055.345417][T26618] veth0_to_team: entered promiscuous mode [ 2055.355489][T26613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:316 [ 2055.364735][T26614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:316 [ 2055.371063][T26618] veth0_to_team: entered allmulticast mode [ 2055.427647][T29214] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 2055.452887][T26623] netlink: 104 bytes leftover after parsing attributes in process `syz.0.29714'. [ 2055.589747][T29214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2055.601407][T26631] SELinux: policydb version 1573255971 does not match my version range 15-33 [ 2055.610323][T29214] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2055.624994][T26631] SELinux: failed to load policy [ 2055.630019][T29214] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2055.640173][T29214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.650824][T29214] usb 3-1: config 0 descriptor?? [ 2055.659020][T26609] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2055.668666][T29214] usbhid 3-1:0.0: can't add hid device: -22 [ 2055.683478][T29214] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 2055.887439][T29214] usb 3-1: USB disconnect, device number 5 [ 2055.945945][T26649] rust_binder: Write failure EINVAL in pid:340 [ 2055.948969][T26651] rust_binder: Write failure EINVAL in pid:340 [ 2056.126151][T26662] /dev/rnullb0: Can't lookup blockdev [ 2056.212662][T26674] overlayfs: missing 'lowerdir' [ 2056.279371][T26676] netlink: 596 bytes leftover after parsing attributes in process `syz.3.29731'. [ 2056.385549][T26678] binder: Unknown parameter '' [ 2056.552910][T25101] veth1_macvtap: left promiscuous mode [ 2056.560940][T25101] veth0_vlan: left promiscuous mode [ 2056.759960][T19877] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2056.920400][T19877] usb 3-1: Using ep0 maxpacket: 16 [ 2056.927373][T19877] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2056.937221][T19877] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2056.948158][T19877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2056.957258][T19877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2056.965301][T19877] usb 3-1: SerialNumber: syz [ 2056.972670][T26693] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2056.981453][T26693] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2057.235404][T19877] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 2057.256196][T19877] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 2057.265477][T26715] erofs: dax options not supported [ 2057.276055][T19877] usb 3-1: USB disconnect, device number 6 [ 2057.473493][T26720] netlink: 'syz.9.29746': attribute type 4 has an invalid length. [ 2057.495513][T26720] netlink: 'syz.9.29746': attribute type 21 has an invalid length. [ 2057.509291][T26720] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.29746'. [ 2057.635354][ T36] kauditd_printk_skb: 1676 callbacks suppressed [ 2057.635382][ T36] audit: type=1400 audit(8117445594.400:127522): avc: denied { write } for pid=26716 comm="syz.3.29745" lport=44656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2057.650057][T26725] overlayfs: failed to clone lowerpath [ 2057.690897][ T36] audit: type=1400 audit(8117445594.400:127523): avc: denied { write } for pid=26716 comm="syz.3.29745" lport=44656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2057.692414][T26717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2057.727588][T26727] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2057.729320][ T36] audit: type=1400 audit(8117445594.400:127524): avc: denied { write } for pid=26716 comm="syz.3.29745" lport=44656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2057.734190][T26727] audit: audit_lost=99 audit_rate_limit=0 audit_backlog_limit=64 [ 2057.755182][ T36] audit: type=1400 audit(8117445594.400:127525): avc: denied { write } for pid=26716 comm="syz.3.29745" lport=44656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2057.774816][T26727] audit: backlog limit exceeded [ 2057.783791][T26717] audit: audit_lost=100 audit_rate_limit=0 audit_backlog_limit=64 [ 2057.790622][ T36] audit: type=1400 audit(8117445594.400:127526): avc: denied { write } for pid=26716 comm="syz.3.29745" lport=44656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2057.889159][T26732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29751'. [ 2058.047191][T26744] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 2058.055646][T25101] Bluetooth: hci0: Frame reassembly failed (-84) [ 2058.062124][T26744] rust_binder: Write failure EINVAL in pid:340 [ 2058.412043][T29214] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2058.582588][T29214] usb 3-1: Using ep0 maxpacket: 16 [ 2058.590402][T29214] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2058.600336][T29214] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2058.608169][T29214] usb 3-1: can't read configurations, error -71 [ 2059.499244][T29214] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2059.679842][T29214] usb 3-1: config 14 has an invalid interface number: 75 but max is 1 [ 2059.688106][T29214] usb 3-1: config 14 has an invalid interface number: 130 but max is 1 [ 2059.699801][T29214] usb 3-1: config 14 has an invalid descriptor of length 1, skipping remainder of the config [ 2059.710585][T29214] usb 3-1: config 14 has no interface number 0 [ 2059.716793][T29214] usb 3-1: config 14 has no interface number 1 [ 2059.723131][T29214] usb 3-1: config 14 interface 130 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2059.736552][T29214] usb 3-1: config 14 interface 75 has no altsetting 0 [ 2059.744420][T29214] usb 3-1: config 14 interface 130 has no altsetting 0 [ 2059.754982][T29214] usb 3-1: New USB device found, idVendor=19d2, idProduct=0083, bcdDevice=24.ae [ 2059.764548][T29214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.776285][T29214] usb 3-1: Product: syz [ 2059.781279][T29214] usb 3-1: Manufacturer: syz [ 2059.785895][T29214] usb 3-1: SerialNumber: syz [ 2059.805651][T26794] IPv6: NLM_F_CREATE should be specified when creating new route [ 2060.032605][T29214] usb 3-1: USB disconnect, device number 8 [ 2060.245392][ T4612] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2060.288950][T26829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57385 sclass=netlink_route_socket pid=26829 comm=syz.0.29781 [ 2060.365899][T26831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2060.365932][T26831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389 [ 2060.438237][T26835] veth0_virt_wifi: entered allmulticast mode [ 2060.495540][T26841] rust_binder: Error while translating object. [ 2060.495614][T26841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2060.502669][T26841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:391 [ 2060.571310][T26845] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 2060.598133][T26845] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 2060.674961][T26834] veth0_virt_wifi: left allmulticast mode [ 2060.788914][T26857] __nla_validate_parse: 1 callbacks suppressed [ 2060.790634][T26857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29791'. [ 2060.823723][T26857] bridge_slave_1: left allmulticast mode [ 2060.832277][T26857] bridge_slave_1: left promiscuous mode [ 2060.837949][T26857] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.849872][T26857] bridge_slave_0: left allmulticast mode [ 2060.864915][T26857] bridge_slave_0: left promiscuous mode [ 2060.872441][T26857] bridge0: port 1(bridge_slave_0) entered disabled state [ 2061.236598][ T1613] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2061.420232][ T1613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2061.430032][ T1613] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2061.445449][ T1613] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 2061.455157][ T1613] usb 3-1: New USB device strings: Mfr=0, Product=242, SerialNumber=0 [ 2061.464396][ T1613] usb 3-1: Product: syz [ 2061.471314][ T1613] usb 3-1: config 0 descriptor?? [ 2061.513747][T19877] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2061.684282][T19877] usb 10-1: Using ep0 maxpacket: 16 [ 2061.692521][T19877] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2061.708638][T19877] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2061.721419][T19877] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2061.731917][T19877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2061.747069][T19877] usb 10-1: SerialNumber: syz [ 2061.753529][T26855] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 2061.764223][T26855] SELinux: failed to load policy [ 2061.769524][T26874] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2061.796362][ T1613] usbhid 3-1:0.0: can't add hid device: -71 [ 2061.803600][T26874] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2061.811512][ T1613] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2061.826166][ T1613] usb 3-1: USB disconnect, device number 9 [ 2062.039598][T19877] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 2062.066746][T19877] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 2062.077120][T19877] usb 10-1: USB disconnect, device number 3 [ 2062.203494][T26885] 9pnet_fd: Insufficient options for proto=fd [ 2062.343522][T26887] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 2062.350749][T26887] rust_binder: Write failure EINVAL in pid:357 [ 2062.632909][ T4527] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 2062.694295][T26891] rust_binder: Error in use_page_slow: ESRCH [ 2062.694319][T26891] rust_binder: use_range failure ESRCH [ 2062.700394][T26891] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2062.705907][T26891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2062.713950][T26891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:401 [ 2062.827832][ T4527] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2062.864587][ T4527] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2062.878363][ T4527] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2062.884973][ T4527] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2062.894107][ T4527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.903914][ T4527] usb 3-1: config 0 descriptor?? [ 2062.993738][ T36] kauditd_printk_skb: 1415 callbacks suppressed [ 2062.993755][ T36] audit: type=1400 audit(8117445599.420:128941): avc: denied { create } for pid=26907 comm="syz.9.29809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2063.021713][ T36] audit: type=1400 audit(8117445599.429:128942): avc: denied { ioctl } for pid=26907 comm="syz.9.29809" path="socket:[385734]" dev="sockfs" ino=385734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2063.049468][ T36] audit: type=1400 audit(8117445599.429:128943): avc: denied { write } for pid=26907 comm="syz.9.29809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2063.091262][ T36] audit: type=1400 audit(8117445599.438:128944): avc: denied { read } for pid=26907 comm="syz.9.29809" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2063.114396][ T36] audit: type=1400 audit(8117445599.438:128945): avc: denied { read open } for pid=26907 comm="syz.9.29809" path="mnt:[4026532302]" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2063.132944][ T4527] acrux 0003:1A34:0802.0077: invalid report_count -1057747719 [ 2063.146196][ T36] audit: type=1400 audit(8117445599.438:128946): avc: denied { ioctl } for pid=26907 comm="syz.9.29809" path="mnt:[4026532302]" dev="nsfs" ino=4026532302 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2063.172097][ T4527] acrux 0003:1A34:0802.0077: item 0 4 1 9 parsing failed [ 2063.177374][ T36] audit: type=1400 audit(8117445599.457:128947): avc: denied { read write } for pid=24630 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2063.191869][ T4527] acrux 0003:1A34:0802.0077: parse failed [ 2063.239641][ T36] audit: type=1400 audit(8117445599.457:128948): avc: denied { read write open } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2063.254150][ T4527] acrux 0003:1A34:0802.0077: probe with driver acrux failed with error -22 [ 2063.308488][ T4527] usb 3-1: USB disconnect, device number 10 [ 2063.319975][ T36] audit: type=1400 audit(8117445599.457:128949): avc: denied { ioctl } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2063.385955][ T36] audit: type=1400 audit(8117445599.523:128950): avc: denied { read write } for pid=24630 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2063.440109][T26922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2063.506713][T26922] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2063.524076][T26922] rust_binder: Read failure Err(EFAULT) in pid:367 [ 2063.648000][T26928] /dev/rnullb0: Can't lookup blockdev [ 2063.703183][T26925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2063.704735][T26925] rust_binder: Error in use_page_slow: ESRCH [ 2063.711214][T26925] rust_binder: use_range failure ESRCH [ 2063.728325][T26925] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 2063.739033][T26925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2063.757935][T26925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:419 [ 2063.767108][T26939] 9p filesystem being mounted at /127/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 2064.210407][ T4527] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2064.370254][ T4527] usb 3-1: Using ep0 maxpacket: 32 [ 2064.377454][ T4527] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.393902][ T4527] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2064.403483][ T4527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.411483][ T4527] usb 3-1: Product: syz [ 2064.415968][ T4527] usb 3-1: Manufacturer: syz [ 2064.420574][ T4527] usb 3-1: SerialNumber: syz [ 2064.426598][ T4527] usb 3-1: config 0 descriptor?? [ 2064.433548][ T4527] smsc75xx v1.0.0 [ 2064.437240][ T4527] smsc75xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2064.447212][ T4527] smsc75xx 3-1:0.0: probe with driver smsc75xx failed with error -22 [ 2064.650154][ T4527] usb 3-1: USB disconnect, device number 11 [ 2064.668709][T26957] overlayfs: failed to clone lowerpath [ 2065.504143][T26965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.29827'. [ 2065.524788][T26971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2065.525622][T26971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2065.532313][T26971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428 [ 2065.638782][T29214] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2065.830582][T29214] usb 3-1: Using ep0 maxpacket: 32 [ 2065.843580][T29214] usb 3-1: config 250 has an invalid interface number: 8 but max is 0 [ 2065.856662][T29214] usb 3-1: config 250 has no interface number 0 [ 2065.863040][T29214] usb 3-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9 [ 2065.872193][T29214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.905923][T27000] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 2065.946431][T27000] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 2065.974765][T27003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29840'. [ 2065.997361][T27003] 9p filesystem being mounted at /284/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 2066.113852][T29214] usb 3-1: string descriptor 0 read error: -71 [ 2066.126706][T29214] usb 3-1: USB disconnect, device number 12 [ 2066.395437][T21323] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2066.557144][T21323] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.568192][T21323] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2066.578055][T21323] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 2066.587212][T21323] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.596596][T21323] usb 10-1: config 0 descriptor?? [ 2066.751127][T27040] rust_binder: Write failure EINVAL in pid:387 [ 2066.958082][T27046] netlink: 200 bytes leftover after parsing attributes in process `syz.2.29854'. [ 2067.115918][T27054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2067.221780][T27062] tipc: Enabling of bearer rejected, failed to enable media [ 2067.493482][ T4527] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2067.655358][ T4527] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2067.666272][ T4527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2067.676033][ T4527] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2067.689021][ T4527] usb 3-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 2067.698083][ T4527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.711345][ T4527] usb 3-1: config 0 descriptor?? [ 2067.884793][T27081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29869'. [ 2067.895667][T27081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27081 comm=syz.0.29869 [ 2067.913688][T27081] tipc: Started in network mode [ 2067.918598][T27081] tipc: Node identity , cluster identity 4711 [ 2067.925875][T27081] tipc: Failed to obtain node identity [ 2067.932055][T27081] tipc: Enabling of bearer rejected, failed to enable media [ 2067.995592][T27093] netlink: 'syz.3.29873': attribute type 1 has an invalid length. [ 2068.007154][T27093] netlink: 'syz.3.29873': attribute type 1 has an invalid length. [ 2068.373745][ T4527] usbhid 3-1:0.0: can't add hid device: -71 [ 2068.379778][ T4527] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2068.391200][ T4527] usb 3-1: USB disconnect, device number 13 [ 2068.606237][ T36] kauditd_printk_skb: 491 callbacks suppressed [ 2068.606255][ T36] audit: type=1400 audit(8117445604.683:129442): avc: denied { create } for pid=27107 comm="syz.3.29877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2068.623199][T27108] tipc: Enabling of bearer rejected, failed to enable media [ 2068.633511][ T36] audit: type=1400 audit(8117445604.692:129443): avc: denied { create } for pid=27107 comm="syz.3.29877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2068.665742][ T36] audit: type=1400 audit(8117445604.692:129444): avc: denied { write } for pid=27107 comm="syz.3.29877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2068.675318][T27110] bpf: Bad value for 'mode' [ 2068.687500][ T36] audit: type=1400 audit(8117445604.692:129445): avc: denied { read } for pid=27107 comm="syz.3.29877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2068.711860][ T36] audit: type=1400 audit(8117445604.692:129446): avc: denied { read } for pid=27107 comm="syz.3.29877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2068.732777][ T36] audit: type=1400 audit(8117445604.692:129447): avc: denied { write } for pid=27107 comm="syz.3.29877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2068.753876][ T36] audit: type=1400 audit(8117445604.749:129448): avc: denied { mounton } for pid=27109 comm="syz.3.29878" path="/442" dev="tmpfs" ino=2396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2068.776356][ T36] audit: type=1400 audit(8117445604.805:129449): avc: denied { create } for pid=27113 comm="syz.3.29879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2068.796481][ T36] audit: type=1400 audit(8117445604.805:129450): avc: denied { create } for pid=27113 comm="syz.3.29879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2068.816578][ T36] audit: type=1400 audit(8117445604.805:129451): avc: denied { setopt } for pid=27113 comm="syz.3.29879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2069.234960][T21323] usbhid 10-1:0.0: can't add hid device: -71 [ 2069.244154][T21323] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2069.263593][T21323] usb 10-1: USB disconnect, device number 4 [ 2069.284986][T27140] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2069.293507][T27140] rust_binder: Error in use_page_slow: ESRCH [ 2069.307551][T27140] rust_binder: use_range failure ESRCH [ 2069.318901][T27140] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 2069.324390][T27140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2069.332556][T27140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:443 [ 2069.343605][T27141] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2069.384563][T27145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2069.395122][T27145] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 2069.408851][T27145] rust_binder: 448: no such ref 1 [ 2069.414025][T27145] rust_binder: 448: no such ref 3 [ 2069.419117][T27145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:448 [ 2069.454464][ T942] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 2069.539043][T27149] rust_binder: Write failure EFAULT in pid:452 [ 2069.645289][ T942] usb 3-1: not running at top speed; connect to a high speed hub [ 2069.664759][ T942] usb 3-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1032, setting to 64 [ 2069.681755][ T942] usb 3-1: config 1 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2069.716876][ T942] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2069.730289][ T942] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.40 [ 2069.746795][ T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.755832][ T942] usb 3-1: Product: ᬶ뜻씝鋈榪稙䏖ჷ傷 [ 2069.762895][ T942] usb 3-1: Manufacturer: 袘緦ᵴ贿⥇鰃夓䗼䇴粮ÄᔦĆ訊읇‐鄵傠㊄픿႒汋ᢻᰰ㛬롩ꗻ᝻蹨㖾㋧蕇쮏䠽薤⨭貯⯗逻琗掬᤹첨먛黕͗鲄ྻᬍ [ 2069.780609][ T942] usb 3-1: SerialNumber: syz [ 2069.787525][T27138] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2069.859643][T27174] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7969 sclass=netlink_xfrm_socket pid=27174 comm=syz.0.29898 [ 2069.902146][T29214] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2069.940384][T27176] batadv_slave_0: mtu less than device minimum [ 2070.011791][T27178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=27178 comm=syz.3.29900 [ 2070.020281][ T942] usbhid 3-1:1.0: can't add hid device: -71 [ 2070.036027][ T942] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 2070.045043][ T942] usb 3-1: USB disconnect, device number 14 [ 2070.072671][T29214] usb 10-1: Using ep0 maxpacket: 16 [ 2070.085035][T29214] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2070.093834][T29214] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2070.104011][T29214] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2070.115694][T29214] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2070.124831][T29214] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.132931][T29214] usb 10-1: Product: syz [ 2070.137331][T29214] usb 10-1: Manufacturer: syz [ 2070.142046][T29214] usb 10-1: SerialNumber: syz [ 2070.375267][T29214] usb 10-1: 0:2 : does not exist [ 2070.388383][T29214] usb 10-1: USB disconnect, device number 5 [ 2070.428754][T26695] udevd[26695]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2070.657179][T27192] 9p filesystem being mounted at /448/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 2070.925372][T29214] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2071.057716][T27209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2071.064523][T27209] rust_binder: Error in use_page_slow: ESRCH [ 2071.072460][T27209] rust_binder: use_range failure ESRCH [ 2071.079321][T27209] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 2071.084849][T27209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2071.093831][T27209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:462 [ 2071.117219][T29214] usb 3-1: Using ep0 maxpacket: 16 [ 2071.137791][T29214] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 2071.181820][T29214] usb 3-1: config 1 has too many interfaces: 33, using maximum allowed: 32 [ 2071.202507][T29214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 33 [ 2071.211591][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2071.233714][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1584, setting to 1024 [ 2071.255782][T29214] usb 3-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2071.272422][T29214] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2071.281830][T29214] usb 3-1: config 1 has too many interfaces: 33, using maximum allowed: 32 [ 2071.290998][T29214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 33 [ 2071.300438][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2071.312348][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1584, setting to 1024 [ 2071.329442][T29214] usb 3-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2071.342857][T29214] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2071.352045][T27228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2071.352880][T27228] rust_binder: Error in use_page_slow: ESRCH [ 2071.359503][T27228] rust_binder: use_range failure ESRCH [ 2071.362445][T27223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29916'. [ 2071.366021][T27228] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 2071.381574][T27228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2071.390275][T27228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:464 [ 2071.399768][T29214] usb 3-1: config 1 has too many interfaces: 33, using maximum allowed: 32 [ 2071.417944][T29214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 33 [ 2071.437024][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2071.452085][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1584, setting to 1024 [ 2071.464272][T29214] usb 3-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2071.477374][T29214] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2071.485688][T29214] usb 3-1: config 1 has too many interfaces: 33, using maximum allowed: 32 [ 2071.494715][T29214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 33 [ 2071.503726][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2071.515126][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1584, setting to 1024 [ 2071.526389][T29214] usb 3-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2071.539471][T29214] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2071.548295][T29214] usb 3-1: config 1 has too many interfaces: 33, using maximum allowed: 32 [ 2071.557349][T29214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 33 [ 2071.566319][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2071.577677][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1584, setting to 1024 [ 2071.588928][T29214] usb 3-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2071.602043][T29214] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2071.610774][T29214] usb 3-1: config 1 has too many interfaces: 33, using maximum allowed: 32 [ 2071.620310][T29214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 33 [ 2071.629282][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2071.640617][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1584, setting to 1024 [ 2071.652300][T29214] usb 3-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2071.665388][T29214] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2071.673941][T29214] usb 3-1: config 1 has too many interfaces: 33, using maximum allowed: 32 [ 2071.682597][ T330] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 2071.690611][T29214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 33 [ 2071.700076][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2071.712286][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1584, setting to 1024 [ 2071.723565][T29214] usb 3-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2071.736663][T29214] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2071.745290][T29214] usb 3-1: config 1 has too many interfaces: 33, using maximum allowed: 32 [ 2071.754336][T29214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 33 [ 2071.763306][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2071.774670][T29214] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1584, setting to 1024 [ 2071.786497][T29214] usb 3-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2071.799618][T29214] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2071.809733][T29214] usb 3-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.40 [ 2071.819209][T29214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.827214][T29214] usb 3-1: Product: ࠚ [ 2071.831444][T29214] usb 3-1: Manufacturer: и [ 2071.835945][T29214] usb 3-1: SerialNumber: syz [ 2071.845612][T27190] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2071.866031][ T330] usb 10-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 2071.895328][ T330] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2071.908821][T27230] bpf: Bad value for 'uid' [ 2071.926053][ T330] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2071.946292][ T330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.959256][ T330] usb 10-1: Product: ⽗猜㩂鐅훬䙦潶獵ܣ鬯ꠞ韔গ㮲荹踪㺙嵉厁꼸荾﷋賑鱒숙裞뫀䞸圃豮졇탭힣콀縡ߊ借裐坪鵂뿵ࢪꅜ產œ纘襐딭퀊㏲똙䘀魸ᘜ [ 2071.989137][T27234] tipc: Started in network mode [ 2072.000528][ T330] usb 10-1: Manufacturer: Н [ 2072.004145][T27234] tipc: Node identity ac14140f, cluster identity 4711 [ 2072.011242][ T330] usb 10-1: SerialNumber: ୛报遬踳郊솫✷똡ኴ魂⃩⡅ʖ뀺랗졕楿毿뮳뮍뼫诐爥庑紣Ⅷꑲླྀ쬏Ꝼ嚼⌱㴿㐒ꗀ嵁칛⽑藬ᔑӃ㺎讯ⓔ承蟥ꓭ榲︟蹆늡ఴ᱂瀃鄙씖돵푤쀑䈭祺尸蓚푱鞡Ω௯ᨑ⨴俜栌뮾탤ౖ䁇秱ﶁ㖬ꨟм볭᳒锘჋⟝ℙ埔ᷧ帥䡬轪梙붯뚜欳᣻ぴ⤵ [ 2072.023315][T27234] tipc: New replicast peer: 172.30.1.1 [ 2072.062524][T27234] tipc: Enabled bearer , priority 10 [ 2072.093692][T29214] usbhid 3-1:1.0: can't add hid device: -71 [ 2072.129198][T29214] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 2072.162536][T29214] usb 3-1: USB disconnect, device number 15 [ 2072.183447][T27250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:421 [ 2072.219339][T27245] netlink: 224 bytes leftover after parsing attributes in process `syz.3.29923'. [ 2072.385982][T27261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2072.392282][T27260] incfs: Options parsing error. -22 [ 2072.412327][T27260] incfs: mount failed -22 [ 2072.650564][T27279] SELinux: failed to load policy [ 2072.887357][T25100] veth1_macvtap: left promiscuous mode [ 2072.892952][T25100] veth0_vlan: left promiscuous mode [ 2073.248994][ T4527] tipc: Node number set to 2886997007 [ 2073.547784][T27301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29941'. [ 2073.589442][T27306] overlayfs: conflicting options: userxattr,verity=require [ 2073.599410][T27306] overlayfs: failed to clone lowerpath [ 2073.972814][ T36] kauditd_printk_skb: 1338 callbacks suppressed [ 2073.972853][ T36] audit: type=1400 audit(8117445609.712:130790): avc: denied { mount } for pid=27326 comm="syz.3.29952" name="/" dev="configfs" ino=2411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2074.009174][ T36] audit: type=1400 audit(8117445609.712:130791): avc: denied { mounton } for pid=27327 comm="syz.0.29953" path="/327/file0" dev="tmpfs" ino=1777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2074.035774][ T36] audit: type=1400 audit(8117445609.749:130792): avc: denied { search } for pid=27326 comm="syz.3.29952" name="/" dev="configfs" ino=2411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2074.071360][ T36] audit: type=1400 audit(8117445609.749:130793): avc: denied { search } for pid=27326 comm="syz.3.29952" name="/" dev="configfs" ino=2411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2074.095044][ T36] audit: type=1400 audit(8117445609.749:130794): avc: denied { read } for pid=27326 comm="syz.3.29952" name="/" dev="configfs" ino=2411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2074.117870][ T36] audit: type=1400 audit(8117445609.759:130795): avc: denied { read open } for pid=27326 comm="syz.3.29952" path="/" dev="configfs" ino=2411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2074.144778][ T36] audit: type=1400 audit(8117445609.890:130796): avc: denied { create } for pid=27345 comm="syz.0.29956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2074.166035][ T36] audit: type=1400 audit(8117445609.890:130797): avc: denied { write } for pid=27345 comm="syz.0.29956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2074.237909][ T36] audit: type=1400 audit(8117445609.965:130798): avc: denied { create } for pid=27374 comm="syz.0.29959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2074.270914][ T36] audit: type=1400 audit(8117445609.993:130799): avc: denied { write } for pid=27374 comm="syz.0.29959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2074.407703][ T330] usb 10-1: 0:2 : does not exist [ 2074.420076][ T330] usb 10-1: USB disconnect, device number 6 [ 2075.386416][T27422] /dev/rnullb0: Can't lookup blockdev [ 2075.430087][T27426] 9pnet_fd: Insufficient options for proto=fd [ 2075.485153][T27428] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2075.485944][T27428] rust_binder: Error in use_page_slow: ESRCH [ 2075.495077][T27428] rust_binder: use_range failure ESRCH [ 2075.508673][T27428] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 2075.514199][T27428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2075.524470][T27428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:491 [ 2075.660790][T27443] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 2075.661579][T27442] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 2075.812035][T27455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29987'. [ 2076.028684][T27472] /dev/loop0: Can't lookup blockdev [ 2076.233405][ T1613] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2076.377525][T27474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29994'. [ 2076.393303][ T1613] usb 10-1: Using ep0 maxpacket: 16 [ 2076.400410][ T1613] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2076.409531][ T1613] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2076.419810][ T1613] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2076.431556][ T1613] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2076.443034][ T1613] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.451281][ T1613] usb 10-1: Product: syz [ 2076.455585][ T1613] usb 10-1: Manufacturer: syz [ 2076.460307][ T1613] usb 10-1: SerialNumber: syz [ 2076.680702][T27499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29999'. [ 2076.710863][ T1613] usb 10-1: 0:2 : does not exist [ 2076.727243][ T1613] usb 10-1: USB disconnect, device number 7 [ 2076.785030][T26695] udevd[26695]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2077.115119][T27568] cgroup: none used incorrectly [ 2077.949454][ T1613] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 2078.109349][ T1613] usb 10-1: Using ep0 maxpacket: 8 [ 2078.117169][ T1613] usb 10-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2078.128199][ T1613] usb 10-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 2078.135123][T27643] 9pnet_fd: Insufficient options for proto=fd [ 2078.138411][ T1613] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2078.172710][ T1613] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2078.181955][ T1613] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.190066][ T1613] usb 10-1: Product: Ъ [ 2078.190788][T27645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30031'. [ 2078.203906][ T1613] usb 10-1: Manufacturer: Џ [ 2078.208522][ T1613] usb 10-1: SerialNumber: Ж [ 2078.217540][T27607] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2078.225601][T27607] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2078.333797][T25101] veth1_macvtap: left promiscuous mode [ 2078.339432][T25101] veth0_vlan: left promiscuous mode [ 2078.685947][ T1613] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 8 proto 1 vid 0x0525 pid 0xA4A8 [ 2078.704400][ T1613] usb 10-1: USB disconnect, device number 8 [ 2078.718136][ T1613] usblp0: removed [ 2078.730205][T27658] overlayfs: failed to clone upperpath [ 2079.300026][T27697] rust_binder: 514: no such ref 3 [ 2079.305153][ T36] kauditd_printk_skb: 666 callbacks suppressed [ 2079.305166][ T36] audit: type=1400 audit(8117445614.712:131466): avc: denied { ioctl } for pid=27695 comm="syz.9.30049" path="/dev/binderfs/binder1" dev="binder" ino=49 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2079.337697][T27697] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 2079.344729][T27697] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 2079.357156][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.357463][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.358456][ T36] audit: type=1400 audit(8117445614.778:131467): avc: denied { ioctl } for pid=27695 comm="syz.9.30049" path="/dev/binderfs/binder1" dev="binder" ino=49 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2079.363879][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.370720][ T36] audit: type=1400 audit(8117445614.778:131468): avc: denied { ioctl } for pid=27695 comm="syz.9.30049" path="/dev/binderfs/binder1" dev="binder" ino=49 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2079.436049][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.436315][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.461042][ T36] audit: type=1400 audit(8117445614.844:131469): avc: denied { ioctl } for pid=27695 comm="syz.9.30049" path="/dev/binderfs/binder1" dev="binder" ino=49 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2079.461197][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.467355][ T36] audit: type=1400 audit(8117445614.844:131470): avc: denied { ioctl } for pid=27695 comm="syz.9.30049" path="/dev/binderfs/binder1" dev="binder" ino=49 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2079.514866][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.526370][ T36] audit: type=1400 audit(8117445614.862:131471): avc: denied { ioctl } for pid=27695 comm="syz.9.30049" path="/dev/binderfs/binder1" dev="binder" ino=49 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2079.549170][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.559713][ T36] audit: type=1400 audit(8117445614.919:131472): avc: denied { ioctl } for pid=27695 comm="syz.9.30049" path="/dev/binderfs/binder1" dev="binder" ino=49 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2079.591773][ T36] audit: type=1400 audit(8117445614.956:131473): avc: denied { ioctl } for pid=27695 comm="syz.9.30049" path="/dev/binderfs/binder1" dev="binder" ino=49 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2079.601892][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.617892][ T36] audit: type=1400 audit(8117445614.984:131474): avc: denied { create } for pid=27698 comm="syz.0.30050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2079.645096][ T36] audit: type=1400 audit(8117445614.994:131475): avc: denied { create } for pid=27685 comm="syz.2.30046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2079.673167][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.673425][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.680850][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.688791][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.697031][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.704701][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.714922][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.724533][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.735240][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.744673][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.753983][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.767713][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.774992][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.781571][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.789134][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.796385][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.810294][T27704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30052'. [ 2079.815999][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.826468][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.832965][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.840280][T27703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30052'. [ 2079.856727][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.857017][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.863517][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.871025][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.877598][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.885920][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.893114][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.899674][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.907193][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.914438][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.920904][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.928528][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.935707][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.942272][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.950230][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.957475][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.964607][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.971140][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.978637][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.985160][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.992653][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2079.999831][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.006277][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.013845][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.021047][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.027590][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.034817][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.042619][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.049080][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.056707][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.063870][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.070415][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.077957][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.085196][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.091667][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.099297][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.106494][T27697] rust_binder: Write failure EFAULT in pid:514 [ 2080.283428][T27713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19482 sclass=netlink_route_socket pid=27713 comm=syz.3.30055 [ 2080.330999][T27715] overlayfs: failed to clone upperpath [ 2080.343147][T27715] 9pnet_fd: Insufficient options for proto=fd [ 2080.454271][ T330] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2080.500313][T27727] netlink: 'syz.2.30062': attribute type 4 has an invalid length. [ 2080.508206][T27727] netlink: 'syz.2.30062': attribute type 5 has an invalid length. [ 2080.515999][T27727] netlink: 'syz.2.30062': attribute type 1 has an invalid length. [ 2080.614125][ T330] usb 10-1: Using ep0 maxpacket: 8 [ 2080.621888][ T330] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2080.633949][ T330] usb 10-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 0.01 [ 2080.643134][ T330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.651239][ T330] usb 10-1: Product: syz [ 2080.655470][ T330] usb 10-1: Manufacturer: syz [ 2080.660176][ T330] usb 10-1: SerialNumber: syz [ 2080.922939][T27747] binder: Unknown parameter '' [ 2080.967134][T27749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.985259][T27749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2081.008675][T27749] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2081.008698][T27749] rust_binder: Read failure Err(EFAULT) in pid:528 [ 2081.022498][T27749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2081.039296][T27749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2081.111439][ T330] usb 10-1: USB disconnect, device number 9 [ 2081.842575][T27798] overlayfs: missing 'lowerdir' [ 2081.871868][ T1613] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 2082.021081][ T1613] usb 10-1: device descriptor read/64, error -71 [ 2082.158696][T27818] overlayfs: failed to clone lowerpath [ 2082.276901][ T1613] usb 10-1: device descriptor read/64, error -71 [ 2082.532707][ T1613] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 2082.671261][ T1613] usb 10-1: device descriptor read/64, error -71 [ 2082.927078][ T1613] usb 10-1: device descriptor read/64, error -71 [ 2083.044845][ T1613] usb usb10-port1: attempt power cycle [ 2083.323966][T27877] veth1: entered allmulticast mode [ 2083.417379][ T1613] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2083.441105][ T1613] usb 10-1: device descriptor read/8, error -71 [ 2083.579132][ T1613] usb 10-1: device descriptor read/8, error -71 [ 2083.833065][ T1613] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2083.872207][ T1613] usb 10-1: device descriptor read/8, error -71 [ 2083.882480][T27906] overlayfs: failed to clone upperpath [ 2084.016911][ T1613] usb 10-1: device descriptor read/8, error -71 [ 2084.131943][ T1613] usb usb10-port1: unable to enumerate USB device [ 2084.185072][T27875] veth1: left allmulticast mode [ 2084.305001][T27919] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2084.313819][T27919] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2084.828920][ T36] kauditd_printk_skb: 870 callbacks suppressed [ 2084.828938][ T36] audit: type=1400 audit(8117445619.910:132346): avc: denied { read write } for pid=24630 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2084.868381][ T36] audit: type=1400 audit(8117445619.910:132347): avc: denied { read write open } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2084.895608][ T36] audit: type=1400 audit(8117445619.910:132348): avc: denied { ioctl } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2084.897128][T27926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2084.922050][ T36] audit: type=1400 audit(8117445619.966:132349): avc: denied { read } for pid=27925 comm="syz.9.30132" name="binder1" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2084.923821][T27926] rust_binder: Error in use_page_slow: ESRCH [ 2084.928488][ T36] audit: type=1400 audit(8117445619.966:132350): avc: denied { read open } for pid=27925 comm="syz.9.30132" path="/dev/binderfs/binder1" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2084.952034][T27926] rust_binder: use_range failure ESRCH [ 2084.959198][ T36] audit: type=1400 audit(8117445619.966:132351): avc: denied { ioctl } for pid=27925 comm="syz.9.30132" path="/dev/binderfs/binder1" dev="binder" ino=43 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2085.003002][T27926] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 2085.013553][T27926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2085.014882][ T36] audit: type=1400 audit(8117445619.994:132352): avc: denied { map } for pid=27925 comm="syz.9.30132" path="/dev/binderfs/binder1" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2085.025576][T27926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:533 [ 2085.035063][ T36] audit: type=1400 audit(8117445619.994:132353): avc: denied { read } for pid=27925 comm="syz.9.30132" path="/dev/binderfs/binder1" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2085.130592][ T36] audit: type=1400 audit(8117445619.994:132354): avc: denied { ioctl } for pid=27925 comm="syz.9.30132" path="/dev/binderfs/binder1" dev="binder" ino=43 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2085.165773][ T36] audit: type=1400 audit(8117445619.994:132355): avc: denied { call } for pid=27925 comm="syz.9.30132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2085.184803][T27936] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=27936 comm=syz.2.30137 [ 2085.319504][T27941] netlink: 40 bytes leftover after parsing attributes in process `syz.9.30139'. [ 2085.591791][ T942] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2085.751999][ T942] usb 10-1: Using ep0 maxpacket: 8 [ 2085.759044][ T942] usb 10-1: config 0 has an invalid interface number: 200 but max is 0 [ 2085.768007][ T942] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.778176][ T942] usb 10-1: config 0 has no interface number 0 [ 2085.784355][ T942] usb 10-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2085.797468][ T942] usb 10-1: config 0 interface 200 has no altsetting 0 [ 2085.807027][ T942] usb 10-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2085.816225][ T942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.824283][ T942] usb 10-1: Product: syz [ 2085.828583][ T942] usb 10-1: Manufacturer: syz [ 2085.833255][ T942] usb 10-1: SerialNumber: syz [ 2085.839518][ T942] usb 10-1: config 0 descriptor?? [ 2086.066302][ T942] usbhid 10-1:0.200: couldn't find an input interrupt endpoint [ 2086.094480][ T942] usb 10-1: USB disconnect, device number 14 [ 2086.219595][T28036] overlay: Unknown parameter 'fsmagic' [ 2086.327247][T28040] 9p filesystem being mounted at /395/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 2086.636145][T28056] /dev/rnullb0: Can't lookup blockdev [ 2086.669750][T28058] can0: slcan on ptm0. [ 2086.873008][T28070] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 2086.925979][T28076] overlayfs: missing 'workdir' [ 2086.934866][ T942] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2087.108875][ T942] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2087.133770][ T942] usb 10-1: config 0 has no interfaces? [ 2087.147111][ T942] usb 10-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 2087.167106][ T942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.181055][ T942] usb 10-1: config 0 descriptor?? [ 2087.459873][T28138] netlink: 5 bytes leftover after parsing attributes in process `syz.3.30182'. [ 2087.470688][ T330] usb 10-1: USB disconnect, device number 15 [ 2087.473023][T28138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30182'. [ 2087.584944][T28058] can0 (unregistered): slcan off ptm0. [ 2087.630351][T28143] 9pnet_fd: Insufficient options for proto=fd [ 2088.410066][T28193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2088.429199][T28193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2088.451705][T28197] overlayfs: failed to clone upperpath [ 2088.742023][T28220] tipc: Enabling of bearer rejected, failed to enable media [ 2088.775969][T28221] netlink: 20 bytes leftover after parsing attributes in process `syz.9.30198'. [ 2089.055920][ T942] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2089.194389][ T942] usb 10-1: device descriptor read/64, error -71 [ 2089.444768][T28252] tmpfs: Unknown parameter '' [ 2089.450219][ T942] usb 10-1: device descriptor read/64, error -71 [ 2089.490057][T28254] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4948 sclass=netlink_xfrm_socket pid=28254 comm=syz.2.30210 [ 2089.706067][ T942] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2089.855243][ T942] usb 10-1: device descriptor read/64, error -71 [ 2090.111063][ T942] usb 10-1: device descriptor read/64, error -71 [ 2090.213650][ T36] kauditd_printk_skb: 1118 callbacks suppressed [ 2090.213666][ T36] audit: type=1400 audit(8117445624.957:133474): avc: denied { create } for pid=28284 comm="syz.0.30220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2090.240835][ T36] audit: type=1400 audit(8117445624.957:133475): avc: denied { write } for pid=28284 comm="syz.0.30220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2090.261608][ T942] usb usb10-port1: attempt power cycle [ 2090.267766][ T36] audit: type=1400 audit(8117445624.957:133476): avc: denied { create } for pid=28284 comm="syz.0.30220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2090.287512][ T36] audit: type=1400 audit(8117445624.957:133477): avc: denied { connect } for pid=28284 comm="syz.0.30220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2090.307323][ T36] audit: type=1400 audit(8117445624.986:133478): avc: denied { ioctl } for pid=28217 comm="syz.9.30198" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2090.332548][ T36] audit: type=1400 audit(8117445625.004:133479): avc: denied { ioctl } for pid=28217 comm="syz.9.30198" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2090.359126][ T36] audit: type=1400 audit(8117445625.004:133480): avc: denied { ioctl } for pid=28217 comm="syz.9.30198" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2090.385086][ T36] audit: type=1400 audit(8117445625.098:133481): avc: denied { ioctl } for pid=28217 comm="syz.9.30198" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2090.410489][ T36] audit: type=1400 audit(8117445625.098:133482): avc: denied { ioctl } for pid=28217 comm="syz.9.30198" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2090.436672][ T36] audit: type=1400 audit(8117445625.098:133483): avc: denied { map } for pid=28287 comm="syz.3.30221" path="socket:[389691]" dev="sockfs" ino=389691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2090.643979][ T942] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2090.667169][ T942] usb 10-1: device descriptor read/8, error -71 [ 2090.805900][ T942] usb 10-1: device descriptor read/8, error -71 [ 2091.059671][ T942] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2091.083534][ T942] usb 10-1: device descriptor read/8, error -71 [ 2091.232060][ T942] usb 10-1: device descriptor read/8, error -71 [ 2091.348104][ T942] usb usb10-port1: unable to enumerate USB device [ 2092.012508][T28330] 8021q: VLANs not supported on ip_vti0 [ 2092.388867][T28342] binder: Bad value for 'stats' [ 2092.946626][T28364] 9pnet_fd: Insufficient options for proto=fd [ 2093.735020][ T942] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2093.894878][ T942] usb 10-1: Using ep0 maxpacket: 16 [ 2093.901984][ T942] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2093.912566][ T942] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2093.923914][ T942] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2093.933131][ T942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2093.941223][ T942] usb 10-1: SerialNumber: syz [ 2093.948702][T28377] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2093.956974][T28377] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2094.192062][ T942] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 2094.208827][ T942] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 2094.219608][ T942] usb 10-1: USB disconnect, device number 20 [ 2095.259201][ T4527] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2095.423540][ T4527] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2095.432729][ T4527] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.440818][ T4527] usb 10-1: Product: syz [ 2095.445207][ T4527] usb 10-1: Manufacturer: syz [ 2095.449877][ T4527] usb 10-1: SerialNumber: syz [ 2095.676190][ T36] kauditd_printk_skb: 293 callbacks suppressed [ 2095.676207][ T36] audit: type=1400 audit(8117445630.089:133777): avc: denied { ioctl } for pid=28408 comm="syz.9.30262" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2095.843394][ T36] audit: type=1400 audit(8117445630.239:133778): avc: denied { accept } for pid=28423 comm="syz.3.30266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2095.919108][ T36] audit: type=1400 audit(8117445630.305:133779): avc: denied { create } for pid=28431 comm="syz.3.30269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2095.939006][ T36] audit: type=1400 audit(8117445630.315:133780): avc: denied { setopt } for pid=28431 comm="syz.3.30269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2095.981442][ T36] audit: type=1400 audit(8117445630.371:133781): avc: denied { create } for pid=28435 comm="syz.3.30271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2095.985542][T28436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30271'. [ 2096.002167][ T36] audit: type=1400 audit(8117445630.380:133782): avc: denied { write } for pid=28435 comm="syz.3.30271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2096.056803][ T36] audit: type=1400 audit(8117445630.380:133783): avc: denied { nlmsg_write } for pid=28435 comm="syz.3.30271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2096.079020][ T36] audit: type=1400 audit(8117445630.418:133784): avc: denied { create } for pid=28435 comm="syz.3.30271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2096.102151][ T36] audit: type=1400 audit(8117445630.418:133785): avc: denied { ioctl } for pid=28435 comm="syz.3.30271" path="socket:[389937]" dev="sockfs" ino=389937 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2096.278702][ T36] audit: type=1400 audit(8117445630.643:133786): avc: denied { read write } for pid=24630 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2096.444428][T28448] netlink: 8 bytes leftover after parsing attributes in process `syz.9.30274'. [ 2096.462223][T28448] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2096.531027][T28450] rust_binder: Error in use_page_slow: ESRCH [ 2096.537987][T28450] rust_binder: use_range failure ESRCH [ 2096.548511][T28450] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 2096.558897][T28450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2096.569113][T28450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:588 [ 2097.177515][T28480] bpf: Bad value for 'gid' [ 2097.298375][T25101] tipc: Subscription rejected, illegal request [ 2097.795581][T28537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2097.806791][T28537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2098.242376][T28579] overlayfs: failed to clone upperpath [ 2098.459166][T28601] overlay: Bad value for 'uuid' [ 2098.675192][T28622] veth0: entered promiscuous mode [ 2098.681119][T28622] veth0: left promiscuous mode [ 2098.712655][T28622] binder: Unknown parameter 'context[7' [ 2098.976573][T28653] rust_binder: Write failure EFAULT in pid:621 [ 2099.114290][T28661] devtmpfs: Unknown parameter 'fuse' [ 2099.243539][T28665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=28665 comm=syz.2.30346 [ 2099.370619][T28676] /dev/rnullb0: Can't lookup blockdev [ 2099.470281][T28687] /dev/sr0: Can't lookup blockdev [ 2099.572622][T28700] overlayfs: failed to clone upperpath [ 2099.599080][T28697] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 2099.783604][T28721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2099.821383][T28721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2099.909657][T28732] netlink: 44 bytes leftover after parsing attributes in process `syz.2.30368'. [ 2100.006043][T28745] veth1: entered allmulticast mode [ 2100.172050][T28766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30378'. [ 2100.182198][T28749] veth1: left allmulticast mode [ 2100.246083][T28755] netlink: 'syz.3.30375': attribute type 19 has an invalid length. [ 2100.254034][T28755] netlink: 5 bytes leftover after parsing attributes in process `syz.3.30375'. [ 2100.553231][T28775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2100.575199][T28775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2100.588266][T28775] rust_binder: 651: no such ref 1 [ 2100.601069][T28775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:651 [ 2100.601637][T28775] rust_binder: 651: no such ref 2 [ 2100.627767][T28775] rust_binder: Read failure Err(EAGAIN) in pid:651 [ 2100.681640][T28782] netlink: 12 bytes leftover after parsing attributes in process `syz.9.30383'. [ 2100.825919][T25101] tipc: Subscription rejected, illegal request [ 2100.982232][T28810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2101.017889][ T36] kauditd_printk_skb: 941 callbacks suppressed [ 2101.017907][ T36] audit: type=1400 audit(2000000002.683:134728): avc: denied { ioctl } for pid=28804 comm="syz.9.30393" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2101.038691][T28816] veth1: entered allmulticast mode [ 2101.056124][T28810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.077645][T28814] overlayfs: failed to clone upperpath [ 2101.084980][T28810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.096144][ T36] audit: type=1400 audit(2000000002.711:134729): avc: denied { create } for pid=28815 comm="syz.3.30398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2101.135340][T28810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.143752][ T36] audit: type=1400 audit(2000000002.711:134730): avc: denied { setopt } for pid=28815 comm="syz.3.30398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2101.163967][T28810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.178893][T28824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30399'. [ 2101.183838][ T36] audit: type=1400 audit(2000000002.739:134731): avc: denied { mounton } for pid=28813 comm="syz.2.30395" path="/292/bus" dev="tmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2101.198466][T28816] veth1: left allmulticast mode [ 2101.214606][T28810] rust_binder: Error in use_page_slow: ESRCH [ 2101.215472][T28810] rust_binder: use_range failure ESRCH [ 2101.222942][T28810] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 2101.229148][ T36] audit: type=1400 audit(2000000002.758:134732): avc: denied { create } for pid=28818 comm="syz.0.30397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2101.257942][T28810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2101.257978][T28810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:657 [ 2101.269350][ T36] audit: type=1400 audit(2000000002.758:134733): avc: denied { create } for pid=28818 comm="syz.0.30397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2101.305456][ T36] audit: type=1400 audit(2000000002.758:134734): avc: denied { create } for pid=28818 comm="syz.0.30397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2101.326983][ T36] audit: type=1400 audit(2000000002.758:134735): avc: denied { write } for pid=28818 comm="syz.0.30397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2101.362823][ T36] audit: type=1400 audit(2000000002.758:134736): avc: denied { read } for pid=28818 comm="syz.0.30397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2101.384313][ T36] audit: type=1400 audit(2000000002.758:134737): avc: denied { read } for pid=28818 comm="syz.0.30397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2101.957057][T28875] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2101.959118][T28875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.974174][T28875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.981904][T28877] cannot load conntrack support for proto=3 [ 2101.983588][T28875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:665 [ 2102.314585][T28899] IPv6: Can't replace route, no match found [ 2102.581757][T28922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2102.582159][T28922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2102.596805][T28922] rust_binder: Error in use_page_slow: ESRCH [ 2102.603449][T28922] rust_binder: use_range failure ESRCH [ 2102.609446][T28922] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 2102.615018][T28922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2102.623019][T28922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:667 [ 2103.142875][T28944] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.159027][T28944] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.166149][T28944] bridge_slave_0: entered allmulticast mode [ 2103.172340][T28944] bridge_slave_0: entered promiscuous mode [ 2103.455992][T28944] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.463085][T28944] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.470193][T28944] bridge_slave_1: entered allmulticast mode [ 2103.476351][T28944] bridge_slave_1: entered promiscuous mode [ 2103.634461][T28944] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.641538][T28944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2103.648836][T28944] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.655860][T28944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2103.679979][ T6442] tipc: Disabling bearer [ 2103.685273][ T6442] tipc: Left network mode [ 2103.707127][T25095] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.714519][T25095] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.731172][ T6442] veth1_macvtap: left promiscuous mode [ 2103.737372][ T6442] veth0_vlan: left promiscuous mode [ 2103.784096][T25100] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.791198][T25100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2103.825331][T25100] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.832428][T25100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2103.939739][T28944] veth0_vlan: entered promiscuous mode [ 2103.985376][T28944] veth1_macvtap: entered promiscuous mode [ 2104.360030][T28984] rust_binder: Write failure EFAULT in pid:11 [ 2104.481010][T28987] __vm_enough_memory: pid: 28987, comm: syz.3.30452, bytes: 18014402804453376 not enough memory for the allocation [ 2104.895519][T28994] netlink: 20 bytes leftover after parsing attributes in process `syz.9.30455'. [ 2104.907422][T28994] netlink: 'syz.9.30455': attribute type 3 has an invalid length. [ 2104.915543][T28994] netlink: 944 bytes leftover after parsing attributes in process `syz.9.30455'. [ 2104.976234][T28996] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2105.131537][T29003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2105.131569][T29003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:27 [ 2105.203680][T29008] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2105.217866][T29008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:687 [ 2105.226801][T29008] rust_binder: Error in use_page_slow: ESRCH [ 2105.269696][T29008] rust_binder: use_range failure ESRCH [ 2105.275725][T29008] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 2105.283380][T29008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2105.291445][T29008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:687 [ 2105.451198][T29021] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 2105.473179][T29021] netlink: 4096 bytes leftover after parsing attributes in process `syz.9.30465'. [ 2105.482485][T29022] netlink: 4096 bytes leftover after parsing attributes in process `syz.9.30465'. [ 2105.545995][T29026] binder: Bad value for 'max' [ 2105.624780][T29030] netlink: 'syz.9.30468': attribute type 3 has an invalid length. [ 2105.713312][T29032] binder: Unknown parameter '0000000000000000000600000000000000000006' [ 2106.366850][ T36] kauditd_printk_skb: 615 callbacks suppressed [ 2106.366868][ T36] audit: type=1400 audit(2000000007.702:135353): avc: denied { read } for pid=29058 comm="syz.3.30481" name="binder1" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2106.397488][ T36] audit: type=1400 audit(2000000007.702:135354): avc: denied { read open } for pid=29058 comm="syz.3.30481" path="/dev/binderfs/binder1" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2106.407869][T29059] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2106.422498][ T36] audit: type=1400 audit(2000000007.702:135355): avc: denied { read } for pid=29058 comm="syz.3.30481" name="binder1" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2106.428823][T29059] audit: audit_lost=101 audit_rate_limit=0 audit_backlog_limit=64 [ 2106.451837][ T36] audit: type=1400 audit(2000000007.702:135356): avc: denied { read open } for pid=29058 comm="syz.3.30481" path="/dev/binderfs/binder1" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2106.461177][T29059] audit: backlog limit exceeded [ 2106.484543][ T36] audit: type=1400 audit(2000000007.702:135357): avc: denied { read } for pid=29058 comm="syz.3.30481" name="binder1" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2106.493239][T29059] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2106.512431][ T36] audit: type=1400 audit(2000000007.702:135358): avc: denied { read open } for pid=29058 comm="syz.3.30481" path="/dev/binderfs/binder1" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2106.578117][T29063] rust_binder: Error in use_page_slow: ESRCH [ 2106.578138][T29063] rust_binder: use_range failure ESRCH [ 2106.584220][T29063] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2106.589758][T29063] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2106.598362][T29063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:47 [ 2106.800742][T29078] netlink: 'syz.9.30487': attribute type 27 has an invalid length. [ 2106.819582][T29078] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 2106.951833][ T2694] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2106.999719][T29092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2107.019037][T29092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.157637][ T2694] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 2107.171161][ T2694] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2107.196941][ T2694] usb 4-1: config 220 has no interface number 2 [ 2107.203264][ T2694] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2107.204209][T29105] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2107.227714][ T2694] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2107.244197][ T2694] usb 4-1: config 220 interface 76 has no altsetting 0 [ 2107.251108][ T2694] usb 4-1: config 220 interface 1 has no altsetting 0 [ 2107.262062][ T2694] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2107.271113][ T2694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.279128][ T2694] usb 4-1: Product: syz [ 2107.283318][ T2694] usb 4-1: Manufacturer: syz [ 2107.288212][ T2694] usb 4-1: SerialNumber: syz [ 2107.460104][T29110] netlink: 'syz.9.30496': attribute type 2 has an invalid length. [ 2107.541935][ T2694] usb 4-1: selecting invalid altsetting 0 [ 2107.554804][ T2694] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 2107.561258][ T2694] usb 4-1: No valid video chain found. [ 2107.570285][ T2694] usb 4-1: USB disconnect, device number 3 [ 2107.698353][T29113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2107.708305][T29112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2107.718378][T29112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.718393][T29113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.961847][T29128] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 2108.467514][T29159] netlink: 'syz.9.30512': attribute type 15 has an invalid length. [ 2108.591494][T29166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:752 [ 2109.232018][T29209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2109.254223][T29209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2109.442575][T29236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2109.442598][T29236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 2109.474382][T29238] rust_binder: 76: no such ref 3 [ 2109.702578][T29248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=29248 comm=syz.3.30541 [ 2109.715337][T29248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=29248 comm=syz.3.30541 [ 2109.728050][T29248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=29248 comm=syz.3.30541 [ 2109.743371][T29248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29248 comm=syz.3.30541 [ 2109.757086][T29248] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 2109.757102][T29248] rust_binder: Error while translating object. [ 2109.765858][T29248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2109.772058][T29248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 2109.821046][T29252] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 2109.830198][T29252] rust_binder: Error while translating object. [ 2109.842754][T29252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2109.848964][T29252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 2109.898492][T29255] /dev/rnullb0: Can't lookup blockdev [ 2109.928056][T29256] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2109.940496][T29256] rust_binder: Error in use_page_slow: ESRCH [ 2109.947030][T29256] rust_binder: use_range failure ESRCH [ 2109.953071][T29256] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2109.958708][T29256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2109.966766][T29256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:776 [ 2109.969604][T29260] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2110.025091][T29262] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2110.041883][T29263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2110.067028][T29263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2110.080295][T29262] rust_binder: Error in use_page_slow: ESRCH [ 2110.080316][T29262] rust_binder: use_range failure ESRCH [ 2110.086487][T29262] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 2110.092009][T29262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2110.100098][T29262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:779 [ 2110.373251][ T1613] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2110.545836][ T1613] usb 4-1: config 0 has an invalid interface number: 190 but max is 0 [ 2110.554121][ T1613] usb 4-1: config 0 has no interface number 0 [ 2110.560304][ T1613] usb 4-1: New USB device found, idVendor=19d2, idProduct=1111, bcdDevice= 7.75 [ 2110.569407][ T1613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.579402][ T1613] usb 4-1: config 0 descriptor?? [ 2110.720420][T29274] __vm_enough_memory: pid: 29274, comm: syz.9.30552, bytes: 18014402804453376 not enough memory for the allocation [ 2110.772224][T29278] netlink: 'syz.9.30555': attribute type 2 has an invalid length. [ 2110.781017][T29280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2110.785910][T29278] netlink: 1 bytes leftover after parsing attributes in process `syz.9.30555'. [ 2110.866531][ T1613] usb 4-1: string descriptor 0 read error: -71 [ 2110.873207][ T1613] usb 4-1: bad CDC descriptors [ 2110.889639][ T1613] usb 4-1: USB disconnect, device number 4 [ 2110.905509][T29288] netlink: 'syz.2.30557': attribute type 2 has an invalid length. [ 2110.970546][T29293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2110.990553][T29293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2111.129555][T29307] overlayfs: failed to clone upperpath [ 2111.227773][T29315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30565'. [ 2111.622618][T29331] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2111.626526][T29334] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2111.626576][T29331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:798 [ 2111.663946][T29331] rust_binder: Error in use_page_slow: ESRCH [ 2111.687129][T29331] rust_binder: use_range failure ESRCH [ 2111.693242][T29331] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 2111.699850][T29331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2111.705613][ T36] kauditd_printk_skb: 800 callbacks suppressed [ 2111.705636][ T36] audit: type=1400 audit(2000000012.703:136151): avc: denied { create } for pid=29337 comm="syz.3.30572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2111.710368][T29331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:798 [ 2111.722105][ T36] audit: type=1400 audit(2000000012.703:136152): avc: denied { ioctl } for pid=29337 comm="syz.3.30572" path="socket:[395351]" dev="sockfs" ino=395351 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2111.791109][T29340] 9pnet_fd: Insufficient options for proto=fd [ 2111.792386][ T36] audit: type=1400 audit(2000000012.703:136153): avc: denied { read } for pid=29337 comm="syz.3.30572" dev="nsfs" ino=4026532563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2111.827710][ T36] audit: type=1400 audit(2000000012.703:136154): avc: denied { read open } for pid=29337 comm="syz.3.30572" path="net:[4026532563]" dev="nsfs" ino=4026532563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2111.854050][ T36] audit: type=1400 audit(2000000012.703:136155): avc: denied { create } for pid=29337 comm="syz.3.30572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2111.875630][ T36] audit: type=1400 audit(2000000012.703:136156): avc: denied { create } for pid=29337 comm="syz.3.30572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2111.897937][T29343] rust_binder: Write failure EFAULT in pid:802 [ 2111.923242][ T36] audit: type=1400 audit(2000000012.703:136157): avc: denied { write } for pid=29337 comm="syz.3.30572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2111.955941][ T36] audit: type=1400 audit(2000000012.703:136158): avc: denied { read } for pid=29337 comm="syz.3.30572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2111.975590][T21323] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2111.985134][ T36] audit: type=1400 audit(2000000012.703:136159): avc: denied { read } for pid=29337 comm="syz.3.30572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2112.013990][ T36] audit: type=1400 audit(2000000012.731:136160): avc: denied { write } for pid=29337 comm="syz.3.30572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2112.142643][T21323] usb 4-1: device descriptor read/64, error -71 [ 2112.284123][T29348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2112.292679][T29348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2112.398401][T21323] usb 4-1: device descriptor read/64, error -71 [ 2112.654219][T21323] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2112.792801][T21323] usb 4-1: device descriptor read/64, error -71 [ 2112.890609][T29378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2112.892946][T29378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2112.904409][T29378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2112.912896][T29379] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2112.950566][T29383] binder: Bad value for 'stats' [ 2112.967782][T29383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2112.977513][T29383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2112.989109][T29383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2112.997880][T29383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2113.069904][T21323] usb 4-1: device descriptor read/64, error -71 [ 2113.187524][T21323] usb usb4-port1: attempt power cycle [ 2113.438045][T29394] binder: Unknown parameter 'subj_role' [ 2113.445218][T29394] overlayfs: failed to clone lowerpath [ 2113.551546][T21323] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2113.577167][T21323] usb 4-1: device descriptor read/8, error -71 [ 2113.596877][T29404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2113.605550][T29404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2113.722654][T21323] usb 4-1: device descriptor read/8, error -71 [ 2113.884679][T29420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30602'. [ 2113.986562][T21323] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2114.009723][T21323] usb 4-1: device descriptor read/8, error -71 [ 2114.148934][T21323] usb 4-1: device descriptor read/8, error -71 [ 2114.263749][T21323] usb usb4-port1: unable to enumerate USB device [ 2114.519776][T29438] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2114.527126][T29438] tipc: Enabling of bearer rejected, failed to enable media [ 2114.546865][T29438] rust_binder: Error in use_page_slow: ESRCH [ 2114.546885][T29438] rust_binder: use_range failure ESRCH [ 2114.552985][T29438] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 2114.559295][T29438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2114.567709][T29438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:824 [ 2114.618817][T29450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2114.645213][T29450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2114.804147][T29458] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=29458 comm=syz.2.30616 [ 2114.916706][T29463] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=513 sclass=netlink_audit_socket pid=29463 comm=syz.3.30617 [ 2114.952409][T29467] binder: Bad value for 'max' [ 2115.277382][T25101] Bluetooth: hci0: Frame reassembly failed (-84) [ 2115.286968][T25101] Bluetooth: hci0: Frame reassembly failed (-84) [ 2115.440987][T29505] netlink: 16 bytes leftover after parsing attributes in process `syz.9.30625'. [ 2115.613145][T29510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2115.631148][T29510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2116.343051][T29527] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2116.346597][T29528] rust_binder: Failed to allocate buffer. len:10149520780121332704, is_oneway:false [ 2116.353381][T29528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2116.362874][T29528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:849 [ 2116.553214][T29541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2116.620260][T29544] rust_binder: Error in use_page_slow: ESRCH [ 2116.626699][T29544] rust_binder: use_range failure ESRCH [ 2116.632737][T29544] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 2116.638316][T29544] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2116.647594][T29544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:863 [ 2116.757736][T29552] futex_wake_op: syz.2.30640 tries to shift op by 144; fix this program [ 2117.077289][ T36] kauditd_printk_skb: 727 callbacks suppressed [ 2117.077305][ T36] audit: type=1400 audit(2000000017.750:136888): avc: denied { create } for pid=29566 comm="syz.2.30645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2117.111589][ T36] audit: type=1400 audit(2000000017.760:136889): avc: denied { create } for pid=29566 comm="syz.2.30645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2117.135617][ T36] audit: type=1400 audit(2000000017.760:136890): avc: denied { mounton } for pid=29566 comm="syz.2.30645" path="/348" dev="tmpfs" ino=1873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2117.169114][ T36] audit: type=1400 audit(2000000017.760:136891): avc: denied { mount } for pid=29566 comm="syz.2.30645" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2117.202059][ T36] audit: type=1400 audit(2000000017.807:136892): avc: denied { mount } for pid=29570 comm="syz.0.30647" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2117.235025][ T36] audit: type=1400 audit(2000000017.807:136893): avc: denied { execmem } for pid=29569 comm="syz.2.30646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2117.255390][ T36] audit: type=1400 audit(2000000017.835:136894): avc: denied { create } for pid=29570 comm="syz.0.30647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2117.300587][ T36] audit: type=1400 audit(2000000017.938:136895): avc: denied { create } for pid=29569 comm="syz.2.30646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2117.320776][ T36] audit: type=1400 audit(2000000017.938:136896): avc: denied { setopt } for pid=29569 comm="syz.2.30646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2117.344031][ T36] audit: type=1400 audit(2000000017.938:136897): avc: denied { execmem } for pid=29573 comm="syz.0.30648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2117.462333][ T4612] Bluetooth: hci0: command 0x1003 tx timeout [ 2117.468576][T20316] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2117.895934][T29626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2117.896789][T29626] rust_binder: Error in use_page_slow: ESRCH [ 2117.904305][T29626] rust_binder: use_range failure ESRCH [ 2117.911008][T29626] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 2117.917420][T29626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2117.927743][T29626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:871 [ 2118.601225][T29651] overlayfs: cannot append lower layer [ 2118.812476][T29673] /dev/rnullb0: Can't lookup blockdev [ 2118.922723][T29678] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 2118.936585][T29679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2118.936602][T29678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2118.943573][T29679] rust_binder: Error in use_page_slow: ESRCH [ 2118.949977][T29679] rust_binder: use_range failure ESRCH [ 2118.955993][T29679] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 2118.961445][T29679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2118.969469][T29679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:885 [ 2119.054196][T29684] netlink: 182 bytes leftover after parsing attributes in process `syz.9.30686'. [ 2119.074311][T29684] binder: Bad value for 'stats' [ 2119.113912][T29686] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 2119.458323][T29707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.30695'. [ 2127.245377][ T36] kauditd_printk_skb: 217 callbacks suppressed [ 2127.245395][ T36] audit: type=1400 audit(2000000027.282:137115): avc: denied { create } for pid=29716 comm="syz.2.30701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2127.265750][T29717] fuse: Bad value for 'fd' [ 2127.275062][ T36] audit: type=1400 audit(2000000027.282:137116): avc: denied { write } for pid=29716 comm="syz.2.30701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2127.318013][ T36] audit: type=1400 audit(2000000027.301:137117): avc: denied { mounton } for pid=29715 comm="syz.3.30699" path="/59/file0" dev="tmpfs" ino=322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2127.342737][ T36] audit: type=1400 audit(2000000027.320:137118): avc: denied { setopt } for pid=29716 comm="syz.2.30701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2127.374762][T29728] fuse: Bad value for 'fd' [ 2127.376913][ T36] audit: type=1400 audit(2000000027.320:137119): avc: denied { write } for pid=29716 comm="syz.2.30701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2127.400329][ T36] audit: type=1400 audit(2000000027.320:137120): avc: denied { create } for pid=29715 comm="syz.3.30699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2127.421899][ T36] audit: type=1400 audit(2000000027.320:137121): avc: denied { create } for pid=29715 comm="syz.3.30699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2127.455617][T29726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2127.465641][T29726] rust_binder: Error in use_page_slow: ESRCH [ 2127.474758][T29726] rust_binder: use_range failure ESRCH [ 2127.481411][ T36] audit: type=1400 audit(2000000027.320:137122): avc: denied { write } for pid=29715 comm="syz.3.30699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2127.507896][T29726] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 2127.507928][T29726] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2127.516019][T29726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:895 [ 2127.534863][ T36] audit: type=1400 audit(2000000027.320:137123): avc: denied { read } for pid=29715 comm="syz.3.30699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2127.579634][T29743] netlink: 'syz.2.30710': attribute type 29 has an invalid length. [ 2127.587663][ T36] audit: type=1400 audit(2000000027.320:137124): avc: denied { read } for pid=29715 comm="syz.3.30699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2127.608585][T29743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30710'. [ 2127.828664][T29762] netlink: 'syz.0.30717': attribute type 4 has an invalid length. [ 2128.025535][T29778] overlayfs: failed to clone lowerpath [ 2128.070830][T29782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30724'. [ 2128.433371][T29784] netlink: 324 bytes leftover after parsing attributes in process `syz.9.30725'. [ 2128.889381][T29822] netlink: 'syz.0.30736': attribute type 28 has an invalid length. [ 2129.118591][T29826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2129.161159][T25100] Bluetooth: hci0: Frame reassembly failed (-84) [ 2129.190320][T25100] Bluetooth: hci0: Frame reassembly failed (-84) [ 2130.013973][T29859] netlink: 104 bytes leftover after parsing attributes in process `syz.0.30750'. [ 2131.146387][T29927] 9pnet_fd: Insufficient options for proto=fd [ 2131.205325][T29931] netlink: 188 bytes leftover after parsing attributes in process `syz.2.30776'. [ 2131.257171][T29936] veth1: entered allmulticast mode [ 2131.291404][T29940] x_tables: duplicate entry at hook 2 [ 2131.300717][T29940] 9pnet_fd: p9_fd_create_unix (29940): problem connecting socket: ./file0: -111 [ 2131.360270][ T4612] Bluetooth: hci0: command 0x1003 tx timeout [ 2131.366326][T20316] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2131.702733][T29967] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2131.704226][T29967] rust_binder: Error in use_page_slow: ESRCH [ 2131.710675][T29967] rust_binder: use_range failure ESRCH [ 2131.716703][T29967] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 2131.722170][T29967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2131.730098][T29967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:916 [ 2132.140851][T29936] veth1: left allmulticast mode [ 2132.380594][T29988] 9pnet_fd: Insufficient options for proto=fd [ 2132.540246][T29998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2132.560195][T29998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2132.575076][T29998] netlink: 'syz.9.30800': attribute type 40 has an invalid length. [ 2132.583521][ T36] kauditd_printk_skb: 385 callbacks suppressed [ 2132.583540][ T36] audit: type=1400 audit(2000000032.302:137510): avc: denied { ioctl } for pid=29997 comm="syz.9.30800" path="/dev/binderfs/binder1" dev="binder" ino=43 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2132.615503][ T36] audit: type=1400 audit(2000000032.311:137511): avc: denied { create } for pid=29997 comm="syz.9.30800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2132.635583][ T36] audit: type=1400 audit(2000000032.311:137512): avc: denied { write } for pid=29997 comm="syz.9.30800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2132.655521][ T36] audit: type=1400 audit(2000000032.311:137513): avc: denied { write } for pid=29997 comm="syz.9.30800" lport=37758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2132.677162][ T36] audit: type=1400 audit(2000000032.311:137514): avc: denied { create } for pid=29997 comm="syz.9.30800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2132.698112][ T36] audit: type=1400 audit(2000000032.311:137515): avc: denied { write } for pid=29997 comm="syz.9.30800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2132.718931][ T36] audit: type=1400 audit(2000000032.311:137516): avc: denied { read } for pid=29997 comm="syz.9.30800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2132.739599][ T36] audit: type=1400 audit(2000000032.311:137517): avc: denied { read } for pid=29997 comm="syz.9.30800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2132.760292][ T36] audit: type=1400 audit(2000000032.311:137518): avc: denied { create } for pid=29997 comm="syz.9.30800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2132.780075][ T36] audit: type=1400 audit(2000000032.311:137519): avc: denied { setopt } for pid=29997 comm="syz.9.30800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2132.790178][T30006] netlink: 'syz.2.30802': attribute type 1 has an invalid length. [ 2132.914096][T30015] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30015 comm=syz.2.30805 [ 2132.926743][T30015] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30015 comm=syz.2.30805 [ 2133.356430][T30023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2133.359342][T30023] rust_binder: Error in use_page_slow: ESRCH [ 2133.366379][T30023] rust_binder: use_range failure ESRCH [ 2133.372448][T30023] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 2133.377975][T30023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2133.387111][T30023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:926 [ 2134.171256][T30060] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2134.436584][T30078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2134.461290][T30078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2134.487806][T30080] overlayfs: failed to clone upperpath [ 2135.231347][T30101] netlink: 'syz.9.30838': attribute type 4 has an invalid length. [ 2135.239195][T30101] netlink: 'syz.9.30838': attribute type 5 has an invalid length. [ 2135.247055][T30101] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.30838'. [ 2135.258667][T30101] netlink: 'syz.9.30838': attribute type 4 has an invalid length. [ 2135.266512][T30101] netlink: 'syz.9.30838': attribute type 5 has an invalid length. [ 2135.274337][T30101] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.30838'. [ 2135.455772][T30110] rust_binder: 955: no such ref 1 [ 2135.460890][T30110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:955 [ 2135.729842][T30123] fuseblk: Bad value for 'max_read' [ 2135.903237][T30136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2135.958072][T30143] 9pnet_fd: Insufficient options for proto=fd [ 2136.031387][T30145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.045723][T30145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2136.155291][T30166] overlayfs: failed to resolve './file0': -2 [ 2136.166604][T30166] overlayfs: failed to resolve './file0': -2 [ 2136.777487][T30203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2136.778645][T30204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:978 [ 2137.138927][T30232] overlayfs: missing 'lowerdir' [ 2137.255934][T30247] overlayfs: failed to clone upperpath [ 2137.256195][T30246] input: syz1 as /devices/virtual/input/input191 [ 2137.282348][T30247] netlink: 'syz.2.30888': attribute type 25 has an invalid length. [ 2137.501036][T30257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.30893'. [ 2138.008787][ T36] kauditd_printk_skb: 1999 callbacks suppressed [ 2138.008804][ T36] audit: type=1400 audit(2000000037.387:139519): avc: denied { read write } for pid=24630 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2138.014111][T30265] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2138.021937][ T36] audit: type=1400 audit(2000000037.396:139520): avc: denied { read write open } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2138.089560][ T36] audit: type=1400 audit(2000000037.396:139521): avc: denied { ioctl } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2138.128099][ T36] audit: type=1400 audit(2000000037.471:139522): avc: denied { read } for pid=30266 comm="syz.9.30897" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2138.151657][ T36] audit: type=1400 audit(2000000037.471:139523): avc: denied { read open } for pid=30266 comm="syz.9.30897" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2138.176064][ T36] audit: type=1400 audit(2000000037.471:139524): avc: denied { ioctl } for pid=30266 comm="syz.9.30897" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2138.206660][ T36] audit: type=1400 audit(2000000037.509:139525): avc: denied { read } for pid=30266 comm="syz.9.30897" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2138.230233][ T36] audit: type=1400 audit(2000000037.509:139526): avc: denied { read open } for pid=30266 comm="syz.9.30897" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2138.255667][ T36] audit: type=1400 audit(2000000037.509:139527): avc: denied { ioctl } for pid=30266 comm="syz.9.30897" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2138.286252][ T36] audit: type=1400 audit(2000000037.621:139528): avc: denied { create } for pid=30274 comm="syz.3.30900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2138.780105][T30323] rust_binder: Write failure EFAULT in pid:1019 [ 2138.812445][T30326] netlink: 40 bytes leftover after parsing attributes in process `syz.9.30916'. [ 2139.051979][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.078432][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.086052][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.107789][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.121066][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.142700][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.158838][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.174900][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.187134][T30334] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.195625][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.210038][T30334] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.217156][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.225538][T30334] bridge_slave_0: entered allmulticast mode [ 2139.232385][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.239371][T30334] bridge_slave_0: entered promiscuous mode [ 2139.246710][T30334] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.255249][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.262938][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.269681][T30334] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.276891][T30334] bridge_slave_1: entered allmulticast mode [ 2139.283914][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.291853][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.299348][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.306557][T30334] bridge_slave_1: entered promiscuous mode [ 2139.322166][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.333873][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.342275][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.350029][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.358209][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.366338][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.374553][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.382687][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.391480][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.398926][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.406559][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.416858][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.429804][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.437818][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.445599][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.453579][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.461522][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.469912][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.477508][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.485673][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.494816][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.502778][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.510810][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.516815][T30334] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.518352][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.524341][T30334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2139.531974][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.538144][T30334] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.545699][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.551595][T30334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2139.578170][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.585785][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.593457][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.601158][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.609170][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.615920][T25095] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.616958][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.629620][T25095] bridge0: port 2(bridge_slave_1) entered disabled state [ 2139.630667][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.645524][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.652338][T25101] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.659407][T25101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2139.667932][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.675907][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.680374][T25095] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.685805][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.689443][T25095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2139.697162][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.711005][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.718682][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.728107][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.735750][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.743901][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.751726][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.759449][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.766846][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.774650][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.782745][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.790455][T30337] binder: Unknown parameter '00000000000000000003' [ 2139.795963][T30334] veth0_vlan: entered promiscuous mode [ 2139.838594][T30368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2139.847242][T30368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2139.879221][T30334] veth1_macvtap: entered promiscuous mode [ 2140.072630][T30374] tipc: Enabling of bearer rejected, failed to enable media [ 2140.576921][T30403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1038 [ 2140.702842][T30412] tipc: Enabling of bearer rejected, failed to enable media [ 2140.778982][T30420] rust_binder: Write failure EFAULT in pid:1052 [ 2140.781397][T30420] netlink: 20 bytes leftover after parsing attributes in process `syz.9.30943'. [ 2140.793190][ T1613] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2140.930642][T30428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30947'. [ 2140.963741][ T1613] usb 1-1: Using ep0 maxpacket: 8 [ 2140.972369][ T1613] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2140.984893][ T1613] usb 1-1: config 1 has an invalid interface number: 137 but max is 0 [ 2140.993752][ T1613] usb 1-1: config 1 has no interface number 0 [ 2140.999886][ T1613] usb 1-1: config 1 interface 137 has no altsetting 0 [ 2141.013193][ T1613] usb 1-1: New USB device found, idVendor=22b8, idProduct=2d99, bcdDevice=ee.71 [ 2141.023247][ T1613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.028688][T30440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30440 comm=syz.2.30950 [ 2141.031976][ T1613] usb 1-1: Product: syz [ 2141.049173][ T1613] usb 1-1: Manufacturer: syz [ 2141.054023][ T1613] usb 1-1: SerialNumber: syz [ 2141.152285][T30451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=30451 comm=syz.9.30953 [ 2141.186743][T25101] Bluetooth: hci0: Frame reassembly failed (-84) [ 2141.193380][T25101] Bluetooth: hci0: Frame reassembly failed (-84) [ 2141.287093][ T1613] usb 1-1: USB disconnect, device number 15 [ 2141.433371][T30481] netlink: 'syz.0.30957': attribute type 1 has an invalid length. [ 2141.451130][T30481] netlink: 'syz.0.30957': attribute type 2 has an invalid length. [ 2141.568323][T30492] rust_binder: Write failure EINVAL in pid:18 [ 2141.643358][T30504] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 2141.654722][T30504] rust_binder: Error while translating object. [ 2141.666291][T30504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2141.672512][T30504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 2142.232153][ T1613] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2142.264820][T30524] netlink: 312 bytes leftover after parsing attributes in process `syz.3.30971'. [ 2142.274245][T30526] netlink: 312 bytes leftover after parsing attributes in process `syz.3.30971'. [ 2142.403322][ T1613] usb 1-1: no configurations [ 2142.407952][ T1613] usb 1-1: can't read configurations, error -22 [ 2142.551932][ T1613] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2142.713117][ T1613] usb 1-1: no configurations [ 2142.717732][ T1613] usb 1-1: can't read configurations, error -22 [ 2142.724732][ T1613] usb usb1-port1: attempt power cycle [ 2143.084825][ T1613] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2143.107392][ T1613] usb 1-1: no configurations [ 2143.112015][ T1613] usb 1-1: can't read configurations, error -22 [ 2143.257785][ T1613] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2143.288656][ T1613] usb 1-1: no configurations [ 2143.293286][ T1613] usb 1-1: can't read configurations, error -22 [ 2143.299798][ T1613] usb usb1-port1: unable to enumerate USB device [ 2143.383274][T20316] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2143.383383][ T4612] Bluetooth: hci0: command 0x1003 tx timeout [ 2143.402512][ T36] kauditd_printk_skb: 703 callbacks suppressed [ 2143.402531][ T36] audit: type=1400 audit(2000000042.444:140232): avc: denied { read write } for pid=24630 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2143.438371][ T36] audit: type=1400 audit(2000000042.444:140233): avc: denied { read write open } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2143.464754][ T36] audit: type=1400 audit(2000000042.444:140234): avc: denied { ioctl } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2143.496152][ T36] audit: type=1400 audit(2000000042.509:140235): avc: denied { read } for pid=30564 comm="syz.9.30986" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2143.521429][ T36] audit: type=1400 audit(2000000042.509:140236): avc: denied { read open } for pid=30564 comm="syz.9.30986" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2143.550314][ T36] audit: type=1400 audit(2000000042.509:140237): avc: denied { mount } for pid=30564 comm="syz.9.30986" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2143.572772][ T36] audit: type=1400 audit(2000000042.509:140238): avc: denied { ioctl } for pid=30564 comm="syz.9.30986" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2143.597785][ T36] audit: type=1400 audit(2000000042.566:140239): avc: denied { read write } for pid=30564 comm="syz.9.30986" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2143.621373][ T36] audit: type=1400 audit(2000000042.566:140240): avc: denied { read write open } for pid=30564 comm="syz.9.30986" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2143.645815][ T36] audit: type=1400 audit(2000000042.566:140241): avc: denied { ioctl } for pid=30564 comm="syz.9.30986" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2143.831057][T30570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2143.839713][T30570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2143.903702][T30570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2143.912491][T30570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2144.600054][T30595] netlink: 104 bytes leftover after parsing attributes in process `syz.9.30995'. [ 2144.650318][T30603] netlink: 'syz.9.30998': attribute type 12 has an invalid length. [ 2145.108165][T30609] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5292 sclass=netlink_xfrm_socket pid=30609 comm=syz.3.31001 [ 2145.372925][T30625] rust_binder: Write failure EFAULT in pid:35 [ 2145.975976][T30652] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2146.151546][T30669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2146.196771][T30669] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 344, limit: 1168, size: 18446744073709551614) [ 2146.213887][T30669] rust_binder: Error while translating object. [ 2146.226628][T30669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2146.271754][T30669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1093 [ 2146.335033][T30676] rust_binder: Write failure EFAULT in pid:38 [ 2147.295037][T21323] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2147.465571][T21323] usb 1-1: Using ep0 maxpacket: 16 [ 2147.472624][T21323] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 2147.480859][T21323] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.490959][T21323] usb 1-1: config 0 has no interface number 0 [ 2147.499881][T21323] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 2147.508985][T21323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.516955][T21323] usb 1-1: Product: syz [ 2147.521148][T21323] usb 1-1: Manufacturer: syz [ 2147.525736][T21323] usb 1-1: SerialNumber: syz [ 2147.531907][T21323] usb 1-1: config 0 descriptor?? [ 2147.655755][T30734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2147.669827][T30734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2147.687894][T30734] 9pnet_fd: Insufficient options for proto=fd [ 2147.696892][T30734] netlink: 'syz.9.31044': attribute type 46 has an invalid length. [ 2147.705267][T30734] netlink: 44 bytes leftover after parsing attributes in process `syz.9.31044'. [ 2147.767717][T21323] usb 1-1: Found UVC 0.00 device syz (046d:08d3) [ 2147.776333][T21323] usb 1-1: No valid video chain found. [ 2147.782654][T21323] usb 1-1: USB disconnect, device number 20 [ 2147.828531][T30743] tipc: Started in network mode [ 2147.834339][T30743] tipc: Node identity , cluster identity 4711 [ 2147.841549][T30743] tipc: Failed to set node id, please configure manually [ 2147.848824][T30743] tipc: Enabling of bearer rejected, failed to enable media [ 2147.865495][T30743] 9pnet: Could not find request transport:  [ 2148.243699][T21323] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2148.414406][T21323] usb 1-1: Using ep0 maxpacket: 8 [ 2148.422183][T21323] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2148.444614][T21323] usb 1-1: config 179 has no interface number 0 [ 2148.451753][T21323] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2148.463994][T21323] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2148.481983][T21323] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2148.494253][T21323] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2148.505207][T21323] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2148.519169][T21323] usb 1-1: config 179 interface 65 has no altsetting 0 [ 2148.531801][T21323] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2148.540947][T21323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.554746][T21323] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input194 [ 2148.734267][ T36] kauditd_printk_skb: 511 callbacks suppressed [ 2148.734285][ T36] audit: type=1400 audit(2000000047.454:140753): avc: denied { create } for pid=30789 comm="syz.2.31061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2148.761304][T30791] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2148.768902][T30792] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2148.781252][T30745] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2148.788436][T30791] audit: audit_lost=105 audit_rate_limit=0 audit_backlog_limit=64 [ 2148.801555][T30792] audit: audit_lost=106 audit_rate_limit=0 audit_backlog_limit=64 [ 2148.808550][ T36] audit: type=1400 audit(2000000047.454:140754): avc: denied { write } for pid=30789 comm="syz.2.31061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2148.809604][T30791] audit: backlog limit exceeded [ 2148.831490][T30745] audit: audit_lost=107 audit_rate_limit=0 audit_backlog_limit=64 [ 2148.835201][T30792] audit: backlog limit exceeded [ 2149.013080][ T1613] usb 1-1: USB disconnect, device number 21 [ 2149.020226][ T1613] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2149.193914][T30818] overlayfs: failed to clone upperpath [ 2149.631940][T30840] rust_binder: Error while translating object. [ 2149.631977][T30840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2149.638209][T30840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1125 [ 2150.581061][T30881] overlayfs: failed to clone upperpath [ 2150.910367][T30894] rust_binder: Read failure Err(EAGAIN) in pid:1134 [ 2150.947411][T30900] netlink: 188 bytes leftover after parsing attributes in process `syz.2.31093'. [ 2151.105591][T30908] 9pnet_fd: Insufficient options for proto=fd [ 2151.144909][T30915] rust_binder: Write failure EFAULT in pid:79 [ 2151.185721][T30917] binder: Bad value for 'stats' [ 2151.294374][T30920] overlayfs: failed to clone upperpath [ 2151.304381][T30921] rust_binder: validate_parent_fixup: new_min_offset=29, sg_entry.length=0 [ 2151.304403][T30921] rust_binder: Error while translating object. [ 2151.309428][T30925] netlink: 'syz.2.31102': attribute type 4 has an invalid length. [ 2151.330667][T30921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2151.330703][T30921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1143 [ 2151.373984][T30925] netlink: 17 bytes leftover after parsing attributes in process `syz.2.31102'. [ 2151.430991][T30930] 9pnet_fd: Insufficient options for proto=fd [ 2151.459168][T30930] overlayfs: failed to resolve './file0': -2 [ 2151.580093][T30945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1150 [ 2152.005446][T30975] binder: Bad value for 'stats' [ 2152.209146][T30986] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 2152.216304][T30986] rust_binder: Write failure EINVAL in pid:1168 [ 2152.385222][T30990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=586 sclass=netlink_route_socket pid=30990 comm=syz.9.31121 [ 2152.548891][T30995] netlink: 'syz.9.31124': attribute type 27 has an invalid length. [ 2152.589011][T30995] rust_binder: Write failure EFAULT in pid:1172 [ 2152.801049][T31003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.31126'. [ 2152.836325][T31003] veth1: entered allmulticast mode [ 2152.913344][T31002] veth1: left allmulticast mode [ 2153.099987][T31019] cgroup: Unknown subsys name 'dont_appraise' [ 2153.228898][T31024] tipc: Enabling of bearer rejected, failed to enable media [ 2153.295913][T31028] veth1: entered allmulticast mode [ 2153.646317][T31049] netlink: 'syz.2.31135': attribute type 16 has an invalid length. [ 2153.654981][T31049] netlink: 'syz.2.31135': attribute type 3 has an invalid length. [ 2153.662944][T31049] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.31135'. [ 2153.695155][T31052] rust_binder: Failed to vm_insert_page(35184388861952): vma_addr:35184388857856 i:1 err:EFAULT [ 2153.695188][T31052] rust_binder: Error in use_page_slow: EFAULT [ 2153.707204][T31052] rust_binder: use_range failure EFAULT [ 2153.713854][T31052] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 2153.719572][T31052] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2153.729698][T31052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1186 [ 2153.786185][ T2694] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2153.817209][T31055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2153.852682][T31055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2153.946081][ T2694] usb 1-1: device descriptor read/64, error -71 [ 2154.140509][ T36] kauditd_printk_skb: 1546 callbacks suppressed [ 2154.140525][ T36] audit: type=1400 audit(2000000052.529:142300): avc: denied { ioctl } for pid=31040 comm="syz.0.31136" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2154.176469][T31027] veth1: left allmulticast mode [ 2154.192568][ T36] audit: type=1400 audit(2000000052.576:142301): avc: denied { mounton } for pid=31061 comm="syz.2.31142" path="/498/file0" dev="tmpfs" ino=2673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2154.215664][ T2694] usb 1-1: device descriptor read/64, error -71 [ 2154.216682][ T36] audit: type=1400 audit(2000000052.576:142302): avc: denied { create } for pid=31061 comm="syz.2.31142" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2154.243860][ T36] audit: type=1400 audit(2000000052.576:142303): avc: denied { ioctl } for pid=31061 comm="syz.2.31142" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=401025 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2154.270364][ T36] audit: type=1400 audit(2000000052.576:142304): avc: denied { ioctl } for pid=31061 comm="syz.2.31142" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=401025 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2154.296830][ T36] audit: type=1400 audit(2000000052.576:142305): avc: denied { mounton } for pid=31061 comm="syz.2.31142" path="/498/bus" dev="tmpfs" ino=2674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2154.320206][ T36] audit: type=1400 audit(2000000052.576:142306): avc: denied { mounton } for pid=31061 comm="syz.2.31142" path="/498/file0" dev="tmpfs" ino=2673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2154.326985][T31070] tipc: Enabling of bearer rejected, failed to enable media [ 2154.344059][ T36] audit: type=1400 audit(2000000052.623:142307): avc: denied { create } for pid=31066 comm="syz.2.31143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2154.364667][T31067] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2154.374246][T31071] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2154.489702][ T2694] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2154.544957][T31079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2154.559553][T31079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.587023][T31079] IPv4: Oversized IP packet from 127.202.26.0 [ 2154.649557][ T2694] usb 1-1: device descriptor read/64, error -71 [ 2154.822985][T31100] fuse: Bad value for 'fd' [ 2154.868293][T31104] overlayfs: failed to clone lowerpath [ 2154.899434][T31106] fuse: Bad value for 'fd' [ 2154.905356][ T2694] usb 1-1: device descriptor read/64, error -71 [ 2155.022935][ T2694] usb usb1-port1: attempt power cycle [ 2155.272203][T31116] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2155.280115][T31116] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 2155.345687][T31118] serio: Serial port ptm0 [ 2155.384990][ T2694] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2155.408969][ T2694] usb 1-1: device descriptor read/8, error -71 [ 2155.493724][T31128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31167'. [ 2155.502855][T31128] bridge_slave_1: left allmulticast mode [ 2155.508588][T31128] bridge_slave_1: left promiscuous mode [ 2155.514484][T31128] bridge0: port 2(bridge_slave_1) entered disabled state [ 2155.523287][T31128] bridge_slave_0: left allmulticast mode [ 2155.529595][T31128] bridge_slave_0: left promiscuous mode [ 2155.535437][T31128] bridge0: port 1(bridge_slave_0) entered disabled state [ 2155.547496][ T2694] usb 1-1: device descriptor read/8, error -71 [ 2155.806532][T31144] veth1: entered allmulticast mode [ 2155.811733][ T2694] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2155.834549][ T2694] usb 1-1: device descriptor read/8, error -71 [ 2155.875212][T31145] veth1: left allmulticast mode [ 2155.973460][ T2694] usb 1-1: device descriptor read/8, error -71 [ 2156.088553][ T2694] usb usb1-port1: unable to enumerate USB device [ 2156.284505][T31169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.293220][T31169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.335084][T31171] overlayfs: failed to clone lowerpath [ 2156.371570][T31175] netlink: 8 bytes leftover after parsing attributes in process `syz.9.31182'. [ 2156.383843][T31175] rust_binder: 31169 RLIMIT_NICE not set [ 2157.136050][T31215] netlink: 'syz.2.31200': attribute type 1 has an invalid length. [ 2157.150265][T31215] netlink: 'syz.2.31200': attribute type 2 has an invalid length. [ 2157.810753][T31238] bpf: Bad value for 'gid' [ 2157.893175][T31242] tipc: Enabling of bearer rejected, failed to enable media [ 2158.220204][T29210] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2158.380072][T29210] usb 1-1: Using ep0 maxpacket: 16 [ 2158.387990][T29210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2158.399361][T29210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2158.409309][T29210] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2158.422164][T29210] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2158.431337][T29210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.440944][T29210] usb 1-1: config 0 descriptor?? [ 2158.905615][T29210] usbhid 1-1:0.0: can't add hid device: -71 [ 2158.918189][T29210] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2158.937270][T29210] usb 1-1: USB disconnect, device number 26 [ 2159.014004][T31276] rust_binder: Error in use_page_slow: ESRCH [ 2159.014026][T31276] rust_binder: use_range failure ESRCH [ 2159.020331][T31276] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2159.025981][T31276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2159.034156][T31276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:133 [ 2159.196161][T31282] tipc: Started in network mode [ 2159.210215][T31282] tipc: Node identity ac14142f, cluster identity 4711 [ 2159.217797][T31282] tipc: New replicast peer: 0.0.0.0 [ 2159.223675][T31282] tipc: Enabled bearer , priority 10 [ 2159.436555][T31291] 9pnet_fd: Insufficient options for proto=fd [ 2159.503206][ T36] kauditd_printk_skb: 710 callbacks suppressed [ 2159.503226][ T36] audit: type=1400 audit(2000000057.558:143008): avc: denied { read write } for pid=24630 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2159.536218][ T36] audit: type=1400 audit(2000000057.558:143009): avc: denied { read write open } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2159.571741][ T36] audit: type=1400 audit(2000000057.558:143010): avc: denied { ioctl } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2159.609305][ T36] audit: type=1400 audit(2000000057.661:143011): avc: denied { read write } for pid=24630 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2159.634318][ T36] audit: type=1400 audit(2000000057.661:143012): avc: denied { read write open } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2159.665673][T31304] overlayfs: failed to clone upperpath [ 2159.673990][ T36] audit: type=1400 audit(2000000057.661:143013): avc: denied { ioctl } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2159.703850][ T36] audit: type=1400 audit(2000000057.708:143014): avc: denied { create } for pid=31302 comm="syz.3.31229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2159.736105][ T36] audit: type=1400 audit(2000000057.708:143015): avc: denied { write } for pid=31302 comm="syz.3.31229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2159.758012][ T36] audit: type=1400 audit(2000000057.708:143016): avc: denied { mounton } for pid=31302 comm="syz.3.31229" path="/198/file1" dev="tmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2159.783905][ T36] audit: type=1400 audit(2000000057.708:143017): avc: denied { write } for pid=31306 comm="syz.9.31231" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2159.835746][T31321] incfs: Backing dir is not set, filesystem can't be mounted. [ 2159.843807][T31321] incfs: mount failed -2 [ 2159.934174][T31330] rust_binder: Failed to allocate buffer. len:4256, is_oneway:true [ 2159.934203][T31330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2159.944007][T31330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1219 [ 2160.130029][T31338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=31338 comm=syz.9.31238 [ 2160.309337][T19877] tipc: Node number set to 2886997039 [ 2161.281325][T31394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1235 [ 2161.285212][T31394] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 344, limit: 1168, size: 18446744073709551614) [ 2161.296000][T31394] rust_binder: Error while translating object. [ 2161.309709][T31394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2161.316930][T31394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1235 [ 2161.474114][T31402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2161.491837][T31402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.742462][T31411] netlink: 'syz.0.31265': attribute type 4 has an invalid length. [ 2161.832114][T31419] tmpfs: Unknown parameter '' [ 2162.375224][T31432] netlink: 'syz.9.31273': attribute type 29 has an invalid length. [ 2162.564257][T25095] Bluetooth: hci0: Frame reassembly failed (-84) [ 2164.095232][T31498] tmpfs: Unknown parameter '18446744073709551615' [ 2164.700690][T20316] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2164.851827][ T36] kauditd_printk_skb: 347 callbacks suppressed [ 2164.851845][ T36] audit: type=1400 audit(2000000062.577:143365): avc: denied { create } for pid=31508 comm="syz.0.31300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2164.882340][ T36] audit: type=1400 audit(2000000062.577:143366): avc: denied { create } for pid=31508 comm="syz.0.31300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2164.905478][ T36] audit: type=1400 audit(2000000062.577:143367): avc: denied { create } for pid=31508 comm="syz.0.31300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2164.927376][ T36] audit: type=1400 audit(2000000062.577:143368): avc: denied { create } for pid=31508 comm="syz.0.31300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2164.948619][ T36] audit: type=1400 audit(2000000062.577:143369): avc: denied { create } for pid=31508 comm="syz.0.31300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2164.999262][ T36] audit: type=1400 audit(2000000062.577:143370): avc: denied { create } for pid=31508 comm="syz.0.31300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2165.021189][ T36] audit: type=1400 audit(2000000062.577:143371): avc: denied { create } for pid=31508 comm="syz.0.31300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2165.043714][ T36] audit: type=1400 audit(2000000062.577:143372): avc: denied { create } for pid=31508 comm="syz.0.31300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2165.063988][ T36] audit: type=1400 audit(2000000062.577:143373): avc: denied { create } for pid=31508 comm="syz.0.31300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2165.086018][ T36] audit: type=1400 audit(2000000062.577:143374): avc: denied { create } for pid=31508 comm="syz.0.31300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2165.086313][T31521] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2165.151791][T31526] tmpfs: Unknown parameter '18446744073709551615' [ 2165.405285][T31535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.423941][T31535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2165.746873][T31535] tmpfs: Invalid uid '0x00000000ffffffff' [ 2165.866521][T31545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31311'. [ 2165.886828][T31545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31311'. [ 2166.021016][T31535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2166.041045][T31535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2166.297002][T31577] fuseblk: Bad value for 'fd' [ 2166.429966][T31589] SELinux: Context system_u:object_r:mnt_t:s0 is not valid (left unmapped). [ 2166.646614][T31602] rust_binder: Write failure EFAULT in pid:1266 [ 2166.889200][T31624] tipc: Started in network mode [ 2166.901046][T31624] tipc: Node identity ca8351157a9d, cluster identity 4711 [ 2166.908460][T31624] tipc: Enabled bearer , priority 0 [ 2166.916644][T31624] tipc: Disabling bearer [ 2167.005063][T31628] rust_binder: Write failure EFAULT in pid:1276 [ 2168.196380][T31657] /dev/rnullb0: Can't lookup blockdev [ 2168.413659][T31671] proc: Bad value for 'gid' [ 2168.497391][T31678] binder: Binderfs stats mode cannot be changed during a remount [ 2168.781871][T31690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2168.790739][T31690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2169.582878][T25095] Bluetooth: hci0: Frame reassembly failed (-84) [ 2169.955739][T31720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31379'. [ 2169.979181][T31720] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12288 sclass=netlink_xfrm_socket pid=31720 comm=syz.0.31379 [ 2169.993990][T31720] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=31720 comm=syz.0.31379 [ 2170.029727][T31723] overlayfs: failed to clone upperpath [ 2170.209384][ T36] kauditd_printk_skb: 613 callbacks suppressed [ 2170.209406][ T36] audit: type=1400 audit(2000000002.570:143988): avc: denied { create } for pid=31734 comm="syz.0.31384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2170.239589][ T36] audit: type=1400 audit(2000000002.580:143989): avc: denied { bind } for pid=31734 comm="syz.0.31384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2170.262202][ T36] audit: type=1400 audit(2000000002.580:143990): avc: denied { listen } for pid=31734 comm="syz.0.31384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2170.285216][ T36] audit: type=1400 audit(2000000002.580:143991): avc: denied { create } for pid=31734 comm="syz.0.31384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2170.310043][ T36] audit: type=1400 audit(2000000002.580:143992): avc: denied { write } for pid=31734 comm="syz.0.31384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2170.333869][ T36] audit: type=1400 audit(2000000002.645:143993): avc: denied { execmem } for pid=31736 comm="syz.0.31385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2170.360243][ T36] audit: type=1400 audit(2000000002.645:143994): avc: denied { execute } for pid=31736 comm="syz.0.31385" path="/dev/rnullb0" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2170.380480][T21323] kernel read not supported for file inotify (pid: 21323 comm: kworker/1:0) [ 2170.400785][ T36] audit: type=1400 audit(2000000002.673:143995): avc: denied { watch watch_reads } for pid=31740 comm="syz.3.31387" path="/251" dev="tmpfs" ino=1356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2170.427034][ T36] audit: type=1400 audit(2000000002.673:143996): avc: denied { mounton } for pid=31740 comm="syz.3.31387" path="/251/file0" dev="tmpfs" ino=1361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2170.453544][ T36] audit: type=1400 audit(2000000002.692:143997): avc: denied { create } for pid=31742 comm="syz.0.31388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2171.028031][T31761] overlayfs: failed to clone upperpath [ 2171.778096][T20316] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2171.778153][ T4612] Bluetooth: hci0: command 0x1003 tx timeout [ 2172.896251][T31800] rust_binder: Error while translating object. [ 2172.896298][T31800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2172.903410][T31800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1335 [ 2172.968797][T31802] netlink: 'syz.3.31409': attribute type 27 has an invalid length. [ 2172.990350][T31802] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2173.045688][T31807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1340 [ 2174.084200][T31831] cannot load conntrack support for proto=3 [ 2174.158924][T31834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.168501][T31834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2174.462954][T31846] incfs: Error accessing: nl80211. [ 2174.474857][T31846] incfs: mount failed -2 [ 2174.713986][T31862] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 2174.885601][T31870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2174.937370][T31872] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 2176.024401][ T36] kauditd_printk_skb: 529 callbacks suppressed [ 2176.024421][ T36] audit: type=1400 audit(2000000008.030:144527): avc: denied { execmem } for pid=31888 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2176.139605][ T36] audit: type=1400 audit(2000000008.143:144528): avc: denied { mounton } for pid=31892 comm="syz.0.31439" path="/114/file0" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2176.177001][T31896] netlink: 104 bytes leftover after parsing attributes in process `syz.3.31440'. [ 2176.187964][ T36] audit: type=1400 audit(2000000008.152:144529): avc: denied { read } for pid=31894 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2176.252319][ T36] audit: type=1400 audit(2000000008.152:144530): avc: denied { read open } for pid=31894 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2176.282796][ T36] audit: type=1400 audit(2000000008.152:144531): avc: denied { mounton } for pid=31894 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2176.307867][ T36] audit: type=1400 audit(2000000008.162:144532): avc: denied { sys_module } for pid=31894 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2176.334065][ T36] audit: type=1400 audit(2000000008.171:144533): avc: denied { sys_module } for pid=31894 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2176.360625][ T36] audit: type=1400 audit(2000000008.171:144535): avc: denied { create } for pid=31895 comm="syz.3.31440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2176.385074][ T36] audit: type=1400 audit(2000000008.171:144536): avc: denied { write } for pid=31895 comm="syz.3.31440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2176.410531][ T36] audit: type=1400 audit(2000000008.171:144537): avc: denied { nlmsg_write } for pid=31895 comm="syz.3.31440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2176.438677][T31894] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.448431][T31894] bridge0: port 1(bridge_slave_0) entered disabled state [ 2176.457497][T31894] bridge_slave_0: entered allmulticast mode [ 2176.465601][T31894] bridge_slave_0: entered promiscuous mode [ 2176.474374][T31894] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.483706][T31894] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.492177][T31894] bridge_slave_1: entered allmulticast mode [ 2176.499169][T31894] bridge_slave_1: entered promiscuous mode [ 2176.572099][T31894] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.579720][T31894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2176.587305][T31894] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.594339][T31894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2176.637243][T25095] bridge0: port 1(bridge_slave_0) entered disabled state [ 2176.645734][T25095] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.662571][T25100] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.671529][T25100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2176.685439][T25095] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.693612][T25095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2176.758270][T31894] veth0_vlan: entered promiscuous mode [ 2176.786972][T31894] veth1_macvtap: entered promiscuous mode [ 2177.331311][T19877] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2177.480608][T19877] usb 5-1: device descriptor read/64, error -71 [ 2177.657844][T31954] overlayfs: failed to clone upperpath [ 2177.736296][T19877] usb 5-1: device descriptor read/64, error -71 [ 2177.782063][T31968] veth1: entered allmulticast mode [ 2177.842903][T31970] veth1: left allmulticast mode [ 2177.909533][T31975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31462'. [ 2178.002837][T19877] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2178.141352][T19877] usb 5-1: device descriptor read/64, error -71 [ 2178.399170][T19877] usb 5-1: device descriptor read/64, error -71 [ 2178.514612][T19877] usb usb5-port1: attempt power cycle [ 2178.515121][ T6443] Bluetooth: hci0: Frame reassembly failed (-84) [ 2178.738251][T32001] warn_alloc: 1 callbacks suppressed [ 2178.738269][T32001] syz.3.31474: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 2178.759294][T32001] CPU: 0 UID: 0 PID: 32001 Comm: syz.3.31474 Not tainted syzkaller #0 c7e4dec9f57e28b28b7c5b5a7e08f57cef0edacc [ 2178.759329][T32001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2178.759342][T32001] Call Trace: [ 2178.759349][T32001] [ 2178.759356][T32001] __dump_stack+0x21/0x30 [ 2178.759387][T32001] dump_stack_lvl+0x10c/0x190 [ 2178.759414][T32001] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2178.759443][T32001] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 2178.759497][T32001] dump_stack+0x19/0x20 [ 2178.759523][T32001] warn_alloc+0x1bc/0x2a0 [ 2178.759546][T32001] ? stack_depot_save_flags+0x38/0x800 [ 2178.759568][T32001] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 2178.759592][T32001] ? __cfi_warn_alloc+0x10/0x10 [ 2178.759620][T32001] ? kasan_save_track+0x4f/0x80 [ 2178.759642][T32001] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 2178.759659][T32001] ? xskq_create+0x68/0x2a0 [ 2178.759682][T32001] ? xsk_init_queue+0xb6/0x120 [ 2178.759700][T32001] ? xsk_setsockopt+0x43f/0x6f0 [ 2178.759721][T32001] ? do_sock_setsockopt+0x26a/0x400 [ 2178.759746][T32001] ? __x64_sys_setsockopt+0x1b8/0x250 [ 2178.759773][T32001] ? x64_sys_call+0x2adc/0x2ee0 [ 2178.759803][T32001] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2178.759830][T32001] __vmalloc_node_range_noprof+0x135/0x1420 [ 2178.759861][T32001] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 2178.759891][T32001] ? avc_has_perm+0x1f2/0x220 [ 2178.759960][T32001] ? kasan_save_alloc_info+0x40/0x50 [ 2178.759990][T32001] ? __kasan_kmalloc+0x96/0xb0 [ 2178.760014][T32001] vmalloc_user_noprof+0x77/0x90 [ 2178.760042][T32001] ? xskq_create+0xdb/0x2a0 [ 2178.760067][T32001] xskq_create+0xdb/0x2a0 [ 2178.760094][T32001] xsk_init_queue+0xb6/0x120 [ 2178.760121][T32001] xsk_setsockopt+0x43f/0x6f0 [ 2178.760145][T32001] ? __cfi_xsk_setsockopt+0x10/0x10 [ 2178.760169][T32001] ? do_futex+0x309/0x500 [ 2178.760188][T32001] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 2178.760209][T32001] ? security_socket_setsockopt+0x33/0xd0 [ 2178.760229][T32001] ? __cfi_xsk_setsockopt+0x10/0x10 [ 2178.760256][T32001] do_sock_setsockopt+0x26a/0x400 [ 2178.760283][T32001] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 2178.760308][T32001] __x64_sys_setsockopt+0x1b8/0x250 [ 2178.760330][T32001] x64_sys_call+0x2adc/0x2ee0 [ 2178.760354][T32001] do_syscall_64+0x58/0xf0 [ 2178.760375][T32001] ? clear_bhb_loop+0x50/0xa0 [ 2178.760395][T32001] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2178.760425][T32001] RIP: 0033:0x7fa48ab8eec9 [ 2178.760444][T32001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2178.760462][T32001] RSP: 002b:00007fa48b9ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2178.760485][T32001] RAX: ffffffffffffffda RBX: 00007fa48ade5fa0 RCX: 00007fa48ab8eec9 [ 2178.760502][T32001] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 2178.760517][T32001] RBP: 00007fa48ac11f91 R08: 0000000000000004 R09: 0000000000000000 [ 2178.760532][T32001] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2178.760548][T32001] R13: 00007fa48ade6038 R14: 00007fa48ade5fa0 R15: 00007ffeec054d98 [ 2178.760568][T32001] [ 2179.082661][T32001] Mem-Info: [ 2179.085871][T32001] active_anon:79489 inactive_anon:5687 isolated_anon:0 [ 2179.085871][T32001] active_file:8801 inactive_file:20180 isolated_file:0 [ 2179.085871][T32001] unevictable:16395 dirty:48 writeback:0 [ 2179.085871][T32001] slab_reclaimable:6463 slab_unreclaimable:82385 [ 2179.085871][T32001] mapped:36792 shmem:51307 pagetables:1262 [ 2179.085871][T32001] sec_pagetables:0 bounce:0 [ 2179.085871][T32001] kernel_misc_reclaimable:0 [ 2179.085871][T32001] free:1379936 free_pcp:2410 free_cma:0 [ 2179.131752][T32001] Node 0 active_anon:317956kB inactive_anon:22748kB active_file:35204kB inactive_file:80720kB unevictable:65580kB isolated(anon):0kB isolated(file):0kB mapped:147168kB dirty:192kB writeback:0kB shmem:205228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7904kB pagetables:5048kB sec_pagetables:0kB all_unreclaimable? no [ 2179.165988][T19877] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2179.166202][T32001] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5656kB free_cma:0kB [ 2179.189210][T19877] usb 5-1: device descriptor read/8, error -71 [ 2179.204628][T32001] lowmem_reserve[]: 0 3921 3921 [ 2179.215395][T32001] Normal free:2559532kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:317956kB inactive_anon:22748kB active_file:35204kB inactive_file:80720kB unevictable:65580kB writepending:192kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3876kB local_pcp:2276kB free_cma:0kB [ 2179.247765][T32001] lowmem_reserve[]: 0 0 0 [ 2179.252303][T32001] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 2179.268127][T32001] Normal: 225*4kB (UME) 55*8kB (UE) 129*16kB (UME) 229*32kB (UME) 1097*64kB (UME) 692*128kB (UME) 280*256kB (UME) 156*512kB (UME) 40*1024kB (UME) 7*2048kB (UME) 533*4096kB (UM) = 2559532kB [ 2179.287185][T32001] 102600 total pagecache pages [ 2179.292168][T32001] 5920 pages in swap cache [ 2179.296601][T32001] Free swap = 98836kB [ 2179.300732][T32001] Total swap = 124996kB [ 2179.304913][T32001] 2097051 pages RAM [ 2179.308736][T32001] 0 pages HighMem/MovableOnly [ 2179.313401][T32001] 351537 pages reserved [ 2179.317662][T32001] 0 pages cma reserved [ 2179.322856][T32001] Memory allocations: [ 2179.326957][T32001] 0 B 0 init/main.c:1370 func:do_initcalls [ 2179.334151][T32001] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 2179.342340][T32001] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 2179.350023][T32001] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 2179.358553][T32001] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 2179.359497][T19877] usb 5-1: device descriptor read/8, error -71 [ 2179.366473][T32001] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 2179.366497][T32001] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 2179.389239][T32001] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 2179.397135][T32001] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 2179.405081][T32001] 0 B 0 init/initramfs.c:101 func:find_link [ 2179.519357][T32013] fuse: Bad value for 'fd' [ 2179.623150][T19877] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2179.646894][T19877] usb 5-1: device descriptor read/8, error -71 [ 2179.784694][T19877] usb 5-1: device descriptor read/8, error -71 [ 2179.900109][T19877] usb usb5-port1: unable to enumerate USB device [ 2180.195350][T32034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.31486'. [ 2180.646353][ T4527] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2180.721547][T32049] tipc: Enabling of bearer rejected, failed to enable media [ 2180.731383][ T4612] Bluetooth: hci0: command 0x1003 tx timeout [ 2180.731509][T20316] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2180.778255][T32051] netlink: 'syz.9.31494': attribute type 63 has an invalid length. [ 2180.790528][T32051] netlink: 5 bytes leftover after parsing attributes in process `syz.9.31494'. [ 2180.800824][T32051] gretap0: entered allmulticast mode [ 2180.806922][ T4527] usb 5-1: Using ep0 maxpacket: 16 [ 2180.808242][T32051] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2180.832837][ T4527] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2180.852524][ T4527] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2180.875395][ T4527] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2180.900809][ T4527] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2180.923572][ T4527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.942692][ T4527] usb 5-1: Product: syz [ 2180.953501][ T4527] usb 5-1: Manufacturer: syz [ 2180.959000][ T4527] usb 5-1: SerialNumber: syz [ 2181.030847][T32064] rust_binder: Failed to vm_insert_page(35184388861952): vma_addr:35184388857856 i:1 err:EFAULT [ 2181.030880][T32064] rust_binder: Error in use_page_slow: EFAULT [ 2181.042865][T32064] rust_binder: use_range failure EFAULT [ 2181.050042][T32064] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 2181.056752][T32064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2181.065729][T32064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1402 [ 2181.203926][ T4527] usb 5-1: 0:2 : does not exist [ 2181.231458][ T4527] usb 5-1: USB disconnect, device number 125 [ 2181.262831][T29811] udevd[29811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2181.476149][ T36] kauditd_printk_skb: 648 callbacks suppressed [ 2181.476166][ T36] audit: type=1400 audit(2000000013.144:145185): avc: denied { read write } for pid=24630 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2181.500152][T32079] netlink: 'syz.9.31503': attribute type 64 has an invalid length. [ 2181.514727][T32079] netlink: 5 bytes leftover after parsing attributes in process `syz.9.31503'. [ 2181.527676][T32079] rust_binder: Write failure EFAULT in pid:1406 [ 2181.552213][ T36] audit: type=1400 audit(2000000013.144:145186): avc: denied { read write open } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2181.592367][ T36] audit: type=1400 audit(2000000013.144:145187): avc: denied { ioctl } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2181.598478][T32084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31505'. [ 2181.619061][ T36] audit: type=1400 audit(2000000013.162:145188): avc: denied { create } for pid=32078 comm="syz.9.31503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2181.647934][ T36] audit: type=1400 audit(2000000013.162:145189): avc: denied { create } for pid=32078 comm="syz.9.31503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2181.668933][ T36] audit: type=1400 audit(2000000013.162:145190): avc: denied { write } for pid=32078 comm="syz.9.31503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2181.692431][ T36] audit: type=1400 audit(2000000013.162:145191): avc: denied { read } for pid=32078 comm="syz.9.31503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2181.716689][ T36] audit: type=1400 audit(2000000013.162:145192): avc: denied { read } for pid=32078 comm="syz.9.31503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2181.738368][ T36] audit: type=1400 audit(2000000013.162:145193): avc: denied { write } for pid=32078 comm="syz.9.31503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2181.760632][ T36] audit: type=1400 audit(2000000013.172:145194): avc: denied { write } for pid=32078 comm="syz.9.31503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2181.837841][T32091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.31507'. [ 2182.255579][T21323] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 2182.417380][T21323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2182.428310][T21323] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2182.441316][T21323] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2182.450386][T21323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.460197][T21323] usb 5-1: config 0 descriptor?? [ 2182.470595][T32100] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2182.491578][T21323] usbhid 5-1:0.0: can't add hid device: -22 [ 2182.497566][T21323] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 2182.669379][T32112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31516'. [ 2182.678408][T32112] bridge_slave_1: left allmulticast mode [ 2182.684063][T32112] bridge_slave_1: left promiscuous mode [ 2182.689667][T32112] bridge0: port 2(bridge_slave_1) entered disabled state [ 2182.697657][T32112] bridge_slave_0: left allmulticast mode [ 2182.703383][T32112] bridge_slave_0: left promiscuous mode [ 2182.709073][T32112] bridge0: port 1(bridge_slave_0) entered disabled state [ 2182.778604][T32116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.794349][T32116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.927769][ T2694] usb 5-1: USB disconnect, device number 126 [ 2183.418512][T32139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.438846][T32139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.574524][T32154] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2183.578046][T32154] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 2183.691427][T32167] /dev/rnullb0: Can't lookup blockdev [ 2183.874479][T32179] netlink: 'syz.4.31535': attribute type 32 has an invalid length. [ 2183.897206][T32179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31535'. [ 2183.912000][T32183] netlink: 60 bytes leftover after parsing attributes in process `syz.9.31536'. [ 2183.954692][T32182] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 2183.954715][T32182] rust_binder: Error while translating object. [ 2183.985205][T32182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2183.991405][T32182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1442 [ 2184.049991][T32185] netlink: 4 bytes leftover after parsing attributes in process `syz.9.31537'. [ 2184.089232][T25101] Bluetooth: hci0: Frame reassembly failed (-84) [ 2184.095709][T25100] Bluetooth: hci0: Frame reassembly failed (-84) [ 2184.174128][ T330] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2184.336176][ T330] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2184.344281][ T330] usb 5-1: config 0 has no interface number 0 [ 2184.350392][ T330] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2184.361332][ T330] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2184.371132][ T330] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 2184.380196][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.389613][ T330] usb 5-1: config 0 descriptor?? [ 2184.826599][ T330] prodikeys 0003:041E:2801.0078: item fetching failed at offset 5/7 [ 2184.834846][ T330] prodikeys 0003:041E:2801.0078: hid parse failed [ 2184.841345][ T330] prodikeys 0003:041E:2801.0078: probe with driver prodikeys failed with error -22 [ 2185.092918][ T4527] usb 5-1: USB disconnect, device number 127 [ 2185.495245][T32241] overlayfs: failed to clone upperpath [ 2185.528136][T32246] overlayfs: failed to clone upperpath [ 2185.653337][T32251] /dev/rnullb0: Can't lookup blockdev [ 2185.936771][T32257] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 2186.066358][T32261] netlink: 92 bytes leftover after parsing attributes in process `syz.0.31559'. [ 2186.273905][T20316] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2186.273924][ T4612] Bluetooth: hci0: command 0x1003 tx timeout [ 2186.812005][ T36] kauditd_printk_skb: 361 callbacks suppressed [ 2186.812024][ T36] audit: type=1400 audit(2000000018.154:145556): avc: denied { read } for pid=32273 comm="syz.4.31563" name="binder1" dev="binder" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2186.846065][ T36] audit: type=1400 audit(2000000018.154:145557): avc: denied { read open } for pid=32273 comm="syz.4.31563" path="/dev/binderfs/binder1" dev="binder" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2186.881465][ T36] audit: type=1400 audit(2000000018.182:145558): avc: denied { map } for pid=32273 comm="syz.4.31563" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 2186.939479][ T36] audit: type=1400 audit(2000000018.182:145559): avc: denied { ioctl } for pid=32273 comm="syz.4.31563" path="/dev/binderfs/binder1" dev="binder" ino=57 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2186.968724][ T36] audit: type=1400 audit(2000000018.182:145560): avc: denied { read write } for pid=24630 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2187.031269][ T36] audit: type=1400 audit(2000000018.182:145561): avc: denied { read write open } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2187.058215][ T36] audit: type=1400 audit(2000000018.182:145562): avc: denied { ioctl } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2187.085412][ T36] audit: type=1400 audit(2000000018.210:145563): avc: denied { execmem } for pid=32273 comm="syz.4.31563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2187.124218][T32287] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2187.173647][ T36] audit: type=1400 audit(2000000018.247:145564): avc: denied { mounton } for pid=32276 comm="syz.9.31564" path="/489/file0" dev="tmpfs" ino=2693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2187.212835][ T36] audit: type=1400 audit(2000000018.332:145565): avc: denied { create } for pid=32273 comm="syz.4.31563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2187.302742][T32296] tipc: Started in network mode [ 2187.323688][T32296] tipc: Node identity ac14140f, cluster identity 4711 [ 2187.345436][T32296] tipc: New replicast peer: 255.255.255.255 [ 2187.359965][T32296] tipc: Enabled bearer , priority 10 [ 2187.493959][T32318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31575'. [ 2187.651586][T32335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2187.661452][T32335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.672779][T32335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1458 [ 2187.674315][T32335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2187.683568][T32335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1458 [ 2188.383153][T32356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.31588'. [ 2188.405176][T32358] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 2188.450235][T32343] 9pnet: Could not find request transport: fdno=0x0000000000000004 [ 2188.543927][T32360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.552401][ T330] tipc: Node number set to 2886997007 [ 2188.570168][T32360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2188.733456][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.746739][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.765718][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.773724][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.781702][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.789184][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.796619][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.804058][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.811490][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.819593][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.827897][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.835848][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.843866][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.851321][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.859538][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.867515][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.875489][ T330] hid-generic 0003:0004:0000.0079: unknown main item tag 0x0 [ 2188.896031][ T330] hid-generic 0003:0004:0000.0079: hidraw0: USB HID v7fffff.ff Device [syz0] on syz1 [ 2189.172787][T32417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2189.181730][T32417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2189.198318][T32417] __vm_enough_memory: pid: 32417, comm: syz.9.31606, bytes: 18014402804453376 not enough memory for the allocation [ 2189.400943][T32432] fuse: Bad value for 'user_id' [ 2189.405811][T32432] fuse: Bad value for 'user_id' [ 2189.790929][T32435] __vm_enough_memory: pid: 32435, comm: syz.9.31612, bytes: 18014402804453376 not enough memory for the allocation [ 2189.879897][T32439] No source specified [ 2189.893396][T32441] can0: slcan on ptm0. [ 2189.935685][T32440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2189.956565][T32440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2190.195072][T32459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 2190.701662][T32482] tipc: Enabled bearer , priority 0 [ 2190.772739][T32482] tipc: Disabling bearer [ 2190.871076][T32486] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 2190.871100][T32486] rust_binder: Error while translating object. [ 2190.888212][T32486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2190.895552][T32486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1479 [ 2191.009027][T32492] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 2191.352015][ T942] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 2191.371726][ T942] hid-generic 0000:0000:0000.007A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2191.390445][T32511] rust_binder: Write failure EFAULT in pid:1490 [ 2191.479856][T32520] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 2191.513860][T32516] fido_id[32516]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2191.622831][T32525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=32525 comm=syz.9.31640 [ 2191.699196][ T942] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2191.859127][ T942] usb 5-1: Using ep0 maxpacket: 8 [ 2191.868630][ T942] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 2191.878155][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.888060][ T942] usb 5-1: config 0 descriptor?? [ 2192.147323][ T36] kauditd_printk_skb: 765 callbacks suppressed [ 2192.147341][ T36] audit: type=1400 audit(2000000030.162:146331): avc: denied { mounton } for pid=32537 comm="syz.3.31646" path="/339/file0" dev="tmpfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2192.227928][ T36] audit: type=1400 audit(2000000030.228:146332): avc: denied { create } for pid=32545 comm="syz.3.31648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2192.230865][T32546] veth1: entered allmulticast mode [ 2192.248228][ T36] audit: type=1400 audit(2000000030.228:146333): avc: denied { setopt } for pid=32545 comm="syz.3.31648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2192.275141][ T36] audit: type=1400 audit(2000000030.275:146334): avc: denied { read write } for pid=24630 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2192.313948][ T36] audit: type=1400 audit(2000000030.275:146335): avc: denied { read write open } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2192.342940][ T942] lenovo 0003:17EF:60B5.007B: unknown main item tag 0x0 [ 2192.351543][ T36] audit: type=1400 audit(2000000030.275:146336): avc: denied { ioctl } for pid=24630 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2192.377823][ T942] lenovo 0003:17EF:60B5.007B: unknown main item tag 0x0 [ 2192.390890][ T942] lenovo 0003:17EF:60B5.007B: unknown main item tag 0x0 [ 2192.398570][ T942] lenovo 0003:17EF:60B5.007B: unknown main item tag 0x0 [ 2192.407780][ T942] lenovo 0003:17EF:60B5.007B: unknown main item tag 0x0 [ 2192.415628][ T36] audit: type=1400 audit(2000000030.312:146337): avc: denied { create } for pid=32545 comm="syz.3.31648" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2192.439140][ T942] lenovo 0003:17EF:60B5.007B: hidraw0: USB HID v0.05 Device [HID 17ef:60b5] on usb-dummy_hcd.4-1/input0 [ 2192.452409][ T36] audit: type=1400 audit(2000000030.312:146338): avc: denied { ioctl } for pid=32545 comm="syz.3.31648" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=406789 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2192.481126][ T36] audit: type=1400 audit(2000000030.322:146339): avc: denied { ioctl } for pid=32545 comm="syz.3.31648" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=406789 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2192.510825][T32557] netlink: 'syz.9.31651': attribute type 16 has an invalid length. [ 2192.547288][ T36] audit: type=1400 audit(2000000030.322:146340): avc: denied { create } for pid=32545 comm="syz.3.31648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2192.587804][T32515] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 2192.587828][T32515] rust_binder: Error while translating object. [ 2192.598203][T32515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2192.607201][T32515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 2192.670969][ T942] usb 5-1: USB disconnect, device number 2 [ 2192.795199][T32574] SELinux: security_context_str_to_sid () failed with errno=-22 [ 2193.067371][T32601] bpf: Bad value for 'uid' [ 2193.115494][T32545] veth1: left allmulticast mode [ 2193.322686][T32622] tipc: Enabling of bearer rejected, failed to enable media [ 2193.403079][T32635] netlink: 48 bytes leftover after parsing attributes in process `syz.4.31677'. [ 2193.573719][T32641] netlink: 'syz.4.31681': attribute type 12 has an invalid length. [ 2193.694236][T32648] rust_binder: Error while translating object. [ 2193.694274][T32648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2193.700467][T32648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:104 [ 2193.882155][T32656] netlink: 'syz.4.31686': attribute type 7 has an invalid length. [ 2193.923572][T32656] netlink: 'syz.4.31686': attribute type 5 has an invalid length. [ 2193.931542][T32656] netlink: 17 bytes leftover after parsing attributes in process `syz.4.31686'. [ 2193.941784][ T942] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 2193.962406][ T942] hid-generic 0000:0000:0000.007C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2194.033935][T32671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31688'. [ 2194.075541][T32654] netlink: 'syz.9.31685': attribute type 6 has an invalid length. [ 2194.093263][T32668] fido_id[32668]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2194.114622][T32676] netlink: 'syz.0.31690': attribute type 4 has an invalid length. [ 2194.577071][ T330] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2194.736917][ T330] usb 5-1: Using ep0 maxpacket: 8 [ 2194.744060][ T330] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 93, changing to 10 [ 2194.755874][ T330] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2194.765746][ T330] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.40 [ 2194.774909][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2194.783009][ T330] usb 5-1: Product: syz [ 2194.787198][ T330] usb 5-1: Manufacturer: syz [ 2194.791838][ T330] usb 5-1: SerialNumber: syz [ 2194.797749][ T330] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 2194.806560][ T330] usb 5-1: no configuration chosen from 1 choice [ 2195.121206][T32694] rust_binder: 1546: no such ref 1 [ 2195.126462][T32694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1546 [ 2195.264203][T32709] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2195.316232][T32714] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2195.322986][T32715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2195.368974][T32719] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 2195.375442][T32719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2195.383538][T32719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1557 [ 2196.352385][ T332] devpts: called with bogus options [ 2196.456053][ T343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31738'. [ 2196.587432][ T358] netlink: 44 bytes leftover after parsing attributes in process `syz.0.31744'. [ 2197.088810][ T399] netlink: 'syz.9.31758': attribute type 46 has an invalid length. [ 2197.231890][ T418] overlayfs: failed to resolve './file0': -2 [ 2197.239009][T19877] usb 5-1: USB disconnect, device number 3 [ 2197.350124][ T426] /dev/rnullb0: Can't lookup blockdev [ 2197.401409][ T432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:121 [ 2197.402934][ T432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2197.412172][ T432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:121 [ 2197.487377][ T36] kauditd_printk_skb: 709 callbacks suppressed [ 2197.487396][ T36] audit: type=1400 audit(2000000035.172:147050): avc: denied { create } for pid=436 comm="syz.0.31771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2197.534127][ T442] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 2197.539366][ T36] audit: type=1400 audit(2000000035.201:147051): avc: denied { block_suspend } for pid=440 comm="syz.3.31774" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2197.578666][ T36] audit: type=1400 audit(2000000035.201:147052): avc: denied { write } for pid=436 comm="syz.0.31771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2197.602289][ T36] audit: type=1400 audit(2000000035.201:147053): avc: denied { nlmsg_write } for pid=436 comm="syz.0.31771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2197.626735][ T36] audit: type=1400 audit(2000000035.201:147054): avc: denied { read } for pid=441 comm="syz.4.31773" name="binder1" dev="binder" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2197.652134][ T36] audit: type=1400 audit(2000000035.201:147055): avc: denied { read open } for pid=441 comm="syz.4.31773" path="/dev/binderfs/binder1" dev="binder" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2197.653191][ T445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.31775'. [ 2197.678025][ T36] audit: type=1400 audit(2000000035.201:147056): avc: denied { write } for pid=436 comm="syz.0.31771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2197.706898][ T36] audit: type=1400 audit(2000000035.201:147057): avc: denied { nlmsg_write } for pid=436 comm="syz.0.31771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2197.774442][ T36] audit: type=1400 audit(2000000035.210:147058): avc: denied { ioctl } for pid=441 comm="syz.4.31773" path="/dev/binderfs/binder1" dev="binder" ino=57 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2197.801295][ T36] audit: type=1400 audit(2000000035.219:147059): avc: denied { read write } for pid=31894 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2197.828057][ T456] fuse: Invalid gid '00000000000037777777777' [ 2198.003740][ T459] binder: Bad value for 'max' [ 2198.058702][ T463] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 2198.058725][ T463] rust_binder: Error while translating object. [ 2198.087491][ T463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2198.105083][ T463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 2198.304512][ T486] 9pnet_fd: Insufficient options for proto=fd [ 2198.410536][ T494] fuse: Bad value for 'fd' [ 2198.410974][ T495] fuse: Bad value for 'fd' [ 2198.471152][ T496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31792'. [ 2198.673196][ T502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31795'. [ 2198.935658][ T526] netlink: 80 bytes leftover after parsing attributes in process `syz.3.31800'. [ 2199.475521][ T542] /dev/rnullb0: Can't lookup blockdev [ 2199.756287][ T549] can1: slcan on ptm1. [ 2199.832038][ T549] can1 (unregistered): slcan off ptm1. [ 2200.236819][ T330] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2200.375381][ T330] usb 5-1: device descriptor read/64, error -71 [ 2200.631358][ T330] usb 5-1: device descriptor read/64, error -71 [ 2200.748043][ T573] tipc: Enabling of bearer rejected, failed to enable media [ 2200.779287][ T575] overlayfs: failed to clone upperpath [ 2200.822098][ T577] fuse: Bad value for 'fd' [ 2200.885510][ T581] Invalid ELF header type: 2 != 1 [ 2200.891293][ T582] Invalid ELF header type: 2 != 1 [ 2200.896425][ T330] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2200.898113][ T581] netlink: 260 bytes leftover after parsing attributes in process `syz.9.31817'. [ 2200.913821][ T582] netlink: 260 bytes leftover after parsing attributes in process `syz.9.31817'. [ 2201.046887][ T330] usb 5-1: device descriptor read/64, error -71 [ 2201.302700][ T330] usb 5-1: device descriptor read/64, error -71 [ 2201.420071][ T330] usb usb5-port1: attempt power cycle [ 2201.782325][ T330] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2201.806360][ T330] usb 5-1: device descriptor read/8, error -71 [ 2201.944264][ T330] usb 5-1: device descriptor read/8, error -71 [ 2202.198033][ T330] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2202.221338][ T330] usb 5-1: device descriptor read/8, error -71 [ 2202.275368][ T630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31832'. [ 2202.359956][ T330] usb 5-1: device descriptor read/8, error -71 [ 2202.476377][ T330] usb usb5-port1: unable to enumerate USB device [ 2202.837521][ T36] kauditd_printk_skb: 743 callbacks suppressed [ 2202.837542][ T36] audit: type=1400 audit(2000000040.182:147803): avc: denied { search } for pid=668 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2202.877969][ T36] audit: type=1400 audit(2000000040.182:147804): avc: denied { search } for pid=668 comm="rm" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2202.899888][ T36] audit: type=1400 audit(2000000040.182:147805): avc: denied { search } for pid=668 comm="rm" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2202.922410][ T36] audit: type=1400 audit(2000000040.182:147806): avc: denied { getattr } for pid=668 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.can0.ipv4ll" dev="tmpfs" ino=35206 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2202.948154][ T36] audit: type=1400 audit(2000000040.182:147807): avc: denied { search } for pid=668 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2202.969957][ T36] audit: type=1400 audit(2000000040.182:147808): avc: denied { search } for pid=668 comm="rm" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2202.991673][ T36] audit: type=1400 audit(2000000040.182:147809): avc: denied { search } for pid=668 comm="rm" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2203.013811][ T36] audit: type=1400 audit(2000000040.182:147810): avc: denied { write search } for pid=668 comm="rm" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2203.038897][ T36] audit: type=1400 audit(2000000040.182:147811): avc: denied { remove_name search } for pid=668 comm="rm" name="resolv.conf.can0.ipv4ll" dev="tmpfs" ino=35206 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2203.063304][ T36] audit: type=1400 audit(2000000040.182:147812): avc: denied { unlink } for pid=668 comm="rm" name="resolv.conf.can0.ipv4ll" dev="tmpfs" ino=35206 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2231.051311][ T6443] tipc: Disabling bearer [ 2231.056693][ T6443] tipc: Left network mode [ 2231.158768][ T6443] veth1_macvtap: left promiscuous mode [ 2231.164295][ T6443] veth0_vlan: left promiscuous mode