last executing test programs: 3m6.779875019s ago: executing program 1 (id=296): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) (async, rerun: 32) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x3, {0xa, 0x0, 0x8, @private0, 0x100000}}}, 0x3a) (async, rerun: 32) r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000000)={0x40, 0x12, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ncm(0x1, 0x15e, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14c, 0x2, 0x1, 0x1, 0xa0, 0xfd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "158408ad26"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x400, 0x12}, [@mdlm_detail={0xb4, 0x24, 0x13, 0x0, "77a4326dff47d5671ae53fb16426bd89ab759109bc4478f9c30b3da35fa7a30e8ab159d2dbcbb391a31c8aa1111190ffc034befc9cd842083ea988574a0710763d749917e036e6767a5f6cfd4a993b0ea13eeebb96d17fdc0d18386dd572df50edfcf3b76bfeae5c1002d863e123fbc9db5a28fae1ffe790697923ad35d3648330b6fcec041d71961dc73e8ad5067bb06d1c3444380ffb32c743a73f023185bd6ecf3cf5cf36e6f6be4e6249abdd3ad6"}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x75bb, 0x6, 0xff, 0x6, 0x3}, @country_functional={0x10, 0x24, 0x7, 0xa, 0x0, [0x0, 0x5, 0x8, 0x6, 0x5]}, @mdlm={0x15, 0x24, 0x12, 0x80}, @country_functional={0x6, 0x24, 0x7, 0x7, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x40, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xff, 0xf, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x7, 0x6}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x1, 0xf1, 0x4, 0x7, 0x0, 0x6}, 0x28, &(0x7f0000000440)={0x5, 0xf, 0x28, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0xda, 0xb, 0x0, 0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xf9, 0x0, 0x7ff, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x2, 0x9, 0x17a8}]}, 0x2, [{0x32, &(0x7f0000000640)=@string={0x32, 0x3, "cf2f70a6f3d034ebb8ee0659a8e8eb4b37c4a24881749ee0f17fa150774c5d0224731f6fa6064099ebb2b83c2c8e0a41"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x820}}]}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r3, 0x0, 0x0) (rerun: 64) syz_usb_control_io$hid(r3, 0x0, 0x0) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async, rerun: 64) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x2, 0x4, 0x0, {0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x891}}}, 0x3a) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="10002c0500ffff000020000280080003000200000014000100000000000000000000000000000000002c00038005000807f500f505000400080000000600040003f8ffff050007004e240000080f05000100000014000180060001000200f5ff07000800ff01000008000400"/125], 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0xb251b33239e77230) 3m5.885612416s ago: executing program 1 (id=299): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 3m5.872745616s ago: executing program 1 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x14) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, r2, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x74, 0x0, &(0x7f00000000c0)=[@enter_looper, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @increfs={0x40046304, 0x2}, @enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) 3m5.747879999s ago: executing program 1 (id=301): unshare(0x62040200) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)={0x84, 0x19, 0x1, 0xfffffffd, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x43, 0x12, 0x0, 0x1, [@generic="8183c668c0dd640247f56387150637aaeab975aac36fec6c450fdc5f3b637b1dda6c19d9e5fb91dabfc8be01826707db1c650929d3e5f8af03ceb95b7ab083"]}, @nested={0x29, 0x6, 0x0, 0x1, [@generic="37f6f188eefa90b2f51e6e03cf85e5a5f5a7aef91ec46233e9bb95cf210e10dd9929f9a40b"]}]}, 0x84}, 0x1, 0x0, 0x0, 0x5}, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x2108000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ftruncate(r3, 0x4a0e876b) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) pread64(r0, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 3m5.747217779s ago: executing program 1 (id=302): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xdd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x28, 0x0, &(0x7f0000000300)=[@decrefs={0x40046307, 0x2}, @free_buffer={0x40086303, r1}, @request_death={0x400c630e, 0x1}, @register_looper], 0x0, 0x0, 0x0}) 3m5.612101791s ago: executing program 1 (id=303): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="b0"], 0xb0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001280)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [{@euid_eq={'euid', 0x3d, r3}}, {@audit}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 3m5.428280045s ago: executing program 32 (id=303): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="b0"], 0xb0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001280)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [{@euid_eq={'euid', 0x3d, r3}}, {@audit}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 2m27.509294578s ago: executing program 2 (id=732): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = fsopen(&(0x7f0000000100)='9p\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000006480)={0x24, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) (async) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000006480)={0x24, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) setreuid(0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x10, 0x1, 0x0, 0x0, 0x0, 0x22}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0x0, 0x100000, 0x4, 0x8, 0x80, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x9}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x120, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) (async) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xffffffffffffffff, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x0, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xffffffffffffffff, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x0, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8c001}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x58, r6, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x10001}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004090}, 0x24000000) (async) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x58, r6, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x10001}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004090}, 0x24000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400a0b7d61e91a7713d3a0009000200e7fffbdbdf250a0000000420fce10867676e76d3d24dc6e90b0700840c11cf5944a2cc6300700dcc855a4d39067719536c432d21ff9a8851331236ca554e67"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r13, 0x0, 0x2, 0x0, 0x0) (async) setsockopt$inet_int(r13, 0x0, 0x2, 0x0, 0x0) 2m27.382556531s ago: executing program 2 (id=733): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e0009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0x7, 0x6, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x17, 0x2, ':='}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x40, 0xc, 0x84, {0x84, 0x5, "610810aa8ca473ed1c96e6df962d78917dd5e45af14dceaa061e4364b0768d7cceda5d06f48c8934f888b68557e0cd0c20e018b7611b7897f0a77171ab39f938ac5738c9204450a08cc02ee9d3fae3adc995ff3bdc45911765af431d7b11d248e1811fa4ded9eef66beb16da2bc11f9563505c4e8f62b60481a3e4b71ca3c659b1ce"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x40, 0x8, 0x31, "2bec9550dbee9317891c46af9f38c43668c693727092491dc4d534c278b1785817637a6c6eb811a7886b1e945a52be2810"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5b}, &(0x7f0000000380)={0x20, 0x0, 0x22, {0x20, "c8d5e1632cb1054352987d8c062542a06fd8d1cf7b98f406505cef2de4e8b2a9"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x2}}) 2m24.150280123s ago: executing program 2 (id=757): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m24.073832775s ago: executing program 2 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000500000018000180140002"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00'], 0x20}], 0x1}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x880, 0x2) getdents(r1, &(0x7f0000000300)=""/143, 0x8f) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000500000018000180140002"], 0x44}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00'], 0x20}], 0x1}, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x880, 0x2) (async) getdents(r1, &(0x7f0000000300)=""/143, 0x8f) (async) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) (async) 2m23.992713277s ago: executing program 2 (id=760): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000240)={0x20071026, r2}, &(0x7f0000000440)={0x54e, 0x2, 0x10, 0xe, 0x2000000, 0x2}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004680)=@newsa={0x1a4, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x20}, {0x0, 0x9}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x6c, 0x14, {{'cmac(aes)\x00'}, 0x100, 0x0, "3f428239b08fff7f316957bf12bd4456c11c4f7bf84bdc84615a7514a60ba832"}}]}, 0x1a4}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2m23.823816249s ago: executing program 2 (id=762): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) splice(r0, &(0x7f0000000180)=0x70, r1, &(0x7f0000000200), 0x8000000000000001, 0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440c0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xfffffffffffffffa) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, 0x0) fchown(r3, 0xee01, 0x0) syz_open_pts(r3, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_ima(r1, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "9224347a00862dbfee390ad4078a7c6c"}, 0x11, 0x1) setresuid(0xee01, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x46, [0x7, 0x5, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0x10a4, 0x6, 0xa2b9, 0x7, 0x9, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x2, 0x7f, 0x6, 0x1, 0xffffffff, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x80000400, 0x7fff, 0x5, 0xa7, 0x81, 0x7, 0xf9a2, 0x80000001, 0xff, 0x1ff, 0x2, 0x5, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007e, 0xffffffff, 0x6, 0xa], [0x8, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0x6, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0x6, 0x4, 0xab00000, 0x40000005, 0x6, 0x9, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0xef, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x42, 0x6, 0x240, 0x7, 0x5, 0x0, 0x5, 0xb, 0x0, 0x3, 0x9, 0x3, 0xc7, 0x1000, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0xd, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x2, 0x8, 0x7c81, 0x3f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x0, 0x9, 0xfffffff7, 0xd20, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x7, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0x8, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x3, 0x808001, 0x7fff, 0x3, 0x6, 0xf, 0x9, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x5, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x6, 0x1, 0x7, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x1, 0xbdb], 0x0, 0x1c4213}) 2m23.78022429s ago: executing program 33 (id=762): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) splice(r0, &(0x7f0000000180)=0x70, r1, &(0x7f0000000200), 0x8000000000000001, 0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440c0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xfffffffffffffffa) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, 0x0) fchown(r3, 0xee01, 0x0) syz_open_pts(r3, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_ima(r1, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "9224347a00862dbfee390ad4078a7c6c"}, 0x11, 0x1) setresuid(0xee01, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x46, [0x7, 0x5, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0x10a4, 0x6, 0xa2b9, 0x7, 0x9, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x2, 0x7f, 0x6, 0x1, 0xffffffff, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x80000400, 0x7fff, 0x5, 0xa7, 0x81, 0x7, 0xf9a2, 0x80000001, 0xff, 0x1ff, 0x2, 0x5, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007e, 0xffffffff, 0x6, 0xa], [0x8, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0x6, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0x6, 0x4, 0xab00000, 0x40000005, 0x6, 0x9, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0xef, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x42, 0x6, 0x240, 0x7, 0x5, 0x0, 0x5, 0xb, 0x0, 0x3, 0x9, 0x3, 0xc7, 0x1000, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0xd, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x2, 0x8, 0x7c81, 0x3f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x0, 0x9, 0xfffffff7, 0xd20, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x7, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0x8, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x3, 0x808001, 0x7fff, 0x3, 0x6, 0xf, 0x9, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x5, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x6, 0x1, 0x7, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x1, 0xbdb], 0x0, 0x1c4213}) 2m14.056906068s ago: executing program 5 (id=863): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002340)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='stack\x00') r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x23a40080, 0x0, 0x38, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x4000000) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000009}) r5 = open$dir(0x0, 0x7e, 0x0) writev(r5, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xffffc000) recvfrom(r1, &(0x7f0000000080)=""/108, 0x6c, 0x20, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req={0x4, 0x1000008, 0x4, 0x2}, 0x37) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'ip_vti0\x00', @multicast}) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000540)="89e7c38716cf119d98d280c988ca", 0xe}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) sendto$inet6(r1, &(0x7f0000002240)="30fedf3e8f32c0296ebc9555805a6a2f56a0a3b6a3ad02a1834594e8c6f1bfac2d5472b4fc9525944a89d137cba634b1ee3dea2f94db926d8f252f08be57968dcfad857918fb7271863cca338224cb8222ce429933638d9ee93479fc4e3beaec978091051cf0efbabed887dbc1f3b7b2a0f23110edbbf76e8a2ea5ba7ae486130eff4be9c80912d3e22b53a38ff0d0eb6b886d56ad1beae802faac472994d04a56149ef2f3babbdbed845e33eca0d382cb47eb615b8a45d91ee6ca359b64346a131a29cc2fbc3a0aca2ab500"/213, 0xd5, 0x4000840, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x43}, 0x1c) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x2b, 0x5522, 0x0, 0x685, 0xffff, 0x38000, 0x3, 0x0, 0x0, 0x80}}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000002000000580001800d0001007564703a73797a3100000000"], 0x6c}}, 0x0) 2m14.003534919s ago: executing program 5 (id=865): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname(r0, 0x0, &(0x7f0000000b00)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x14890, &(0x7f0000000180)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974692d652c00e948845b239e6682aaae76fd62d8", @ANYRESOCT=r1]) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) getsockname(r0, 0x0, &(0x7f0000000b00)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x14890, &(0x7f0000000180)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974692d652c00e948845b239e6682aaae76fd62d8", @ANYRESOCT=r1]) (async) 2m14.002978309s ago: executing program 5 (id=866): clock_gettime(0x9, &(0x7f0000000080)) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) clock_gettime(0x9, &(0x7f0000000080)) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) 2m13.98304288s ago: executing program 5 (id=867): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x8) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) (async) 2m13.912020321s ago: executing program 5 (id=869): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) (async) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000001280)={'ip6tnl0\x00', r3, 0x4, 0x5, 0x7, 0x40, 0x0, @remote, @mcast1, 0x40, 0x20, 0x3, 0xffffff81}}) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x1}}, 0x18) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)) pread64(r4, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 2m13.819497133s ago: executing program 5 (id=870): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) 2m13.728934025s ago: executing program 34 (id=870): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) 32.729156318s ago: executing program 4 (id=2267): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000240)={0x0, 0x1, 0x32, 0xffffffff80000001}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00') fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='\\\x00', &(0x7f0000000080)='./file1\x00', r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000003c0), 0x6) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 30.48908178s ago: executing program 4 (id=2301): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x6) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000100), 0x2, 0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 30.383413013s ago: executing program 4 (id=2304): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) fcntl$dupfd(r2, 0x406, r0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x8000000}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) close(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x801000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, '\nQ^'}}, {@privport}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/rnullb0\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/rnullb0\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/rnullb0\x00'}}, {@pcr={'pcr', 0x3d, 0x36}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x40901, 0x88) write$FUSE_DIRENT(r5, &(0x7f0000000080)=ANY=[@ANYRESOCT=r5], 0x200001d0) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x4, 0x2, 0x3, {0xa, 0x4e20, 0xfffffff2, @loopback, 0x2}}}, 0x32) sendfile(r0, r0, 0x0, 0x8000) 30.381694103s ago: executing program 4 (id=2305): ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000580)={[{0x40004, 0xfff, 0x8, 0x4, 0xdb, 0x0, 0x7f, 0xe, 0x2f, 0x2, 0x7, 0x3, 0x5}, {0x315a, 0x7, 0x2, 0x7, 0x5, 0x1, 0x0, 0x7, 0x8, 0xc0, 0x0, 0x4d, 0x1}, {0x80000000, 0x9, 0x7, 0xf, 0x5, 0xfc, 0x11, 0x40, 0x7, 0xce, 0x9, 0x0, 0x7fffffff}], 0x8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b805000000090200e1490000320f01d9660ff7e31bf7eccc2e2e000000b90000c0fe0fae41d90100b9800000c00f32090840f20f1056000f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x5a}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0xffffffffffffffff, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x7ff, 0x6, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x8, 0x46, 0x6, 0x10000000000003, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x8, 0x0, 0x0, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x2, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xa692, 0xcc, 0x1, 0x1000003]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$msr(r3, &(0x7f0000000280)=""/175, 0xaf) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') socket(0x2, 0x3, 0x67) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') socket$igmp(0x2, 0x3, 0x2) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x2) preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 30.040606129s ago: executing program 4 (id=2311): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x60, 0x1, {{'xcbc(aes)\x00'}, 0xc0, "bd47604b63ab6f1ee0fab0861fd447149db52737b0cd641f"}}]}, 0x198}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x6, 0x2, 0x22}, @fda={0x66646185, 0x6, 0x1, 0x1b}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 29.975135241s ago: executing program 4 (id=2312): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '+\\\x00'}, &(0x7f0000000100)=""/52, 0x34) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000001540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001500)={&(0x7f00000001c0)={0x130c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88a2}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x12d4, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x3}, @device_b, @random="08bdafea3d97", @random="25e631fedb7a", {0x6, 0xe2d}}, @a_msdu=[{@device_b, @broadcast, 0x1000, "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"}, {@device_b, @broadcast, 0x57, "062bad8d464bdc0eb7ed99b666451d25cf873c39a68a54e45df556e3353e09c44681b062a9b60955403c45c5653696ccaf5ac72e408cd423d535fa5493620c354a7962a9a45fbe086d2a948d71d3f2e1c468df14b68470"}, {@device_a, @device_b, 0xd1, "be0f80d8b503ec9f15c915fb022ab5b55b51fbc9cf96f59cadcad05d6c8a4f697e29e4e3f1fe1db0c5c8be581fe2a79755bb9d3d6d8916691feaefa516cd320fb18da1dd674f0d6f704dafd9f0c995d627eb27f0a2e54fb26fe28981a657927044cbd326da2cda08ce131091404a7bd57e45c11b37b3d3eb8dea48dea9057c7baaf4a270554a4bb66b8bb709b41d8b52c7fad3f7112a08295d024495b78a1d865291422ffb9147fcd46876ae7d325ed7ae0852bd89b2851231cfd5deafd6740a7a4573b9929a85ea0d5defc4659d6f5140"}, {@device_b, @device_b, 0x9a, "d5c5787e1c33360ac968c667d3239cd7fce0ea0feaf75f40ab7eb0f655b3689167a5d9fe406dd614f7f99b1a7b71e4e866ce18223cf1ae9f28f4ff88e34cb2bd412d32404c11806cc3bbbec5b7f620eac89072281ed665b6649bcb2cba2cdad77db7d9e3ca2ea6eec8f4b11d5ea8b6819c2c5d77e94ad4fb28601912b7cb5988d3677f3a76c149e594fc3dabd13df912157aa6b87106f4ce26ed"}, {@device_a, @device_b, 0x2e, "04c7e78fb52aca6b831f6f77df7725e33911fa3189a32f2e0539b96db3fc5009ac7a70ef00b0255a96c4414c467f"}, {@broadcast, @device_b, 0x6e, "7daa658347e11ef50bccbea1e36b6f57c6252f03ae88b7a4b3a40710290c01cbcd9ee8225a51322afc7f77031f0c99026d3c7f9ce078dfc2eae9fbaef26779a17726d5b7266d91413fd4855f690e3376ad27cb9f7599a83c2b5742de240b6ebd15321f4a1c7c8d0291af015f9997"}]}}]}, 0x130c}}, 0x4004000) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000015c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x7c, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x7c}}, 0x40000) (async) io_setup(0x3db, &(0x7f0000001700)=0x0) r5 = eventfd(0x2) io_cancel(r4, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x5, 0x61, r0, &(0x7f0000001740)="4ddef8aec79165c88f65a07b72828f414ef3cc0714da60949c", 0x19, 0x4a, 0x0, 0x9afea728bf25b68b, r5}, &(0x7f00000017c0)) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x4010, r0, 0x5b74e000) (async, rerun: 64) copy_file_range(r5, &(0x7f0000001800)=0xfa3, r5, 0x0, 0xffff, 0x0) (async, rerun: 64) r6 = socket$igmp(0x2, 0x3, 0x2) shutdown(r6, 0x1) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001840), 0x400280, 0x0) ioctl$TIOCGISO7816(r7, 0x80285442, &(0x7f0000001880)) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r8 = syz_usb_connect$uac1(0x1, 0x100, &(0x7f00000019c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x5, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xf}, [@feature_unit={0xd, 0x24, 0x6, 0x2, 0x4, 0x3, [0x7, 0x1, 0x7], 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb, 0x2, 0xe7, 0x8, "8b", "a91e"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x33, 0x4, "72b17d"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x4, 0x3, "d7935a47316852"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x20, 0xad, "f2", 'f}'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x55, 0x4, 0x6, 0x2, "e1a4", "c1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x7, 0x9, {0x7, 0x25, 0x1, 0x0, 0x2, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xe, 0x1, 0x8, 0x4, "d897e8783d10f3da"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x5}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf7, 0x2, 0x73, 0x8, "5be627ff3e51"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x4, 0xe1, 0x9, "c592d67ff2baf7"}, @as_header={0x7, 0x24, 0x1, 0xa, 0x5, 0x1000}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x8bd, 0x0, "201b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x2, 0x5, {0x7, 0x25, 0x1, 0x2, 0x4, 0x200}}}}}}}]}}, &(0x7f0000001d80)={0xa, &(0x7f0000001ac0)={0xa, 0x6, 0x250, 0x3, 0x9, 0x8, 0x40, 0x6}, 0x19, &(0x7f0000001b00)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "da31247cdf7c4075e04c8b5ab19b53dd"}]}, 0x3, [{0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x3409}}, {0xdb, &(0x7f0000001b80)=@string={0xdb, 0x3, "5b292e4ad8ae8bacf148a65d7da5cf8be74b050a63e7544653d0896fd41fa41c606c3eec7262716f1e7c53765fdd5db09e6c632b443d1468ff85248a7da2e0847ae8ef35abf05ee15ee7b176a50792aa9070a197fc146e8e68ef9e905c84ac81092a2fdbc8aba2f2fc39df93fc950abdad9654749fe5819ecce0d04d980f952063b8ecd0c51b6e20781ff544a41b61e0b8f5edbeb77aab5dbc3925847b907fe7d26e94fe725e765f51df9350bb7a381964c7253344aaf03f07f65512c66dcbafe900544522f5c930b82e1deacb4a7a23108525ada757258eff"}}, {0xe1, &(0x7f0000001c80)=@string={0xe1, 0x3, "0da4c0316091a1bebd187075e5837210ea9b60d390d8d01e408a05e704cd49c513945f773f801b7bd00e580799b6d08951642217efbc95c8be4700ea6cc518e0abce4bf2fef80cc682adb90596a176cdd1294aa342107e116024e634c5ad1e73cd0c219ef550a0a1fb6fbafcfd3e43e7dcd6fdbecffb0731b2bca7fd5bc09391d2a4cbbd430686aee776e1be4d0b87fbbc21b61dff20cd5e52833adb7476ef86d751c58cbcdf048996d4da91feee76c24985028a651ba92fe912b52f688732d1b52c25656368618ece560643e43964d6064b29949e21bdee35bc3965979602"}}]}) syz_usb_control_io$uac1(r8, &(0x7f0000001f40)={0x14, &(0x7f0000001dc0)={0x0, 0x9, 0xfe, {0xfe, 0x3f, "112abdb4f58e3a315e329ad481f2ee34616a5b2c9952891f559f583cc38e737ba6437b9222f49c0ab7f1bee5fc83d19268d850ac7983ec6de236b1032c4de0225e486329be213b2cdffe78a80048a5409a34a406ee19762d52407d40e8df678e62a4a01331cafd3d677605fac2b5eb9149631341ee94541a977c5090a47d8481c1b06a598a46184e3226ed19d4b5bd5eadf0a4b83e38605e8b17c34e696e032dc9b147bddfa6a0d981235cec932fcfc1a2b62eebd6cde487f032efe824419dffd460b6896c19a2ceffeb7a9bc79a8ecb709ce0df2d396460bc9506fb6576fd5dbff6e17496e982875453c47ae9689128b872442a9397167d7600e0dd"}}, &(0x7f0000001f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000002240)={0x44, &(0x7f0000001f80)={0x20, 0x9, 0xc9, "598cfb9d4bf19b90dfa72ad271f2c33356ae2204d3cd86d6cc4e9d2db66f7e16f129a77410995e2d6273e64e9b56e38bf725221610db8c654df4099c5f3d65242650586d344009a51e49fbbe365fb3d21ffea6f7d704482713241b665d11f84ed5180240f1784e305c060228b391d7fd6c0b748bdc885b663be2dbaa3b6521e282e192fdbe491ab5bd98ea07ab518a0fd014ec1bbd335f53bd8bb1d0eb7cc433dbfdf354b6f567644d5ea3d90626e5828f891fb158fbd19ef97148f09f8ccee682cc795635c8cb5d73"}, &(0x7f0000002080)={0x0, 0xa, 0x1, 0x22}, &(0x7f00000020c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002100)={0x20, 0x81, 0x3, "0a39a5"}, &(0x7f0000002140)={0x20, 0x82, 0x1, ';'}, &(0x7f0000002180)={0x20, 0x83, 0x2, "e934"}, &(0x7f00000021c0)={0x20, 0x84, 0x1, '\t'}, &(0x7f0000002200)={0x20, 0x85, 0x3, "ab6937"}}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) quotactl_fd$Q_SETINFO(r9, 0xffffffff80000602, 0xee01, &(0x7f00000023c0)={0x3, 0xffffffff, 0x1, 0x1}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000002440)={0x6, &(0x7f0000002400)=[{0xf800, 0x2, 0x26}, {0x8, 0x3, 0xd, 0x3}, {0xc4, 0x4, 0x6, 0x1000}, {0x8000, 0x7, 0x5d, 0x2}, {0x2, 0x9, 0x7, 0x7}, {0x5, 0x5, 0x7, 0x401}]}, 0x10) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002480)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f00000024c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) fsync(r5) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ppoll(&(0x7f0000002540)=[{r11, 0x1}, {r7, 0x2008}], 0x2, &(0x7f0000002580)={0x0, 0x3938700}, &(0x7f00000025c0)={[0x8000]}, 0x8) (async, rerun: 32) syz_usb_control_io$uac1(r8, &(0x7f0000002700)={0x14, &(0x7f0000002600)={0x0, 0x8, 0xaa, {0xaa, 0x1, "b8b245ef25f14c2ae73577949c65c007f2cdfb2f07f72b6e902e8fc5ee753a014ccffc73768a3a792ff97d45ef5e041b3b38bb13a1990c6a9e9545760ebeeec89fa7537fc789e797a0efe5ff2fb057d6f9d1dafcec4a65b05509664f4881e3819c98ea29ce6fa10e04eac5fd44a9fcca4d3548211edb2a1d86b37caff457b062f1176aad15e3205592e0fba95090dd3dfa155ff3f6e57f7763db9d19c09189a623d85ca60e3699de"}}, &(0x7f00000026c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x47d}}}, &(0x7f0000002a40)={0x44, &(0x7f0000002740)={0x40, 0x31, 0xfd, "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"}, &(0x7f0000002880)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000028c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002900)={0x20, 0x81, 0x1, "cb"}, &(0x7f0000002940)={0x20, 0x82, 0x1, '^'}, &(0x7f0000002980)={0x20, 0x83, 0x3, "d62343"}, &(0x7f00000029c0)={0x20, 0x84, 0x4, "0f34da90"}, &(0x7f0000002a00)={0x20, 0x85, 0x3, "5e00f8"}}) (async, rerun: 32) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000002ac0), &(0x7f0000002b00)=0x4) 29.924766602s ago: executing program 35 (id=2312): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'user.', '+\\\x00'}, &(0x7f0000000100)=""/52, 0x34) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000001540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001500)={&(0x7f00000001c0)={0x130c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88a2}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x12d4, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x3}, @device_b, @random="08bdafea3d97", @random="25e631fedb7a", {0x6, 0xe2d}}, @a_msdu=[{@device_b, @broadcast, 0x1000, "4338340269b0e40b417f70f95f0e0b27b09edcbc683bb6eba5a853e6a7d976c0e5c47d26b0bbb3cb1da627c72bc067291d4fe10c2b3ef31ad6060f9e5f3933d9acc48fc86a35903f0c4d8a0a5c05d74caeded3220277286d111a8fb0b7e8c7335ef62c8bfb57846d940165b70bcafc154dd0d60324f499ff17aa3b2faf39de13c3f14ebc7f8146f929220b43243af17aa3bc4ba04b9f5b9e8e5f03be331deb4483221d4489fc3d1b178906e3dc97f0914fadd56d78020444bc047a2f3c20a866d0ceed93fbed587572c39994d80ed96f6c71a9be6ff1fb7baaaa8c7ff37d9f04434c669c84210ecdbcadb3ed71aea1f2e5181026910a3431ed287f3894bea508e0fc10d1a43e7b8c22dba1415139dd177bdf102b9aa2d9ca190a6cb23d0f5467e6c169bae0437b6bd8fd36a35aea3bf47031b4c478f9e459abc0b4cfa8b36d631ae199908b7c1cadd89c33d31e27e8cbd34433c89fe2173a74cd0b451a47c10d8407811e91644e4b8c1973963a8677ecfb11ba88e0a38d7130f0b1fcad1b943cf4b46c712ebbba5b18f7f207464d9beb504fb46a38aaeceedc6a0005d639961f574718426f5caedf7820d4dc1cede8778718564ef909c04c0c7608ce63034e39c2be577193b681eba65ed58829a356826613b1173ff8deb4e8defb3430beae03ce7c0bab5d8adb7b8b29960e8356f3667e74c066d5362d48c89dbb5edbb75c5933538ca59f2e0048227cbbc99846833be35945764ed959c137154b78fc2d8f050fc52f45ab4a2994a9941f3db5314777d03effec587c4b381ac23bcd51066c3a195762b2a0f2cbb3c94098b9621c0fb76f12cf8a748615bbcc06c300168de82c0407479c7884ee59bae5c66b54266f72ab60c4e959474ff4f3df001b70b1475db078376b44946eaa1858b8dcbd1444b28cd6c097b022d69061289552417a2748afdf181e9fc9e9f83c67755d0aae8645fd2a6a1ab998c9bffa08d08cc4e420476db3a351a57d76544e722e13995f189c0998c17b652db69996e18e84c107b71973b4cf309886f208d6f3211f6e223851c0191d564bb82969da8fe8c92c6e9b77889bb94963125245d2cf8197f5cc49ab0709c004a8a372bc4c9dabf8e941ad530ad0ed4064a74ecc84d0aa2486d69cfc76b8849e36a6c6d43f351313ba54368ac336db840e674908e5ceafad7bf3f95253297df4bdd423b9dc49782d780725f0b380e373c8f01238966d481439f4a5640b1532e13f514f07632697037ba88d5533151aa42cd5b327f129835a05aba5b78f643daf6428ed1a6bcc2860902a785e9325674c13cccfaf2d94fcb3792a45fa8ce2a8b700b7035ec548ad8fa5ccbc0a4c7e49fb7f08e356d96d9e0b133cd01c58283c84f432efa744ff6fdb2e2e9b0d50750af0372088ce9088e9d4d15df20769281e08db8475cf72d7f9f85904419098d85b8cb3f998a28aaf6b04b714e6228fdfeab252235f5fbbda9de49a44050b6a5e7a53bb2a8f191a2125d49c3fc31366bbe82c39425b36aa8004dbe234da6a788264e129122151fdd644966aaebab4ff839db0ba3baf11a5a12d8b65d84d2ca5dfcf1c22bd1d453697121074fb420849f8f6324d22b14a4ee2e64542c9f9b42a3a5ade2c68e6f89b83634d35c21f5e9333017220780dceea2df7d56072e6bf0ef217dda230dcb75a04868a7d9fe1e77162afdbd329879bb5f094124162564a01d47f203cef10be448cb301b6143e676a1067a343cffcd736da880fbc5a9980949093801863dd0700fddc2cef72e027e3110dba120db0e9f726da2a4ff9a5a2e78147bed2c57db237e83504a7df4a3ebb03f315257db992aa5b3b30e8d85b54d533308f30c977add1e9ed3643b2e00ea32cdadf8071c325fba9a5e7dc535937c836ec80b32c4b322acca073fd1b859a8495d8af9a527cfce0e69f700505254350b9cc00c30d8081e126382358ae84543665e378c0957a69e2e28ffc52214f4dd936395ada9cee361af8066c1bdfc5706daed99184f33c262eaf961ea16b4de3946eb710d96980f39c9ada73c95ac439e98ce6d4b2c5eab800d231fe91a28f956754d678cbe5611e09fe05ce06e6c6625f34b6be718bf674e4dc8f2eaa4469717d84b49478f6f6ee01b9348eba621128e5d140f8a9067d48d4285d6c5768d1734d4a5e2187e1bcde7ef3da535494f332858f394876d52443fae478dad163e996bd04ff721e09d3930049664e6cb9f4b47d12b725c22071bcad40c41c64dfc03184ae1c12ff094053ade47d7744ce5ac260e73fc70528fbbd0a24c5f9783fab1e73e0228ca932f506ab4ceb5685eb27b5223b6c1f23236c3c5b7e0bd3675dbaeeb3b0b99fa24fae958a08b72c3c1534b608c163729d35d399b61fd3e9a1f6493ef2d29003a4a6443afc734600cc5c204d67321f724b897b2694ca26404b16876918b8a90891cf0b205013e3a6fad4abd98e5e87239a7d2fb000ef434898009bf09dba12e227588491f74829c5f1caa2fda47ff7d40c85c5e11cf88f9500a021201afdafe22985bdd74c5bb2db0c394f43d5fd26314a0f7d72ce13061bb5aadff40604af7537869468cfade62eef0fcb53a725a842411ae00a6d885823a9053988451192d0899f2771b98a6cb48f4407a34392692f20b0f2377a880fcc70ea714144a7a5118d82da32a63f296cd8c27e672266f6480a62c59f62e77cd42ee140fde853ca9de99bd03d2549b54e85486c5e1b8d903a106575aa3e30ef937f954dfdedf442169ee868fe665692d1042791cdd4cb822a5520a225209be44b06f29f71073432e37fcc0a5c4dcded7eeed06bbdcffc30699d0b39ee03e00f35c74a218410c7b861c089b34aa8065c5f275d70089f764c96d6637eb3418e66ca313fad376c5c8fd13e8c79627bf66c58efc4da0aac00d162a8143ebeaa7e5a437e9cceb797ac75f117ac2e8771d4e10d017c0c3f28bcc321012dfb78445fdc9072588148d85cb920393809e1c3a1171385ba2e1f5a85093cd606e8fc9917f7c41c61b854eea1b3f011dd8f702b54dc6361631cf6d07def1ce7b1c6d5171e1afacfc1593b6c21d91451ddf6c5e9c836e88d2296bd10a0798dbd5a587e7dea651a2e457af10c38a0904351b9238ebba73362d958ade42cbc473f9aa672232b4f0a11b04504aef7572b5d4a274e720cf26a372ea7c2ac73535506eb0865da58a055dba9bf1e6e899bd2b94ca0c3f6ba0c4b4bfc002a467439569793226a6a7ceffd56709c62db2f79f13d1b9e7a26878f3326518c14698ccedb5ab9b30d2ca137b86e772ef2c355096231b3348fd18d2554182a765c151fd0106f465c2e76b51c790d9c6da9fa3a9fea7985bff3c16d24cd5a145626c7d031c6a6fe1925da523617b4a7db481c096833c294de34574bf303fd6ca48e5114d3fe008f4f5e84316f920e415723fa80f326a27b1a9582fd4c0a099a15006114641a2f31e8634e41ecdfeec7abdbcea371022ce5cc1208ea9ff55f35e9bd837567c041368933ab9d88181ed31b9c548a3e4aca1acc4cb24c9727cc9017686aa43f618e22ea8935eee0204b772b901677113df1d7282daf90a6259d4807daacfec4ac382ef6def4e64d8be198f9ed1e888bd83f009189c1fc4ef424e73e702d5d5acf12e041be160bd29625c6c394489b6f4da7651500da191f2588d934feeef4bfa66e6ba2376fe1c2ec9f39ae8624ce80909a23910535d21543d77da50c2047d1764ef83900822738550c084cc28257a16f531f60951c46aa26dc8eb18849ee6b1047005288b3b18f729fcc233c3ac706eaab2e16c132653e710e1b8080e0bea1f4539ef45ef45f8dbe638be3ed5c1a359d533813ac056554729a1ce60561d8df470914e1652affafbc571789d75f3666789dd0a7b4888801ea7b3bc9eb1a43a626fb90efe36acd4667e925cc848943b8903f84e8d3526cd76d43e2343b319004ce984956a61814aad56b183913124c8e07fdf152849a9b19af653946dd1adbd0ca72e673b5b4100760a46aebec688589b71a392eb3cb08750ac4cd8970089cf17638afcaf0587a6efbce47f8a28789c779f20e2f99f27c2d0ee99f63f4fa5d241823bc8dfb8225cf6bb474e0803c9a380e91ec736088115b5fa7991db54e5032fc29062c8d3653ff199d0a8074de52509dc47c902416d806a79c1629385b0ad87531085d8c764fdf4b0d7cc57aba80a91b7a1391b5cc182ce8d3b9b1aabd8ee0db9c6d5eeeff3c7c09197565030ec90ca1dce74938b11d03ac28fba6dbeb32356708ec2e2be6f71a102bd35ec46c0e6a48a1152672e0b7d75001fe262d98ed5ee7c227e836153e4bc635eebd03dea29230b3645b5f91b70a090a55d5bc897a0ccf3e8625fd2222b3388280d69b6759259be43f3225014c38d4f0bcd25691a7e718da04c364a2ab28c181f05ea0e719dae24e61dd7981ffa00c43d622a4a14b35ffa8e8ed237f3f070ea7e38d827d85356318b5464ef8d119f452f3e50ede96694aefd2ab896b5ba881266a2d6551be9dd9613f0607a6567987f3d2086f699ef9be0867b4ff06d9c5a5e14b9c4d06dc9a7298c20e925f8b92b7c9b289e5c28cf6f814b41413dd046e39f0207c33015ffd33fbfd027a35a9625897cbfeaff17ada53a22f70fdea408fa3784c38e0a3f11de0961ead60912468292bac533f820d02bde696741ad16e763bdbe5eb8348ce8bb120d6d3ed9b6ab1e5e31cf31fdcbeea9c4595ca855e40746121942c35f3f0f3a99fe53bad86240d2f734b6cf1df0e7f212cd4229df348b321fabc405b994938269dc3d815d07a196ca3b62b9030ece8722ca408f58e2bd40c247ce934f12f5333f1fa6d87bf99ef6d48edc1a75e4d50a8498b6afa5f0032be5e3ee04d93684e84841d857691e0656c4fb0da36024335d6882c305e82155148cfeb7590f83017eccd3700a67b33e7af45453f97aa2bf5be2f25be90b72ff6472baa33c580fa9b87e487149c25386415d20dd6cb84345c273a278a39ce34c300631840dc0242179ed0325486d6f1e82cb9a18494eb7b674ee8f3aa24b0717076a5f1260ebf2c297dd1784b4032fd574af48d8fa91128a9271f7ec4d2291873ca5b481f01e9e860c7838ecd7ba362ed9c5dc76f18682857fb96ce1121a5a0343802d20fd8ff4956213752460354cb98b51f21ead949f831fb4e85f9ed541c404e5a61ba0a32c31d9bd787039aad9935de61fa3973aefdff92ba16f890aa72d172ed1f88280184e835e77cb16c4697d4227a319571f47b80288947822822baa1e75cad50c24fdc26833765a6b15d2221951ef29016db2e2fc0d5ba5b7fe683418e92d2c7bd1ce08f0d747574b662d023493a10b8125ce9458a5a90107ff7cdba8a8000732789210dbe66402f318f47bcb6d36b87a97afb01200685325a5f9c96c97755ef8b7086edff10f6850aaf42283a292fd6e89ab6243d32e58b2945a136486a71c191090f5ca42421f9f97c8c710b9559f8117bc33c02f6f38cb8bc330566e895a8120a8509ed19442fa2460eca60e4561192e602063db7ab6c1772cb06749a0ba432a8d4aa51d1227295570501236a4d8096c91d5f6230a10d62da21fb57728e2f2c63a1a79e78f5c37eb5b7a244bd5a10673680a51509091aa4b4fab9cfdfbb8d2eba2ca11deb615d53a23b26459d883e81ae374f5228405b35dd322f4611082681452f6120ba43411a18d6f08a7c537a260b6d88d999df70d3b6948e82881a5d4c7aaa6ec9a8e007a2605c39093a5a36756bbff896ea969eb146e1908ba248fc80"}, {@device_b, @broadcast, 0x57, "062bad8d464bdc0eb7ed99b666451d25cf873c39a68a54e45df556e3353e09c44681b062a9b60955403c45c5653696ccaf5ac72e408cd423d535fa5493620c354a7962a9a45fbe086d2a948d71d3f2e1c468df14b68470"}, {@device_a, @device_b, 0xd1, "be0f80d8b503ec9f15c915fb022ab5b55b51fbc9cf96f59cadcad05d6c8a4f697e29e4e3f1fe1db0c5c8be581fe2a79755bb9d3d6d8916691feaefa516cd320fb18da1dd674f0d6f704dafd9f0c995d627eb27f0a2e54fb26fe28981a657927044cbd326da2cda08ce131091404a7bd57e45c11b37b3d3eb8dea48dea9057c7baaf4a270554a4bb66b8bb709b41d8b52c7fad3f7112a08295d024495b78a1d865291422ffb9147fcd46876ae7d325ed7ae0852bd89b2851231cfd5deafd6740a7a4573b9929a85ea0d5defc4659d6f5140"}, {@device_b, @device_b, 0x9a, "d5c5787e1c33360ac968c667d3239cd7fce0ea0feaf75f40ab7eb0f655b3689167a5d9fe406dd614f7f99b1a7b71e4e866ce18223cf1ae9f28f4ff88e34cb2bd412d32404c11806cc3bbbec5b7f620eac89072281ed665b6649bcb2cba2cdad77db7d9e3ca2ea6eec8f4b11d5ea8b6819c2c5d77e94ad4fb28601912b7cb5988d3677f3a76c149e594fc3dabd13df912157aa6b87106f4ce26ed"}, {@device_a, @device_b, 0x2e, "04c7e78fb52aca6b831f6f77df7725e33911fa3189a32f2e0539b96db3fc5009ac7a70ef00b0255a96c4414c467f"}, {@broadcast, @device_b, 0x6e, "7daa658347e11ef50bccbea1e36b6f57c6252f03ae88b7a4b3a40710290c01cbcd9ee8225a51322afc7f77031f0c99026d3c7f9ce078dfc2eae9fbaef26779a17726d5b7266d91413fd4855f690e3376ad27cb9f7599a83c2b5742de240b6ebd15321f4a1c7c8d0291af015f9997"}]}}]}, 0x130c}}, 0x4004000) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000015c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x7c, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x7c}}, 0x40000) (async) io_setup(0x3db, &(0x7f0000001700)=0x0) r5 = eventfd(0x2) io_cancel(r4, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x5, 0x61, r0, &(0x7f0000001740)="4ddef8aec79165c88f65a07b72828f414ef3cc0714da60949c", 0x19, 0x4a, 0x0, 0x9afea728bf25b68b, r5}, &(0x7f00000017c0)) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x4010, r0, 0x5b74e000) (async, rerun: 64) copy_file_range(r5, &(0x7f0000001800)=0xfa3, r5, 0x0, 0xffff, 0x0) (async, rerun: 64) r6 = socket$igmp(0x2, 0x3, 0x2) shutdown(r6, 0x1) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001840), 0x400280, 0x0) ioctl$TIOCGISO7816(r7, 0x80285442, &(0x7f0000001880)) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r8 = syz_usb_connect$uac1(0x1, 0x100, &(0x7f00000019c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x5, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xf}, [@feature_unit={0xd, 0x24, 0x6, 0x2, 0x4, 0x3, [0x7, 0x1, 0x7], 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb, 0x2, 0xe7, 0x8, "8b", "a91e"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x33, 0x4, "72b17d"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x4, 0x3, "d7935a47316852"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x20, 0xad, "f2", 'f}'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x55, 0x4, 0x6, 0x2, "e1a4", "c1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x7, 0x9, {0x7, 0x25, 0x1, 0x0, 0x2, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xe, 0x1, 0x8, 0x4, "d897e8783d10f3da"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x5}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf7, 0x2, 0x73, 0x8, "5be627ff3e51"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x4, 0xe1, 0x9, "c592d67ff2baf7"}, @as_header={0x7, 0x24, 0x1, 0xa, 0x5, 0x1000}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x8bd, 0x0, "201b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x2, 0x5, {0x7, 0x25, 0x1, 0x2, 0x4, 0x200}}}}}}}]}}, &(0x7f0000001d80)={0xa, &(0x7f0000001ac0)={0xa, 0x6, 0x250, 0x3, 0x9, 0x8, 0x40, 0x6}, 0x19, &(0x7f0000001b00)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "da31247cdf7c4075e04c8b5ab19b53dd"}]}, 0x3, [{0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x3409}}, {0xdb, &(0x7f0000001b80)=@string={0xdb, 0x3, "5b292e4ad8ae8bacf148a65d7da5cf8be74b050a63e7544653d0896fd41fa41c606c3eec7262716f1e7c53765fdd5db09e6c632b443d1468ff85248a7da2e0847ae8ef35abf05ee15ee7b176a50792aa9070a197fc146e8e68ef9e905c84ac81092a2fdbc8aba2f2fc39df93fc950abdad9654749fe5819ecce0d04d980f952063b8ecd0c51b6e20781ff544a41b61e0b8f5edbeb77aab5dbc3925847b907fe7d26e94fe725e765f51df9350bb7a381964c7253344aaf03f07f65512c66dcbafe900544522f5c930b82e1deacb4a7a23108525ada757258eff"}}, {0xe1, &(0x7f0000001c80)=@string={0xe1, 0x3, "0da4c0316091a1bebd187075e5837210ea9b60d390d8d01e408a05e704cd49c513945f773f801b7bd00e580799b6d08951642217efbc95c8be4700ea6cc518e0abce4bf2fef80cc682adb90596a176cdd1294aa342107e116024e634c5ad1e73cd0c219ef550a0a1fb6fbafcfd3e43e7dcd6fdbecffb0731b2bca7fd5bc09391d2a4cbbd430686aee776e1be4d0b87fbbc21b61dff20cd5e52833adb7476ef86d751c58cbcdf048996d4da91feee76c24985028a651ba92fe912b52f688732d1b52c25656368618ece560643e43964d6064b29949e21bdee35bc3965979602"}}]}) syz_usb_control_io$uac1(r8, &(0x7f0000001f40)={0x14, &(0x7f0000001dc0)={0x0, 0x9, 0xfe, {0xfe, 0x3f, "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"}}, &(0x7f0000001f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000002240)={0x44, &(0x7f0000001f80)={0x20, 0x9, 0xc9, "598cfb9d4bf19b90dfa72ad271f2c33356ae2204d3cd86d6cc4e9d2db66f7e16f129a77410995e2d6273e64e9b56e38bf725221610db8c654df4099c5f3d65242650586d344009a51e49fbbe365fb3d21ffea6f7d704482713241b665d11f84ed5180240f1784e305c060228b391d7fd6c0b748bdc885b663be2dbaa3b6521e282e192fdbe491ab5bd98ea07ab518a0fd014ec1bbd335f53bd8bb1d0eb7cc433dbfdf354b6f567644d5ea3d90626e5828f891fb158fbd19ef97148f09f8ccee682cc795635c8cb5d73"}, &(0x7f0000002080)={0x0, 0xa, 0x1, 0x22}, &(0x7f00000020c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002100)={0x20, 0x81, 0x3, "0a39a5"}, &(0x7f0000002140)={0x20, 0x82, 0x1, ';'}, &(0x7f0000002180)={0x20, 0x83, 0x2, "e934"}, &(0x7f00000021c0)={0x20, 0x84, 0x1, '\t'}, &(0x7f0000002200)={0x20, 0x85, 0x3, "ab6937"}}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) quotactl_fd$Q_SETINFO(r9, 0xffffffff80000602, 0xee01, &(0x7f00000023c0)={0x3, 0xffffffff, 0x1, 0x1}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000002440)={0x6, &(0x7f0000002400)=[{0xf800, 0x2, 0x26}, {0x8, 0x3, 0xd, 0x3}, {0xc4, 0x4, 0x6, 0x1000}, {0x8000, 0x7, 0x5d, 0x2}, {0x2, 0x9, 0x7, 0x7}, {0x5, 0x5, 0x7, 0x401}]}, 0x10) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002480)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f00000024c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) fsync(r5) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ppoll(&(0x7f0000002540)=[{r11, 0x1}, {r7, 0x2008}], 0x2, &(0x7f0000002580)={0x0, 0x3938700}, &(0x7f00000025c0)={[0x8000]}, 0x8) (async, rerun: 32) syz_usb_control_io$uac1(r8, &(0x7f0000002700)={0x14, &(0x7f0000002600)={0x0, 0x8, 0xaa, {0xaa, 0x1, "b8b245ef25f14c2ae73577949c65c007f2cdfb2f07f72b6e902e8fc5ee753a014ccffc73768a3a792ff97d45ef5e041b3b38bb13a1990c6a9e9545760ebeeec89fa7537fc789e797a0efe5ff2fb057d6f9d1dafcec4a65b05509664f4881e3819c98ea29ce6fa10e04eac5fd44a9fcca4d3548211edb2a1d86b37caff457b062f1176aad15e3205592e0fba95090dd3dfa155ff3f6e57f7763db9d19c09189a623d85ca60e3699de"}}, &(0x7f00000026c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x47d}}}, &(0x7f0000002a40)={0x44, &(0x7f0000002740)={0x40, 0x31, 0xfd, "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"}, &(0x7f0000002880)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000028c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002900)={0x20, 0x81, 0x1, "cb"}, &(0x7f0000002940)={0x20, 0x82, 0x1, '^'}, &(0x7f0000002980)={0x20, 0x83, 0x3, "d62343"}, &(0x7f00000029c0)={0x20, 0x84, 0x4, "0f34da90"}, &(0x7f0000002a00)={0x20, 0x85, 0x3, "5e00f8"}}) (async, rerun: 32) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000002ac0), &(0x7f0000002b00)=0x4) 20.504550414s ago: executing program 6 (id=2375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x1a, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x30, r2, 0x701, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8}, @val={0xc, 0x99, {0x9, 0x58}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40840) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="341e7d49830ecf5b6523685cb6898bf54074cd4a04be480303d763cbd8af2ac2ab48cd154b5a3e3221ef0eddb2a5", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25010000000000000001410000001800170000001d000000037564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x1a, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x30, r2, 0x701, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8}, @val={0xc, 0x99, {0x9, 0x58}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40840) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="341e7d49830ecf5b6523685cb6898bf54074cd4a04be480303d763cbd8af2ac2ab48cd154b5a3e3221ef0eddb2a5", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25010000000000000001410000001800170000001d000000037564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) (async) 20.490820804s ago: executing program 6 (id=2376): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000300)=@generic={0x8, "a414957e2b6df2e298b2dc1a8e71e5ed2795d3e27c1c11905264d6b2ae247e2465d6841993c34e9d241c9f7dd504836418ceeb30de020c092b8cb79948bc3e6842f708f0afe0109f9feff1e972cf59ef24084be74ef04d6006f60e0473a648b097818239adbde888a90612bb1557947fb721a5fda5c9e06539f256ec6a00"}, 0x80, 0x0}}], 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100", @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0xff, 0x101, 0x754, 0x3, 0x34f, 0x0}) sched_setscheduler(r4, 0x6, &(0x7f0000000080)=0xffff) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x2) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x101, 0x200, 0x4, 0x5}, 'syz1\x00', 0x1c}) ioctl$UI_DEV_CREATE(r5, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 20.416072905s ago: executing program 6 (id=2377): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6ea73a6cffdf6f6408e86d6170096b"]) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) 20.414913176s ago: executing program 6 (id=2378): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@uuid_null, 0x3a}], [], 0x2f}) symlink(0x0, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x2) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x35c0c121, 0x401, 0x401, 0x1003, 0xfffffffc, 0x0, 0x0, 0x0, 0xa4801f7e}}, 0x50) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r3, {0x7, 0x2b, 0x4, 0x0, 0x1, 0x2, 0x6, 0x7, 0x0, 0x0, 0x8, 0x2}}, 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="d8e461e902c16b3ed885a79caaa3fb03e2668556f3cecae4c22e102804cfec87bf6b1316f0d0fdf2bd2356c41382d0ac1725362d0f14edc11641bd633c8b8e4b97194f4864de22b1c42d9e298011b8f56492aa683fa25e0702e51876471c57e5f158fa0537761c2759fc2322033b5b8ba404492b85713c1d73902fa3d2c02db7caa275a292141c13202200da76a3b8db434960f9347fd5390a"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid}, {@dfltuid}, {@dfltgid}]}}) truncate(&(0x7f00000000c0)='./file0\x00', 0x7fffffffffffffff) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(0x0, 0x0, 0x0, 0x8b101a, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r8, &(0x7f0000000280)={0x24, 0x3, 0x0, {0x2, 0x3, 0x0, '$!]'}}, 0x24) close_range(r7, 0xffffffffffffffff, 0x0) 19.68441174s ago: executing program 6 (id=2390): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x1) read$msr(r0, &(0x7f0000001580)=""/4096, 0x1000) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) chdir(&(0x7f0000000040)='./file0\x00') ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)='!(+.\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x1f8c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)=@can, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000280)=""/141, 0x8d}, 0x1) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_mreq(r5, 0x29, 0x15, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r6, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "5952f224498696ad443c0e59c0947ab4"}, @NL80211_ATTR_PMK={0x14, 0xfe, "85cd92aeb6e30970ab81aaafeb9727c0"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b5fbaf12a819d57f761e99528b0a87a5"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c73eb97adfc6939465853bfe943701f7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e2013a66c02a299501aa06f27a30e988"}, @NL80211_ATTR_PMK={0x14, 0xfe, "315321676b83abffeccf27fdbe0bdad0"}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044040}, 0x1) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x85b83000) 19.540498362s ago: executing program 6 (id=2396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@broadcast, @remote, @val={@void}, {@ipv4={0x8100, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x68, 0x0, 0x9, 0x33, 0x0, @private=0xa010101, @multicast1}}}}}}, 0x2a) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1b) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x80000001, 0xf9, 0x4, 0x1, 0x7c}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xfffffdb2, 0x0, &(0x7f0000001440), 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}}, 0x0) open(&(0x7f0000001440)='./file1\x00', 0x14d77e, 0xc2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 19.476393844s ago: executing program 36 (id=2396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@broadcast, @remote, @val={@void}, {@ipv4={0x8100, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x68, 0x0, 0x9, 0x33, 0x0, @private=0xa010101, @multicast1}}}}}}, 0x2a) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1b) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x80000001, 0xf9, 0x4, 0x1, 0x7c}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xfffffdb2, 0x0, &(0x7f0000001440), 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}}, 0x0) open(&(0x7f0000001440)='./file1\x00', 0x14d77e, 0xc2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 8.499874576s ago: executing program 8 (id=2543): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="00497ac3c19cd0467645752a368321d12b537786d5a5e99a59", 0x19}], 0x1}, 0x4000001) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f00000002c0)=""/95, 0x5f}, 0xfffffffc}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffd54, &(0x7f0000001d40)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYRESDEC=r0], 0x2c}], 0x1}, 0x2000004) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x3e0, 0xe8, 0x1e8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffffff, 0xb, 0x6, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x3, 0x2, 0xf, 0x9, 0x400, 0xfff7, 'veth1_macvtap\x00', 'dummy0\x00', {}, {}, 0x0, 0x210}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f0ec46337652ed36bc436712deac707b661844192eb193bba2ec17adb615"}}, {{@arp={@rand_addr=0x64010101, @remote, 0xffffff00, 0x0, 0xc, 0x0, {@mac=@remote, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x22a, 0x7fff, 0x7, 0x7ff, 0xbd8d, 0x5, 'nr0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@multicast, @remote, @dev={0xac, 0x14, 0x14, 0x34}, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') pread64(r4, &(0x7f0000000480)=""/14, 0xd, 0x8000) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000076001f"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') readv(r6, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0x501c4814, &(0x7f0000000100)={0x200001, 0x0, 0x200, 0xfffffffc, 0x2}) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xcf, 0x0, 0x0) read$FUSE(r1, &(0x7f0000007100)={0x2020}, 0x941f) 6.73440858s ago: executing program 8 (id=2570): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000002c001980"], 0xa4}}, 0x0) r0 = socket(0x10, 0x3, 0x4000000) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYRES16=0x0]) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000040)=0x3, 0x4) 6.691409361s ago: executing program 8 (id=2573): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xce, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x138a, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x0, 0x3f}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 6.640065792s ago: executing program 8 (id=2574): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a", 0x59, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000200)=0x80000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder1\x00', 0x800, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x80000000) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) io_submit(0x0, 0x5, &(0x7f0000000880)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f00000003c0)="ff4d64079e6c69498a3f9cb2b7805b06ca8bc84a7667cb30746481bc44bcc64ace4550494965ab93b105127fff2b1f70aaac8c62b392183d23114405c7cafae9f23a50edcf398052efe6322c09ffbb9c4eca5d317ad7adced6fbe9effe1fae232e4464f57cbc398bff2fcf1459553f754b5188dd429dd97c5880df1940929770e6d8ef12", 0x84, 0x17b, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x1, r4, &(0x7f00000004c0)="f1a71f0646f992a445145487c77ec175272430a23f960636f4bf6a6e832679316823191a9754b49c3d9f472ee9c87a31472345615d69cf75ba0fd90a583b479dee5b45814619ac0631f1cc953c71e5341c108b6416c171ee9188c34de9c6df2b8122a69b1038fa5cb0c198d76b98da671c552ac8068c87f59bd580f7bdce8bb3f5620835bd04", 0x86, 0x9b0, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x3e8, r0, &(0x7f00000005c0)="5c22fb071d8914b2b7d090b00a920726edab05d7dc43d49a", 0x18, 0x1dee, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x5f1, r6, &(0x7f0000000640)="87b9db33aeeae00cd340bd8961fcaeb3cfdb1e6398ad4c8d277b61c01e32ac2c07883e21998bc2c11e7fa1c6006b42f5a4e7ea87ecb09e3fa9212f9800145921b84f0c85aaf2639f92034bd5c925d25d74359e3b0f7b4445c518a351e59cbe8da325c22b645c63276c95895230d5f5f66a1f93f000c395b637b6c07a0455ce31e0d25e28fbdd007ed1c7ccf16def366b89affbccc7923a905df5599fbffb7e4edffdce529e8a6402d6e76a3883547cd763256d4792bb7b3c986f7b7c0d8d78bd250fbba58ea5c293ea6e7bd77c967f026056c18248319919", 0xd8, 0x6, 0x0, 0x2, r4}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0x0, r5, &(0x7f0000000780)="38a9a171f61519e65f792227aaddff0d525e66aa09a9d4cf0bf3eee1b7a661a42f8b14aa62c87c61e67dbad70c6fbb896fa561ba79196bdc02b01712acd85b54e957707493db2dc57d58fbbb4d4993438f366f1e5e62be124bd97b491034b76cdd81cae8033a888ee144e0f1c6078c6f1394cce132aa56f6cbb1aaded9f754b66b9143c392405a9cec2b762ae9877b486348f678429232b41a0e66142056b8b19cd1d2402e25fc0905180432a91736c6ebce59", 0xb3, 0x2, 0x0, 0x0, r4}]) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r9, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x1010e3, 0x23) r10 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl(r10, 0x8000451c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) 4.949606584s ago: executing program 0 (id=2589): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="1015053da9dddd249ad99df72c7464f9", 0x10) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000380)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r5, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) close_range(r0, 0xffffffffffffffff, 0x0) 4.355991646s ago: executing program 0 (id=2590): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) (async) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1d, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) close(r2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}, 0x800) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100b, 0x1}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x100}, @flat, @flat=@weak_handle={0x77682a85, 0x230a, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 4.355366256s ago: executing program 0 (id=2591): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/157) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.848191606s ago: executing program 0 (id=2592): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001540)={'syztnl1\x00', &(0x7f0000001500)={'erspan0\x00', 0x0, 0x700, 0x80, 0x8, 0x1, {{0x8, 0x4, 0x2, 0x5, 0x20, 0x68, 0x0, 0x2b, 0x4, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0xb, 0xa5, [@broadcast, @multicast1]}]}}}}}) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000040)="8ae6fe3ade20cd9f4a7f78209c1c6147ec3cc21b81446f4de9be924a818c5abeee8cd5624cc4d48886a5d5679423186e906a0ae9208ea713c0fa6e2de5ed5911609cff0f280f9860c2c57db337c105519a0cedb3fd5ea7538e07e60dec76d73df14130a7baf8450c84a689768dff8a17c79b76e1a25053ca945f01c72d9291ad2975", 0x82}, {&(0x7f0000000100)="db6d76d239f3897672c80c3923bb21cf56e623c545706fb3567856109bc317151fdd1e5fd3d6bc2b103cb96c608b0926fba2d9bb6348c033bdd8da0369e127b7f99e0c9c6ecbf1f69244c528008e7c9ba7ebe2b281522bf47bfb4525ff3de495ede9feadd8acacf9fdf8339141618ef8b592471ab22a201f", 0x78}, {&(0x7f0000000180)="91b227330a3ecb363cd6e763448a4371bb8013ee1ab8565244402c8020f552ccabd5a4977883738905b5c10190dcc8cc081afd0eaf462d8aba218cb3f36f227ef0bbaf2167b410f7de607388759f39fa4f3aac54794a0e0382d25c9273e6d2933ba357283ba94d6d5ed5636199769fef747d7407cc41d275c9c24d405961654d1589110f1b7e68b1cd1941878666991286d2263c0468611fbd1fdac17dda1cbc7dbd505635950b6c604d4458e89cbb31f24ed54db4023d013c5c261bbee716be298ead8e9d45cb129c6283663f2ddd66c04afa97f7c9", 0xd6}, {&(0x7f0000000280)="584fc3e2a043c63fa7cf372f3ebaba5435597ee0a37805ee2ce0be207da0c514b13020f81e095bb04d05a73af4ea6011f9e5e9d111aa5b141d60e8820157c8852368d130de35e8cdfb743c6ea68f92f814d00e18f0dd3e166eb97e7e6acd87706520e1d34faac4d10f4815fe0055862e12d1e082114dcc81a68efe06ab0062ae5f82081bc622c3e04d748a7447ea5982faf3f9aed42ebfcffebed96cabf6362cf11fe5eef3358e7b49e0c1cba1ca581b9e29e26471cff6b82073319ec39229ab3b462774e077faae86e24e4b9cc923e53bd21282822bb7c86b714db4dce99974475b30ce", 0xe4}, {&(0x7f0000000380)="7223f59045fa0fc1a7c6d2b31a48ffde599f6f50dff01060719e29b0f9d1da06db1cd67273643f4aa3d8e2c536aaac7deafac89f8d15628000c4a50dd458fa89a1b243f5ddfd9bff98eb6d5b3134d875bb3c562ba3ddcea6c359b918a6a9ecadc4f54417e1210ef33750145e6375a45de95b7710e35a8941134b40c4891435033e53534e6c67687b601c1219decc823c06329d41cb90476f395932f02c1ae7df7ea9da993dd2e13c3995c3c7925e37dd43f33c8f42ca992e9aae7b14ee01a1d9947496375ce034fcecedf2afc1b7bf3da879589007f82c857aa8511d5286f0bfb16842dae6aebb70891fc4bcc6addac7345ada5b995a9f4bf642cd46f85415665a2093acf7014a486fd7a9f4a76daf4e2be72ac2d11870d884f5062c15809615686aaf8bce48a2de79b325b01692e361d90158dbdbd484fd697e995f9f5367293a3a50fe349982c3cd451d8eaa908aecd776fff8f81bffd85cbe062c4348f2010469caf4716fef6b0847c0f845830fadf7bf8c3ce1598bf34c8614f6ffa73be305b892a64f9d15dd776cc92068021a24301e1173cb0c2c7d2d913d0a38e82733890bdad836b6f158681e420302d776fbfddf915c9a949b665fa166f4a5c84704d8b830aa36d15c92436abc9405cc3fb8484df214a12a68a4610ccec6ff6b7b914df18f56905c7f5b974b88d42fa05371663f664985e61169d00c28df82e970bb15a8e54ea283b32246ea3b7c1a2713e56519f90058ed3877398ebd97e8ddfb2b970ba8f6639c718b77aed86a9de4764f36db9c4d4e60714e19c0db9a908e8c92e7bb50a477a4f86a383c901be2cb0a2f95ac8805db1e32f70b2975eb4f843efc10cc0645f208dda79f2f72207542264ba174b9a9e582cf610a31f7b9c9208aebc9ce3100a020a42fcb2e4c4ba1ab2425decd5820bcb21d15a21d799e79628bbbd67314ef71670cc5689aed6f3e105ee26fe0377db5055db5b22136e8adee843bf142f7727da988d3b773ffca694926306050c91305bf136fdd842f46a93bd07d0b9b9b5e7c09a5c8c17426ad9282a782c4eb325be7d7ccb8b4ca3bb5ee177fd21a40d8a41b67224aff93d3ba3eb9c6b4af513827193cb24ed0c2ff2a7dbc01a859fb5055e08ce924642c3e7e4fa71aa4a5f09bb0ef9021ec33c8cb2af18ea427b778b683fc0ad1fa6dde7ca1476b55c0edc117eafe17f0efac05828970f832654f28587f072566a1cfb41d1d59ffd269e43a8fd85e62e0629da55b87a00c578eb650ff87f1876048152fe10e4cad8163ec22a90dd4241d0ead648eec9f09d55f602ecb8db93f75eb5abfab232f034f6232d66c0c0b704069836ec730b73112624b39d4a8eca57065fc731a7c6cbd9c7cfa7e7ed8cc099cd559cc6aff72a52d2be9f3f618b11a9d8adca6a59748c35f009c1d0e666ba986d25aff7e5e95b9b5318d9ec36812d82f34d7f7ce3d8c65127cb2ab9d7339b7cd81eb6687788285be9f6ddffc6ef975cef5b98d5604f7bd7449f54b10f27f48314b3132f23eeacb39689534472c0d6febb937bc9dfaca45000b671ec13b690d73a10695bdff8bb8266a69d20fba6db23936d9e8819db183dd977f4928b06c3f9d9f308c4c05fa542b6a758c31f274cfed58107610f96c165b8d69539e4ee863d67a09f0c9729cd83f681f3dc721b1cd8e554b3d7f71b8a9386a0be834a7abec368114d0abfba86d005f2f381b5e14e918df98f58f3d72de7db4d604e3b92bbc077a97f32ce49cf6a8654b2c7e1ef870386704a6170caa96cb0bf84113b3cacf3040a756441ffad37f3574b00d80ce786eee6d476fbd6ff39c2411c41c796d6f8de2560de07b2c11a004bea91e1b1cc28a85f5eb30f1c2a9b61ef036f2012e0ce5ab7ae8d3ff3fc73b80e591aa8cfb2511f3bf57e085c0924dfd53c78f2e03d928a08373718c114a171a4c40c2dda28b577234d950fcb8516dd5bca1fa28f620010af9d912ff59b22b3692d09e093d566401cb6f0a9bad15f9d05b103d218395bb2120dca00187103e12051fd69a58b95d4458859111ddf2992c293627c639a1bc3b5bcdc7f069ea0f889364673bcd128d053632ee04fa7ad6e49abe1079c0f54bb684f37d2f49ca6c3305d68cd5418b051caa790278911d599588f4395343167fe5cc9293b71580f62b3ac4cfcdf240ba8a00537a73224936b10be0bc19f10ee1f25d357727ee8155e75de56d091fded4895571894c38c88d9a823d81ea24b997e4515feaa396efd4a011e64ea31bcb97c2521f7f1cc39ec8d79ef4f7153682f86bf23eb5753e75c3da9c1730a106330eff9751b1fef124c6c9c6e9b3fc94700d43d8bc52d38277f1dab4b810f39ec515ba974fdd09bccefc2182a2c21e526ea29534beadf566e67e8e04a23d4a906e4ff3ddbed76b46871ba631c75b3fa7cc5a64d916841dc9035d03ff39f0957872d89623dd6b787346818ed2bb15d47a6ab1bd918238e95925e54b71ccb18549ae4e5c2c95ece946a457d687a324743818060e0c74eb9e51d18578d24f16ea20d26bca234b034b604eeb01146e6c7ab929c1cf5bab4e22e123a966ea273ed10209ed79e8ed72ea056b352bec419f98c526596b7d82552642e12ed8c6005b7a5b5c209b8b696b953a61facde2259a19724b0c3f19973e79f042d43c87ab74c68da57165b262fb2469da99d59eb8919d119416650c77cdde0f91298573e505d0be1ff6032e09ad147c3896e210a7ba3e0084718fa26b4f1cd1f74ee1b22d2fbe44636262ec14436d87b3e3d15594d14023b80ed2674f4ae9b55ea268e6f4a4fecbfe3f8f3d2a133d6f37d919a4f962e7b57a7dd16f36dcc52b9f7d135f71c5522bdf6b7d2c9c1ee6ff52f5405caeed341b05cf6e38cd9674f985b75df65d3d7d2e965c5f939e85c890ebfeaeaef9154f8cdd0dc797ea3c6d3570d77e667ba9398c472ef8014ab0499db7084325faa1ffc74ec0726d651cbbb4729f3a017816e124ca4203e57ffbe7439c76b7cdff539f90da42ec2e1e208116308d3592b1f38c5a2dd60c92930b61c326f4df1d44c565d46f98cf9b2a89e9a6bec2f7ba0cc2b07ce61d6bd696c306a79d2babc2f4cf2a895603476219ad440451d9a8c85f4bd50a9747c3af228712bb9aceecd5aa4266413ccf54a0a28982e24b8e80e88636d77432b7a624194d3b0e7c2869529af0396fd941184b90fe95b560118ed2b5ed00accb3414214d40989327c100b6218f17c1cd74a03cd99185cc7de0fae39af87da26af9ac2d1038ddfb152be825529de54a89fa367518bb4fccedeefde89f8f8ec2647331a40363b0b3b6ffa93a7b5024a33e05c07b3a33096e8203790fd680eaae15aaec075a4f63600b4826de26ed4ffa2ad84f78d01e4db8c8144806e4ea7472fca46538316981cf0132a1a3fe2cacb51cfc32b8e1b5ec846c8dde065c16c76fc2e980bc0d148e55dceaae385aa587d7d5529bed2bbc06e7d676f1ac1e6e2b86aaf28eb1ceaee7a6fe1ebbcd6379be2116d7605aed9c77558fd755984a70d00bb2a282b79bc6f35d7b202d397a24486c8a97c41df2f75dcc37029b4e576aaf5865dc7022f9a47ace4b4222358cf3ee851e5bd78071691190e108732de6e0d47a232f61b47f471939b04e368fb4db1c35b13c60fc77f9ee3b9e7e11dcc95069e48918386088562a86a60793f74a8644083f36e36781c88e4f31ca5e1affce7c040fbc325c9920325c64c36028fc0a9bf07d84e3ba9ecf49e817693f841ba41be556896cedfe99ae38b677c3421c34765180c33c50749e9ff2a680981d4d37b9f4e414fe7c682a53a48db0b2d9a85bdd162f3557e6d9c9c800f516ec264f3cc9521ad9371ae91300a25d8d43f100beff05c99720add24fc4173333b06cc0efd4ecf72269f3654e5f9e4a6ff49a5daf4540a3813dac40856db21f72db39fb2aa02e8af66e5be1f89efaf8e3c58f1e81f4055cad3f89cf3da8cba7f30b828162fd86cce10af9078425ab5fcede1d704c21104a78d0033e022964c73037bcc68b4f4eec57617949b3076b6307d0accd03c04326a264c85e1e0b8b9834d948e44b33103d545730a71a5bb511328180aa178f4978aff80cee1fecb03d5fa6fa207aad05e92ab2f3f37bcb5f14008e912201eea4df8cff85a84d659c26b45f63d2aaf6dac5b1683fb3255255f14fba146e72daf8f9a48f38af7299d5a706bf8859930af3c11c3cb2363c29d4491bf413139e36f32b6951073836cbc9b7a69427db7430fbaa2ed05216531ec64ad5d7ae996da5f0e829db4ba952d3cb2b287650b0251e0729243e4bc1cedb499dceab36de8302758025e49a18e7e07571e98fe4fe49089ff7ea5f0d38b6e4a7ea62c16efc4083135d2c3cf8957fd9b483b567288e4158d4b2cc2f6bca315fa584f569b1e10ef8dae6b1755370a7803f6dfe5628167c5b251f96c45e6dd9ec56ceba6a663bd3d0526b15d4c99ab9aa3dbe845f67607e91b379da63785307599dff74ef5ad53daf5f42492629ede1b669dd26dc58e28be578bd18ed88dbd3d40ba4b9acaaea17b33611a818ea0842758420506abae2ea76eab42b012958e2cffe99082fbc93f4838778a5d6db817f25413e89a010b82f848d7d985750a0e76e82417ae9b05b51c6b0bfe67f45f1b545c546e3f225e552628905e7a64476fcf6617cdd021eac8e3b4e3c800b17148acfd06089f5fa72a8d51c4fb740cdad188a3e02b4db90a2fd4ed1371897315dfdce17db9acf825ed02c7b36c620a247f51d2424774fc4d7d381fc55f07870f137e37f185f2e65dc813c82d0540c564c0fa27822338d74a90b81b7d35f20949c16a5934ada3debc839599d33760edc4dbf65090c9ca2d0b3828edb2c4adda27b7c6b20ce3731b5e6258c9cb6a4c370dcf44d1971add2a95ba2ce0b1b21e04ca6e65e6c407e0191f51e27f18a69d9c00463f786b7a1d014d17234ef99ad38ef4945930c5d3f02503641fa6cb22a98c9564cde3941cd1ac211a7d464197d1dff9d06849537a1ddbb5b522c8b622826336a440b371401f76097c04a5b2e941f55b60fd29e683b665bb1b681fd6a793241533d5f19eb559d0899a99c0085a1bf790379e141e497dcb605d2f9f800076bae847cc319ecb34868f004c014a51212c9f41bc0484c9ac8ffeaf6dbaa20943b3a3fcc80804dc3960de8def7bda7b5ee243e2c851362b2178cbdb2ab79a2326d594b80be8ff60b48392c4c4db6ca706ea45b2774e8be73c431110b5641a85bb6a7d3da22f01638e812c4deff724d2cf734175c34bb18c7d5e926b7c8eea2e0804d26923d2c27aae43d64c57092065f327379afa1b50a170930926326aec9fc268bf6a2e392804c9ad88de6a03db6d95485ab0cb6bb601d25fd4df71f917c0705f9d27212284ee34bc8d20f883d347b122e75dfc92c877ebbda4b0eaaff872fbe7838850e6ba697f8fa50343efaa24154b4c0787e9da28c6555381d361999dcf15f6172fc22bbcd473807cb83b9df7f4d5c64ca4109fcdfd82ebb528dc5fb4b5688c6ea7c3c264fb8748d2645172b2cab4fc40e9ce00a42be08b5bdfb4674e7829b3cc86b87c83d43b98a0c83e2923a63ca5619979a29c58ea70958c7847dea12b599784b985f0d389c049207ac3221cba7deb75a3a50449dc5930060d0c75a824444bad557eea63c7ff4a76f9c4dc2741c63cb2687066496ad76bd63a409153b7f33dfb9ad52ade7bcb3213f52f8a69ea10862c3b1c9b20280fd198257e17a49317af826286932c781a01c023bb35c53acdf31df52a65074", 0x1000}, {&(0x7f0000001380)="0013a60d3b17926d6580ce57938d4c7ffe43acbf1e07becb926baaa9e72f3b4ba1f1253a0aab009fb2c06abd4e77fd0c815097b6dc8f66e50733c39989a38b3357e5e106b3b7a07002560bf34070ef06adbc5a1ba10d989888e4788daa692b0f23af915d6efe8d23288836a84b57b251be80e8336186151e094f1ea5f3488c840584eafde9e8471933844d722e7eabc96c6d968fb406d05ac19833270d2293df3d28406d5b0b735f38a7fde65285a48bbe0885b57fc071c9cd37090532fa31a02111ceba1bbf9c225b1c934f9dc2f9c4732d1477ba97a6a8c7772016def9c80962e7adae4e727b2a52d9eab2c4c65ffc8cd083d9ae618eafb3", 0xf9}], 0x6, &(0x7f0000001580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x98}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}}, 0x8040010) r4 = accept$unix(0xffffffffffffffff, &(0x7f00000017c0)=@abs, &(0x7f0000001840)=0x6e) recvmsg$unix(r4, &(0x7f0000001d00)={&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001900)=""/242, 0xf2}, {&(0x7f0000001a00)=""/6, 0x6}, {&(0x7f0000001a40)=""/44, 0x2c}, {&(0x7f0000001a80)=""/149, 0x95}, {&(0x7f0000001b40)=""/88, 0x58}, {&(0x7f0000001bc0)=""/79, 0x4f}], 0x6, &(0x7f0000001cc0)=[@cred={{0x1c}}], 0x20}, 0x2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d80), r2) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0xc000) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = dup(r0) read$FUSE(r6, &(0x7f0000001e80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000003ec0)={0x0, 0x80, 0x7}) r7 = openat$cgroup_ro(r6, &(0x7f0000003f00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000003f40)={'veth0\x00'}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003fc0), r2) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000004100)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000040c0)={&(0x7f0000004000)={0xb8, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004180), r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000041c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000004280)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x3c, r9, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8b01d7a5d474"}, @NL80211_ATTR_PMK={0x14, 0xfe, "35492afd85b9d9664fd33a6b3853fd5f"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24042800) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = accept$inet6(r11, &(0x7f00000042c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000004300)=0x1c) connect$inet6(r12, &(0x7f0000004340)={0xa, 0x4e23, 0x33, @private1, 0x2}, 0x1c) statfs(&(0x7f0000004380)='./file0\x00', &(0x7f00000043c0)=""/146) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000004480)={0x6, 'gre0\x00', {0xb}, 0xf6}) getpeername$packet(r7, &(0x7f00000044c0), &(0x7f0000004500)=0x14) r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000004540), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000004580)={@dev={0xfe, 0x80, '\x00', 0x27}, 0x7d, r1}) 3.231372028s ago: executing program 7 (id=2595): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000680)=[@textreal={0x8, &(0x7f0000000540)="baf80c66b86661eb8766efbafc0cedd8c964f3ecbaf80c66b81bd86f8566efbafc0cecf20f7d3df77ef336f30f38f63f66b9b10200000f32ba4000b84799ef67f30f12b990220000", 0x48}], 0x1, 0x1, &(0x7f00000006c0), 0x0) r2 = syz_clone(0x62080400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r3 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x19, &(0x7f00000001c0)="a2", 0x1) ptrace(0x10, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r4, 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000080)) write$input_event(r4, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f0000000400)={[0x8]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, 0xa, 0x7, 0x101, 0x70bd2b, 0x25dfdbfd, {0x5, 0x0, 0x2}, [@typed={0x8, 0x1a, 0x0, 0x0, @u32=0x80000000}, @nested={0x50, 0x1d, 0x0, 0x1, [@generic="fe6353201653b56c7f6ec589a7b96ac65318e968b8fdd7262c6fa9544661cdc9495b3c6c398f9869", @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @nested={0x4, 0x14e}, @typed={0xc, 0x19, 0x0, 0x0, @u64=0xfffffffffffffffc}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r7) recvmmsg(r7, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)=""/4112, 0x1010}, {&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f00000003c0)=""/148, 0x94}], 0x5}, 0x2}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ptrace$setregs(0xd, r2, 0xfffffffffffffffd, &(0x7f0000000480)="74e62131547e914b71b41d387be056487353af0ff15c0cd767ac8756930a1dab2d541b7a21ad3e37691458ebbcbc0207a9d12063cc3c29b6932b130871ac8a5e4c3f0e84131e6710919cd56215ab4e800669e395bc3f581907395097496989") io_setup(0x401, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB='\n\b']) 3.228852888s ago: executing program 7 (id=2596): r0 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/ip_tables_names\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) keyctl$chown(0x4, r6, 0x0, r7) fstat(r2, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000002480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@measure}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '(\x81'}}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x38, 0x37, 0x0, 0x39, 0x34, 0x38, 0x55], 0x2d, [0x0, 0x0, 0x34, 0x66], 0x2d, [0x66, 0x33, 0x36, 0x35], 0x2d, [0x61, 0x63, 0x38, 0x31], 0x2d, [0x63, 0x38, 0x34, 0x30, 0x65, 0x38, 0x32, 0x64]}}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'blksize'}}, {@fsmagic={'fsmagic', 0x3d, 0x1a63}}]}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) clock_settime(0x0, &(0x7f0000000100)={0x0, 0x3938700}) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000001000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000002340)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) sendmsg$netlink(r10, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000022c0)={0x4c, 0x36, 0x200, 0x70bd29, 0x25dfdbfc, "", [@generic="0032f4a0a1d2151ab0713121497371c0b08b4a313ec8803c5a2fa87fbc42c00b381ec77c54e72612ff62b8579909c08413", @typed={0x8, 0xbf, 0x0, 0x0, @u32=0x5}]}, 0x4c}, {&(0x7f0000002600)={0x124, 0x2a, 0x100, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0xe1, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x50, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x102, 0x0, 0x0, @ipv4=@empty}, @nested={0xe3, 0x81, 0x0, 0x1, [@typed={0xc, 0xdb, 0x0, 0x0, @u64=0xfd}, @nested={0x4, 0x147}, @nested={0x4, 0xe6}, @nested={0x4, 0x94}, @nested={0x4, 0x50}, @nested={0x4, 0x67}, @generic="06255702304c4c3f73bdb6754dfbfc3f2a8e22f9a096c59669bb61002cd97804662032508b4a46301e9c4d07dda19682aea7dd193ec3cdc3db2adfb82103b431ba17213e5ec69ac0e2a10c7c429bf5676b93844da5ea50378445e2f064a4bc2597504899057eace9b073a984d71227d908c44f4d87b047a884dead9cfa3d4f507a2e4b267b4056e447c6e6b27a806c10cae6eeb4666fe5ff92c6bd46808e583ea520e4cc90a5d9f47edc3e0682b9c73b309beacc1cf29c0157b9abb33b0c55"]}, @typed={0x8, 0x2cb4, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x10d, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x5, 0x50, 0x0, 0x0, @str='\x00'}]}, 0x124}, {&(0x7f0000002d00)={0x298, 0x34, 0x800, 0x70bd2a, 0x25dfdbff, "", [@nested={0xed, 0x59, 0x0, 0x1, [@typed={0x14, 0xc5, 0x0, 0x0, @ipv6=@mcast2}, @generic="7993042fef8182361873b31a4da20395194b86a84f59550053244d5a3ccb17e1600f3bcfe1166fa524c6ff043a1a28247788ab2a906acfe7d999fd19c7e7945bae05a1d330cbf97a9a37724d8a8288c434484448237c3510fd12fa78e74d5ee9f72ae6cf0cbcee575e9a08d2382fecf8b2dd39c4a9d4a773c77247d129053bc1996d59f13fc625ce73aa65ae956f7fcf91bcde078013569746edf209e82d9e4b50badfd7caae4c07f825b970e123ba26480b18bc27dec898221517230f5a5c49b0f9966f0c7711405efd396d5e", @nested={0x4, 0x2c}, @typed={0x4, 0xbd}]}, @generic="94ba04a34e6ca638b0e9978f275d6ce3f06c28f083afebb0077dc80c022946c0b0c06f6be8f64ef1adc61d9fcdf55e4b763c2d310a57567978d276cbf964cf07a7ffce42f43918a0f1710673c2f190762073c7d5b8b3646f7e9e3066d429e8c034260907f4631b85c5e06891e9d88a6565cbcaf2ef019673d3cbd5d6a3c60680ecab5ca0e72efb4c1ef8", @generic, @nested={0x14, 0xfc, 0x0, 0x1, [@nested={0x4, 0x107}, @typed={0xc, 0x75, 0x0, 0x0, @u64=0x4}]}, @generic="78fbb533ec6ea3b1ec731a4c4501e998202612a1baa8668f287b3db756d31f131dfd95049d6a23b73fd2d5102615fae55b3172b3ab68a4a50728c3bb3b03fb62bf6c1e99a903289f2600b96300e15ff043067dc4477fc1c36f701616f36d32625021422f22c08712e07ac5b64a895ba150da3faf258e3a4a30fa7702b6beb84b4be68727c96b49c702e4924081648eb84110c602859703d37f5b6078b94e92722cc0a9c2f2761a9702c0ab71c7f7771908f01219901deaebaaa1b2f9985ca4ad4e153d0c41b3ea3ed9aef3fad35dc48adb919c5509fa367417058865a951189bffb65b1315a02bd5f54339bf4129389d14f3c1982e7d33e21e"]}, 0x298}, {&(0x7f0000002a80)={0x1c8, 0x22, 0x8, 0x70bd2d, 0x25dfdbff, "", [@generic="71a2be7abb0eec207770c14f655e6a6f76d0f7c4901a91bf8795138a977f158b897496939915c1069b9b6c9ccaae0f1c26d7c0c8dbca5156f7230f69f46919f0baf973b52ac619a944cac76c6c1f10574411408b2bbc3a9587db51542f5685d1f3d896e6734c1cf14ba5c6f490dc213b0063e10bd8df6208c61b204e015d", @nested={0x125, 0x7c, 0x0, 0x1, [@typed={0x8, 0x100, 0x0, 0x0, @u32=0xffffff7e}, @generic="63c104f6ff802eb3dbdfba6df4f323e632a23e3a42dd9f0660dac54dd6c85007d9c0439fabcb68b077e8082299ba0ae271cffff6c468639eedabe5a18b2f5988429815441a05a0d32794d120926588a0f6ee89b91adb619965f27e8bc4c53243ca3f4885c4abf66d4330b3d234c4fb8a3b97cc4f71aa433b03360e8bb2ef50b10560fe8474282b555359c90b0909e51233dfb5780c3340969e2c92fdc1d620a79893c00bb941d680854265c6c15668846535bce20bd651d9ba64ed305795e75dc8ae173153a928513f32f1ff0994022c95f809d37c41a5becf9cb3496bfcb89fdd77035e43", @typed={0xc, 0x145, 0x0, 0x0, @u64=0xf96}, @nested={0x4, 0xca}, @typed={0x8, 0x1d, 0x0, 0x0, @uid=r11}, @typed={0xc, 0xc6, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0xe3, 0x0, 0x0, @pid=r0}, @typed={0x8, 0xda, 0x0, 0x0, @u32=0x10001}]}, @typed={0x8, 0x28, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x132, 0x0, 0x0, @pid=r0}]}, 0x1c8}], 0x4}, 0x4000040) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 3.175247139s ago: executing program 7 (id=2598): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000000000000007000000860d"], 0x20}}], 0x4000150, 0x4) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x100, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='\\', 0x1}], 0x1}}], 0x1, 0x40001) sendfile(r0, r1, 0x0, 0x20000023896) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x13) (async, rerun: 32) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r6) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x7c, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48024}, 0x1) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1100012, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) 2.904079954s ago: executing program 0 (id=2603): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x777fc2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x5000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x2000c094) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r6, 0x829, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r7 = syz_open_pts(r4, 0x900) r8 = dup3(r7, r4, 0x80000) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x16, 0x0, 0x0) read(r8, &(0x7f00000000c0)=""/226, 0xe2) readv(r0, &(0x7f0000000300), 0x0) 2.902953394s ago: executing program 7 (id=2604): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r3, 0x0, 0x4) read$FUSE(r2, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x11, 0xfffffffffffffffe, r4, {0x6}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) 2.804731426s ago: executing program 7 (id=2606): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) (async) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x8) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) (async) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r6, 0x0, 0x20, &(0x7f0000000880)="66be8f037545cda1011298f0", 0xc) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) 2.714554198s ago: executing program 7 (id=2608): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a10400000000000000021cb25d0000000904000012020600000524060000770732c1000d24070102000000000000000009058103000210100809018202000200000009050302000200000000"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) (async) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) (async) r5 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000380)={0xb6, 0x0, 0xa3d846ff51ab7fae}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000380)={0xb6, 0x0, 0xa3d846ff51ab7fae}) fcntl$getownex(r3, 0x10, 0x0) write(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0xfffffff7, 0x4, 0xa1a0, 0x9, 0x1a, "907a552d4199b85eadc5bf1903e7b4d7d84e61"}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x11) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x11) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.139016969s ago: executing program 3 (id=2615): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/202, 0xca, 0x1, 0x31}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x10}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x1000}, @dead_binder_done], 0x0, 0x0, 0x0}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000008c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xab, 0x3, 0xc44, 0x1, 0x1, 0x4, "1f4232530b461d78e60ef67802a8a7fce1f24311dbe0010722026aec7de6ce6d0abdc0eacb3ba40b7788396e52d9d04bd8513012c53e501852a1538acf25b0b037c04c95c63633254315f254f474de8d28c18f39507cfcf666727bc3d9dcbf07bb5e5b5df589a57165053df70b6c631c0abaf38700eaa324bca623e0d4a3a9b25eef2293091d5842d0dab48293edc69131f5b4e787f2781c79a0acf1bd0e8a4e57bc1f7b6a9ba3d78211cf"}}, 0x1c3) 2.029844761s ago: executing program 3 (id=2616): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000031000/0x2000)=nil, 0x2000, 0x1000002, 0x40010, r0, 0x2a92c000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x7771c1, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 1.936008613s ago: executing program 0 (id=2617): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f0000002180)=""/4081, 0xff1}], 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) r8 = fcntl$getown(r7, 0x9) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000003180)={0x126c, 0x40, 0x10, 0x70bd25, 0x25dfdbfd, {0x16}, [@nested={0x1112, 0xd6, 0x0, 0x1, [@generic="0c11bd0da3c943f2823c90aaff3cdba8bf406cffe487a99e316b7a1c24868ab80f6f37dc6f7153ca810a3284d2cdd1af05323c8461d8f2fb0a84e06076e1622f307b00828d36f57cbf5870cc3db9953dc7685a5cfea8dcc58d964d033a0241916907b8157f2203cf901fee2cd971c23312b598bfc3e1d084799b9f527e03ac5f3c340847497c360c57914d9f15a783e579831d3cd8ac660ff471a017f7c63892324929f7200105b38099b906b71b3ced042746e14760337044f26c0b84930b6350b233b2389e8b5dff53a1f7e8d9ebfd7c24845ebb1c109ee76dd37422b19b37ccfd", @typed={0x1004, 0x78, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x7, 0x0, 0x0, @pid=r8}, @typed={0xc, 0x12, 0x0, 0x0, @u64}, @generic="2344dd79b97c76f0e433133ce1e022a4568f9294"]}, @generic="63a6cf97a6987fbd00786040a88a8f7ea20cc15d61adf13756428a507721f867f8efe28ba44a0a9b49c79eb9b62efd0e99e1b30beefbc84f103514eeb6108d46faae765942c62e1410cbf0ddde7307cf8054ea4e2cf81e91d29aba500dc783a55021e29e21e41427cce39bed9d6623bfcf2f2b4fafbb570137e81963593ab689c17827c86392fc444360334213789859eea676d48ff2ea5bcd682a8be04e35187cadaf4a6b3f064f6391a39859b448e8c28f17292c4eb3ec82b10a1912e057de7d113f2cd49e9bb3cd9aeb136f68e05c299502bf1863b8393ca58396dac178624173299b6640efdbd015f37a80a6", @generic="870f2ec1958260f592514c1eb7e3e9145c73fc82cdc9d2fba165bb6e968626fbd938284a62d26783ebc9cf668781a80d4ae2ebca08150939783c4a152bc45c659c2818cb20817a0f582f31d25d76d3922747ec"]}, 0x126c}}, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={0x240, 0x188, 0x16}, 0x18) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) sendfile(r9, r9, 0x0, 0x7a680000) close_range(r0, 0xffffffffffffffff, 0x0) 954.186652ms ago: executing program 8 (id=2618): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x32, 0x38, 0x36, 0x65, 0x31, 0x39, 0x3e, 0x2c, 0x0, 0x39, 0x66, 0x38, 0x30, 0x33, 0x64, 0x33]}, &(0x7f0000000080)={0x0, "957968d3c0f443e972b9d723b2865bed4fb32162005aa91192e61d4668d960da62c8486e30f4b269944aa86d0fc98dc32a905b1437ea3628b522a4cb4389b610", 0x28}, 0x48, r2) keyctl$unlink(0x9, r2, r2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 427.326232ms ago: executing program 3 (id=2619): r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/66, 0x42}], 0x1, 0x0, 0x3d}, 0x3}], 0x1, 0x100, &(0x7f0000000000)={0x0, 0x989680}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 148.108607ms ago: executing program 3 (id=2620): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20040084}, 0x40000) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000440)={{r1}, "b9ec8cd2b80f9a92be4f7c41ec7460f1cb121acb7d4cb4943c5bc19c0d62c8cd7ab861a71b3767d08ef3da6b81e9c65c3762829fa8c3c4475661423b50e932738668340e7d76fff567bfb1b91547b56261e64d79c7dc0e89e4291dc59d681c51ceacc2f161a22ef67513bbbaed90a8d769dcd139979ce3dd394edadecd77088555a4dabaadd9718d053682efdecae83c186c8971988eddeadfd2e96a4321f69c6836cfdcac0d43a9c53603ef35530fbe5edec65a83d4f0884da509cd16e66c85561e63ddfe26f92a34d9e3ac888b04942042642c6e8b8b8db612e594a23c8c88881b985bd90d7462c71d3bf30f8f5d6c2ec10ce7e906736b1fbd362f8fae77acb91b754d26a5f77a278b4ab26fdfe51bfdaaa30bb8c73aa014893aad61e2cfe32b902a0403a820b6179a5f909d14f9215d8df0f93767abc830fe8be2dcae3a034689068607b2d28a7d1491d005f5884ecc138bdeccaa0ed49293068a21aacc4b5e0cd75d086705e0de4da47201ac62cec91532809fb92730d1d4fec4c07475ce8fe4f67aea4d72029f69ff521d2a8c64dc9e5960a435c0035b44d9641f3f4fa8bbde568868355f109635036a3d8c6de38cd5194a6799066c39a115d01fab4a7a57040527fb1a81ba02a2ba9112edc02138c2cb9455cac6ce7e76e1b9ebe377bcab300afa09f4d7bde50d631981a24758c569cbcad38871518796d4f3ccc15f887626f24ac83ab0d4e24e665bf451ee37e9753de0960f890672ffc60ac8e782cf2760adfd4a3effb892b127bcb7fbf248c7d21f1e8841980e243c1f44f35ba45f98039fd366a7786ef651bcf8e76e390cace4fda483d157c2c0098bd95a9bff423a58e643ed673ccd230fd4f3fe819b975d78d754a9bcfc423c9feab2d4ca79dc872abd4db70789b623ac3f7fad86d0ac3011839f3eae95c863e1a44f3b4f9d13cc11add7d7a42a27c30cfeefabd4a1b08e09581d6476be433ab4fba1d35ade3b8f4fc77aec95907b7ff55c0360c783b356293d9dc3dff7bb09dc8087091a7316c5137c796dc758cb050066bf83d41f902935a1a389e7dfb78fcf77a73b773fb08e954577d8163137878b850947db7fbd663c81761fb8c3fe79eb1b7c4261d745554c533c078f39bee056ab4f96cd7ba3118b8c1c89d5cbb6cb7746caf943847a645f2ef92bfca4602b5f302fd451c7d220a4eb89d9d912972b2d804ca75e1af227213123497a4c7e4e0abbfab93fb7fcecde649e0a270851565dbc36d5ce65c727887ddbfdc97214dc9c3087c6cdebd7697824f5b563cfbab5af8e1b2de789173536988a51113912dcf5b2aa45c49d6a2758ef7981e679bdbac9961f99771f00bd666660856a579c90df26fc4d3528a751c2cf663414c561507db91c77d69512974da428ea35e19724092e9eb2967f4fb51e7421ae2ecab310de6485fed37cdb6f7fbd09d9e8f876ec9339b433a85acb85a7e0ac11df836bd99c5ba4b59156d7c26c637d90a073c5a0347d2e6a0282100821e1a807cd5eb735c10f96320d8927d31c8696106093b1c32e91c76d419c4ae32f2a01819d4d2bf6ff53fcf133d93ef913efb3c38aaef4e59189759e959503686502c732d381be7d141484e13c0fde5d9adbaedd0ae09a037e1a7331c7162d9947a6051d96d79750fce024e36b2d83db094b8a9c2ed2c60b72a8758966f435fb32da1b5ca8d4f91b67ce0c464406d8c30d9bdce0beb39ccc8fbd95a1340f7d7895bb0f1d82ac933c7a91fbc6c711afd20f0f876dbdcae90e8ffc67a24882c6241bede2d77ffd4478c9596aee50aa4c6062f64bc6d9558dc00ecd105aa0830be4c79c2280972b322ae8340c0f11e4ea1b4d22cd41a15b0260359fbc6c3845ac010009265c885c7da221bb8748dd184823859a4f705f9963b89c80926b529db35c75c0107df01722803bd5cc3eacf12adf29a70218b3d4d5b67c099bd870f03f7a7a890f6b878828e0010ecbd775dbeb4fbba10a576c9261142963aa515ddf206aeab66584a8c0ac11494814b7b6427a8cc741d202c1f702f7802cb475ab3d4d28c6932464afc5fdf38cbe4fd4a4591b572c562496a8272203d662874cfe41f3b627aca604e81009fa89c5926306fc3705f671b9d89096892f6d0257c9b29f7b27f604c5eb3d7780989cab2a4f2c5fb7fcbda63ef31091da3a2b749e2f8cbad1a44fdb77313f961057562e678779a041714a28228cd834bc1150e4814237b936acebb456e10703ab8019511692014bddfaa528f35b3e1f8086d0bf6e1dc82ccd6797a7487d3a12aa421d227f65e72e0d32197f99f8756604b5baef0975997777d2bfd5b8e19b1eae711221be2d2e47b2acddf71aafdf4c295c5e3078cd5985e30c3164a8d7b524c82323c096b8db84b23df080c7c6175a84daa210b555530026aab7c9c36f50edee024b7d1de74fe93761187957ae12a4ab8f7c015ce46aa7c1815af488f71866a536185a43c35bdd9e8e92d689b1e582148715fcf75a7a33957eacfc8e50b027e6861091e5c3f6367a857380a1f3bd0383f24011359143625bead7d802e7c809ad410838bbe336647ddf402bbb36e4dc639f14eccf9c96f719d62d5945a4396b7137a24bab4953e78c45bc722114acf0113a7d81f35f15c76ff9e788ff735983984adf3baebec7148c2f5de26d22d2c8d2b9102e7c1fe9f212d4cf3bff3124a790edeac7ff1b598393c5f48d17593d9e7fe311cf8df772db48b2b50454a20c5cee4a18e57955e6a2a968a780d4077119dc64a3b62be9568ee127fd00fdb7de3adbbfb06f4f62477de04f51bae2764425a46a0be6568ed88f64b1ea27e5de373b84ad9d47d9d2c055f77d22644bf58a7a7bcf9ac3aca1a27c478944f85a327291945dd029b3ad9cf5c05dbf7efe4f47b31f67b2c4079100435e401897e550b9baf60fb08fe6d9ea5fb98840fb6fab0fea0c83a39084b9242a1ba48be730a447eed7ec65a750d698cdfd0f47e632d53ac29bde39fa155de8cf0f824a815d5f8c2c88ade6a7d020bfccc42c9f267c0f0533bdc3be7e6a3a7899b9dc0bd514adb8e32029e777b5f6c02b645dfdf1c8d865e1b8e1d16c0937d58f307e794b6e1f5ce81e993528628e4250d6eedba96093c28ce3bf0a86034182b409400ff0fd0f1a1b5bfa86231c131763c0fba697f9731de3f095afbae4e8dabf4f9f250a9c7e95f397b78bc91385d68b3b42a905d7c42b6097e3dd16153258a36228e1cb3c0019529d9f8f317b872555b938090bbe728cf66c366e867f06aec39f782782ee4f3d35b56ae5d0ab577a37a577b97046f7f4644a73110d745081abe0147cc9f38712b42125dee753e096c3b8ae7b149915265b75ece85c01ca092e4ca90bd636e3fd2149ab701fbd0b9362548203eb751a620f1ec9bf1b3813821ab79b05a20d4419b275c6fc7961a19ef678fa07c70bf98a1c823415b6134cedd90191b742960143d7185b2c7db55d1f61d4ecf09b601b0f6e239c1a29877756b249be76da1cb9175ad6c3fab845cb560fe466237d12d0d8ecd46c280343060629388f36a6c81e1baed0da5daed53e6c6d85442c3d64d91c14d6a98618c186611f3ef046fda7e3211aaaafc9566cfcd5010c09a9b6d3ad1af6b74155bb1ad216067db73807c39cac67b51da6bde8c7848e12f1320af93375e1a0c1503c5e83e6dfe9909e9e4e7d337912e8bbeadf34a679290279c7be7d018d84bce88a88f65cde4cfca6d5460ba7bbb946169c0a9ebfca8c0c280a267e971c89fc7078b0be4ff2a36d1ae83c2ed5581fcf58a5f523723ca2f797754d1c2e25351956803386cbba9a03e2386b53e76108e8dc668dac1aeae84978ea18d0c4dfb6525642da9e2c2ee41f6e4efaec47981b0943ea4946441adfe9e4f2ea21edd41e954165f2bd6410ebef3c382bcbb3f815bce4def903316b873581ff7e2effd48fa24666e5aacd9cebfe909b5cc1c13bad0cd1e9a703d6380d1999a691697004d9b536cc98eeb0de411cfaa7c5edc976f13d6471cf3235d701234f327be0809cfd64d78ba6c287d42e38fcce888e260d982c8b63c2350e2121929576637addca5deffed01d37d808a20bceb5c8d8cf9f2c14ed6412ae4b161656086448d30113f127cc95a3b8615f42b38f175a63b44d876ecc1bcf2bf6f4695cdd60e0319320cc31dcccf676cf53501ec18afd5fd14f4b1301a961c949836816187b4d92ae5d4ef144dd3097da6794f41fafcd16f20d8b2771134d6e0181b1e70be4695cfc6661db247cfecb61fbb6e58bf23603d3639b1a0ea20791b3dc0af3b74731b5e7362d2b73f82be6dc32fd3e771700c205182fbc1ffcc4040ba289dc99f0b66b2fe4d7c7355960feb620f684f3b660a8c447c7d46d7b97eefd9445659a0c789dd99ee21940a778d55c6e6738ca1750968f50765b13acc9122f0c195a7560a7a4a2fdb61f454ce923544c1267903c598494887a26466acdf338e4124bc1a163e2ce86e081cf083628b5c8ce4e5ecb01f43bb63098e5b45d2846745175bd884acf44550ed7ab2b9fb60adf8408fb2cde13aba508871cbc019ceff856cae68007ffec550b339e8aa0bea796800eec5e86f44d67a3648e4f7cf0616673bdff462e64337b0afb9f22d29c60a4efcbd047123fb51b35ba81199f710803f34d5ad80f6529097cf19b4228d24c4ee0ed2b239b1916f01e099100a446d1c57c752890e8c5a2bc6a85fefa9af133f0c2f82b94dcfe044bed1bb27fa0a519950adb76ded74e7de3dc083a6039fbfee984819dc5d82c96ef5ac6f839aba940e3a3e8384946506a1ef2bcc2f85797af1b0aa9f6d12169df50098808ed4fc05b6266ac0e21a6ca886d3db1f2de597dd17a010cf3878e2d59bfc444f39e3a6b00b7ec1d81d9ac8190381b07238c77e4fc75ad4d43451671dcdd81993b6d61aed82b72197e5ea6bcde089407583af3d9a591032480ae58d79e1969f997b038ecd4beed8873343287083f8f70fa3108dd4fa41a02d459a9e2b2baead6176f4dc891ca01cc2cb178a65f824d128678906ec45922b5d85738e0b4741d7d9bfd0b7256b464f86879b6497764e263e6c2977ead66ba9c25f5a6dad32ee3db994b689c72e5d7cddc94f1d96565271297b04a01a0cf7a95cdade1abb118feebab41f2edd809dc3cc9cf7abf63c31bcdbe242087dc3d211b00390b4c6899da12b886fd633a38f7a499ad3d504db7173fe169eb05e152e65a636fc96a115042ab2c8acd571216e09b196b2568cc3bd905ec6b7496d967f0b635d26f3bd207942eb4ed9ea6f015cf22adebeab96e92fcc7e52490b5fbea930256d8e33a45582edb72252d2cbeb7ddc4c5e491265e7e9b3901cdd9eeb5a30d4b5375286d3e38d8752457594f52a019d78b1e28ee37c0919502b72658a816d2fdf90bc5234b680969ce88147f661a230935e0562436c0a7bb073bbbb309d6c35157ef6e04b11ac870b362b3f8e42123b9e2535ad955dd2983fe6be8c94061b1a814efd3a6f49a20a82c37215305941dd46edc120ab42d09992dd3143e3cb8f6085f64e890b081ccadce626af24d58b349abe8feae08d21fd80c53773153fc30223976ab419c3bd2cabe810e059beb2d5d383bbd474eed587c0c6685cc4097987d60f197bb582602d13f9715b4797d5029007c22da59c4c456270c854ec2fbbec6f4ce54ca09781a05b435e5ec176197a223fca26ca8830a21b9cba3fea6bfc4d04c5411eae623c28ed83c39d9a6a1c18e25fff7b9a65a40fc019c3b55c4ffed5d1da18f05cbb959"}) 140.061057ms ago: executing program 3 (id=2621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f00000000c0)=""/19, &(0x7f0000000040)=0x13) listen(r1, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) (async) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f00000000c0)=""/19, &(0x7f0000000040)=0x13) (async) listen(r1, 0x6) (async) 127.509448ms ago: executing program 3 (id=2622): syz_usb_connect$uac1(0x2, 0x77, &(0x7f0000001700)=ANY=[@ANYBLOB="12011003000000106b1d0101400001020301090265000301eea0370904000000010100000a2401705209020206240401007b89040100000102000009040101010102000009050109200008f8f50725018208000009040200000102000009040201010102000009058209d701090e000725010109010069f4fc99243d39c1324685a032f2478950d662de7ecb5beac98fbf9823ed8b0db6cbaeb046454b3cbbd954fc1693c8180200452dbcddfb7a61b97471934b"], &(0x7f0000000680)={0x4, 0x0, 0x0, 0x0}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xffffffffffffffff, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x0, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=2623): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$bpf(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x80c000, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r1}}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x59, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x11, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) lseek(r2, 0x10001, 0x0) kernel console output (not intermixed with test programs): 1-1: new high-speed USB device number 53 using dummy_hcd [ 148.775948][ T717] usb 1-1: Using ep0 maxpacket: 32 [ 148.782354][ T717] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 148.790903][ T717] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 148.799609][ T717] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 148.808641][ T717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 148.818323][ T717] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 148.828022][ T717] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 148.841033][ T717] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 148.850074][ T717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.858789][ T717] usb 1-1: config 0 descriptor?? [ 149.078550][ T717] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 149.274014][ T4337] overlayfs: failed to clone lowerpath [ 149.293060][ T511] usb 1-1: USB disconnect, device number 53 [ 149.299811][ T511] usblp0: removed [ 149.434747][ T4341] overlayfs: conflicting options: userxattr,metacopy=on [ 149.893488][ T36] audit: type=1400 audit(1776087821.668:1153): avc: denied { mounton } for pid=4350 comm="syz.0.1282" path="/syzcgroup/unified/syz0" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 149.893580][ T4351] /dev/rnullb0: Can't open blockdev [ 150.188467][ T4365] fuse: Bad value for 'fd' [ 150.193412][ T4365] 9pnet_fd: Insufficient options for proto=fd [ 150.276520][ T36] audit: type=1326 audit(1776087822.024:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x7fc00000 [ 150.340418][ T36] audit: type=1326 audit(1776087822.090:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x7fc00000 [ 150.404405][ T36] audit: type=1326 audit(1776087822.146:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x7fc00000 [ 150.468427][ T36] audit: type=1326 audit(1776087822.212:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x7fc00000 [ 150.532287][ T36] audit: type=1326 audit(1776087822.268:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x7fc00000 [ 150.596188][ T36] audit: type=1326 audit(1776087822.324:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x7fc00000 [ 150.660119][ T36] audit: type=1326 audit(1776087822.390:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4366 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x7fc00000 [ 150.879196][ T4387] random: crng reseeded on system resumption [ 150.942554][ T4391] rust_binder: Write failure EFAULT in pid:840 [ 150.952867][ T4393] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.959550][ T4393] rust_binder: Error in use_page_slow: ESRCH [ 150.966106][ T4393] rust_binder: use_range failure ESRCH [ 150.972183][ T4393] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 150.977729][ T4393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 150.985723][ T4393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:842 [ 150.996867][ T4393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:842 [ 151.108949][ T4406] netlink: 'syz.4.1302': attribute type 4 has an invalid length. [ 151.184136][ T4416] fuse: Bad value for 'user_id' [ 151.189095][ T4416] fuse: Bad value for 'user_id' [ 151.194597][ T4416] fuse: Bad value for 'group_id' [ 151.199850][ T4416] fuse: Bad value for 'group_id' [ 151.364857][ T4432] /dev/loop0: Can't lookup blockdev [ 151.382357][ T4444] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 151.408539][ T4448] veth1: entered allmulticast mode [ 151.473120][ T4450] veth1: left allmulticast mode [ 152.152254][ T4473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1326'. [ 152.333966][ T4490] netlink: 'syz.6.1332': attribute type 4 has an invalid length. [ 152.346605][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1332'. [ 152.367893][ T717] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 152.387510][ T1302] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.539917][ T717] usb 1-1: not running at top speed; connect to a high speed hub [ 152.548521][ T717] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 152.559474][ T717] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.573744][ T717] usb 1-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.40 [ 152.582851][ T717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.590868][ T717] usb 1-1: Product: शç¦á‹­ìµ£ä¨“몖ꦵ맡á¤à¼Šã¢´îˆ¹ã³©è´ˆä¡Šë•”踣㖃è±ïž˜á’¨î®²ï›ï§…ິ淖딷⧟꽞è°ãš¹ê¼Ÿç‘£ìŠƒä® î»Ÿâ‚žì‡‚튆夾ꔙ퉃鼅醙佬ê‘윂ृ淡ï›é³ë°“⫸釗ì˜ã§­ã“…肱࿊মåŸí„´ë¤•Â»ä›Žé¤¦é·”昽`િ旚è¡ãŽ”㩇현䢄å¥é±çµ¥á¦‹ [ 152.616899][ T717] usb 1-1: Manufacturer: â°Ÿ [ 152.621551][ T717] usb 1-1: SerialNumber: Д [ 152.628453][ T4464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.635767][ T4464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.107051][ T717] usbhid 1-1:1.0: can't add hid device: -71 [ 153.112812][ T4524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1342'. [ 153.113308][ T717] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 153.133401][ T717] usb 1-1: USB disconnect, device number 54 [ 153.155303][ T4530] overlayfs: failed to clone lowerpath [ 153.161474][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 153.196560][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 153.196581][ T36] audit: type=1400 audit(1776087824.764:1169): avc: denied { read } for pid=4536 comm="syz.4.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.242911][ T4547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1348'. [ 153.494454][ T36] audit: type=1400 audit(1776087825.045:1170): avc: denied { getopt } for pid=4551 comm="syz.3.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.533170][ T4556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4556 comm=syz.3.1352 [ 153.682327][ T36] audit: type=1400 audit(1776087825.223:1171): avc: denied { remount } for pid=4574 comm="syz.0.1357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 153.685260][ T4575] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 153.711734][ T36] audit: type=1400 audit(1776087825.261:1172): avc: denied { mounton } for pid=4574 comm="syz.0.1357" path="/282/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 153.844203][ T4594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=4594 comm=syz.4.1363 [ 153.868681][ T4597] netlink: 'syz.4.1364': attribute type 4 has an invalid length. [ 153.876572][ T4597] netlink: 'syz.4.1364': attribute type 2 has an invalid length. [ 153.942326][ T4604] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 153.950236][ T4604] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1367'. [ 154.172501][ T36] audit: type=1326 audit(1776087825.683:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.3.1369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9d098eec9 code=0x0 [ 154.195831][ T4604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=4604 comm=syz.4.1367 [ 154.553188][ T1777] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.553550][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 155.156014][ T36] audit: type=1400 audit(1776087826.612:1174): avc: denied { lock } for pid=4650 comm="syz.6.1383" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.194522][ T4653] rust_binder: Write failure EFAULT in pid:168 [ 155.259718][ T4668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.277080][ T4672] netlink: 'syz.0.1391': attribute type 19 has an invalid length. [ 155.291798][ T4672] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1391'. [ 155.452187][ T4681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.687097][ T36] audit: type=1400 audit(1776087827.109:1175): avc: denied { execheap } for pid=4694 comm="syz.3.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 155.880354][ T4722] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 156.911442][ T4757] netlink: 'syz.3.1420': attribute type 2 has an invalid length. [ 158.487921][ T4789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.488116][ T4789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.687476][ T4797] /dev/loop0: Can't lookup blockdev [ 158.763174][ T31] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 158.923062][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 159.061709][ T31] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 159.221504][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 159.226992][ T31] usb usb1-port1: attempt power cycle [ 159.594524][ T31] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 159.616237][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 159.754416][ T31] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 159.776075][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 159.781544][ T31] usb usb1-port1: unable to enumerate USB device [ 159.843357][ T4822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1445'. [ 160.439176][ T4843] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1453'. [ 160.448274][ T4843] 0ªî{X¹¦: renamed from bridge_slave_1 (while UP) [ 160.455525][ T4843] 0ªî{X¹¦: entered allmulticast mode [ 160.461175][ T4843] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 160.477633][ T4843] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1453'. [ 160.486627][ T4843] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 160.493594][ T4843] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 161.059966][ T36] audit: type=1400 audit(1776087832.147:1176): avc: denied { nlmsg_read } for pid=4850 comm="syz.4.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.151172][ T4867] cgroup2: Unknown parameter 'mmalm [ 161.151172][ T4867] û•(Ç2í òj*°ÆÃ5BNÀ2<0vents' [ 161.207095][ T36] audit: type=1400 audit(1776087832.288:1177): avc: denied { create } for pid=4865 comm="syz.3.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 161.384416][ T4887] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1468'. [ 161.819011][ T4903] netlink: 'syz.0.1474': attribute type 4 has an invalid length. [ 161.826897][ T4903] netlink: 992 bytes leftover after parsing attributes in process `syz.0.1474'. [ 161.836609][ T4903] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.982368][ T4910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1478'. [ 161.998135][ T4910] bridge_slave_1: left allmulticast mode [ 162.005210][ T4910] bridge_slave_1: left promiscuous mode [ 162.011105][ T4910] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.018732][ T4910] bridge_slave_0: left allmulticast mode [ 162.024606][ T4910] bridge_slave_0: left promiscuous mode [ 162.030370][ T4910] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.052903][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 162.072806][ T445] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 162.080915][ T445] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.145060][ T36] audit: type=1326 audit(1776087833.170:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.3.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d098eec9 code=0x7fc00000 [ 162.188717][ T4926] fuse: Bad value for 'group_id' [ 162.193690][ T4926] fuse: Bad value for 'group_id' [ 162.429739][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 162.539551][ T36] audit: type=1400 audit(1776087833.536:1179): avc: denied { associate } for pid=4945 comm="syz.4.1488" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 162.601510][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.612678][ T10] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 162.622025][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.631606][ T10] usb 1-1: config 0 descriptor?? [ 163.066386][ T10] steelseries 0003:1038:12B6.0018: unknown main item tag 0x2 [ 163.073979][ T10] steelseries 0003:1038:12B6.0018: unknown main item tag 0x0 [ 163.082198][ T10] steelseries 0003:1038:12B6.0018: hidraw1: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 163.282285][ T10] steelseries 0003:1038:12B6.0018: hid_hw_raw_request() failed with -71 [ 163.294292][ T10] usb 1-1: USB disconnect, device number 59 [ 163.877507][ T4975] overlayfs: failed to clone upperpath [ 164.113803][ T445] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 164.183381][ T4992] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1506'. [ 164.204362][ T4994] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1507'. [ 164.213614][ T4994] gretap0: entered promiscuous mode [ 164.220414][ T4994] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1507'. [ 164.229566][ T4994] 0ªî{X¹¦: renamed from gretap0 [ 164.235371][ T4994] 0ªî{X¹¦: left promiscuous mode [ 164.240430][ T4994] 0ªî{X¹¦: entered allmulticast mode [ 164.247391][ T4994] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 164.263314][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 164.269475][ T1777] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.296239][ T445] usb 1-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 164.305422][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.314234][ T445] usb 1-1: config 0 descriptor?? [ 164.346532][ T36] audit: type=1400 audit(1776087835.225:1180): avc: denied { mounton } for pid=4998 comm="syz.6.1509" path="/61/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 164.541920][ T445] usbhid 1-1:0.0: can't add hid device: -71 [ 164.547945][ T445] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 164.557260][ T445] usb 1-1: USB disconnect, device number 60 [ 164.870577][ T445] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 165.031845][ T445] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 10185, setting to 1024 [ 165.043180][ T445] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 165.053237][ T445] usb 1-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.066277][ T445] usb 1-1: config 1 interface 0 has no altsetting 0 [ 165.074844][ T445] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.084027][ T445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.092073][ T445] usb 1-1: Product: Б [ 165.096389][ T445] usb 1-1: Manufacturer: à°Š [ 165.101011][ T445] usb 1-1: SerialNumber:   [ 165.116356][ T5011] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.126576][ T5011] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 165.318144][ T5044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5044 comm=syz.4.1525 [ 165.371195][ T5050] tipc: Enabling of bearer rejected, failed to enable media [ 165.567103][ T445] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 165.576787][ T445] usb 1-1: USB disconnect, device number 61 [ 165.925565][ T5054] netlink: 'syz.3.1530': attribute type 4 has an invalid length. [ 165.933614][ T5054] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1530'. [ 165.961798][ T5060] netlink: 'syz.4.1533': attribute type 1 has an invalid length. [ 166.005019][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 166.113680][ T5077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.168467][ T5085] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 166.175034][ T5085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 166.183413][ T5085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:926 [ 166.207992][ T36] audit: type=1400 audit(1776087836.979:1181): avc: denied { accept } for pid=5087 comm="syz.3.1545" lport=108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.289183][ T5106] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1552'. [ 167.110589][ T5128] can0: slcan on ptm1. [ 167.375371][ T445] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 167.536542][ T445] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.546720][ T445] usb 1-1: config 0 has no interfaces? [ 167.552737][ T445] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 167.561988][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.574380][ T445] usb 1-1: config 0 descriptor?? [ 167.802148][ T400] usb 1-1: USB disconnect, device number 62 [ 167.861197][ T5128] can0 (unregistered): slcan off ptm1. [ 167.921286][ T5210] netlink: 'syz.0.1583': attribute type 25 has an invalid length. [ 167.931797][ T5210] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1583'. [ 168.292027][ T400] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 168.453487][ T400] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.462905][ T400] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 168.470483][ T400] usb 1-1: can't read configurations, error -71 [ 169.005245][ T5258] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.005269][ T5259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.011883][ T5258] rust_binder: Error in use_page_slow: ESRCH [ 169.018634][ T5258] rust_binder: use_range failure ESRCH [ 169.024738][ T5258] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 169.030260][ T5258] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 169.038386][ T5258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:948 [ 169.048421][ T5259] rust_binder: Read failure Err(EAGAIN) in pid:948 [ 169.048421][ T5258] rust_binder: Read failure Err(EAGAIN) in pid:948 [ 169.048483][ T5259] rust_binder: 948: no such ref 3 [ 169.075822][ T5259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:948 [ 169.112719][ T36] audit: type=1400 audit(1776087839.700:1182): avc: denied { bind } for pid=5260 comm="syz.0.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.203776][ T5287] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.316192][ T5294] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.323240][ T5294] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 169.329760][ T5294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 169.338055][ T5294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:960 [ 169.487809][ T5298] rust_binder: 213: no such ref 0 [ 169.688307][ T400] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 169.748782][ T36] audit: type=1326 audit(1776087840.300:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.6.1612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bec18eec9 code=0x0 [ 169.773240][ T36] audit: type=1326 audit(1776087840.300:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5312 comm="syz.6.1612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bec18eec9 code=0x0 [ 169.851775][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1616'. [ 169.852165][ T400] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.861047][ T5325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:235 [ 169.894614][ T400] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.920098][ T400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.928570][ T400] usb 1-1: SerialNumber: syz [ 170.042158][ T5378] overlayfs: failed to clone lowerpath [ 170.049179][ T5378] overlayfs: conflicting options: nfs_export=on,index=off [ 170.074860][ T5380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1627'. [ 170.178246][ T400] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 170.218076][ T5380] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1627'. [ 170.485189][ T5401] netlink: 'syz.3.1628': attribute type 29 has an invalid length. [ 170.493345][ T5402] netlink: 'syz.3.1628': attribute type 29 has an invalid length. [ 170.814642][ T400] usb 1-1: USB disconnect, device number 65 [ 170.824074][ T400] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 170.893422][ T36] audit: type=1400 audit(1776087841.379:1185): avc: denied { create } for pid=5432 comm="syz.6.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.894148][ T5433] rust_binder: 244: no such ref 3 [ 171.367827][ T5456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.367984][ T5456] rust_binder: Error in use_page_slow: ESRCH [ 171.374742][ T5456] rust_binder: use_range failure ESRCH [ 171.380818][ T5456] rust_binder: Failed to allocate buffer. len:1192, is_oneway:true [ 171.386595][ T5456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 171.394706][ T5456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:966 [ 171.461467][ T5470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.471804][ T5470] rust_binder: Error in use_page_slow: ESRCH [ 171.478308][ T5470] rust_binder: use_range failure ESRCH [ 171.484673][ T5470] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 171.500280][ T5470] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 171.521623][ T5470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:972 [ 171.669786][ T36] audit: type=1326 audit(1776087842.102:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.3.1648" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9d098eec9 code=0x0 [ 171.719273][ T5485] rust_binder: Write failure EINVAL in pid:976 [ 171.719650][ T5485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.728127][ T5485] rust_binder: 976: no such ref 1 [ 171.797109][ T5496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.304130][ T5500] overlayfs: failed to clone upperpath [ 172.527469][ T36] audit: type=1326 audit(1776087842.908:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 172.547258][ T5513] 9pnet_fd: Insufficient options for proto=fd [ 172.552224][ T36] audit: type=1326 audit(1776087842.908:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 172.581618][ T36] audit: type=1326 audit(1776087842.908:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 172.604792][ T36] audit: type=1326 audit(1776087842.908:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 172.628046][ T36] audit: type=1326 audit(1776087842.908:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 173.103561][ T5545] netlink: 'syz.3.1670': attribute type 39 has an invalid length. [ 173.373217][ T5547] kvm: MWAIT instruction emulated as NOP! [ 173.685720][ T5552] rust_binder: Write failure EFAULT in pid:998 [ 173.751356][ T5562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.802604][ T5571] overlayfs: failed to clone lowerpath [ 173.995446][ T5572] netlink: 'syz.0.1675': attribute type 4 has an invalid length. [ 174.003320][ T5572] netlink: 1837 bytes leftover after parsing attributes in process `syz.0.1675'. [ 174.037443][ T5572] rust_binder: 1001: no such ref 1 [ 174.042621][ T5572] rust_binder: Write failure EINVAL in pid:1001 [ 174.452739][ T36] kauditd_printk_skb: 19298 callbacks suppressed [ 174.452759][ T36] audit: type=1326 audit(1776087844.710:20490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 174.491927][ T36] audit: type=1326 audit(1776087844.710:20491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 174.516099][ T36] audit: type=1326 audit(1776087844.710:20492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 174.539556][ T36] audit: type=1326 audit(1776087844.710:20493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 174.563002][ T36] audit: type=1326 audit(1776087844.710:20494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 174.586711][ T36] audit: type=1326 audit(1776087844.710:20495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 174.612500][ T36] audit: type=1326 audit(1776087844.710:20496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 174.635948][ T36] audit: type=1326 audit(1776087844.710:20497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 174.677396][ T36] audit: type=1326 audit(1776087844.710:20498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 174.700979][ T36] audit: type=1326 audit(1776087844.710:20499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936a98eec9 code=0x50000 [ 174.725051][ T5587] veth1: entered allmulticast mode [ 174.764043][ T5589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.764258][ T5590] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.560867][ T5586] veth1: left allmulticast mode [ 175.668255][ T5611] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.668622][ T5611] rust_binder: Error in use_page_slow: ESRCH [ 175.686067][ T5611] rust_binder: use_range failure ESRCH [ 175.702266][ T5611] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 175.716607][ T5611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 175.724790][ T5611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1010 [ 175.866017][ T5629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 176.008926][ T31] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 176.169974][ T31] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 176.179232][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.188052][ T31] usb 1-1: config 0 descriptor?? [ 176.543296][ T5642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1702'. [ 176.617746][ T5657] overlayfs: failed to clone lowerpath [ 177.233568][ T5677] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 177.239661][ T5679] 9pnet_fd: Insufficient options for proto=fd [ 177.260268][ T5681] incfs: Error accessing: ./file0. [ 177.265571][ T5681] incfs: mount failed -20 [ 177.483760][ T31] usb 1-1: Cannot set autoneg [ 177.494111][ T31] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 177.511501][ T31] usb 1-1: USB disconnect, device number 66 [ 178.289884][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 178.460407][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 178.475064][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 178.485864][ T10] usb 1-1: config 0 has no interface number 0 [ 178.492012][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 178.502252][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 178.513382][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.521579][ T10] usb 1-1: Product: syz [ 178.525941][ T10] usb 1-1: Manufacturer: syz [ 178.530572][ T10] usb 1-1: SerialNumber: syz [ 178.541117][ T10] usb 1-1: config 0 descriptor?? [ 178.549051][ T10] smsc75xx v1.0.0 [ 178.761940][ T5708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.772094][ T5708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.377613][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 179.388690][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 179.612085][ T5708] rust_binder: Error while translating object. [ 179.612150][ T5708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 179.618650][ T5708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1017 [ 179.629106][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 179.652482][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 179.663034][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 179.672700][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 179.685404][ T10] usb 1-1: USB disconnect, device number 67 [ 180.228365][ T36] kauditd_printk_skb: 11150 callbacks suppressed [ 180.228385][ T36] audit: type=1400 audit(1776087850.123:31650): avc: denied { setcurrent } for pid=5779 comm="syz.0.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 180.656145][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 180.815979][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 180.822262][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 180.832170][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 180.842709][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.851843][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 180.859880][ T10] usb 1-1: SerialNumber: syz [ 180.865440][ T5794] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.872704][ T5794] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.078775][ T5820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5820 comm=syz.4.1755 [ 181.098041][ T10] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 181.112046][ T10] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 181.119948][ T10] usb 1-1: USB disconnect, device number 68 [ 182.158668][ T5852] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1766'. [ 182.167796][ T5852] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1766'. [ 182.176977][ T5852] netlink: 'syz.3.1766': attribute type 6 has an invalid length. [ 182.184803][ T5852] netlink: 'syz.3.1766': attribute type 5 has an invalid length. [ 182.192594][ T5852] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1766'. [ 182.796440][ T5883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1776'. [ 182.993172][ T5881] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1775'. [ 183.122695][ T511] hid (null): unknown global tag 0xc [ 183.130594][ T511] hid-generic 0002:07FF:0001.0019: unknown global tag 0xc [ 183.138168][ T511] hid-generic 0002:07FF:0001.0019: item 0 1 1 12 parsing failed [ 183.148751][ T511] hid-generic 0002:07FF:0001.0019: probe with driver hid-generic failed with error -22 [ 183.480749][ T717] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 183.652467][ T717] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.653505][ T5931] overlayfs: failed to clone upperpath [ 183.662819][ T717] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.679460][ T717] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.688668][ T717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.696782][ T717] usb 1-1: Product: syz [ 183.700980][ T717] usb 1-1: Manufacturer: syz [ 183.700991][ T5933] tipc: Enabling of bearer rejected, failed to enable media [ 183.714462][ T717] usb 1-1: SerialNumber: syz [ 183.730650][ T5938] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 183.742326][ T5938] overlayfs: missing 'lowerdir' [ 183.979742][ T36] audit: type=1400 audit(1776087853.651:31651): avc: denied { setopt } for pid=5953 comm="syz.3.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.144585][ T5958] veth1: entered allmulticast mode [ 184.153305][ T5957] veth1: left allmulticast mode [ 184.153610][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.167531][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.176513][ T5916] rust_binder: Write failure EFAULT in pid:1060 [ 184.177701][ T717] usb 1-1: cannot find UAC_HEADER [ 184.191550][ T717] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 184.201787][ T717] usb 1-1: USB disconnect, device number 69 [ 184.211900][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 184.724409][ T5968] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.724506][ T5968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 184.731088][ T5968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1062 [ 184.741140][ T5968] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.750863][ T5969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 184.757375][ T5969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1062 [ 185.425536][ T5984] netlink: 'syz.4.1811': attribute type 1 has an invalid length. [ 185.717983][ T511] rust_binder: 0: removing orphan mapping 0:8 [ 185.787631][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.794790][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.801884][ T5997] bridge_slave_0: entered allmulticast mode [ 185.808666][ T5997] bridge_slave_0: entered promiscuous mode [ 185.825657][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.843575][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.854598][ T5997] bridge_slave_1: entered allmulticast mode [ 185.869591][ T5997] bridge_slave_1: entered promiscuous mode [ 185.975619][ T46] veth0_vlan: left promiscuous mode [ 186.149641][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.156758][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.164096][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.171178][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.273907][ T5997] veth0_vlan: entered promiscuous mode [ 186.306092][ T5997] veth1_macvtap: entered promiscuous mode [ 186.401511][ T6015] /dev/rnullb0: Can't open blockdev [ 187.185843][ T6025] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1820'. [ 187.395709][ T6031] rust_binder: Write failure EFAULT in pid:300 [ 187.675105][ T36] audit: type=1400 audit(1776087857.113:31652): avc: denied { create } for pid=6036 comm="syz.3.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.879534][ T717] rust_binder: 6045: removing orphan mapping 0:4120 [ 187.939743][ T6053] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 187.939776][ T6053] rust_binder: Read failure Err(EFAULT) in pid:28 [ 187.967402][ T6055] rust_binder: 30: no such ref 0 [ 187.980620][ T6055] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 187.987789][ T6055] rust_binder: 30: no such ref 2 [ 187.994205][ T6055] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 187.998048][ T36] audit: type=1400 audit(1776087857.413:31653): avc: denied { name_bind } for pid=6056 comm="syz.0.1833" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 188.114323][ T36] audit: type=1400 audit(1776087857.526:31654): avc: denied { read write } for pid=6065 comm="syz.0.1836" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.138035][ T36] audit: type=1400 audit(1776087857.526:31655): avc: denied { open } for pid=6065 comm="syz.0.1836" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.162115][ T36] audit: type=1400 audit(1776087857.526:31656): avc: denied { ioctl } for pid=6065 comm="syz.0.1836" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.373076][ T511] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 188.532884][ T511] usb 1-1: Using ep0 maxpacket: 16 [ 188.539574][ T511] usb 1-1: unable to get BOS descriptor or descriptor too short [ 188.548448][ T511] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 188.556699][ T511] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 188.567210][ T511] usb 1-1: config 13 has no interface number 0 [ 188.573438][ T511] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 188.583766][ T511] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.597138][ T511] usb 1-1: config 13 interface 50 has no altsetting 0 [ 188.605753][ T511] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 188.614903][ T511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.622936][ T511] usb 1-1: Product: syz [ 188.627216][ T511] usb 1-1: Manufacturer: syz [ 188.631876][ T511] usb 1-1: SerialNumber: syz [ 188.639385][ T6066] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 188.822774][ T6072] tipc: Enabling of bearer rejected, failed to enable media [ 188.876721][ T6066] rust_binder: Error while translating object. [ 188.876762][ T6066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 188.895054][ T6066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1073 [ 188.907481][ T36] audit: type=1400 audit(1776087858.276:31657): avc: denied { map } for pid=6080 comm="syz.3.1841" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 189.062234][ T6097] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 189.489347][ T511] usb 1-1: MIDIStreaming interface descriptor not found [ 189.504531][ T511] usb 1-1: USB disconnect, device number 70 [ 189.504539][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 189.522734][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 189.622378][ T6106] /dev/rnullb0: Can't lookup blockdev [ 189.945724][ T36] audit: type=1400 audit(1776087859.252:31658): avc: denied { setattr } for pid=6112 comm="syz.3.1854" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 190.409093][ T36] audit: type=1400 audit(1776087859.683:31659): avc: denied { ioctl } for pid=6117 comm="syz.4.1856" path="socket:[38019]" dev="sockfs" ino=38019 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.501418][ T6129] rust_binder: Read failure Err(EAGAIN) in pid:51 [ 190.501471][ T6130] rust_binder: Read failure Err(EAGAIN) in pid:51 [ 190.510128][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.525582][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.760574][ T717] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 190.920446][ T717] usb 4-1: Using ep0 maxpacket: 32 [ 190.926904][ T717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.937849][ T717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.947652][ T717] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.956720][ T717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.965462][ T717] usb 4-1: config 0 descriptor?? [ 190.971413][ T717] hub 4-1:0.0: USB hub found [ 191.241299][ T6141] netlink: 'syz.4.1864': attribute type 16 has an invalid length. [ 191.249217][ T6141] netlink: 'syz.4.1864': attribute type 3 has an invalid length. [ 191.257056][ T6141] netlink: 'syz.4.1864': attribute type 1 has an invalid length. [ 191.264929][ T6141] netlink: 64030 bytes leftover after parsing attributes in process `syz.4.1864'. [ 191.465213][ T717] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 191.474442][ T717] usbhid 4-1:0.0: can't add hid device: -71 [ 191.480451][ T717] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 191.507073][ T717] usb 4-1: USB disconnect, device number 37 [ 191.719884][ T1777] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.720270][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 191.911534][ T6154] 9pnet_fd: Insufficient options for proto=fd [ 192.022691][ T6170] __vm_enough_memory: pid: 6170, comm: syz.3.1876, bytes: 18014402804453376 not enough memory for the allocation [ 192.572625][ T31] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 192.732418][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 192.738632][ T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 192.747110][ T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 192.755787][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 192.764834][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.774498][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 192.784238][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 192.797278][ T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 192.806329][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.815037][ T31] usb 1-1: config 0 descriptor?? [ 193.035965][ T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 193.048559][ T31] usb 1-1: USB disconnect, device number 71 [ 193.055260][ T31] usblp0: removed [ 193.171970][ T36] audit: type=1400 audit(1776087862.273:31660): avc: denied { mounton } for pid=6192 comm="syz.3.1884" path="/dev/snd/timer" dev="devtmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 193.224765][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1890'. [ 193.499859][ T31] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 193.659723][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 193.665909][ T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 193.674343][ T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 193.683116][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 193.692274][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.701953][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 193.711669][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.724711][ T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 193.733773][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.742455][ T31] usb 1-1: config 0 descriptor?? [ 193.854736][ T6234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:308 [ 193.941303][ T6239] rust_binder: Write failure EFAULT in pid:313 [ 193.950641][ T6240] rust_binder: Write failure EFAULT in pid:313 [ 193.966879][ T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 194.019933][ T6249] fuse: blksize only supported for fuseblk [ 194.176303][ T511] usb 1-1: USB disconnect, device number 72 [ 194.185109][ T511] usblp0: removed [ 194.237365][ T36] audit: type=1400 audit(1776087863.277:31661): avc: denied { create } for pid=6254 comm="syz.4.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 194.814955][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1911'. [ 194.898352][ T36] audit: type=1400 audit(1776087863.896:31662): avc: denied { setattr } for pid=6280 comm="syz.3.1915" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 194.934451][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 195.025829][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1919'. [ 195.626120][ T6342] rust_binder: Error while translating object. [ 195.626160][ T6342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 195.632531][ T6342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1084 [ 195.642560][ T6343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.736065][ T6350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1091 [ 195.736274][ T6350] rust_binder: Error while translating object. [ 195.745723][ T6350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.751963][ T6350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1091 [ 196.212216][ T6367] fuse: Bad value for 'group_id' [ 196.226452][ T6367] fuse: Bad value for 'group_id' [ 196.795631][ T6373] rust_binder: Write failure EFAULT in pid:1094 [ 197.091903][ T1777] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 197.091935][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 197.204697][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1944'. [ 197.251159][ T6385] 9pnet_fd: Insufficient options for proto=fd [ 197.387421][ T6392] 9pnet_fd: Insufficient options for proto=fd [ 197.428536][ T6401] netlink: 'syz.4.1954': attribute type 1 has an invalid length. [ 197.436656][ T6401] netlink: 'syz.4.1954': attribute type 3 has an invalid length. [ 197.450902][ T6403] __vm_enough_memory: pid: 6403, comm: syz.0.1955, bytes: 18014402804453376 not enough memory for the allocation [ 197.479884][ T6410] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 197.479914][ T6410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 197.480039][ T6408] 9pnet_fd: Insufficient options for proto=fd [ 197.488532][ T6410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1101 [ 197.517123][ T6416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.537289][ T6422] rust_binder: Write failure EFAULT in pid:334 [ 197.557870][ T6424] rust_binder: Write failure EINVAL in pid:336 [ 197.564903][ T6424] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1960'. [ 197.598143][ T6427] netlink: 8568 bytes leftover after parsing attributes in process `syz.6.1961'. [ 197.718125][ T6433] rust_binder: 6432 RLIMIT_NICE not set [ 197.856435][ T36] audit: type=1326 audit(1776087866.664:31663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.3.1965" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f643db8eec9 code=0x0 [ 197.912585][ T445] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 198.051385][ T6444] /dev/loop0: Can't lookup blockdev [ 198.051474][ T6445] /dev/loop0: Can't lookup blockdev [ 198.084178][ T445] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 198.095448][ T445] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.102111][ T445] usb 1-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 198.111231][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.120255][ T445] usb 1-1: config 0 descriptor?? [ 198.125606][ T6430] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 198.347558][ T6430] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 198.576008][ T445] logitech-hidpp-device 0003:046D:C081.001A: hidraw0: USB HID v1.01 Device [HID 046d:c081] on usb-dummy_hcd.0-1/input0 [ 198.671755][ T6451] rust_binder: Write failure EFAULT in pid:103 [ 198.784931][ T511] rust_binder: 6453: removing orphan mapping 0:4120 [ 198.795796][ T6457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.802470][ T36] audit: type=1400 audit(1776087867.555:31664): avc: denied { shutdown } for pid=6429 comm="syz.0.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.835721][ T6430] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1962'. [ 198.837290][ T6461] overlayfs: failed to clone upperpath [ 198.992077][ T686] usb 1-1: USB disconnect, device number 73 [ 198.999390][ T6482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 198.999427][ T6482] rust_binder: Read failure Err(EFAULT) in pid:123 [ 199.799159][ T400] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 199.969674][ T400] usb 1-1: Using ep0 maxpacket: 16 [ 199.976059][ T400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.983162][ T6494] rust_binder: 6493 RLIMIT_NICE not set [ 199.987220][ T400] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.011949][ T400] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 200.021237][ T400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.030190][ T400] usb 1-1: config 0 descriptor?? [ 200.353390][ T511] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 200.465592][ T400] HID 045e:07da: Invalid code 65791 type 1 [ 200.474013][ T400] HID 045e:07da: Invalid code 768 type 1 [ 200.479695][ T400] HID 045e:07da: Invalid code 769 type 1 [ 200.485472][ T400] HID 045e:07da: Invalid code 770 type 1 [ 200.491134][ T400] HID 045e:07da: Invalid code 771 type 1 [ 200.497015][ T400] HID 045e:07da: Invalid code 772 type 1 [ 200.502780][ T400] HID 045e:07da: Invalid code 773 type 1 [ 200.508612][ T400] HID 045e:07da: Invalid code 774 type 1 [ 200.514369][ T400] HID 045e:07da: Invalid code 775 type 1 [ 200.520143][ T400] HID 045e:07da: Invalid code 776 type 1 [ 200.526976][ T511] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.543443][ T400] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001B/input/input29 [ 200.557180][ T511] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.567976][ T400] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 200.580036][ T511] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 200.589665][ T511] usb 4-1: SerialNumber: syz [ 200.819481][ T6520] /dev/loop0: Can't lookup blockdev [ 200.852388][ T6536] bpf: Bad value for 'uid' [ 200.869022][ T6538] rust_binder: Error while translating object. [ 200.869067][ T6538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 200.875364][ T6538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:349 [ 200.925324][ T6548] netlink: 'syz.4.1999': attribute type 4 has an invalid length. [ 200.940308][ T6547] rust_binder: Error in use_page_slow: ESRCH [ 200.940480][ T6547] rust_binder: use_range failure ESRCH [ 200.942936][ T6548] netlink: 'syz.4.1999': attribute type 5 has an invalid length. [ 200.947293][ T6547] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 200.952095][ T6548] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1999'. [ 200.960118][ T6547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 200.984372][ T6547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:355 [ 201.030831][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2003'. [ 201.270680][ T6566] tipc: Can't bind to reserved service type 32 [ 201.411441][ T511] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 201.838632][ T6500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.847309][ T6500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.856009][ T6500] rust_binder: Error while translating object. [ 201.856061][ T6500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.862358][ T6500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 202.762636][ T445] usb 1-1: USB disconnect, device number 74 [ 202.930582][ T6630] incfs: Options parsing error. -22 [ 202.936110][ T6630] incfs: mount failed -22 [ 203.427472][ T511] usb 4-1: USB disconnect, device number 38 [ 203.439955][ T511] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 203.525716][ T6667] overlay: Bad value for 'nfs_export' [ 203.644091][ T6694] overlayfs: failed to clone upperpath [ 203.666816][ T6701] batadv_slave_1: entered promiscuous mode [ 203.673585][ T6700] batadv_slave_1: left promiscuous mode [ 203.755389][ T6709] tipc: Failed to remove unknown binding: 66,1,1/0:877930252/877930254 [ 203.769540][ T6709] tipc: Failed to remove unknown binding: 66,1,1/0:877930252/877930254 [ 203.779353][ T6709] tipc: Failed to remove unknown binding: 66,1,1/0:877930252/877930254 [ 203.790283][ T36] audit: type=1400 audit(1776087872.237:31665): avc: denied { map } for pid=6708 comm="syz.0.2039" path="socket:[40599]" dev="sockfs" ino=40599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.823404][ T6724] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2040'. [ 203.850917][ T36] audit: type=1400 audit(1776087872.293:31666): avc: denied { ioctl } for pid=6728 comm="syz.0.2041" path="socket:[41036]" dev="sockfs" ino=41036 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 203.967733][ T6734] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2043'. [ 203.981984][ T6734] overlayfs: failed to clone upperpath [ 204.032467][ T36] audit: type=1400 audit(1776087872.471:31667): avc: denied { execute } for pid=6743 comm="syz.0.2047" path="/memory.events.local" dev="ramfs" ino=41058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 204.088037][ T6753] EXT4-fs: Conflicting test_dummy_encryption options [ 204.342348][ T6765] rust_binder: Error while translating object. [ 204.342384][ T6765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.348619][ T6765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369 [ 204.358135][ T400] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 204.377208][ T6767] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2049'. [ 204.531611][ T400] usb 4-1: Using ep0 maxpacket: 16 [ 204.538406][ T400] usb 4-1: unable to get BOS descriptor or descriptor too short [ 204.546928][ T400] usb 4-1: config 3 has an invalid interface number: 127 but max is 2 [ 204.555158][ T400] usb 4-1: config 3 has an invalid interface number: 177 but max is 2 [ 204.563379][ T400] usb 4-1: config 3 has an invalid interface number: 178 but max is 2 [ 204.564864][ T6783] rust_binder: 6778 RLIMIT_NICE not set [ 204.571611][ T400] usb 4-1: config 3 has no interface number 0 [ 204.583386][ T400] usb 4-1: config 3 has no interface number 1 [ 204.589546][ T400] usb 4-1: config 3 has no interface number 2 [ 204.590562][ T6778] rust_binder: Error while translating object. [ 204.595706][ T400] usb 4-1: config 3 interface 127 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 204.601278][ T6778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 204.601908][ T400] usb 4-1: config 3 interface 127 has no altsetting 0 [ 204.625185][ T6778] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 204.629129][ T400] usb 4-1: config 3 interface 177 has no altsetting 0 [ 204.633424][ T6778] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:379 [ 204.640847][ T400] usb 4-1: config 3 interface 178 has no altsetting 0 [ 204.666545][ T400] usb 4-1: New USB device found, idVendor=045e, idProduct=0450, bcdDevice=75.d7 [ 204.677522][ T400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.685681][ T400] usb 4-1: Product: syz [ 204.689863][ T400] usb 4-1: Manufacturer: syz [ 204.694553][ T400] usb 4-1: SerialNumber: syz [ 204.716045][ T6786] rust_binder: Read failure Err(EAGAIN) in pid:383 [ 204.728156][ T6791] overlayfs: conflicting lowerdir path [ 204.808813][ T6794] /dev/loop0: Can't lookup blockdev [ 204.918703][ T6755] futex_wake_op: syz.3.2050 tries to shift op by -1; fix this program [ 204.933596][ T400] usb 4-1: USB disconnect, device number 39 [ 205.239878][ T6813] netlink: 'syz.4.2068': attribute type 29 has an invalid length. [ 205.247785][ T6813] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2068'. [ 205.484576][ T36] audit: type=1400 audit(1776087873.831:31668): avc: denied { create } for pid=6815 comm="syz.3.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 205.718663][ T36] audit: type=1400 audit(1776087874.047:31669): avc: denied { execstack } for pid=6830 comm="syz.6.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 205.788015][ T511] rust_binder: get_current_thread was called from the wrong process. [ 206.014632][ T6864] netlink: 'syz.0.2085': attribute type 27 has an invalid length. [ 206.030750][ T6865] netlink: 'syz.0.2085': attribute type 27 has an invalid length. [ 206.038830][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2085'. [ 206.450235][ T6882] fuse: Bad value for 'fd' [ 206.601041][ T6889] /dev/rnullb0: Can't open blockdev [ 207.036967][ T400] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 207.058117][ T6946] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2117'. [ 207.196292][ T400] usb 4-1: Using ep0 maxpacket: 32 [ 207.202851][ T400] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 184, changing to 11 [ 207.214036][ T400] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 8981, setting to 1024 [ 207.225130][ T400] usb 4-1: config 0 interface 0 has no altsetting 0 [ 207.231787][ T400] usb 4-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 207.241003][ T400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.249742][ T400] usb 4-1: config 0 descriptor?? [ 207.536277][ T6949] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 207.677293][ T36] audit: type=1326 audit(1776087875.886:31670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6968 comm="syz.0.2127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff28dd8eec9 code=0x0 [ 207.701959][ T400] wacom 0003:056A:032C.001C: unknown main item tag 0x1 [ 207.713477][ T400] wacom 0003:056A:032C.001C: hidraw0: USB HID vb.27 Device [HID 056a:032c] on usb-dummy_hcd.3-1/input0 [ 208.589082][ T6979] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.596965][ T6979] IPv6: NLM_F_REPLACE set, but no existing node found! [ 208.605300][ T6979] IPv6: NLM_F_REPLACE set, but no existing node found! [ 209.496692][ T7035] input: syz1 as /devices/virtual/input/input34 [ 209.644478][ T36] audit: type=1400 audit(1776087877.725:31671): avc: denied { accept } for pid=7024 comm="syz.0.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.998741][ T717] usb 4-1: USB disconnect, device number 40 [ 210.038538][ T7048] veth1: entered allmulticast mode [ 210.097982][ T7056] veth1: left allmulticast mode [ 210.339497][ T7072] netlink: 'syz.3.2161': attribute type 4 has an invalid length. [ 210.347460][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2161'. [ 210.580941][ T7090] netlink: 37 bytes leftover after parsing attributes in process `syz.4.2166'. [ 210.703121][ T717] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 210.862905][ T717] usb 4-1: Using ep0 maxpacket: 16 [ 210.869217][ T717] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.879376][ T717] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 210.893557][ T717] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 210.902647][ T717] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 210.911796][ T717] usb 4-1: Product: syz [ 210.915987][ T717] usb 4-1: Manufacturer: syz [ 210.923454][ T717] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 211.164588][ T400] usb 4-1: USB disconnect, device number 41 [ 211.192615][ T36] audit: type=1400 audit(1776087879.179:31672): avc: denied { shutdown } for pid=7107 comm="syz.0.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.233052][ T36] audit: type=1400 audit(1776087879.217:31673): avc: denied { getopt } for pid=7109 comm="syz.3.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.361381][ T36] audit: type=1400 audit(1776087879.339:31674): avc: denied { create } for pid=7118 comm="syz.3.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 211.777448][ T7135] netlink: 'syz.0.2181': attribute type 1 has an invalid length. [ 212.162446][ T7146] 9pnet_fd: Insufficient options for proto=fd [ 212.168979][ T7146] /dev/md0: Can't lookup blockdev [ 212.205899][ T400] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 212.235693][ T7162] tipc: Enabling of bearer rejected, failed to enable media [ 212.245703][ T7164] tipc: Enabling of bearer rejected, failed to enable media [ 212.367706][ T400] usb 4-1: config 127 has an invalid interface number: 228 but max is 2 [ 212.376330][ T400] usb 4-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 212.383334][ T7179] 9pnet_fd: Insufficient options for proto=fd [ 212.385609][ T400] usb 4-1: config 127 has an invalid interface number: 192 but max is 2 [ 212.405020][ T400] usb 4-1: config 127 has an invalid descriptor of length 1, skipping remainder of the config [ 212.415522][ T400] usb 4-1: config 127 has 2 interfaces, different from the descriptor's value: 3 [ 212.429110][ T400] usb 4-1: config 127 has no interface number 0 [ 212.435658][ T400] usb 4-1: config 127 has no interface number 1 [ 212.442294][ T400] usb 4-1: config 127 interface 228 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 212.453410][ T400] usb 4-1: config 127 interface 228 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 212.454925][ T7188] overlayfs: failed to clone upperpath [ 212.464853][ T400] usb 4-1: config 127 interface 192 altsetting 9 endpoint 0x3 has invalid maxpacket 60183, setting to 64 [ 212.481279][ T400] usb 4-1: config 127 interface 192 altsetting 9 has an invalid endpoint descriptor of length 6, skipping [ 212.492805][ T400] usb 4-1: config 127 interface 192 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 212.500656][ T7190] fuse: Bad value for 'group_id' [ 212.507947][ T400] usb 4-1: config 127 interface 228 has no altsetting 0 [ 212.518145][ T400] usb 4-1: config 127 interface 192 has no altsetting 0 [ 212.518183][ T7190] fuse: Bad value for 'group_id' [ 212.531551][ T400] usb 4-1: New USB device found, idVendor=1266, idProduct=1011, bcdDevice=28.5c [ 212.540856][ T400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.548928][ T400] usb 4-1: Product: 㩓ꆓ [ 212.553378][ T400] usb 4-1: Manufacturer: 퇸ꗸ糕ï±î¬¡Ê§é„™ë¼‘㧎嘺戟첕ﴰ巵é†îªŒá¢—㡽㬒㚜兲椬è±ã¼“鄂苘ꡗ떌컅첺సﳦ䨤࡫鎋栭⌊߸ဳéŠì·ªé¬Šè‰±â›­æƒˆá²‰ã³Šå•žàª‹ê…˜èŒ [ 212.571822][ T400] usb 4-1: SerialNumber: 艂㳯ꦤ繧誧辽胓⪷鱀깲歡둫ê­ê•žêŒé¶ì½¶ê–â‘®æ¾éƒ™ï†¨î‚¡é‡£ [ 213.027577][ T400] usb 4-1: USB disconnect, device number 42 [ 213.068278][ T7198] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.079899][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.087025][ T7198] bridge_slave_0: entered allmulticast mode [ 213.097484][ T7198] bridge_slave_0: entered promiscuous mode [ 213.104500][ T7198] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.111986][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.119322][ T7198] bridge_slave_1: entered allmulticast mode [ 213.125783][ T7198] bridge_slave_1: entered promiscuous mode [ 213.163020][ T7210] overlayfs: failed to clone lowerpath [ 213.172862][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2207'. [ 213.251991][ T7198] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.259112][ T7198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.266480][ T7198] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.273554][ T7198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.299393][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.306951][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.320851][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.327948][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.351033][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.358222][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.411392][ T7198] veth0_vlan: entered promiscuous mode [ 213.427577][ T7198] veth1_macvtap: entered promiscuous mode [ 213.579772][ T36] audit: type=1400 audit(1776087881.422:31675): avc: denied { append } for pid=7247 comm="syz.3.2217" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 213.742786][ T7279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2226'. [ 213.961978][ T330] tipc: Disabling bearer [ 213.967944][ T7288] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 213.976936][ T330] tipc: Left network mode [ 213.995060][ T330] veth1_macvtap: left promiscuous mode [ 214.002169][ T330] veth0_vlan: left promiscuous mode [ 214.203588][ T7295] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 214.205358][ T36] audit: type=1400 audit(1776087882.003:31676): avc: denied { watch watch_reads } for pid=7292 comm="syz.4.2230" path="/1/file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 214.382578][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 214.436659][ T7312] rust_binder: Error while translating object. [ 214.436713][ T7312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 214.443087][ T7312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:15 [ 214.469091][ T7317] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 214.478218][ T7317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:17 [ 214.929564][ T36] audit: type=1400 audit(1776087882.688:31677): avc: denied { accept } for pid=7340 comm="syz.6.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 214.986107][ T686] rust_binder: 0: removing orphan mapping 0:4120 [ 215.279248][ T686] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 215.287401][ T686] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.451617][ T7357] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 215.451640][ T7357] rust_binder: Error while translating object. [ 215.463809][ T7357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 215.470043][ T7357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 215.494530][ T7362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.566229][ T7362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 215.611895][ T36] audit: type=1400 audit(1776087883.326:31678): avc: denied { unmount } for pid=7198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 215.641804][ T36] audit: type=1400 audit(1776087883.335:31679): avc: denied { watch } for pid=7365 comm="syz.4.2255" path="/10/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 216.533311][ T1777] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 216.533341][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 216.689663][ T7403] binder: Unknown parameter '00000000000000000003' [ 216.696893][ T36] audit: type=1400 audit(1776087884.349:31680): avc: denied { create } for pid=7402 comm="syz.4.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 216.726586][ T1302] Bluetooth: hci0: Frame reassembly failed (-84) [ 216.733034][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 216.736769][ T7406] rust_binder: Write failure EFAULT in pid:44 [ 216.946192][ T7408] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 217.163647][ T7420] rust_binder: Failed to allocate buffer. len:160, is_oneway:true [ 217.175136][ T7422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:239 [ 217.183646][ T7423] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.199572][ T7424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:239 [ 217.250512][ T7428] rust_binder: Error while translating object. [ 217.259768][ T7428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 217.265989][ T7428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245 [ 217.304123][ T36] audit: type=1400 audit(1776087884.921:31681): avc: denied { execute } for pid=7432 comm="syz.3.2277" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.349442][ T36] audit: type=1400 audit(1776087884.959:31682): avc: denied { setattr } for pid=7434 comm="syz.3.2278" name="PPTP" dev="sockfs" ino=44504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.109966][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 218.283303][ T7460] rust_binder: Error while translating object. [ 218.283347][ T7460] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 218.289543][ T7460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:448 [ 218.341173][ T7462] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 218.368110][ T7462] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 218.376180][ T7462] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 218.384438][ T7462] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 218.392542][ T7462] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 218.400750][ T7462] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 218.408626][ T7462] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 218.417224][ T7462] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 218.425498][ T7462] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 218.818079][ T7493] 9pnet_fd: Insufficient options for proto=fd [ 218.818173][ T400] rust_binder: 0: removing orphan mapping 0:24 [ 218.921113][ T1777] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 218.924020][ T36] audit: type=1400 audit(1776087886.403:31683): avc: denied { bind } for pid=7505 comm="syz.3.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.140774][ T7526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 219.140811][ T7526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:284 [ 219.209714][ T36] audit: type=1400 audit(1776087886.704:31684): avc: denied { mount } for pid=7515 comm="syz.4.2305" name="/" dev="pstore" ino=2230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 219.407394][ T36] audit: type=1400 audit(1776087886.891:31685): avc: denied { unmount } for pid=7198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 219.465638][ T717] rust_binder: 0: removing orphan mapping 0:24 [ 219.473400][ T46] bridge_slave_1: left allmulticast mode [ 219.479469][ T46] bridge_slave_1: left promiscuous mode [ 219.485211][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.493391][ T46] bridge_slave_0: left allmulticast mode [ 219.499259][ T46] bridge_slave_0: left promiscuous mode [ 219.504957][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.617760][ T46] veth1_macvtap: left promiscuous mode [ 219.623393][ T46] veth0_vlan: left promiscuous mode [ 219.683963][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.691176][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.698347][ T7538] bridge_slave_0: entered allmulticast mode [ 219.704788][ T7538] bridge_slave_0: entered promiscuous mode [ 219.711497][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.718607][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.725920][ T7538] bridge_slave_1: entered allmulticast mode [ 219.732408][ T7538] bridge_slave_1: entered promiscuous mode [ 219.785212][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.792264][ T7538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.799596][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.806714][ T7538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.828859][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.836155][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.846708][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.853815][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.863301][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.870424][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.898433][ T7538] veth0_vlan: entered promiscuous mode [ 219.910269][ T7538] veth1_macvtap: entered promiscuous mode [ 219.941855][ T511] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 219.950895][ T511] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.978882][ T7552] fido_id[7552]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.161419][ T36] audit: type=1326 audit(1776087887.595:31686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643db8eec9 code=0x7fc00000 [ 220.214565][ T7562] veth1: entered allmulticast mode [ 220.219869][ T36] audit: type=1326 audit(1776087887.595:31687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f643db8eec9 code=0x7fc00000 [ 220.244142][ T36] audit: type=1326 audit(1776087887.595:31688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643db8eec9 code=0x7fc00000 [ 220.267891][ T36] audit: type=1326 audit(1776087887.595:31689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643db8eec9 code=0x7fc00000 [ 220.332780][ T7565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 220.332821][ T7565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:292 [ 220.385263][ T7569] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 220.388102][ T7570] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 220.766461][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2324'. [ 220.791329][ T7582] can0: slcan on ptm0. [ 220.968588][ T7596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.969053][ T7596] rust_binder: Failed to vm_insert_page(35184388861952): vma_addr:35184388857856 i:1 err:EFAULT [ 220.975558][ T7596] rust_binder: Error in use_page_slow: EFAULT [ 220.986566][ T7596] rust_binder: use_range failure EFAULT [ 220.993079][ T7596] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 220.998661][ T7596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 221.006748][ T7596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:12 [ 221.063248][ T400] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 221.110578][ T7605] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 221.125139][ T7605] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 221.250734][ T400] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.261656][ T400] usb 4-1: config 0 has no interfaces? [ 221.268034][ T7621] rust_binder: Error in use_page_slow: ESRCH [ 221.268058][ T7621] rust_binder: use_range failure ESRCH [ 221.274148][ T400] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 221.284950][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2330'. [ 221.288900][ T7621] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 221.297670][ T7621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 221.305942][ T400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.310569][ T7621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:17 [ 221.318087][ T400] usb 4-1: config 0 descriptor?? [ 221.336551][ T7623] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.337565][ T7623] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.362759][ T7623] rust_binder: Read failure Err(EAGAIN) in pid:481 [ 221.454500][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2332'. [ 221.562306][ T400] usb 4-1: USB disconnect, device number 43 [ 221.642046][ T7582] can0 (unregistered): slcan off ptm0. [ 222.170595][ T7655] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 222.170595][ T7654] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 222.170621][ T7655] rust_binder: Error while translating object. [ 222.170643][ T7655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 222.181185][ T7654] rust_binder: Error while translating object. [ 222.181260][ T7654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 222.192236][ T7655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 222.198092][ T7654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 222.491550][ T445] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 222.566161][ T717] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 222.662061][ T445] usb 4-1: Using ep0 maxpacket: 32 [ 222.668388][ T445] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 222.676794][ T445] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 222.685461][ T445] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 222.694517][ T445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.704246][ T445] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 222.713996][ T445] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 222.727178][ T445] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 222.736231][ T445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.744983][ T445] usb 4-1: config 0 descriptor?? [ 222.751450][ T717] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.761267][ T717] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 222.774244][ T717] usb 8-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 222.783329][ T717] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.793369][ T717] usb 8-1: config 0 descriptor?? [ 222.966078][ T445] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 222.978413][ T445] usb 4-1: USB disconnect, device number 44 [ 222.985316][ T445] usblp0: removed [ 223.231282][ T717] input: HID 054c:03d5 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:054C:03D5.001F/input/input36 [ 223.248459][ T717] sony 0003:054C:03D5.001F: input,hidraw0: USB HID v40.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.7-1/input0 [ 223.362082][ T7563] veth1: left allmulticast mode [ 223.375829][ T7663] /dev/loop0: Can't lookup blockdev [ 223.404553][ T7668] fuse: Bad value for 'group_id' [ 223.409615][ T7668] fuse: Bad value for 'group_id' [ 223.429500][ T445] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 223.440965][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.449590][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.458608][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.467231][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.475562][ T7660] rust_binder: 7660 RLIMIT_NICE not set [ 223.475691][ T7660] rust_binder: 25: no such ref 3 [ 223.486334][ T7660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 223.486366][ T7660] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 223.495933][ T7660] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:25 [ 223.508275][ T400] usb 8-1: USB disconnect, device number 2 [ 223.568072][ T445] usb 4-1: device descriptor read/64, error -71 [ 223.823878][ T445] usb 4-1: device descriptor read/64, error -71 [ 223.972892][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2340'. [ 224.050293][ T400] rust_binder: 7659: removing orphan mapping 0:1048 [ 224.069663][ T7677] netlink: 'syz.7.2342': attribute type 1 has an invalid length. [ 224.077628][ T7678] netlink: 'syz.7.2342': attribute type 1 has an invalid length. [ 224.085916][ T7677] binder: Unknown parameter 'contextÌðÔð[7’' [ 224.090364][ T445] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 224.134318][ T7691] fuse: Unknown parameter 'user_‰d' [ 224.208324][ T7695] tmpfs: Unknown parameter '18446744073709551615' [ 224.229013][ T445] usb 4-1: device descriptor read/64, error -71 [ 224.484706][ T445] usb 4-1: device descriptor read/64, error -71 [ 224.602151][ T445] usb usb4-port1: attempt power cycle [ 224.664831][ T7700] rust_binder: 486: no such ref 3 [ 224.723969][ T7703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.724420][ T7703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:486 [ 224.731322][ T7703] rust_binder: Error in use_page_slow: ESRCH [ 224.740576][ T7703] rust_binder: use_range failure ESRCH [ 224.746607][ T7703] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 224.752167][ T7703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 224.760176][ T7703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:486 [ 224.772695][ T7703] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 224.789177][ T7703] rust_binder: Write failure EINVAL in pid:486 [ 224.921713][ T400] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 224.964363][ T445] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 224.986777][ T445] usb 4-1: device descriptor read/8, error -71 [ 225.092231][ T400] usb 8-1: Using ep0 maxpacket: 32 [ 225.098587][ T400] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 225.107125][ T400] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 225.115893][ T400] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 225.124921][ T400] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.134592][ T400] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 225.136020][ T445] usb 4-1: device descriptor read/8, error -71 [ 225.144289][ T400] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 225.163461][ T400] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 225.172530][ T400] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.181244][ T400] usb 8-1: config 0 descriptor?? [ 225.402128][ T400] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 225.406811][ T445] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 225.415106][ T400] usb 8-1: USB disconnect, device number 3 [ 225.427178][ T400] usblp0: removed [ 225.434488][ T445] usb 4-1: device descriptor read/8, error -71 [ 225.459636][ T7705] rust_binder: Write failure EFAULT in pid:305 [ 225.532572][ T7709] rust_binder: Write failure EFAULT in pid:309 [ 225.539677][ T7709] rust_binder: Write failure EFAULT in pid:309 [ 225.564232][ T7713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313 [ 225.583140][ T445] usb 4-1: device descriptor read/8, error -71 [ 225.710547][ T445] usb usb4-port1: unable to enumerate USB device [ 225.882064][ T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 225.893751][ T7734] netlink: 'syz.3.2361': attribute type 6 has an invalid length. [ 226.040935][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 226.047447][ T31] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 226.055860][ T31] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 226.064554][ T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 226.073556][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.083234][ T31] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.092964][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 226.106024][ T31] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 226.115079][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.123761][ T31] usb 8-1: config 0 descriptor?? [ 226.243411][ T400] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 226.343594][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.352350][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.361371][ T31] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 226.413995][ T400] usb 4-1: Using ep0 maxpacket: 32 [ 226.420400][ T400] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 226.428850][ T400] usb 4-1: config 0 has no interface number 0 [ 226.436560][ T400] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 226.445655][ T400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.453768][ T400] usb 4-1: Product: syz [ 226.457977][ T400] usb 4-1: Manufacturer: syz [ 226.462574][ T400] usb 4-1: SerialNumber: syz [ 226.467973][ T400] usb 4-1: config 0 descriptor?? [ 226.473914][ T400] smsc95xx v2.0.0 [ 226.900790][ T400] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 226.911566][ T400] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 227.134673][ T400] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 227.145583][ T400] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 227.879305][ T511] usb 8-1: USB disconnect, device number 4 [ 227.886450][ T511] usblp0: removed [ 227.903549][ T7753] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 227.934486][ T7755] rust_binder: Write failure EINVAL in pid:39 [ 228.302006][ T7781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 228.308172][ T7781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 228.378429][ T7784] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2374'. [ 228.414823][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 228.414844][ T36] audit: type=1400 audit(1776087895.335:31779): avc: denied { remount } for pid=7783 comm="syz.7.2374" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 228.673607][ T31] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 228.834575][ T31] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.843256][ T31] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.853431][ T31] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.862480][ T31] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.876591][ T31] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.885682][ T31] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.893768][ T31] usb 8-1: Product: syz [ 228.898790][ T31] usb 8-1: Manufacturer: syz [ 228.906164][ T31] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 228.949123][ T7787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.964107][ T7792] input: syz1 as /devices/virtual/input/input38 [ 229.048739][ T7796] overlay: Bad value for 'uuid' [ 229.054251][ T7796] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 229.064011][ T36] audit: type=1400 audit(1776087895.945:31780): avc: denied { relabelto } for pid=7795 comm="syz.6.2378" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 229.090347][ T36] audit: type=1400 audit(1776087895.945:31781): avc: denied { associate } for pid=7795 comm="syz.6.2378" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 229.117651][ T36] audit: type=1400 audit(1776087895.954:31782): avc: denied { mounton } for pid=7795 comm="syz.6.2378" path="/160/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 229.146123][ T7784] overlay: Bad value for 'uuid' [ 229.151833][ T31] usb 8-1: USB disconnect, device number 5 [ 229.185187][ T445] usb 4-1: USB disconnect, device number 49 [ 229.216305][ T7800] __vm_enough_memory: pid: 7800, comm: syz.3.2379, bytes: 18014402804453376 not enough memory for the allocation [ 229.314265][ T7807] rust_binder: Write failure EFAULT in pid:341 [ 229.507299][ T36] audit: type=1326 audit(1776087896.367:31783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643db8eec9 code=0x7fc00000 [ 229.537171][ T36] audit: type=1326 audit(1776087896.367:31784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f643db8eec9 code=0x7fc00000 [ 229.560845][ T36] audit: type=1326 audit(1776087896.367:31785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643db8eec9 code=0x7fc00000 [ 229.584497][ T36] audit: type=1326 audit(1776087896.367:31786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643db8eec9 code=0x7fc00000 [ 229.608358][ T36] audit: type=1326 audit(1776087896.367:31787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643db8eec9 code=0x7fc00000 [ 229.632031][ T36] audit: type=1326 audit(1776087896.367:31788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7812 comm="syz.3.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643db8eec9 code=0x7fc00000 [ 229.668320][ T7817] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 229.736170][ T7837] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 229.748563][ T7838] input: syz1 as /devices/virtual/input/input39 [ 229.763786][ T7837] input: syz1 as /devices/virtual/input/input40 [ 229.801637][ T7843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2391'. [ 229.823130][ T7845] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 229.919174][ T7854] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 229.930110][ T7851] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 229.984304][ T1302] veth1_macvtap: left promiscuous mode [ 229.991146][ T1302] veth0_vlan: left promiscuous mode [ 230.049102][ T7868] binder: Bad value for 'stats' [ 230.143049][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.151153][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.161671][ T7876] bridge_slave_0: entered allmulticast mode [ 230.168807][ T7876] bridge_slave_0: entered promiscuous mode [ 230.176059][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.183203][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.190402][ T7876] bridge_slave_1: entered allmulticast mode [ 230.196891][ T7876] bridge_slave_1: entered promiscuous mode [ 230.250644][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.257795][ T7876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.265142][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.272214][ T7876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.294278][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.301638][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.311603][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.318716][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.328005][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.335088][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.361806][ T7876] veth0_vlan: entered promiscuous mode [ 230.373666][ T7876] veth1_macvtap: entered promiscuous mode [ 230.535247][ T7894] input input41: cannot allocate more than FF_MAX_EFFECTS effects [ 230.930469][ T7909] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2410'. [ 231.015706][ T7911] rust_binder: Write failure EFAULT in pid:82 [ 231.186052][ T7923] bpf: Bad value for 'uid' [ 231.470469][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 231.677892][ T7946] 9pnet_fd: Insufficient options for proto=fd [ 231.714839][ T7954] __vm_enough_memory: pid: 7954, comm: syz.3.2426, bytes: 18014402804453376 not enough memory for the allocation [ 231.749826][ T7962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.762801][ T7965] rust_binder: Write failure EFAULT in pid:15 [ 231.856809][ T7973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7973 comm=syz.8.2433 [ 231.875644][ T7973] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2433'. [ 232.158992][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 232.297546][ T10] usb 9-1: device descriptor read/64, error -71 [ 232.564119][ T10] usb 9-1: device descriptor read/64, error -71 [ 232.692773][ T7987] rust_binder: Got transaction with invalid offset. [ 232.692837][ T7987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 232.699676][ T7987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:426 [ 232.723932][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 232.739782][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 232.820108][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 232.958393][ T10] usb 9-1: device descriptor read/64, error -71 [ 233.214253][ T10] usb 9-1: device descriptor read/64, error -71 [ 233.331646][ T10] usb usb9-port1: attempt power cycle [ 233.672930][ T1777] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 233.674291][ T632] Bluetooth: hci0: command 0x1003 tx timeout [ 233.693883][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 233.716230][ T10] usb 9-1: device descriptor read/8, error -71 [ 233.854975][ T10] usb 9-1: device descriptor read/8, error -71 [ 233.867033][ T8000] fuse: Unknown parameter '' [ 234.029795][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 234.029816][ T36] audit: type=1400 audit(1776087900.608:31864): avc: denied { nlmsg_read } for pid=8021 comm="syz.0.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 234.030983][ T8022] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2448'. [ 234.065897][ T8022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.109529][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 234.131879][ T10] usb 9-1: device descriptor read/8, error -71 [ 234.270588][ T10] usb 9-1: device descriptor read/8, error -71 [ 234.276313][ T8028] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 234.284976][ T8028] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 234.298408][ T8028] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 234.298432][ T8028] rust_binder: Read failure Err(EFAULT) in pid:105 [ 234.387657][ T10] usb usb9-port1: unable to enumerate USB device [ 234.389717][ T8038] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 234.408228][ T8038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115 [ 234.460324][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 234.630708][ T8046] 9pnet_fd: Insufficient options for proto=fd [ 234.866303][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 234.866316][ T1777] Bluetooth: hci1: command 0x1003 tx timeout [ 235.514690][ T8062] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2462'. [ 235.537782][ T65] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 235.588851][ T8070] overlayfs: failed to clone lowerpath [ 235.663370][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'. [ 235.685850][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 235.697654][ T65] usb 9-1: Using ep0 maxpacket: 8 [ 235.703988][ T65] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.717098][ T65] usb 9-1: config 0 interface 0 has no altsetting 0 [ 235.724320][ T65] usb 9-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 235.733434][ T65] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.742749][ T65] usb 9-1: config 0 descriptor?? [ 235.964896][ T65] uclogic 0003:5543:0042.0020: unknown main item tag 0x0 [ 235.972004][ T65] uclogic 0003:5543:0042.0020: unknown main item tag 0x0 [ 235.979092][ T65] uclogic 0003:5543:0042.0020: unknown main item tag 0x0 [ 235.986293][ T65] uclogic 0003:5543:0042.0020: unknown main item tag 0x0 [ 235.993355][ T65] uclogic 0003:5543:0042.0020: unknown main item tag 0x0 [ 236.000618][ T65] uclogic 0003:5543:0042.0020: No inputs registered, leaving [ 236.008604][ T65] uclogic 0003:5543:0042.0020: hidraw0: USB HID v0.07 Device [HID 5543:0042] on usb-dummy_hcd.8-1/input0 [ 236.178360][ T65] usb 9-1: USB disconnect, device number 6 [ 236.318758][ T8103] devpts: called with bogus options [ 236.657438][ T632] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 236.659047][ T1777] Bluetooth: hci0: command 0x1003 tx timeout [ 236.741833][ T8121] devpts: called with bogus options [ 236.965041][ T8132] rust_binder: Write failure EINVAL in pid:48 [ 237.052411][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2487'. [ 237.141526][ T8138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 237.141554][ T8138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:54 [ 237.220149][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 237.235820][ T46] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 237.361534][ T36] audit: type=1400 audit(1776087903.741:31865): avc: denied { nlmsg_write } for pid=8150 comm="syz.0.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 237.424395][ T31] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 237.585520][ T31] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 237.594809][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.606394][ T31] usb 9-1: config 0 descriptor?? [ 237.850720][ T1777] Bluetooth: hci1: command 0x1003 tx timeout [ 237.850728][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 238.256665][ T31] usb 9-1: Cannot set MAC address [ 238.263984][ T31] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 238.278773][ T31] usb 9-1: USB disconnect, device number 7 [ 238.413872][ T8178] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 238.426521][ T36] audit: type=1400 audit(1776087904.736:31866): avc: denied { relabelto } for pid=8176 comm="syz.0.2504" name="ptp0" dev="tmpfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 238.454839][ T36] audit: type=1400 audit(1776087904.736:31867): avc: denied { associate } for pid=8176 comm="syz.0.2504" name="ptp0" dev="tmpfs" ino=3109 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 238.811044][ T445] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 238.971071][ T445] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 238.979423][ T445] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 238.989842][ T445] usb 4-1: config 179 has no interface number 0 [ 238.996172][ T445] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 239.006282][ T445] usb 4-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 239.019568][ T445] usb 4-1: config 179 interface 65 has no altsetting 0 [ 239.026498][ T445] usb 4-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 239.035820][ T445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.172400][ T65] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 239.260119][ T8189] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 239.269845][ T36] audit: type=1400 audit(1776087905.524:31868): avc: denied { relabelto } for pid=8188 comm="syz.3.2508" name="149" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 239.296216][ T36] audit: type=1400 audit(1776087905.524:31869): avc: denied { associate } for pid=8188 comm="syz.3.2508" name="149" dev="tmpfs" ino=799 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 239.333519][ T65] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.346452][ T65] usb 9-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 239.355700][ T65] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.364684][ T65] usb 9-1: config 0 descriptor?? [ 239.385698][ T632] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 239.392055][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 239.402399][ T8201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2512'. [ 239.406934][ T511] usb 4-1: USB disconnect, device number 51 [ 239.423148][ T8201] macsec0: entered promiscuous mode [ 239.429977][ T8201] macsec0: entered allmulticast mode [ 239.435382][ T8201] veth1_macvtap: entered allmulticast mode [ 239.737328][ T445] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 239.798754][ T65] waltop 0003:172F:0037.0021: collection stack underflow [ 239.805909][ T65] waltop 0003:172F:0037.0021: item 0 1 0 12 parsing failed [ 239.813485][ T65] waltop 0003:172F:0037.0021: probe with driver waltop failed with error -22 [ 239.909043][ T445] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 239.918207][ T445] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.926867][ T445] usb 8-1: config 0 descriptor?? [ 239.958425][ T36] audit: type=1400 audit(1776087906.171:31870): avc: denied { write } for pid=5997 comm="syz-executor" name="149" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 239.985894][ T36] audit: type=1400 audit(1776087906.171:31871): avc: denied { remove_name } for pid=5997 comm="syz-executor" name="binderfs" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 240.016779][ T36] audit: type=1400 audit(1776087906.171:31872): avc: denied { rmdir } for pid=5997 comm="syz-executor" name="149" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 240.045162][ T31] usb 9-1: USB disconnect, device number 8 [ 240.075541][ T8226] rust_binder: Write failure EFAULT in pid:455 [ 240.083413][ T36] audit: type=1400 audit(1776087906.284:31873): avc: denied { map } for pid=8227 comm="syz.0.2523" path="socket:[49485]" dev="sockfs" ino=49485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.183946][ T8235] 9pnet_fd: Insufficient options for proto=fd [ 240.194872][ T36] audit: type=1400 audit(1776087906.396:31874): avc: denied { remount } for pid=8234 comm="syz.0.2526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 240.752598][ T8258] 8021q: VLANs not supported on lo [ 240.834596][ T8264] netlink: 'syz.0.2538': attribute type 27 has an invalid length. [ 240.834660][ T8262] rust_binder: Write failure EFAULT in pid:81 [ 240.914404][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2543'. [ 241.106782][ T8289] rust_binder: Error while translating object. [ 241.106841][ T8289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 241.113134][ T8289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:460 [ 241.186887][ T31] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 241.217953][ T445] usb 8-1: Cannot set autoneg [ 241.222782][ T445] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 241.236485][ T445] usb 8-1: USB disconnect, device number 6 [ 241.287513][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2548'. [ 241.297465][ T8293] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 241.297706][ T8293] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 241.315962][ T8295] binder: Unknown parameter 'maxR00000000000000000000002' [ 241.360145][ T31] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 241.368432][ T31] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.379976][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.390884][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.402168][ T31] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.415363][ T31] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.424487][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.433798][ T31] usb 9-1: config 0 descriptor?? [ 241.439322][ T8278] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 241.545149][ T8304] syz.0.2552 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 241.556318][ T36] audit: type=1400 audit(1776087907.672:31875): avc: denied { read } for pid=8303 comm="syz.0.2552" name="ptp0" dev="tmpfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 241.560767][ T8304] 9pnet_fd: Insufficient options for proto=fd [ 241.583232][ T36] audit: type=1400 audit(1776087907.672:31876): avc: denied { open } for pid=8303 comm="syz.0.2552" path="/dev/ptp0" dev="tmpfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 241.769540][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2556'. [ 241.847336][ T717] rust_binder: 8313: removing orphan mapping 0:24 [ 241.877425][ T31] plantronics 0003:047F:FFFF.0022: unknown main item tag 0xd [ 241.887208][ T31] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 241.897910][ T31] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 242.146784][ T8278] devpts: called with bogus options [ 242.153204][ T511] usb 9-1: USB disconnect, device number 9 [ 242.493594][ T8345] veth1: entered allmulticast mode [ 242.559812][ T8347] veth1: left allmulticast mode [ 242.572966][ T8350] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.596994][ T8357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.603717][ T8357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:496 [ 242.666991][ T36] audit: type=1400 audit(1776087908.704:31877): avc: denied { execute } for pid=8356 comm="syz.3.2568" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.686500][ T8360] binder: Bad value for 'max' [ 242.841422][ T8379] rust_binder: Write failure EFAULT in pid:509 [ 242.992376][ T8388] rust_binder: Error while translating object. [ 242.998607][ T8388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 243.004820][ T8388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:516 [ 243.265411][ T400] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 244.465989][ T8421] netlink: 'syz.0.2588': attribute type 4 has an invalid length. [ 244.473866][ T8421] netlink: 3649 bytes leftover after parsing attributes in process `syz.0.2588'. [ 244.497401][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2589'. [ 245.053676][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2590'. [ 245.329948][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.337220][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.344399][ T8430] bridge_slave_0: entered allmulticast mode [ 245.350864][ T8430] bridge_slave_0: entered promiscuous mode [ 245.357518][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.364585][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.371706][ T8430] bridge_slave_1: entered allmulticast mode [ 245.378309][ T8430] bridge_slave_1: entered promiscuous mode [ 245.438639][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.445728][ T8430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.453071][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.460121][ T8430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.485953][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.493596][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.503287][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.510390][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.519920][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.527033][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.556563][ T8430] veth0_vlan: entered promiscuous mode [ 245.570015][ T8430] veth1_macvtap: entered promiscuous mode [ 246.150820][ T8444] __vm_enough_memory: pid: 8444, comm: syz.3.2593, bytes: 18014402804453376 not enough memory for the allocation [ 246.245326][ T8453] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 246.380292][ T36] audit: type=1400 audit(1776087912.194:31878): avc: denied { listen } for pid=8463 comm="syz.3.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 246.430529][ T8467] binder: Bad value for 'stats' [ 246.436849][ T8467] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2601'. [ 246.749572][ T8486] rust_binder: Error in use_page_slow: ESRCH [ 246.749600][ T8486] rust_binder: use_range failure ESRCH [ 246.756360][ T8486] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 246.762226][ T8486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 246.770263][ T8486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:549 [ 247.251735][ T400] usb 8-1: device descriptor read/64, error -71 [ 247.368306][ T511] hid (null): unknown global tag 0xe [ 247.374554][ T511] hid-generic 0003:0C44:0001.0023: unknown global tag 0xe [ 247.381885][ T511] hid-generic 0003:0C44:0001.0023: item 0 2 1 14 parsing failed [ 247.390031][ T511] hid-generic 0003:0C44:0001.0023: probe with driver hid-generic failed with error -22 [ 247.408153][ T511] rust_binder: 8509: removing orphan mapping 0:24 [ 247.550770][ T400] usb 8-1: no configurations [ 247.555416][ T400] usb 8-1: can't read configurations, error -22 [ 247.688711][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 247.699531][ T400] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 247.720681][ T65] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 247.849696][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 247.860712][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.871665][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.881473][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 247.894525][ T400] usb 8-1: no configurations [ 247.899162][ T400] usb 8-1: can't read configurations, error -22 [ 247.901881][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 247.905594][ T400] usb usb8-port1: attempt power cycle [ 247.912084][ T65] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 247.919168][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 247.924584][ T65] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 247.933618][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 247.942496][ T65] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 247.950340][ T10] usb 4-1: Manufacturer: syz [ 247.959908][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.965428][ T10] usb 4-1: config 0 descriptor?? [ 247.976470][ T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.988572][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 248.002613][ T65] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 248.012028][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.023046][ T65] usb 1-1: config 0 descriptor?? [ 248.106999][ T1302] tipc: Left network mode [ 248.112923][ T1302] veth1_macvtap: left allmulticast mode [ 248.118741][ T1302] veth1_macvtap: left promiscuous mode [ 248.124311][ T1302] veth0_vlan: left promiscuous mode [ 248.244020][ T65] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 248.257263][ T65] usb 1-1: USB disconnect, device number 75 [ 248.264323][ T65] usblp0: removed [ 248.274948][ T400] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 248.296962][ T400] usb 8-1: no configurations [ 248.301600][ T400] usb 8-1: can't read configurations, error -22 [ 248.409839][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 248.415975][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 248.427055][ T10] usb 4-1: USB disconnect, device number 52 [ 248.445560][ T400] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 248.467603][ T400] usb 8-1: no configurations [ 248.472293][ T400] usb 8-1: can't read configurations, error -22 [ 248.478824][ T400] usb usb8-port1: unable to enumerate USB device [ 248.498944][ T8517] veth1: entered allmulticast mode [ 248.558794][ T8518] veth1: left allmulticast mode [ 248.711971][ T65] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 248.871855][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 248.878225][ T65] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 248.886655][ T65] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 248.895385][ T65] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 248.904396][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.914091][ T65] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 248.923825][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 248.936931][ T65] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 248.945995][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.954760][ T65] usb 1-1: config 0 descriptor?? [ 249.174409][ T65] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 249.394278][ T8515] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 249.406943][ T8515] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 249.412887][ T8532] netlink: 'syz.8.2623': attribute type 4 has an invalid length. [ 249.415395][ T8515] CPU: 1 UID: 0 PID: 8515 Comm: syz.0.2617 Not tainted syzkaller #0 67868b434517ba700884c753facc80d4f03a3ea5 [ 249.415429][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.423287][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2623'. [ 249.434700][ T8515] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 249.434759][ T8515] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 249.447668][ T36] audit: type=1400 audit(1776087915.028:31879): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 249.453728][ T8515] RSP: 0018:ffffc9000b74f820 EFLAGS: 00010202 [ 249.466520][ T36] audit: type=1400 audit(1776087915.028:31880): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.479657][ T8515] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888117d45f00 [ 249.479685][ T8515] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffe [ 249.479703][ T8515] RBP: ffffc9000b74fa40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 249.479722][ T8515] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 249.479742][ T8515] R13: 7ffffffffffffffe R14: ffff888103f9c038 R15: ffff888103f9c028 [ 249.507969][ T36] audit: type=1400 audit(1776087915.028:31881): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.529153][ T8515] FS: 00007fdda15f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 249.529197][ T8515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.529216][ T8515] CR2: 0000000000000000 CR3: 00000001241c6000 CR4: 00000000003526b0 [ 249.537936][ T36] audit: type=1400 audit(1776087915.028:31882): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.545183][ T8515] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.545204][ T8515] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 249.545223][ T8515] Call Trace: [ 249.553726][ T36] audit: type=1400 audit(1776087915.028:31883): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.561253][ T8515] [ 249.561272][ T8515] ? __cfi_iter_file_splice_write+0x10/0x10 [ 249.569663][ T36] audit: type=1400 audit(1776087915.028:31884): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.590606][ T8515] ? __kasan_check_write+0x18/0x20 [ 249.590650][ T8515] ? __cfi_iter_file_splice_write+0x10/0x10 [ 249.599726][ T400] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 249.606206][ T8515] direct_splice_actor+0x276/0x4b0 [ 249.614808][ T36] audit: type=1400 audit(1776087915.028:31885): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.634847][ T8515] splice_direct_to_actor+0x4fe/0xbc0 [ 249.634888][ T8515] ? __cfi_direct_splice_actor+0x10/0x10 [ 249.634921][ T8515] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 249.634951][ T8515] do_splice_direct+0x182/0x270 [ 249.634979][ T8515] ? __cfi_do_splice_direct+0x10/0x10 [ 249.779844][ T8515] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 249.785777][ T8515] ? security_file_permission+0x2e/0xc0 [ 249.791390][ T8515] ? rw_verify_area+0xac/0x230 [ 249.796201][ T8515] do_sendfile+0x5c8/0xfb0 [ 249.800651][ T8515] ? vfs_writev+0xcf0/0xcf0 [ 249.805216][ T8515] ? __se_sys_futex+0x28f/0x300 [ 249.810077][ T8515] __x64_sys_sendfile64+0x193/0x1f0 [ 249.815288][ T8515] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 249.821039][ T8515] ? switch_fpu_return+0x12/0x20 [ 249.825997][ T8515] x64_sys_call+0xa26/0x2ee0 [ 249.830612][ T8515] do_syscall_64+0x58/0xf0 [ 249.835042][ T8515] ? clear_bhb_loop+0x50/0xa0 [ 249.839730][ T8515] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 249.845642][ T8515] RIP: 0033:0x7fdda2b8eec9 [ 249.850099][ T8515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.869720][ T8515] RSP: 002b:00007fdda15f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 249.878146][ T8515] RAX: ffffffffffffffda RBX: 00007fdda2de5fa0 RCX: 00007fdda2b8eec9 [ 249.886154][ T8515] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 249.894144][ T8515] RBP: 00007fdda2c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 249.902214][ T8515] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 249.910200][ T8515] R13: 00007fdda2de6038 R14: 00007fdda2de5fa0 R15: 00007ffc0fed0418 [ 249.917907][ T400] usb 4-1: unable to get BOS descriptor or descriptor too short [ 249.918188][ T8515] [ 249.918202][ T8515] Modules linked in: [ 249.926470][ T400] usb 4-1: not running at top speed; connect to a high speed hub [ 249.929416][ T8515] ---[ end trace 0000000000000000 ]--- [ 249.935733][ T400] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 249.957380][ T8515] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 249.958834][ T10] usb 1-1: USB disconnect, device number 76 [ 249.967858][ T8515] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 249.980551][ T10] usblp0: removed [ 249.997359][ T8515] RSP: 0018:ffffc9000b74f820 EFLAGS: 00010202 [ 249.997546][ T400] usb 4-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 250.003898][ T8515] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888117d45f00 [ 250.016470][ T400] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.026288][ T8515] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffe [ 250.032835][ T400] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.039000][ T8515] RBP: ffffc9000b74fa40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 250.048572][ T400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.056714][ T8515] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 250.064420][ T400] usb 4-1: Product: syz [ 250.072710][ T8515] R13: 7ffffffffffffffe R14: ffff888103f9c038 R15: ffff888103f9c028 [ 250.076548][ T400] usb 4-1: Manufacturer: syz [ 250.085776][ T8515] FS: 00007fdda15f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 250.089944][ T400] usb 4-1: SerialNumber: syz [ 250.098333][ T8515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.110815][ T8515] CR2: 000000110c2fcf8a CR3: 00000001241c6000 CR4: 00000000003526b0 [ 250.119055][ T8515] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.127097][ T8515] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 250.135277][ T8515] Kernel panic - not syncing: Fatal exception [ 250.141679][ T8515] Kernel Offset: disabled [ 250.146008][ T8515] Rebooting in 86400 seconds..