last executing test programs:

17m46.827345931s ago: executing program 32 (id=2147):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r2, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000000000000000000000020000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x48}}, 0x0)

17m46.045199132s ago: executing program 3 (id=2157):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
add_key$keyring(&(0x7f0000000180), 0xfffffffffffffffd, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

17m46.018525033s ago: executing program 3 (id=2158):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17m45.865981395s ago: executing program 33 (id=2162):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000649000/0x4000)=nil, 0x4000, 0x15)
socket$packet(0x11, 0x0, 0x300)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$packet_int(r2, 0x107, 0x10, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

17m45.862423335s ago: executing program 3 (id=2165):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x70bd25, 0x478, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20008840)

17m45.839272055s ago: executing program 3 (id=2166):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f00000000c0)={r2})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x3}}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

17m45.772093116s ago: executing program 3 (id=2167):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x80003, 0x3)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
accept4$inet(r1, &(0x7f0000000580), &(0x7f00000005c0)=0x10, 0x800)
write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="0000080001050700030080000600"], 0x1e7)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @empty}, 0x1c)
getsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f0000000000)=""/172, &(0x7f00000000c0)=0xac)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80040, 0x4)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000000c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fff, 0xd, 0x0, 0x4, 0x0, [{0xedd, 0x7, 0x6}, {0x2d, 0x6, 0x4}, {0x6fc81f9b, 0x3, 0xffff}, {0x8001, 0x5, 0xff}, {0x5, 0xbf, 0xfff}, {0x7, 0x4, 0x1}, {0x0, 0x1, 0x5}, {0x4bd8, 0x80000001, 0x81}, {0x54d, 0xd, 0x9}, {0x80, 0xfffff001, 0x1ff}, {0x401, 0xa, 0x8}, {0x1, 0x9, 0x8001}, {0x3, 0x7fff, 0x1}]})

17m45.739251327s ago: executing program 3 (id=2168):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvmmsg(r0, &(0x7f00000002c0), 0x0, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"])
recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000100)}, {&(0x7f0000000180)=""/48, 0x30}], 0x5, &(0x7f0000000240)=""/148, 0x94}}, {{&(0x7f0000000340)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/46, 0x2e}, {&(0x7f0000000400)=""/186, 0xba}, {&(0x7f00000004c0)=""/119, 0x77}], 0x3, &(0x7f0000000580)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001580)=@qipcrtr, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001600)}, {&(0x7f0000001640)=""/142, 0x8e}, {&(0x7f0000001700)=""/182, 0xb6}, {&(0x7f00000017c0)=""/106, 0x6a}, {&(0x7f0000001840)=""/11, 0xb}, {&(0x7f0000001880)=""/59, 0x3b}], 0x6, &(0x7f0000001940)=""/36, 0x24}, 0x1}, {{&(0x7f0000001980)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001a00)=""/159, 0x9f}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x2, &(0x7f0000002b00)=""/213, 0xd5}, 0xf94}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000002c00)=""/196, 0xc4}, {&(0x7f0000002d00)=""/69, 0x45}, {&(0x7f0000002d80)=""/29, 0x1d}, {&(0x7f0000002dc0)=""/12, 0xc}, {&(0x7f0000002e00)=""/93, 0x5d}, {&(0x7f0000002e80)=""/188, 0xbc}, {&(0x7f0000002f40)=""/6, 0x6}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x8, &(0x7f0000004000)=""/61, 0x3d}, 0x9}, {{&(0x7f0000004040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000005300)=[{&(0x7f00000040c0)=""/205, 0xcd}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/78, 0x4e}, {&(0x7f0000005240)=""/179, 0xb3}], 0x4, &(0x7f0000005340)=""/8, 0x8}, 0x9}, {{&(0x7f0000005380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005400)=""/180, 0xb4}], 0x1, &(0x7f0000005500)=""/115, 0x73}, 0x40}, {{&(0x7f0000005580)=@rc, 0x80, &(0x7f0000005600), 0x0, &(0x7f0000005640)=""/23, 0x17}, 0x1}, {{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000005680)=""/21, 0x15}], 0x1, &(0x7f0000005700)}, 0x2}], 0x9, 0x2000, &(0x7f0000005980))

17m45.672292008s ago: executing program 34 (id=2168):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvmmsg(r0, &(0x7f00000002c0), 0x0, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"])
recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000100)}, {&(0x7f0000000180)=""/48, 0x30}], 0x5, &(0x7f0000000240)=""/148, 0x94}}, {{&(0x7f0000000340)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/46, 0x2e}, {&(0x7f0000000400)=""/186, 0xba}, {&(0x7f00000004c0)=""/119, 0x77}], 0x3, &(0x7f0000000580)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001580)=@qipcrtr, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001600)}, {&(0x7f0000001640)=""/142, 0x8e}, {&(0x7f0000001700)=""/182, 0xb6}, {&(0x7f00000017c0)=""/106, 0x6a}, {&(0x7f0000001840)=""/11, 0xb}, {&(0x7f0000001880)=""/59, 0x3b}], 0x6, &(0x7f0000001940)=""/36, 0x24}, 0x1}, {{&(0x7f0000001980)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001a00)=""/159, 0x9f}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x2, &(0x7f0000002b00)=""/213, 0xd5}, 0xf94}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000002c00)=""/196, 0xc4}, {&(0x7f0000002d00)=""/69, 0x45}, {&(0x7f0000002d80)=""/29, 0x1d}, {&(0x7f0000002dc0)=""/12, 0xc}, {&(0x7f0000002e00)=""/93, 0x5d}, {&(0x7f0000002e80)=""/188, 0xbc}, {&(0x7f0000002f40)=""/6, 0x6}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x8, &(0x7f0000004000)=""/61, 0x3d}, 0x9}, {{&(0x7f0000004040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000005300)=[{&(0x7f00000040c0)=""/205, 0xcd}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/78, 0x4e}, {&(0x7f0000005240)=""/179, 0xb3}], 0x4, &(0x7f0000005340)=""/8, 0x8}, 0x9}, {{&(0x7f0000005380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005400)=""/180, 0xb4}], 0x1, &(0x7f0000005500)=""/115, 0x73}, 0x40}, {{&(0x7f0000005580)=@rc, 0x80, &(0x7f0000005600), 0x0, &(0x7f0000005640)=""/23, 0x17}, 0x1}, {{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000005680)=""/21, 0x15}], 0x1, &(0x7f0000005700)}, 0x2}], 0x9, 0x2000, &(0x7f0000005980))

14m32.543780732s ago: executing program 4 (id=5061):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
dup(r1)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x17}, 0x18)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="ffffffffffffff7f79faa992644e35563030303030303030312c00"])
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x40}, @sack_perm, @sack_perm, @timestamp, @mss={0x2, 0x2}, @mss, @window={0x3, 0x10, 0x7}, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f00000003c0)="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", 0xfdef, 0x80c0, 0x0, 0x0)

14m32.534807602s ago: executing program 4 (id=5062):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="04010000", @ANYRES16=r1, @ANYBLOB="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"/263], 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3"], 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioprio_set$uid(0x3, 0xffffffffffffffff, 0x4007)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000080), 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES16=r4], 0x21c}}, 0x0) (async, rerun: 32)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x196) (async, rerun: 32)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x33)
ioctl$KVM_CREATE_VCPU(r2, 0x81007702, 0x2)

14m32.516153732s ago: executing program 4 (id=5063):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp, @window={0x3, 0x1, 0x1}, @sack_perm, @mss={0x2, 0x60a}], 0x8)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
syz_clone3(&(0x7f00000005c0)={0x11c103200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "787bc37b768793ee16f5e4461fc282b2"}]}})
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"})
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
recvfrom$packet(r3, &(0x7f0000000280)=""/130, 0x82, 0x2002, 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"})
r4 = syz_open_pts(r2, 0x20800)
dup3(r4, r2, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44)

14m29.481393246s ago: executing program 4 (id=5120):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
sendmmsg$unix(r2, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x2, 0x40000}}], 0x1, 0x4004080)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="cc0000001b00010025bd7000fcdbdf25ac1414aa0000000000000000000000000a0101000000000000000000000000004e2300004e2400060200103033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000000000000020000f6ff000000060000000000000001000100000000000500005a5206270006000000000000000700000000000000020000000000000006000000000000004562000000000000050000000000030000000000000000f0ffffbc6b6e00020000010000000094b31326000000000000000a00100000000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x8008001}, 0x40804)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xe, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x101, 0x1}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

14m29.480607066s ago: executing program 4 (id=5122):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
chdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
syz_usb_connect$uac1(0x1, 0x71, &(0x7f00000002c0)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x6, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf6, 0x2, 0x1, {0x7, 0x25, 0x1, 0x81, 0xf1, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x5, 0x4c, {0x7, 0x25, 0x1, 0x0, 0x1, 0xe}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x340, 0x4, 0x3, 0x25, 0x20, 0x6}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r4 = dup(r3)
lgetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000340)=@known='trusted.overlay.redirect\x00', &(0x7f0000000380)=""/25, 0x19)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072081f03000500000000", 0x39}], 0x1)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}, {@uname={'uname', 0x3d, 'wfdno'}}]}})
r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r6, &(0x7f0000000240)={0x30000000})
r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r7, r0, 0x0, 0x80000000)

14m28.878103965s ago: executing program 4 (id=5124):
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0xa)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000019c0)=""/109, 0x6d}], 0x1, &(0x7f0000002880)=[@rights={{0x10}}], 0x10}}], 0x4, 0x400000a0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000240)=0x4e6f, 0x4)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"])

14m13.85804866s ago: executing program 35 (id=5124):
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0xa)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000019c0)=""/109, 0x6d}], 0x1, &(0x7f0000002880)=[@rights={{0x10}}], 0x10}}], 0x4, 0x400000a0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000240)=0x4e6f, 0x4)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"])

12m59.38205429s ago: executing program 7 (id=7109):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x802, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000100)='./file0\x00', 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
read(r1, &(0x7f0000000140)=""/16, 0x10)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

12m59.271508832s ago: executing program 7 (id=7110):
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1f, 0x202812, 0xffffffffffffffff, 0x7dfff000)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
gettid()
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0)
keyctl$session_to_parent(0x12)
clock_adjtime(0x41000000, &(0x7f0000000200)={0x4, 0x1, 0x4, 0x0, 0x3, 0x20000000000000, 0x8, 0xfffffffffffffffb, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0xf, 0x4, 0x8, 0x7, 0x5f95, 0x9, 0xa7, 0x2, 0x4, 0x100, 0x7fe, 0x0, 0x5, 0xfff})

12m59.271219341s ago: executing program 7 (id=7111):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
r1 = epoll_create(0x1ff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

12m59.268697372s ago: executing program 7 (id=7112):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x6ba502, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000fc4fbe)=""/80, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r2 = userfaultfd(0x801)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
umount2(&(0x7f00000004c0)='./file0\x00', 0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x298})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

12m59.219763022s ago: executing program 7 (id=7113):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010000000000000080000700000040"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10a, 0x3}) (async)
r3 = mmap$binder(&(0x7f0000571000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000280)=[@enter_looper, @increfs_done={0x40106308, 0x2}, @increfs={0x40046304, 0x2}, @decrefs={0x40046307, 0x2}, @clear_death={0x400c630f, 0x3}, @free_buffer={0x40086303, r3}], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) (async)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000007"], 0x1c}}, 0x804) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000193000/0x2000)=nil, 0x2000, 0x0, 0x6011, r5, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r6, 0x0) (async)
syz_clone(0x80843711, 0x0, 0xfffffcf7, 0x0, 0x0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r2, 0x3) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000300, 0x0, 0x0) (async)
open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

12m59.112019364s ago: executing program 7 (id=7114):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'vcan0\x00', @local})
move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, &(0x7f0000000080)='./mnt\x00', 0x172)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syslog(0x2, &(0x7f0000000000)=""/4096, 0x1000)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x3e, 0x0, &(0x7f00007d0000)=0xfffffffffffffd42)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1f, 0x202812, 0xffffffffffffffff, 0x7dfff000)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
gettid()
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4004004)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r4, 0x1)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10)
keyctl$session_to_parent(0x12)
clock_adjtime(0x0, &(0x7f0000000200)={0x4, 0x1, 0x4, 0x0, 0x3, 0x20000000000000, 0x8, 0xfffffffffffffffb, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0xf, 0x4, 0x8, 0x7, 0x5f95, 0x9, 0xa7, 0x2, 0x4, 0x100, 0x7fe, 0x0, 0x5, 0xfff})

12m59.111749834s ago: executing program 36 (id=7114):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'vcan0\x00', @local})
move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, &(0x7f0000000080)='./mnt\x00', 0x172)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syslog(0x2, &(0x7f0000000000)=""/4096, 0x1000)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x3e, 0x0, &(0x7f00007d0000)=0xfffffffffffffd42)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1f, 0x202812, 0xffffffffffffffff, 0x7dfff000)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
gettid()
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4004004)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r4, 0x1)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10)
keyctl$session_to_parent(0x12)
clock_adjtime(0x0, &(0x7f0000000200)={0x4, 0x1, 0x4, 0x0, 0x3, 0x20000000000000, 0x8, 0xfffffffffffffffb, 0x0, 0x1, 0xffffffffffffffff, 0x4, 0xf, 0x4, 0x8, 0x7, 0x5f95, 0x9, 0xa7, 0x2, 0x4, 0x100, 0x7fe, 0x0, 0x5, 0xfff})

4m32.383794774s ago: executing program 6 (id=14715):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async, rerun: 32)
read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) (rerun: 32)

4m32.383067514s ago: executing program 6 (id=14716):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x739a03, 0x0)
ioctl$TIOCSPGRP(r0, 0x5410, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x2, 0x12)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0xdddd0000, 0x2000, &(0x7f00007b5000/0x2000)=nil})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000a40)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x9b\xb5{\xf1\xd7\b\x14\xe61*\xa1\x96\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xea\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\x12\xff\xf2\xbf(\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdb+o:\xfc\x83\x18\xe46\x8a\x009\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ;\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xaf\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xbd[\r(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x04\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x04\x00\x00\x00\x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb2(T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8M\xd2\x9e_4\v\xf8\x16>\xe7\xcfK\xd1\xec\xaa^\x90\xeb\xf5\xd4\xea\x1b;Kx\x02\x00\xa5\x1e\x81b ==\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99\x88#\x81%\xf8\xd4{\xac\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xddq\x00\xb7)\x8a\x04\xcb%\xeb,\x8a\xa7/W\xe4\xe3\x1d\xf2\xb0\x00S\x12\xab\xd6\xb5\xe7B\xe5\xcb\x91\xb3\xfe\x06C\x16\xe5\xaf}v\xbf|\x15\xea\xfaD\xda\x049j\xe6\x01\xd7\x94\xe4\xcb6\xbf\xfc-\b\x81\xbc!,\xffz\xc6(\xa5\x8d\x0e\xf9\xa6\x04+\xd5\a|\xcey\x93QlIy\b\xda\xbd\xd1\xec\xe1g\xf8w>\xa8\xc2\xa6\xab\rt\xde,\xef\t\x89b\xe8\xd5\xbfE\xbc\xb0s\xc5V\x12\xd4s\x8c\xa0]\xae\xb0\x95\x1f\\9j\r\xe1\xd5\xf5 o\x7f\xa2\xe7\x0f//\xc7\xaa{\x06y:\xbb\xa9\xb8\xe3\xa4!\"\xcb\xd1\xb3\xfe\x91\xd5\x85!\x98\xe7g\x0e\xa5\x18\x8f\xa0$\x90\x95y\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00~\xca\xba\xaf\xbf\xaf\xe8\xaf\x92\xf0\xa4@\xdf\x93\xdas\xa0[\x815}\x8f\x9d\xc4\xd1\x0eP\x1b\xa8#^\xb6h\xa7\x17\a\xfc\x87\xad\xd0i\x1a\xc6c\xdc\xc5L\x1a\x9ar/\xc6B\x1d\xc0\xca\xaf`\xae`\xcdg7\x88\xab\xc8\x1eAx\xb6\x9e\xccG+\xb9.\xcc\xd7\xa6\xfa\x98\xe3\x15\xb5\xbe\xef\xbb\xd3\xca\xa6\xb0!\x86\x1c\xb9gb\xab\xbd\xf2Y\x18\x01/\xbc\xac\xfeh\xd5)\xa2\xe3\xf2&\xf6[+E%P\x1cz[\"\x89j\x19\xe2(\xb68\xa0>', 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0)

4m32.313090295s ago: executing program 6 (id=14717):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1000}) (async)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1) (async)
ptrace$getenv(0x4201, r1, 0x0, &(0x7f0000000080))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x9, 0x7fc00100}]}) (async)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) (async)
sysinfo(&(0x7f0000000140)=""/4096)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00'})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000000)=@x86={0x5, 0x1a, 0x1, 0x0, 0x7f, 0x3, 0x40, 0x5, 0x7f, 0x3, 0x5, 0x2, 0x0, 0x0, 0x1ff, 0xc, 0x1b, 0x4, 0x6, '\x00', 0x8, 0x6}) (async)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x44, 0xc976, 0x6], 0x2, 0x20200}) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f00000005c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) (async)
write$UHID_INPUT(r9, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000003c0))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0xe0bd2a4bb8e8163}, @flat=@weak_binder={0x77622a85, 0x310a, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

4m32.243367326s ago: executing program 6 (id=14718):
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0x7)
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001380)={0x44, 0x0, 0x0, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x68}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000600)={0x0, 0x4, 0x66, {0x66, 0x23, "f09a0eb93f0e2b0c6bdd37deb20a1f2664c41a30d47c6f6097a6b9a2c47c399f40e2e4af9d245e4951d91a76f9a31877d688439ff7680662487896adf6654cbf9eac7ca5864d94c876462073e900ae1810b2d727157477c096ef8885cb06d1f6c2ab02e8"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f00000006c0)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0xc8, 0x1, 0xf4, 0x3, 0xb}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x1fb56d3}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0xaa, 0x8, 0x4, 0x86, "2dd90092", "8c76304b"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x10, 0x7, 0x7, 0x6f, 0xb4, 0x3}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000980)={0x20, 0x13, 0xee, "4ae09882d38a8f719d4c3b1db756b552005df4f61dacebfe31ca9f77328e4c178944f1097cccd146b9739c09986a067ee2111b5e609c1ca4942e620d080f938d33da0f3e914d4bae8b854f491de63f0156033eeb79d44a5e29f1a8efccceb361fcf5dc4c461a986b3ad4819edf30a817a7b9320973b9baf5f4eb8e944bde049a0e478dd90f5588e190078b7cf46cf17dfdc1500019013b7709c051c6ab50ff729dee928259ec96ba1e42209e11a132cd08328344738093cc5790fe763d4335da6708d98aeb5ffb23b22d14620c7d542725dd305e5926e0fe5117242ac11418dea7930559c6b768ca11dca7f8bc66"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0xa0, 0x10}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0xcf}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000b40)={0x40, 0xb, 0x2, 'Ys'}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @random="f4f0b1c41eba"}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "0355"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x463}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x63}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x10, 0xd9, {0xd9, 0x22, "d2375980353dfd5b9925c58f415a2984d236b203c0daa641adf7144ed833f36d137d1f4f0a34a3bbb9709507441fda08028b864ce6ad0cdccb9d9c45cbc68e49af4595c017573b3d789313bb254643f66aeda542df25f8c49a82a96005804a9b8bc053a2275323eb9de9e25c62ee873e4fc6d6b60fe21f009942060f52c4a764f262dc4bfdc99189541ac15df370c5218fe25af7c9d3bab76c1983c8bd0ed0670bc24d96c967e8c359956ed078e2cc2642f8066be693edc619d3372d9c63fb5081c5f0812fe1a2f8bfc56932c055478774c35c00e56269"}}, &(0x7f0000000140)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "404b0a4cbfc200cd7cefcbb18a259af9453bfce7ed97b1ac1a0354a295fb62994bfac39cc68c1deb23b0139c8cd3512580b5fe699fd2a384f0f18c962f3bce33e4983e28a01d9b52706ab7b085"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000400)={0x0, 0xf, 0xdc, "2e0b34fb42a509d3ef13669f8e3f33af41fd4df3a68fc1f4214cef7a11116a46b439e08cb8f2cbfe9da42cd7c1ae85b0034e81023e81dea82ba8e622261543128dc59a6daf6ea2b51fec80e38a4f4500923105d78eed6b730cbd2d09f6a464bc83a5cd0beac216a0083044ba4361482b008c10de09aac2d052768b0fe3cb027826314d771a81d95856f3cb0d6d56804049a2a98ed199a1ece7b79aaea64ee54d3328de9974959d27e8b452fe9c7904e7406321bd8f85f80e3a5d25533746304c5842b844fb94f36fad8f7e60203e08fb922eb0ce55e5f52c774df3a2"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9b}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x48}, &(0x7f00000002c0)={0x20, 0x0, 0x67, {0x65, "272024e0a4e7880beac8090150ba2e0e3a9f22daf667730c4f37a2cd43571267baf0d80f992f223e9fafc16a3235cfa007590b49fdf14fb9f4f38349fb464f68a14d5ea51bfa4df5836fdadeda81892bf1b146955016b5d2163e2606723149e6cd46353074"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x81}})

4m31.664483205s ago: executing program 6 (id=14722):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0xe11, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f00000003c0)="25d7196c03045396b9eff7846a812bfe75fa3496bb8e75411f", 0x19, 0x8014, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

4m31.660990245s ago: executing program 6 (id=14724):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x8) (async)
listen(r2, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x2)
mount$9p_unix(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000002c0), 0x4, &(0x7f0000002440)=ANY=[@ANYBLOB='trans=unix,']) (async)
mount$9p_unix(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000002c0), 0x4, &(0x7f0000002440)=ANY=[@ANYBLOB='trans=unix,'])
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7c, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max'])

4m15.232787349s ago: executing program 37 (id=14724):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x8) (async)
listen(r2, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x2)
mount$9p_unix(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000002c0), 0x4, &(0x7f0000002440)=ANY=[@ANYBLOB='trans=unix,']) (async)
mount$9p_unix(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000002c0), 0x4, &(0x7f0000002440)=ANY=[@ANYBLOB='trans=unix,'])
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7c, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max'])

4m10.051492866s ago: executing program 5 (id=15190):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000000)={0x7, 'veth1\x00', {0x2}, 0xf5})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
syz_clone(0x208800, &(0x7f0000000080)="2b3c555e62a65c382847cc2a1295b9e0b4d08e463b77ba2b94adcf7ea7330877ea7047b50d4973f5f22a6511854354b9d011e8e260b577", 0x37, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="5dfbb98cc9680d50bd9f5819567e06ee35d101f8b92f115fb04b77a42a3bd931313d1128f5ace45fe3822d93a237b7")
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4m9.867063698s ago: executing program 5 (id=15194):
syz_usb_connect(0x5, 0xb3, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2e, 0x57, 0xdb, 0x8, 0x12d1, 0x1436, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x2, 0x6, 0x8, 0x80, 0x3, [{{0x9, 0x4, 0xcc, 0x8c, 0x5, 0x2b, 0xf2, 0x4, 0xe, [], [{{0x9, 0x5, 0xb, 0x0, 0x8, 0x0, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0x2, 0x0, 0x600, 0x10, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xcf, 0x8}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x40, 0x9, 0xeb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0xe9, 0x9, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0xe48}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0xf3, 0x5, 0x38}}]}}, {{0x9, 0x4, 0x54, 0x1, 0x5, 0xbb, 0xe4, 0x85, 0x4, [], [{{0x9, 0x5, 0x4, 0x10, 0x400, 0x9, 0xd1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x6}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x5, 0x7, 0x5}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x6, 0x81}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x2, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8}, @generic={0x2, 0x22}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x0, 0x3, 0x3a}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x110, 0x57, 0x6, 0x5, 0x20, 0xff}, 0x63, &(0x7f0000000b40)={0x5, 0xf, 0x63, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x81, 0xf000, 0x3, [0x3fc0, 0xffff07]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x87e4, 0x0, 0x7, [0xc000]}, @ssp_cap={0x18, 0x10, 0xa, 0xb, 0x3, 0x8, 0xf00, 0x3d, [0x0, 0x3e40, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x5, 0x8, 0xea, 0xc0}, @ss_container_id={0x14, 0x10, 0x4, 0x68, "89fa179298417073543d7e7e12b6cb7b"}]}, 0x4, [{0x82, &(0x7f0000000bc0)=@string={0x82, 0x3, "2e589dac653f2c4fbbaa002ce28b6c964aa655e189560edabd4746c41a8c7dd0b69125883f55fb63fe9d61fa540936012575306d32250f04c7d011d1718942db400635f8b10f985f50aa0743765d8dc925417dd2a8535a34001771b9f53204d564e786e6d49a7cacaabc8927f2d8958b7b6fb85bd9d726a5668ca113aca7acd1"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x480a}}, {0xf2, &(0x7f0000000cc0)=@string={0xf2, 0x3, "76f511d7c1d91376d8b458e011f3f8c3910f7710fc490717d3082b179415824805938299dcb37b7afb1e4bb0a520eb2a0723deb291cd3c53b2072941db84efab2a6276630caada78d86bb337d1d85516a2007fc99e0e286b5a4428ea55ea6dc1f4f8caedcf0e7d4e23a4dd9e0a3f01d7ebad6cc273eb1bdd7f6b347b90da35819489e2819f929e2566f73f2cbda0b7eec8cd41591fc34029a7f2d8d4b28eaa38c0983e9aaff4b64b99acc654af3896fd6280e4b9fc56d1f668227a15343ab044c421b373ae3171801f33790ea5c57e02e36e68625a144797ebb73ad5c3ad78d3563f4a0fd0f130e7fe9ae1851ffc5ef5"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x2801}}]})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x10)
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000001240))
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f00000012c0)={0x3500000000000000, 0xd000, 0xfffffffffffffff8, 0x1, 0x1b})
syz_genetlink_get_family_id$devlink(&(0x7f0000001340), 0xffffffffffffffff)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001580)={0x0, 'pimreg1\x00', {0x4}, 0x6})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000015c0)={[{0x2b, 'rdma'}, {0x2d, 'hugetlb'}]}, 0xf)

4m9.339257836s ago: executing program 5 (id=15203):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b0000000000000000", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001880)=""/147, 0x93}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000000)=""/167, 0xa7}, {&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f00000000c0)=""/254, 0xfe}], 0x9}, 0x11}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe500}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x10}], 0x8, 0x40000000, 0x0)

4m9.207841668s ago: executing program 5 (id=15205):
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3ff2aa7addc18287}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x2c0000d3}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x400, 0x50f, 0x7, 0x0, 0x0, [{{r0}, 0xf444}, {{r1}, 0x4000000000000002}, {{r0}, 0xeffb}, {{r0}, 0x40}, {{r0}, 0x6}, {{r2}, 0x3}, {{r0}}]})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0)
copy_file_range(r3, &(0x7f0000000000)=0xfffffffffffff61b, r3, 0x0, 0x4, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x85000166)
removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00')
r6 = fsmount(r0, 0x0, 0x3)
fchdir(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8})
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000540), 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x48}}, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0xfffffffffffffffc, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x9fffff, 0x800, 0x0, 0x1}, 0x4d)
r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
ioctl$BLKRRPART(r11, 0x125f, 0x0)
r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)

4m9.207504008s ago: executing program 5 (id=15206):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x7, 0x9}, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @sack_perm, @timestamp, @mss={0x2, 0xd}], 0x7)
sendto$inet(r0, &(0x7f00000003c0)="25d7196c03045396b9eff7846a812bfe75fa3496bb8e75411f", 0x19, 0x8014, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

4m9.149262679s ago: executing program 5 (id=15208):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000002c0)=0x8)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
syz_io_uring_setup(0x6777, &(0x7f0000000180)={0x0, 0x100ed94, 0x3401, 0x0, 0x11d}, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
pipe2(&(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x3ff)
sendfile(r3, r4, 0x0, 0x10ffff)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000740)={0x6e, 0x483aa015, 0x0, 0x0, 0x0, "fe00"})
modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x0, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd7000fbdbdf2515db3be9db2f4e178ed9e52b57770000"], 0x20}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r7 = openat$incfs(r6, &(0x7f0000000300)='.pending_reads\x00', 0x0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc058671e, &(0x7f00000000c0))

4m9.09613042s ago: executing program 38 (id=15208):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000002c0)=0x8)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
syz_io_uring_setup(0x6777, &(0x7f0000000180)={0x0, 0x100ed94, 0x3401, 0x0, 0x11d}, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
pipe2(&(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x3ff)
sendfile(r3, r4, 0x0, 0x10ffff)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000740)={0x6e, 0x483aa015, 0x0, 0x0, 0x0, "fe00"})
modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x0, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'})
ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd7000fbdbdf2515db3be9db2f4e178ed9e52b57770000"], 0x20}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r7 = openat$incfs(r6, &(0x7f0000000300)='.pending_reads\x00', 0x0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc058671e, &(0x7f00000000c0))

3m9.364064637s ago: executing program 2 (id=16282):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
mkdir(0x0, 0x83)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000380)={0x26b0, 0x1, 0xffffffff, 0x3, 0x16, "28c4d95d3933aabcf900"})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setresgid(0x0, 0x0, 0xee01)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xa4c81, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4001000010000100000000000000000064010101000000000000000000000000200100000000000000000000000000024e2400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000006c000000e00000010000000000000000000000001a3a0000000000000000000000000000003c10000000000000000800000000000000000000400000000008000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000003000000fcffffff00000000033500000a0000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160001010000"], 0x140}}, 0x0)
r10 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'})
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, 0x0, 0x0)

3m9.302902918s ago: executing program 2 (id=16285):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf3fe000f34e7e4165f081ae3685007000000681411f7a496c0da04003c242f5bedaf6bec340dee490000000000000000c500", 0x0, 0x48)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x800)
setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000180)=0x94b1, 0x4)
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xc2, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36950b544877661c265c83f6f3de2879e0e7dbb5c4335e434c6d8f42f75fc75d10d6f7da01da140ffd57cf696187efc0c35cecfeb6839374632c99b76479234ca7fc472792e6349a7e2f275a2361681d4d69881cd41da136fa1a5dba9f2451520d18d715554dd1a1a075f67f215a498e39ed80"})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)})
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)

3m9.108044421s ago: executing program 2 (id=16286):
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000)) (async)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) (async)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000080))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000100)) (async)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000100))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000140))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000180)) (async)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000180))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0)) (async)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000200))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000240)) (async)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000240))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000280))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000002c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000300))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000340)) (async)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000340))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000380))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000003c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000400))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000440))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000480))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000004c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000500)) (async)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000500))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000540))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000580))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000005c0)) (async)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000005c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000600))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000640))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000680))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000006c0))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000700)) (async)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000700))
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000740))

3m9.107447701s ago: executing program 2 (id=16287):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x77359400}}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r4 = socket$inet(0x2, 0x3, 0x6)
dup3(r3, r4, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000002c0)=[@exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x4, 0x2, 0x29}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}}, &(0x7f0000000280)}}], 0x2e, 0x0, 0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="de3497412f1a98d79a3e68f82daa", @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60641, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="66b8df000f00d0450f7986f4e800000fc75fa8400fc76d0064440f358f499899cd0f3246f6938800000066baa100b83dd917cbef4b0fc76b20", 0x39}], 0x1, 0x53, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0)
write$selinux_load(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="8cff7cf9080000005345354c696e7578a1fee85dfccc939f1d9f3728cd7a05beb57221929a82f54a8676f61b19f59fbec9dc0c4e76ce136647a70d414aa39971eeeb7f1f276472fb11f711867915dfcac5a3597809231fda0ea157b1b927b000ea3ee5867c062a3621c9bce93f51b58b16d9a39952dcd209c8f73a5b1dd7c2fdbecf4ab2cd1a80f8121bd906c020623519cae1efbc6f742077187e2d9982bbf7e6208fdd0c28c161f3953f4fbcfbc9cb5e01407aa64c349e809222b8"], 0xbc)

3m5.898330199s ago: executing program 2 (id=16332):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)})
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r3 = openat$incfs(r2, &(0x7f0000000300)='.pending_reads\x00', 0x0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0))
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000)
r5 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r5, 0x107, 0x12, 0x0, 0x0)

3m5.80012244s ago: executing program 2 (id=16338):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1506000000ffff0180000008003950320730302e48", @ANYRESOCT=r1, @ANYRESDEC=r2], 0x15)
inotify_add_watch(r0, &(0x7f0000000180)='./file1\x00', 0x30000212)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}, {@cache_mmap}, {@nodevmap}, {@noextend}]}})
r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80802, 0x0)
sendfile(r4, r0, 0x0, 0x80000000)

2m49.601641811s ago: executing program 39 (id=16338):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1506000000ffff0180000008003950320730302e48", @ANYRESOCT=r1, @ANYRESDEC=r2], 0x15)
inotify_add_watch(r0, &(0x7f0000000180)='./file1\x00', 0x30000212)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}, {@cache_mmap}, {@nodevmap}, {@noextend}]}})
r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80802, 0x0)
sendfile(r4, r0, 0x0, 0x80000000)

4.823880308s ago: executing program 9 (id=19325):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x40102, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x24)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000340)={0x8})
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x20}}, 0x40816)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000100)=@ethtool_cmd={0x17, 0xc, 0x8, 0x7, 0x2, 0x4, 0x3e, 0x9, 0x10, 0x7, 0x9, 0xfffffff9, 0x401, 0x4e, 0x2c, 0x1, [0x9, 0xfffffda0]}})
syz_usb_connect(0x3, 0x5f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x7b, 0xa6, 0x10, 0x50, 0xccd, 0x10af, 0x4586, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x2, 0x2, 0x30, 0x0, [{{0x9, 0x4, 0x41, 0x4, 0x5, 0xa2, 0x97, 0x18, 0x1, [], [{{0x9, 0x5, 0x2, 0x9e22d4c23c4f2da2, 0x200, 0x9, 0x1d, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x6, 0x0, 0x6}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x87, 0x8}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x9, 0x9, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x8, 0x8f, 0x9}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x3, 0xc, 0x3, 0x10, 0xba}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0x43, &(0x7f00000002c0)=@string={0x43, 0x3, "6487b03675ce9f32f71ff7788443e7102e8f5c52341192ac905bda6670d6b9ad2bbab3847c40269c4b749dc32722c95863d8ee9878b72bd12321160585498a1a10"}}, {0x20, &(0x7f0000000440)=@string={0x20, 0x3, "0e4b0a1e199f61368c6e24bf02a402eafee34384cff5da2ca29428edb120"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3401}}]})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@weak_binder={0x77622a85, 0x1101, 0x3}, @fda={0x66646185, 0x4, 0x0, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"})

3.537564608s ago: executing program 0 (id=19348):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
write$selinux_attr(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2c00c0c4)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$peeksig(0x4209, r3, &(0x7f00000003c0)={0x1, 0x2000000}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2.71771795s ago: executing program 8 (id=19349):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10)
newfstatat(0xffffffffffffff9c, &(0x7f0000003200)='./file1\x00', &(0x7f0000003240), 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpeername(r7, 0x0, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x29}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}], 0x40}}], 0x1, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40004)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000004fdeeb6f31d93c478e1c6aef0f5de166fc6d676b4909137a178fb2423be87053317868028d593ce8e1e5e708555f8c03871b951e92bce116c257600206fe7cf76ebe635b7dd223faf3791bd763b0d03dc4f669d0a60c7c4f852af08767c8b57b09a1b90a95c9ffa6745b5b6579473b76b45fa06ba07dd4e7e444c04fa4d678e969a2a666e90bc90fd209be7e9e9f5fe3a27abae2605eb7eb0bb875aced2b898a298526203a45e7548b9d260924508f856d70d83bc3f9b2cca7fad21f6ce5ad24a5d1e3322067c5f113cc92011472eb0fa98bcf7438c204f18c9b45019154b0e67e6f9ad2050c9e3a51652bb3a7d98a8dd4ddf1d89e28737549a27a739d6334c7be84e472098c5428bb240ff5be9a1a4d263265502a65b07e6f95ceb7d506a5b9b8821a7674a789100df1496eae79d4378ab00a23af372ba84f9e7e", @ANYRES16=r5, @ANYBLOB="00082abd7000fddbdf252e0000000c00990005000000660000001000e3800c000000080002000200000010009d00000000000500060001ff0000050019010b00000004009300"], 0x4c}, 0x1, 0x0, 0x0, 0x40840}, 0x40080)
connect$802154_dgram(r2, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x8, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)={0x910, r5, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fffffff, 0x6b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x9005}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x8c8, 0x111, 0x0, 0x1, {0x8c4, 0x5, 0x0, 0x1, [{0x228, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x91c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfb3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xaa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x290, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x200, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x3f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x13c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe0}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x279c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xda}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x230}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}]}}]}, 0x910}}, 0x20000008)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000340))

2.6861359s ago: executing program 8 (id=19350):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3ea, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x4810)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r3, 0x0, 0xffffffff004)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000500)="10030600e0fc020004aa96a13bb1000011000a7389f252ae0dba4c807fca1a0022afc0d5071a204bd31870", 0x2b, 0x40800, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x6}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

2.611282521s ago: executing program 8 (id=19351):
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000040)=0xb2b9, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000002d80)={0x5, 0x6, 0xa})
close_range(r0, r1, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000180)="d66112", 0x3)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$rnullb(0xffffffffffffff9c, 0x0, 0x60e41, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x800, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000000000/0x3000)=nil)
preadv(0xffffffffffffffff, &(0x7f0000011480)=[{&(0x7f00000102c0)=""/189, 0xbd}], 0x1, 0x2, 0xe)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ff"]) (async)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ff"])
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0xfffffffe}) (async)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0xfffffffe})
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000))
close_range(r3, 0xffffffffffffffff, 0x0) (async)
close_range(r3, 0xffffffffffffffff, 0x0)

2.610549811s ago: executing program 0 (id=19353):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000008)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902"], 0x0)
ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffed, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @fda={0x66646185, 0x1, 0x0, 0x16}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000500)={0x0, 0x18, 0x38}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"})
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x6, 0x6, 0x5, 0x10, 0xd}, 0xdd, &(0x7f00000005c0)={0x5, 0xf, 0xdd, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "48b8784cb177e7aeeede8287d8093b30"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "2a025a7e8c5cf4bc53948de41a5bbbc3"}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x5, 0x11f00, 0x7, [0x3f, 0x0]}, @generic={0x8b, 0x10, 0x4, "2ef835ec7c07314b97ed9de49e717b2ce73f3b491eb5182286f81dc1d2d112ff03000000000000ce58d40c917bb71e7af8865533e3a90058bfa56831157f802d484feea9874a27f8557ea471a0faa7b8b89048c4f4ef1611efaa26b89e074f21612022aeb3c0a69021f0bf478af045a2ce9c27f2d674382c08d25630f119d83593002db1e08f2341"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x7, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x17, 0x3, 0x4}]}, 0x2, [{0xb3, &(0x7f00000002c0)=@string={0xb3, 0x3, "b8dcc8efedc6d7d3761b8cbc006ec3022ba6cb90e5e79b5dfbe8b59c2931cff06795c0385c5b3538988f0f77e00954008332d90406f476324d842312c058f6a72763a71bec08cc72de81b07794d7f56e78122647c9f0fa923e5f03ed5e653e4aa97d6ca6720984f63ceced18cfa4214422c49d960e712e08eb248629c21a16e4595889c019517e562a7930aa6898599f4b2aee44238fe3dfa7f2fce7fd4cb01f85ad7a468d841149b367f22b7b4e12bb61"}}, {0x80, &(0x7f0000000400)=@string={0x80, 0x3, "42e274b1e073ad05e37796f5b6e5e1248a3dc6089f214850c67427f117b7402933160475d61243028e30d8c0b5956910bd273229c335481fb179c01c0469b210d7313601d1bcf15d8cbfd56b0db874466f3b26fbe5a5f1a055490f8b43fc3f86781b5d67c63735c97451b9b778c8ebfb992c8df5881a5d080c3b575da206"}}]})
getpgrp(0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132)

2.563270602s ago: executing program 8 (id=19354):
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000004c0)="fc0000001c000704ab5b2509b868030002ab087a0100000002481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400604033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177332e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd5339ec2a0f0d1bcae5fa0f5fcbbc7bc190bd06a76a715498fe9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd64338034a084f2013cd1890058a10000c880ac801fe4af", 0xfc)
dup(r0)
r1 = socket(0x29, 0x4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
keyctl$negate(0xd, 0x0, 0x5, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000f2000040"])
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
r5 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @empty, 0x1}, 0x1c)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x13, r6, 0x232dd000)
ptrace(0xffffffffffffffff, r5)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) (async)
socket(0x8000000010, 0x2, 0x0) (async)
write(r0, &(0x7f00000004c0)="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", 0xfc) (async)
dup(r0) (async)
socket(0x29, 0x4, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
keyctl$negate(0xd, 0x0, 0x5, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000f2000040"]) (async)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async)
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (async)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @empty, 0x1}, 0x1c) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) (async)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x13, r6, 0x232dd000) (async)
ptrace(0xffffffffffffffff, r5) (async)

2.455808253s ago: executing program 8 (id=19355):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6d7, 0x400800)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x2, 0x2, 0x5, 0x7ff, 0x1, r1})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x105041, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000040))
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x1, 0x7, 0x1, 0x3e, 0x9})

1.804146793s ago: executing program 0 (id=19356):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000002480)=ANY=[@ANYBLOB="59bd2fd1d07a9d1786f9d024f7769586f2e4464e4c54392c7d09f9e6a513", @ANYRESHEX, @ANYRES8, @ANYRESOCT=r0, @ANYBLOB="be01eba6903ed5e963fee523882595c9a306e10071e5287e027e69818630f722173c046d63d613426e7131e3f5411b2d0e9a636c9ec927edaefe"], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000080)=0x7ffb, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10)
poll(&(0x7f0000000000)=[{r4, 0x5188}], 0x1, 0x6)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x2d, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

1.802592963s ago: executing program 0 (id=19357):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18)
r0 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x40000000}, 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0)

1.630606526s ago: executing program 9 (id=19358):
r0 = memfd_secret(0x80000)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x27}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfa}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x4}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40002}, 0x20000000)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', <r5=>0x0, 0x2f, 0x4f, 0x5, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x20, 0x1, 0x40000000, 0x1}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004010)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'erspan0\x00', <r6=>r5, 0x7840, 0x8, 0x5, 0x4000, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast2, @empty, {[@generic={0x7, 0x9, "6abbc997a52153"}, @timestamp_prespec={0x44, 0x3c, 0x36, 0x3, 0xf, [{@broadcast, 0xffff}, {@local, 0x1}, {@empty, 0x8}, {@loopback, 0x5}, {@loopback, 0x4}, {@multicast2}, {@loopback, 0x6}]}]}}}}})
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x4e22, 0x9, 0x4e24, 0x6, 0xa, 0x80, 0x80, 0x5e, r6, 0xee01}, {0x6, 0x400, 0x200, 0x2, 0x2, 0x2, 0x4, 0x10001}, {0x5, 0x1734, 0x100000001, 0x3}, 0x4, 0x6e6bb9, 0x2, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3504, 0x4, 0x3, 0xfd, 0x7f, 0x7}}, 0xe8)
ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523)
ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f00000006c0)={0x81, 0x0, 0x1})
sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)=@report={0x264, 0x20, 0x200, 0x70bd2c, 0x25dfdbfe, {0x32, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e24, 0x4000, 0x2, 0x20, 0x20, 0x2e, r6, 0xee00}}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x0, 0x2}}, @algo_crypt={0xf6, 0x2, {{'chacha20\x00'}, 0x570, "62edef09182e332541a3823670c0c7e31425822be806e313c506f75bd1634260689c340561b83aa6ad9276356aa45fa3d7e2c39b60ec968d8f1948140a6603b2849a52c2fa1cb130b103d4a98f7e9971fbbd28fed5462d7742991539d1f60764940200b4607eb9ded201f0fca091efe7c4b47692acf5fbb4a88f7e06dc1767f7c42444e0cf3f32983cbe411f13c593b59e5709b4fe7a06b568653f8596debae748ada5b04acb66983727474f9f7f"}}, @algo_auth={0xa5, 0x1, {{'michael_mic-generic\x00'}, 0x2e8, "551593605cff801fc29c3da1ce57cab9b5d7646f15dd651247628f6bee5897a96909f64f39d25f9cdf6fb0de62de6051c6cc79146933cb581c3f25da1b733d39cf1d373394896b78652847c1475096adad18e2f6a2cc927729aa024e03"}}, @extra_flags={0x8, 0x18, 0x1a}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}, @coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@mcast1, 0xa, 0x7, 0x1}}]}, 0x264}, 0x1, 0x0, 0x0, 0x24044044}, 0x40085)
r7 = openat2(r0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x200, 0x20, 0x29}, 0x18)
lseek(r7, 0x5, 0x3)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x3, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x5}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xeb}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000004}, 0x8004)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x1bc, r1, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x4a}}}}, [@NL80211_ATTR_TESTDATA={0x7e, 0x45, "0e788692137205b83df7da6037a9af379d5e90adcc1d3dfad48101e7a8d30aeda72ad93e306097977b058d8f0a035db04c8df8ff6f5dc5334df90902068f9b3b5330d1b6236176801f76ce58f0a3c6461c055db9e37ce4e8528ee768d4b6aad525b7fd6cce0848ed1825546d035cdc1d456d9caf34fcfb581098"}, @NL80211_ATTR_TESTDATA={0x103, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x17, 0x45, "af0f4eb38028cc897f3374f98025207a2b7ad4"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ec0), r0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x400c000)
ioctl(r0, 0xfffffff9, &(0x7f0000000fc0)="9b0e2dc82e6567edef5df99cfaf33460955227e90d6b2f1f81e5835522587027df33183dc76c7b2f2420d19ebd13bb00d9652e83fccec273c97864f3e2bad8bc63367fb9c29271fda9d47cdc8c23ff48b3fb7969f3aefcce07132191d36dd40489b08d1ba9f2c1a97e5d580dee3f1b747d9592b2f81b3f433042ff5601b396a5a81852d8e25d47bd832e5c25ba86a4ca364881f1ab")
r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001080), 0x2800c0, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r9, 0x40103d0b, &(0x7f00000010c0)={0x3})
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000001600)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x208400}, 0xc, &(0x7f00000015c0)={&(0x7f0000001140)={0x444, 0x3f3, 0x200, 0x70bd2b, 0x25dfdbfd, {0x3, 0x1, 0x24, [0x9, 0x2, 0x7, 0x80, 0x6, 0x6, 0x8, 0x6, 0xbe, 0x2, 0x4, 0xf, 0xa9ca, 0x3, 0x2, 0x7, 0x101, 0x401, 0x3, 0x5, 0x80000001, 0x7, 0x9, 0x80, 0x8, 0xfffff715, 0x1, 0x7ff, 0xffffff9e, 0x2, 0xb7915e67, 0x8, 0x7, 0x1, 0x5, 0x80000000, 0x6f5, 0x6, 0x0, 0x8, 0x6, 0x5, 0xfff, 0xa, 0x1f219ae9, 0x0, 0x4, 0x1a, 0x7, 0x83, 0x401, 0xfffffff8, 0x4, 0x3, 0x3, 0x7, 0x7, 0xff, 0x10000, 0x7, 0x2, 0x7, 0x7, 0x9], [0x7, 0xd, 0x70, 0x6, 0x9, 0xdd4, 0xcd, 0x3, 0x8, 0xe2, 0x5, 0x2cbb, 0x9, 0x1b93, 0xfffffffa, 0x1, 0xab85, 0x6, 0x8d7, 0x3, 0x800, 0x9fe1, 0x1, 0x6, 0x10000, 0x0, 0x4, 0x6, 0x1, 0x4, 0xdd51, 0x2d, 0x3b14, 0x7, 0x8, 0x5, 0xd3a, 0x0, 0x5, 0x7, 0x10, 0x8, 0x43821b93, 0x307, 0x1, 0x1, 0x7, 0x9, 0x4, 0x3, 0x3, 0xa000, 0xb5, 0x1, 0x3ff, 0x87, 0x11cc, 0x8000, 0xc80, 0x6, 0x2, 0x2, 0xffffff81, 0x101], [0x6, 0x6, 0x9, 0x5, 0xfffffe44, 0x1, 0xe2, 0xa1b, 0x1, 0x9f1b, 0x7f, 0x6, 0x1, 0x40, 0x7, 0x4, 0x5, 0x80, 0x3, 0x3, 0xb43e, 0xffff, 0x0, 0x5, 0x0, 0x8, 0x64, 0xc5ae, 0x9, 0x81, 0xe0, 0x8, 0xffff, 0x6, 0x0, 0x3088, 0x0, 0x9, 0x6, 0x7, 0x8, 0xc1e2, 0x1, 0x1, 0x0, 0xfff, 0x7f, 0x2, 0x4, 0x1, 0x8, 0x2, 0x0, 0x100, 0x2, 0x10, 0x2, 0x1, 0x0, 0x7, 0xe, 0x9, 0x10, 0xfbf], [0x8, 0x7ff, 0xb19c, 0x0, 0x6ff5, 0x6c29ab6, 0x4, 0xffffffff, 0x2, 0x81, 0x9569, 0x800, 0x8, 0x2800000, 0x8, 0xc, 0x19db, 0x7cc, 0x4, 0x4, 0x5, 0x2, 0x1, 0x463, 0x7, 0xfffffff9, 0x7cda504d, 0x7, 0x5, 0x7, 0x5, 0x9, 0x2, 0x7, 0x101, 0x0, 0x7, 0x6, 0x9, 0x0, 0x1, 0x6, 0x7, 0x400, 0x8, 0x2, 0x2, 0x101, 0x9, 0x2, 0x4, 0xfffffffb, 0x9, 0x100, 0xe, 0x4cd7, 0xc, 0x9, 0xbe1, 0x9, 0x4, 0x6, 0xfffffff7, 0xcf3e], 0x22, [',\'.%[@\x00', 'team0\x00', 'nl80211\x00', 'ethtool\x00', 'syz0\x00']}, [""]}, 0x444}, 0x1, 0x0, 0x0, 0x20048008}, 0x4000)
ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000001640))
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa0, r10, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffeff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x180}, 0x40040c0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000001840)={0x30, 0x5, 0x0, {0x0, 0x4, 0xffffffffffffffff, 0x18a0000}}, 0x30)
ioctl$TIOCSISO7816(r7, 0xc0285443, &(0x7f0000001880)={0x7, 0xfffffffb, 0x4, 0x780f, 0x2})

1.613177356s ago: executing program 9 (id=19359):
r0 = socket$inet(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x6, 0x7fffffffffffffff, 0x6}}, 0x30)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0])

1.555862347s ago: executing program 9 (id=19360):
r0 = memfd_create(&(0x7f0000000600)='[\v\xdbX\x00\x00\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2C\x8bd#S\xdd\xeeM\xbb\xce\x82\x1eb;(\xb5\xe1jS\xd6\x91%}l\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3\t\x00\x00\x00`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x83\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8\xf2\xfb\x86\xed,\x93Y\xf58\x1c\x1bQ=\xbd\x8e \xeb\xa9\xeaU\xa9za\x18\x87\xed\xb4I\x14\x8c\xb0\x18\x1dI{\x8e\v\xb7\xb6\xd3g\x7fM\xfb\x9bG\xe8\r\x93t\x01\x9f\xb9\x15\xca\xc1Mm\xe4\xca\xc8\x84\x80c\xea\xd4\x16@\x84\x1f|M\xd3]S\xca\r\xff\xac\x879\x85\xb4c\xa1\xe9\xe5\xc0\xdf\xc4\x12#\x11\xa9#HR!\xb2\x13\xd5 \x10\x9fyd \x15\xa5\xdb\xac\xc5k\xf2\xd9m\xab\x92\xd2\xb7z\xed^\xd2<XD\xcfW\x88\xd5UR\xd5\r\xa2\xed^\xfe0\x83\xee\xd5\xd1\xe9I\xc9\xa7\xd2\x90]\xdfRY\xc8\xad0\xb4\x1b[\xe5\xa7\xdf\xee8\xfc?\x0f5\xf9R3V2\x8fo+<\x97\x10Q\xfe\x8b\xbd7\x05Q\f\x94E\xd38*\x9c\xb5\x01\x8e', 0x3)
write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002)
pwrite64(r0, &(0x7f0000000040)="ab18", 0x2, 0x2)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc8900, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xac382, 0x0)
select(0x40, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x7, 0x8, 0x9, 0x5, 0x7}, &(0x7f0000000040)={0x3, 0x1, 0xffff, 0x5, 0x1000, 0x7, 0x10, 0xcc}, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0x7fffffffffffffff)

1.140540903s ago: executing program 8 (id=19361):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x3b, 0x5a, 0x3d, 0x40, 0x1de1, 0xc102, 0x56c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0xc, 0x40, 0xe, [{{0x9, 0x4, 0xa2, 0x5, 0x0, 0xb1, 0x5, 0xc, 0x14}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f05000b"]})
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x7, <r1=>0xffffffffffffffff, 0x1})
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x1, 0x9, &(0x7f0000000080)=0x6})
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x2c, r3, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffe38, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0})
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
setresuid(0x0, 0x0, 0xee00)
r6 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x10000000)
r8 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
read$rfkill(r8, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000240)={0x60, 0x13, 0xb, 0x9, 0x80, 0xffffffff, &(0x7f00000001c0)="cdd193ed88fb6ebccad9943fc4d07133f73470eaa3f929c93f213f244ed5a23294407b335b4bc81fdd330e53a90399d646567db5b47a8145e93ce49f94fef01c67e929c57dfe7d92dcbd328a058e9b1f966569ec2e294bb23766775ccc4154a0faabfbdd761e399ed5eac781db350fac851937311a63680248bd134f472883bc"})

913.093866ms ago: executing program 0 (id=19362):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1)
splice(r0, 0x0, r2, 0x0, 0x22, 0xd)
read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020)

907.560767ms ago: executing program 1 (id=19363):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x9, 0x7ffffffd, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, 0x98a7b4798dbc2b0b, 0x80, 0x1, 0xffffffef}})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0)
syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r1=>0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
pwritev2(r2, &(0x7f0000001780)=[{&(0x7f0000000040)="30b2086b25c2ba8839f32eec0c0518066909ccc9a932a0d380de1cd765b58292fd736269c4a66416e04f0f5d2d54cb27bd2c869d", 0x34}, {&(0x7f00000003c0)="9da5442532a883f549ba497599f1a3ec750cdefc6b2c34670a012a43387f799a189e0360310594b6ffdd4df885ce66bc316f1acfa432cf4e52825789e43964c00d08275d90c53bdaf6555613b420f9d90ab9fdf7ac189f613d92a32a42832961aaa4e38b573a21998c9fbbffbcc4126581181fa303cb1c0a3bc9b7025bbbd8ffa46ade019c13ee7cb720859371b2e8156f4780b779afe4caabc48c8a37e2e14edcad5e11e04e6c01e44de1a59c682345215ea0a179860346be6b1f53b9dfb5265a0fcdd2", 0xc4}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000004c0)="a0a1011d777dd2acfed4f0aa4cb9034439270e70bd6c9da96a50166d96ba52093ec0c9e7ea556456565772e8c4f9bd3f386fb21b2d76215eff11677fcd8f96b188fefcea11bfeffb5150fae7b3bac939307081419ce5e7e9bf0d45afde00598ff030359ee06d2bc6bf10bc170114528fbe2ae5192946dec619f4b0d6048014a286e8e179b4e33790b8ccd4bbc4d5902934086f4dafb4e7dd1e04ec11101570a8b1e09f9dfb82f1b3548474df3ddc31559247b3d4ab0a3850cc4d3c1fa3903ea62a24fcede24d1009be8ddcff7e31f629d79e30b664c10457618d89dc0b7f2f93f1cc11b82be090c03e", 0xe9}, {&(0x7f0000000240)="85eedc557eb7195629d889b750126bd2240691ec219a1002f24ed90add9aa4880c4ab073459baf8c820cf557560473c2649658c5f4379a340c7b921f7773c62627abf77635a140ea32775e9c750122108dc481bdcea85511d7253ec6522a672e19d48b0801e9fa270724b87f46be51cd12d744a266b60c43966526fb876239062c35f4fa3c04875cddc11c9fda3bf023419373120c57adf30379dfc71f249a9669d02ae85992b598bb1eca4371cb1e4ac80fbb2cba28bbdf07", 0xb9}, {&(0x7f00000005c0)="2d7b39e8cecc893d8b37771abd1b3e039022225fb9473472181865c240dd030249efac4b5e0081ea64ca8217158945e3778d1d1e61c5eb10bfe6a8fe102f14e6f0ba09cf5f58183f3af4302a60fa6f4c1651213f6bbb6bf82da3aec15ad6e51b30", 0x61}, {&(0x7f00000016c0)="b153ddf30c996e80d23b1ff2e978007e2445c6bea54e1b29a46d0f3c1896479816433ba43ffa8dd22865a42fd1cd801b52a0e961a58c07d814e16ad5d01ed86197533f45750217e697518cdc2f9fdbb9a3d2be2ba9020771a5dad0b65437689e87151c7eca7427c9b0330e904c9ecfcfc07e3f32ba05eb72b2421872f74d23b41dffd2ac82be72da6a24d7ded986a468250082", 0x93}], 0x7, 0xe, 0x8001, 0x1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f00000000c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000, 0x4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioprio_set$uid(0x3, r4, 0x4007)
r5 = geteuid()
setfsuid(r5)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)

679.74664ms ago: executing program 1 (id=19364):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x48}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x2}, 0x50)
r2 = syz_pidfd_open(0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x294, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff7f}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9a}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x33}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x67d1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xdc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9981}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb9a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x294}}, 0x850)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x94, r4, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff8000, 0x11}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x800)
setns(0xffffffffffffffff, 0x4000000)
read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020, 0x0, 0x0, <r5=>0x0, 0x0, <r6=>0x0}, 0x2020)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002900)=<r7=>0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002940)=<r8=>0x0)
syz_clone3(&(0x7f0000003b40)={0x10000, &(0x7f0000002980), &(0x7f00000029c0)=<r9=>0x0, &(0x7f0000002a00), {0x37}, &(0x7f0000002a40)=""/140, 0x8c, &(0x7f0000002b00)=""/4096, &(0x7f0000003b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58)
syz_clone3(&(0x7f0000003c00)={0x10004000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x29}, &(0x7f00000007c0)=""/87, 0x57, &(0x7f0000000840)=""/118, &(0x7f0000003bc0)=[r6, r7, r8, 0x0, r9], 0x5, {r2}}, 0x58)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000003cc0), r0)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000003e00)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d00)={0x88, r10, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000010}, 0x808)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000003e40)={0x7, 0x7b, 0x2}, 0x7)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000003e80)='bic\x00', 0x4)
r12 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r12, &(0x7f0000003ec0), 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000003f40)={0x5, &(0x7f0000003f00)=[{0x0, 0x9, 0x7, 0x8}, {0x3, 0xa, 0x91, 0x3}, {0x3, 0xd1, 0x6, 0x8}, {0x100, 0x6, 0x3, 0x4}, {0x800, 0x9, 0x8, 0x5}]})
setsockopt$SO_TIMESTAMP(r12, 0x1, 0x40, &(0x7f0000003f80)=0xf7dc, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003fc0), r0)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004040), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000004200)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000041c0)={&(0x7f0000004080)={0x128, r13, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc000}, 0x4040005)
newfstatat(0xffffffffffffff9c, &(0x7f0000004240)='./file0\x00', &(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, <r14=>0x0}, 0x2000)
r15 = getuid()
setresuid(r5, r14, r15)
syz_io_uring_complete(0x0)

678.57226ms ago: executing program 1 (id=19365):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
epoll_create(0x10000e9) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@userxattr}, {@verity_on}], [{@obj_user={'obj_user', 0x3d, './binderfs/binder1\x00'}}]})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/13, 0xd, 0x0, 0x1}, @flat=@handle={0x73682a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0})

676.83745ms ago: executing program 9 (id=19366):
r0 = socket(0x8000000010, 0x2, 0x0) (async)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000900)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$rfkill(r1, &(0x7f0000000c80), 0x8) (async)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async)
write(r0, &(0x7f00000002c0)="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", 0xfc) (async)
r4 = request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='/proc/thread-self/attr/fscreate\x00', 0xfffffffffffffffc)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)=<r5=>0x0)
keyctl$chown(0x4, r4, r5, 0xee00) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r9 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r9, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18)
connect$inet6(r9, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r9, &(0x7f0000001840), 0x3b, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x1002, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmmsg$unix(r10, 0x0, 0x0, 0x20000410)

651.13494ms ago: executing program 1 (id=19367):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}, {@cache_mmap}, {@nodevmap}, {@noextend}]}}) (async)
r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setsig(r6, 0xa, 0x1c) (async)
sendmmsg$unix(r5, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80802, 0x0) (async)
sendfile(r4, r0, 0x0, 0x80000000)

632.46099ms ago: executing program 9 (id=19368):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
lseek(0xffffffffffffffff, 0x800000000081, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b38100000000dde840503b5d8c3dda539d4fe8c71c10130f37e795bd24a1f912979154770c3663f325a78d8f0e47ba26ea1a4df57f8e5c4bf5eaa1e895590798d07ed4ea8bcce5eaa35ed8647995346568143a2e7bbfe4b2866a94c506cb4efa45cf9a6a594ba254bb1624cd6362d0dbaa971099b4e157fcbc2a34743e9de6b6f348b66e298bbb52200b9f73f7bc1d0ad2e1b33593fa9395a40b9e85f985725bbdbfd5c0fc8c08a3e26cf1da4b411bc5a0f76bc1280185cc833e44384971303dae6e014a11cea69418122d9f8b436367b63e478c29017894a063623a6fe031"], 0x0}, 0x0)
r3 = socket$inet6(0xa, 0x4, 0x2)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0xac6, {{0xa, 0x4e20, 0x8, @mcast1, 0x6}}, {{0xa, 0x4e21, 0x4, @loopback, 0x2}}}, 0x108)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$vga_arbiter(r5, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x9003}, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000340)=0x200, 0x4)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0xef, 0x7f, 0x5, 0x40, 0x2, <r8=>r7})
ptrace(0x10, r8)
ptrace(0x8, r7)
wait4(r7, 0x0, 0x80000000, 0x0)
sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="02112002090000002dbd7000fbdbdf2502000100000004d30406730100000020050019001a00000002004e2264010100000000190000000002004e20ac1414bb0000000000000000"], 0x48}}, 0x4000814)
close_range(r0, 0xffffffffffffffff, 0x0)

562.490922ms ago: executing program 1 (id=19369):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',w\x00dd6Q', @ANYRESHEX=r2, @ANYBLOB=',aname=wfdno,cache=mmap,nodevmap,noextend,\x00'])
r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80802, 0x0)
sendfile(r4, r0, 0x0, 0x80000000)

554.254692ms ago: executing program 1 (id=19370):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18)
r0 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x80010000}, 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0)

0s ago: executing program 0 (id=19371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000140)={0x77359400}, 0x0)
rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
clock_getres(0xfffffffffffffffb, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r6=>0x0)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r5, 0x0}])
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/144, 0x90, 0x1, 0x29}, @fda={0x66646185, 0x0, 0x0, 0x3a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x25}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

e0: port 2(bridge_slave_1) entered forwarding state
[ 1123.163049][T15528] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1123.170105][T15528] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1123.178453][  T304] usb usb10-port1: attempt power cycle
[ 1123.196932][T15684] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1123.204315][T15684] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1123.216040][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1123.220630][T15503] binder: Unknown parameter 'context�'
[ 1123.223198][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1123.225947][T15684] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1123.242246][   T31] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 3 proto 2 vid 0x0525 pid 0xA4A8
[ 1123.243040][T15684] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1123.256171][   T31] usb 9-1: USB disconnect, device number 58
[ 1123.273840][   T31] usblp0: removed
[ 1123.292831][T15528] veth0_vlan: entered promiscuous mode
[ 1123.304503][T15528] veth1_macvtap: entered promiscuous mode
[ 1123.409577][T15684] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1123.410886][T15538] netlink: 80 bytes leftover after parsing attributes in process `syz.0.17610'.
[ 1123.518440][T15540] vcan0: entered allmulticast mode
[ 1123.523818][T15540] vcan0: left allmulticast mode
[ 1123.540786][  T304] usb 10-1: new low-speed USB device number 35 using dummy_hcd
[ 1123.564830][  T304] usb 10-1: device descriptor read/8, error -71
[ 1123.679721][ T1039] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1123.702256][  T304] usb 10-1: device descriptor read/8, error -71
[ 1123.839832][ T1039] usb 1-1: Using ep0 maxpacket: 8
[ 1123.851815][ T1039] usb 1-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config
[ 1123.862218][ T1039] usb 1-1: config 194 has 0 interfaces, different from the descriptor's value: 1
[ 1123.873236][ T1039] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1123.882335][ T1039] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1123.890672][ T1039] usb 1-1: Product: syz
[ 1123.896012][ T1039] usb 1-1: Manufacturer: syz
[ 1123.900665][ T1039] usb 1-1: SerialNumber: syz
[ 1123.957449][  T304] usb 10-1: new low-speed USB device number 36 using dummy_hcd
[ 1123.980548][  T304] usb 10-1: device descriptor read/8, error -71
[ 1124.119052][  T304] usb 10-1: device descriptor read/8, error -71
[ 1124.131968][ T1039] usb 1-1: USB disconnect, device number 8
[ 1124.273453][  T304] usb usb10-port1: unable to enumerate USB device
[ 1124.739724][T15563] rust_binder: Failed to allocate buffer. len:104, is_oneway:true
[ 1124.884880][T15587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1124.900819][T15587] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=15587 comm=syz.8.17627
[ 1124.915531][T15587] tipc: Disabling bearer <eth:syzkaller0>
[ 1125.368601][   T31] usb 9-1: new low-speed USB device number 59 using dummy_hcd
[ 1125.540789][   T31] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1125.550680][   T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1125.559801][   T31] usb 9-1: config 0 descriptor??
[ 1125.603753][T14792] Bluetooth: hci0: command 0x1003 tx timeout
[ 1125.603953][T31848] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1125.898904][T15616] netlink: 'syz.9.17638': attribute type 27 has an invalid length.
[ 1126.234509][   T10] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[ 1126.358802][T15631] SELinux: security_context_str_to_sid () failed with errno=-22
[ 1126.405569][   T10] usb 10-1: Using ep0 maxpacket: 16
[ 1126.415780][   T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1126.436983][   T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1126.447953][   T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1126.457350][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1126.465585][   T10] usb 10-1: Product: syz
[ 1126.469980][   T10] usb 10-1: Manufacturer: syz
[ 1126.474697][   T10] usb 10-1: SerialNumber: syz
[ 1126.704276][   T10] usb 10-1: 0:2 : does not exist
[ 1126.711739][   T10] usb 10-1: USB disconnect, device number 37
[ 1126.802028][  T304] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1126.940099][  T304] usb 1-1: device descriptor read/64, error -71
[ 1127.196671][  T304] usb 1-1: device descriptor read/64, error -71
[ 1127.453247][  T304] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1127.561793][   T31] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1127.572138][   T31] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[ 1127.583143][   T31] asix 9-1:0.0: probe with driver asix failed with error -71
[ 1127.591649][   T31] usb 9-1: USB disconnect, device number 59
[ 1127.597849][  T304] usb 1-1: device descriptor read/64, error -71
[ 1127.870279][  T304] usb 1-1: device descriptor read/64, error -71
[ 1127.955700][   T45] usb 10-1: new full-speed USB device number 38 using dummy_hcd
[ 1127.987851][  T304] usb usb1-port1: attempt power cycle
[ 1128.126576][   T45] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1128.134926][   T45] usb 10-1: not running at top speed; connect to a high speed hub
[ 1128.135570][T15662] incfs: Error accessing: ./file1/file4.
[ 1128.143955][   T45] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1128.148687][T15662] incfs: mount failed -2
[ 1128.157171][   T45] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1128.168806][   T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1128.176973][   T45] usb 10-1: Product: syz
[ 1128.181340][   T45] usb 10-1: Manufacturer: syz
[ 1128.186048][   T45] usb 10-1: SerialNumber: syz
[ 1128.351425][  T304] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1128.373656][  T304] usb 1-1: device descriptor read/8, error -71
[ 1128.440799][   T45] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71
[ 1128.450568][   T45] usb 10-1: USB disconnect, device number 38
[ 1128.512852][  T304] usb 1-1: device descriptor read/8, error -71
[ 1128.712067][T15664] ./cgroup: Can't lookup blockdev
[ 1128.729039][  T538] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0
[ 1128.738271][  T538] hid-generic 0000:0000:0000.0075: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1128.760770][T15670] fido_id[15670]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1128.769187][  T304] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1128.801338][  T304] usb 1-1: device descriptor read/8, error -71
[ 1128.802043][T15676] incfs: Error accessing: ./file1/file4.
[ 1128.813441][T15676] incfs: mount failed -2
[ 1128.940475][  T304] usb 1-1: device descriptor read/8, error -71
[ 1129.004025][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17659'.
[ 1129.054590][T15685] incfs: Error accessing: ./file1/file4.
[ 1129.060436][T15685] incfs: mount failed -2
[ 1129.067685][  T304] usb usb1-port1: unable to enumerate USB device
[ 1129.762455][  T304] usb 9-1: new full-speed USB device number 60 using dummy_hcd
[ 1129.823497][T15719] incfs: Error accessing: ./file1/file4.
[ 1129.829377][T15719] incfs: mount failed -2
[ 1129.890693][  T538] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[ 1129.901408][  T304] usb 9-1: device descriptor read/64, error -71
[ 1130.052957][  T538] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1130.064745][  T538] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 97, changing to 10
[ 1130.076049][  T538] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1130.087411][  T538] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1130.096656][  T538] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1130.105713][T15701] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1130.157962][  T304] usb 9-1: device descriptor read/64, error -71
[ 1130.333768][  T538] aiptek 10-1:17.0: Aiptek using 400 ms programming speed
[ 1130.342275][  T538] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input129
[ 1130.353869][  T538] usb 10-1: USB disconnect, device number 39
[ 1130.425239][  T304] usb 9-1: new full-speed USB device number 61 using dummy_hcd
[ 1130.459813][  T303] bridge_slave_1: left allmulticast mode
[ 1130.465608][  T303] bridge_slave_1: left promiscuous mode
[ 1130.471408][  T303] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1130.480137][  T303] bridge_slave_0: left allmulticast mode
[ 1130.485998][  T303] bridge_slave_0: left promiscuous mode
[ 1130.492240][  T303] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1130.574891][  T304] usb 9-1: device descriptor read/64, error -71
[ 1130.625478][T15731] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1130.632732][T15731] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1130.639921][T15731] bridge_slave_0: entered allmulticast mode
[ 1130.646270][T15731] bridge_slave_0: entered promiscuous mode
[ 1130.652866][T15731] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1130.659920][T15731] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1130.667115][T15731] bridge_slave_1: entered allmulticast mode
[ 1130.673643][T15731] bridge_slave_1: entered promiscuous mode
[ 1130.680542][  T303] veth1_macvtap: left promiscuous mode
[ 1130.686108][  T303] veth0_vlan: left promiscuous mode
[ 1130.785131][T15731] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1130.792214][T15731] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1130.799576][T15731] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1130.806648][T15731] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1130.830252][T15684] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1130.837763][T15684] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1130.845273][  T304] usb 9-1: device descriptor read/64, error -71
[ 1130.854704][T15689] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1130.861791][T15689] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1130.871477][T15684] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1130.878561][T15684] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1130.886171][  T538] usb 10-1: new high-speed USB device number 40 using dummy_hcd
[ 1130.910259][T15731] veth0_vlan: entered promiscuous mode
[ 1130.922422][T15731] veth1_macvtap: entered promiscuous mode
[ 1130.960057][  T304] usb usb9-port1: attempt power cycle
[ 1131.055949][  T538] usb 10-1: Using ep0 maxpacket: 16
[ 1131.063444][  T538] usb 10-1: config 0 has no interfaces?
[ 1131.070829][  T538] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1131.080593][  T538] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1131.089802][  T538] usb 10-1: SerialNumber: syz
[ 1131.099172][  T538] usb 10-1: config 0 descriptor??
[ 1131.107824][T15745] fuseblk: Unknown parameter 'rootmode0000p00010000'
[ 1131.227097][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1131.322942][T15725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1131.323652][  T304] usb 9-1: new full-speed USB device number 62 using dummy_hcd
[ 1131.332533][T15725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1131.356357][  T304] usb 9-1: device descriptor read/8, error -71
[ 1131.398076][   T10] usb 1-1: Using ep0 maxpacket: 8
[ 1131.404261][   T10] usb 1-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config
[ 1131.414620][   T10] usb 1-1: config 194 has 0 interfaces, different from the descriptor's value: 1
[ 1131.425916][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1131.435291][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1131.443566][   T10] usb 1-1: Product: syz
[ 1131.447752][   T10] usb 1-1: Manufacturer: syz
[ 1131.452608][   T10] usb 1-1: SerialNumber: syz
[ 1131.495509][  T304] usb 9-1: device descriptor read/8, error -71
[ 1131.670009][T15748] netlink: 324 bytes leftover after parsing attributes in process `syz.1.17682'.
[ 1131.685577][   T10] usb 1-1: USB disconnect, device number 13
[ 1131.761872][  T304] usb 9-1: new full-speed USB device number 63 using dummy_hcd
[ 1131.784423][  T304] usb 9-1: device descriptor read/8, error -71
[ 1131.848216][T15776] incfs: Error accessing: ./file1/file4.
[ 1131.853925][T15776] incfs: mount failed -2
[ 1131.923111][  T304] usb 9-1: device descriptor read/8, error -71
[ 1132.039644][  T304] usb usb9-port1: unable to enumerate USB device
[ 1132.492325][T15792] binder: Bad value for 'stats'
[ 1132.749286][T15811] incfs: Error accessing: ./file1/file4.
[ 1132.754998][T15811] incfs: mount failed -2
[ 1133.023054][   T10] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[ 1133.053472][   T36] kauditd_printk_skb: 6783 callbacks suppressed
[ 1133.053491][   T36] audit: type=1400 audit(1099.183:34881): avc:  denied  { bind } for  pid=15822 comm="syz.1.17707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 1133.194131][   T10] usb 9-1: Using ep0 maxpacket: 8
[ 1133.200483][   T10] usb 9-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config
[ 1133.210815][   T10] usb 9-1: config 194 has 0 interfaces, different from the descriptor's value: 1
[ 1133.221693][   T10] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1133.230806][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1133.239242][   T10] usb 9-1: Product: syz
[ 1133.243420][   T10] usb 9-1: Manufacturer: syz
[ 1133.248051][   T10] usb 9-1: SerialNumber: syz
[ 1133.330881][T15837] rust_binder: 15837: no such ref 1
[ 1133.336241][T15837] rust_binder: 15837: no such ref 3
[ 1133.341523][T15837] rust_binder: Write failure EFAULT in pid:36
[ 1133.386778][T15844] binder: Bad value for 'max'
[ 1133.436394][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.441954][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.447814][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.453383][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.458828][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.464370][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.469904][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.477135][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.482623][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.488269][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.495587][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.501857][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.507611][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.513551][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.519638][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.525824][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.532614][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.538398][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.543937][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.549727][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.555152][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.560712][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.566144][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.572259][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.577665][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.583170][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.588588][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.594108][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.599523][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.605056][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.610498][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.616321][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.623964][   T10] usb 9-1: USB disconnect, device number 64
[ 1133.630233][T15852] /dev/rnullb0: Can't open blockdev
[ 1133.663807][T15857] incfs: Error accessing: ./file1/file4.
[ 1133.669628][T15857] incfs: mount failed -2
[ 1134.072926][   T31] usb 10-1: USB disconnect, device number 40
[ 1134.089389][T15868] netlink: 24 bytes leftover after parsing attributes in process `syz.9.17722'.
[ 1134.114682][T15870] rust_binder: Error while translating object.
[ 1134.114711][T15870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[ 1134.120910][T15870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:524
[ 1134.255930][T15878] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[ 1134.351172][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17732'.
[ 1134.361405][   T36] audit: type=1400 audit(1100.418:34882): avc:  denied  { map } for  pid=15893 comm="syz.8.17732" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[ 1134.476334][T15903] Invalid ELF header magic: != ELF
[ 1134.677658][T15908] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1134.684428][T15908] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1134.691427][   T31] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[ 1134.851312][   T31] usb 9-1: Using ep0 maxpacket: 8
[ 1134.857506][   T31] usb 9-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config
[ 1134.868102][   T31] usb 9-1: config 194 has 0 interfaces, different from the descriptor's value: 1
[ 1134.878777][   T31] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1134.887898][   T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1134.895979][   T31] usb 9-1: Product: syz
[ 1134.900165][   T31] usb 9-1: Manufacturer: syz
[ 1134.904804][   T31] usb 9-1: SerialNumber: syz
[ 1135.134518][   T31] usb 9-1: USB disconnect, device number 65
[ 1135.275345][T15955] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[ 1135.467486][T15983] tipc: Started in network mode
[ 1135.472445][T15983] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[ 1135.481530][T15983] tipc: Enabled bearer <udp:s>, priority 10
[ 1135.501330][T15985] rust_binder: BC_FREEZE_NOTIFICATION_DONE 00000000400c630e not found
[ 1135.509667][T15985] rust_binder: Write failure EINVAL in pid:93
[ 1135.589441][   T36] audit: type=1326 audit(1101.569:34883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.0.17768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd738e929 code=0x7ffc0000
[ 1135.618904][   T36] audit: type=1326 audit(1101.569:34884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.0.17768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd738e929 code=0x7ffc0000
[ 1135.642609][   T36] audit: type=1326 audit(1101.569:34885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.0.17768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fccd738e929 code=0x7ffc0000
[ 1135.666125][   T36] audit: type=1326 audit(1101.569:34886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.0.17768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd738e929 code=0x7ffc0000
[ 1135.689549][   T36] audit: type=1326 audit(1101.569:34887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.0.17768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fccd738e929 code=0x7ffc0000
[ 1135.712744][ T2084] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[ 1135.714980][   T36] audit: type=1326 audit(1101.569:34888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.0.17768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd738e929 code=0x7ffc0000
[ 1135.760427][   T36] audit: type=1326 audit(1101.569:34889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.0.17768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fccd738e929 code=0x7ffc0000
[ 1135.769157][T15996] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[ 1135.783869][   T36] audit: type=1326 audit(1101.662:34890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.0.17768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd738e929 code=0x7ffc0000
[ 1135.802847][T15997] rust_binder: Error while translating object.
[ 1135.816011][T15997] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[ 1135.823674][T15997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:647
[ 1135.877593][ T2084] usb 10-1: Using ep0 maxpacket: 8
[ 1135.904832][ T2084] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[ 1135.915493][ T2084] usb 10-1: can't read configurations, error -22
[ 1135.935988][T16011] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[ 1136.059227][ T2084] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[ 1136.240936][ T2084] usb 10-1: Using ep0 maxpacket: 8
[ 1136.250661][ T2084] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[ 1136.259072][ T2084] usb 10-1: can't read configurations, error -22
[ 1136.267012][ T2084] usb usb10-port1: attempt power cycle
[ 1136.540251][   T45] tipc: Node number set to 4269801488
[ 1136.636985][ T2084] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[ 1136.668902][ T2084] usb 10-1: Using ep0 maxpacket: 8
[ 1136.677474][ T2084] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[ 1136.687054][ T2084] usb 10-1: can't read configurations, error -22
[ 1136.839608][ T2084] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[ 1136.872031][ T2084] usb 10-1: Using ep0 maxpacket: 8
[ 1136.879660][ T2084] usb 10-1: config index 0 descriptor too short (expected 9, got 0)
[ 1136.888132][ T2084] usb 10-1: can't read configurations, error -22
[ 1136.895387][ T2084] usb usb10-port1: unable to enumerate USB device
[ 1137.192380][   T45] usb 9-1: new full-speed USB device number 66 using dummy_hcd
[ 1137.327880][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17801'.
[ 1137.338161][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17801'.
[ 1137.347288][   T45] usb 9-1: device descriptor read/64, error -71
[ 1137.609329][   T45] usb 9-1: device descriptor read/64, error -71
[ 1137.726926][ T1039] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1137.865905][   T45] usb 9-1: new full-speed USB device number 67 using dummy_hcd
[ 1137.887268][ T1039] usb 1-1: Using ep0 maxpacket: 16
[ 1137.893458][ T1039] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1137.903491][ T1039] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 1137.913947][ T1039] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1137.923051][ T1039] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1137.931067][ T1039] usb 1-1: SerialNumber: syz
[ 1137.936808][T16091] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1137.944155][T16091] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1138.015536][   T45] usb 9-1: device descriptor read/64, error -71
[ 1138.272128][   T45] usb 9-1: device descriptor read/64, error -71
[ 1138.358942][ T1039] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[ 1138.368102][ T1039] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[ 1138.382261][ T1039] usb 1-1: USB disconnect, device number 14
[ 1138.390559][   T45] usb usb9-port1: attempt power cycle
[ 1138.763891][   T45] usb 9-1: new full-speed USB device number 68 using dummy_hcd
[ 1138.797918][   T45] usb 9-1: device descriptor read/8, error -71
[ 1138.935937][   T45] usb 9-1: device descriptor read/8, error -71
[ 1139.191530][   T45] usb 9-1: new full-speed USB device number 69 using dummy_hcd
[ 1139.213999][   T45] usb 9-1: device descriptor read/8, error -71
[ 1139.353124][   T45] usb 9-1: device descriptor read/8, error -71
[ 1139.469596][   T45] usb usb9-port1: unable to enumerate USB device
[ 1139.706386][T16155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1139.714749][T16155] tipc: Disabling bearer <eth:syzkaller0>
[ 1140.126461][T16188] netlink: 'syz.0.17845': attribute type 4 has an invalid length.
[ 1140.164891][ T1039] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[ 1140.324740][ T1039] usb 10-1: Using ep0 maxpacket: 8
[ 1140.331487][ T1039] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1140.340183][ T1039] usb 10-1: config 1 has an invalid interface number: 81 but max is 0
[ 1140.348416][ T1039] usb 10-1: config 1 has no interface number 0
[ 1140.356042][ T1039] usb 10-1: New USB device found, idVendor=19d2, idProduct=6a61, bcdDevice=b0.c0
[ 1140.365272][ T1039] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1140.373393][ T1039] usb 10-1: Product: syz
[ 1140.377652][ T1039] usb 10-1: Manufacturer: syz
[ 1140.382354][ T1039] usb 10-1: SerialNumber: syz
[ 1140.605065][ T1039] usb 10-1: bad CDC descriptors
[ 1140.610920][ T1039] usb 10-1: USB disconnect, device number 45
[ 1141.236901][T16209] SELinux: security_context_str_to_sid (��) failed with errno=-22
[ 1141.318961][ T1039] usb 9-1: new high-speed USB device number 70 using dummy_hcd
[ 1141.479305][ T1039] usb 9-1: Using ep0 maxpacket: 16
[ 1141.485493][ T1039] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1141.496613][ T1039] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1141.506507][ T1039] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1141.519386][ T1039] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1141.528549][ T1039] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.537256][ T1039] usb 9-1: config 0 descriptor??
[ 1141.763560][T16198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1141.772253][T16198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1141.845211][T16224] netlink: 116 bytes leftover after parsing attributes in process `syz.0.17858'.
[ 1141.995657][T16198] overlayfs: conflicting options: userxattr,metacopy=on
[ 1142.056926][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.078743][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.093833][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.101463][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x7
[ 1142.108910][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.120985][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.129696][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.137614][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.145573][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x2
[ 1142.153481][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.161048][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.168596][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.176204][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.183545][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.191207][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.198977][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.206590][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.214062][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.221675][   T36] kauditd_printk_skb: 1 callbacks suppressed
[ 1142.221693][   T36] audit: type=1326 audit(2000000003.236:34892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16232 comm="syz.0.17862" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccd738e929 code=0x0
[ 1142.250946][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.258205][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.265489][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.272780][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.276224][T16236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17862'.
[ 1142.280251][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.296471][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.303775][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.311045][ T1039] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0
[ 1142.318646][ T1039] microsoft 0003:045E:07DA.0076: No inputs registered, leaving
[ 1142.336018][ T1039] microsoft 0003:045E:07DA.0076: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[ 1142.361136][ T1039] microsoft 0003:045E:07DA.0076: no inputs found
[ 1142.367629][ T1039] microsoft 0003:045E:07DA.0076: could not initialize ff, continuing anyway
[ 1142.383647][ T1039] usb 9-1: USB disconnect, device number 70
[ 1142.397059][T16245] 9pnet_fd: Insufficient options for proto=fd
[ 1142.908733][T16247] 9pnet: Could not find request transport: fdMrfFno=0x0000000000000004
[ 1142.940696][T16255] overlayfs: failed to resolve '/b��
[ 1142.940696][T16255] tb��F?!��4eUzS�0�voI�/��@�B�@_b��./file0': -2
[ 1142.979581][T16266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1142.988226][T16266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1143.243262][ T1039] usb 9-1: new high-speed USB device number 71 using dummy_hcd
[ 1143.414298][ T1039] usb 9-1: Using ep0 maxpacket: 8
[ 1143.421053][ T1039] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1143.429846][ T1039] usb 9-1: config 1 has an invalid interface number: 81 but max is 0
[ 1143.438165][ T1039] usb 9-1: config 1 has no interface number 0
[ 1143.445953][ T1039] usb 9-1: New USB device found, idVendor=19d2, idProduct=6a61, bcdDevice=b0.c0
[ 1143.455616][ T1039] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1143.463942][ T1039] usb 9-1: Product: syz
[ 1143.468544][ T1039] usb 9-1: Manufacturer: syz
[ 1143.473282][ T1039] usb 9-1: SerialNumber: syz
[ 1143.642084][T16288] tmpfs: Unknown parameter 'sRz��'
[ 1143.664904][T16290] 9pnet_fd: Insufficient options for proto=fd
[ 1143.701918][ T1039] usb 9-1: bad CDC descriptors
[ 1143.709596][ T1039] usb 9-1: USB disconnect, device number 71
[ 1143.927475][   T45] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[ 1144.087814][   T45] usb 10-1: Using ep0 maxpacket: 16
[ 1144.094130][   T45] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1144.104536][   T45] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1144.114927][   T45] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[ 1144.124134][   T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1144.132269][   T45] usb 10-1: Product: syz
[ 1144.136536][   T45] usb 10-1: Manufacturer: syz
[ 1144.141260][   T45] usb 10-1: SerialNumber: syz
[ 1144.504764][   T10] usb 9-1: new high-speed USB device number 72 using dummy_hcd
[ 1144.578098][   T45] usb 10-1: 0:2 : does not exist
[ 1144.585089][   T45] usb 10-1: 5:0: failed to get current value for ch 1 (-22)
[ 1144.596333][   T45] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 1144.607589][   T45] usb 10-1: 5:0: cannot get min/max values for control 4 (id 5)
[ 1144.617349][   T45] usb 10-1: 5:0: cannot get min/max values for control 4 (id 5)
[ 1144.627089][   T45] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1144.636904][   T45] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 1144.648137][   T45] usb 10-1: 5:0: cannot get min/max values for control 8 (id 5)
[ 1144.657910][   T45] usb 10-1: 5:0: cannot get min/max values for control 8 (id 5)
[ 1144.665135][   T10] usb 9-1: Using ep0 maxpacket: 32
[ 1144.668712][   T45] usb 10-1: USB disconnect, device number 47
[ 1144.678181][   T10] usb 9-1: config 0 has an invalid interface descriptor of length 8, skipping
[ 1144.686729][T11756] udevd[11756]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1144.687313][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1144.713370][   T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1144.723899][   T10] usb 9-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[ 1144.733106][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1144.741159][   T10] usb 9-1: Product: syz
[ 1144.745357][   T10] usb 9-1: Manufacturer: syz
[ 1144.749991][   T10] usb 9-1: SerialNumber: syz
[ 1144.755440][   T10] usb 9-1: config 0 descriptor??
[ 1144.978680][ T1039] usb 9-1: USB disconnect, device number 72
[ 1145.145283][   T36] audit: type=1400 audit(2000000005.977:34893): avc:  denied  { setattr } for  pid=16327 comm="syz.9.17898" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[ 1145.171221][T16328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=58 sclass=netlink_tcpdiag_socket pid=16328 comm=syz.9.17898
[ 1145.331282][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17900'.
[ 1145.534959][T16341] rust_binder: 16341: no such ref 1
[ 1145.540490][T16341] rust_binder: Write failure EINVAL in pid:674
[ 1145.605900][ T1039] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 1145.755585][ T1039] usb 10-1: device descriptor read/64, error -71
[ 1146.012142][ T1039] usb 10-1: device descriptor read/64, error -71
[ 1146.279444][ T1039] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 1146.369348][T16372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:682
[ 1146.397577][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17917'.
[ 1146.418517][ T1039] usb 10-1: device descriptor read/64, error -71
[ 1146.480857][T16382] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[ 1146.488335][T16382] rust_binder: Write failure EINVAL in pid:691
[ 1146.675020][ T1039] usb 10-1: device descriptor read/64, error -71
[ 1146.762274][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17921'.
[ 1146.771544][T16387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=16387 comm=syz.1.17921
[ 1146.772259][T16388] netlink: 'syz.1.17921': attribute type 12 has an invalid length.
[ 1146.784730][T16387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=16387 comm=syz.1.17921
[ 1146.805277][T16387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=16387 comm=syz.1.17921
[ 1146.818192][ T1039] usb usb10-port1: attempt power cycle
[ 1146.818377][T16387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=16387 comm=syz.1.17921
[ 1146.836609][T16387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=16387 comm=syz.1.17921
[ 1146.849502][T16387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=16387 comm=syz.1.17921
[ 1146.862365][T16387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=16387 comm=syz.1.17921
[ 1146.875396][T16387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=16387 comm=syz.1.17921
[ 1146.922109][T16396] netlink: 124 bytes leftover after parsing attributes in process `syz.1.17924'.
[ 1147.039078][T16404] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0
[ 1147.039108][T16404] rust_binder: Error while translating object.
[ 1147.048104][T16404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1147.054491][T16404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:694
[ 1147.091618][T16412] fuse: Unknown parameter 'jd�0x0000000000000005'
[ 1147.177422][ T1039] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[ 1147.179862][T16418] TCP: out of memory -- consider tuning tcp_mem
[ 1147.202884][ T1039] usb 10-1: device descriptor read/8, error -71
[ 1147.259887][   T36] audit: type=1400 audit(2000000007.950:34894): avc:  denied  { unmount } for  pid=11649 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 1147.349608][ T1039] usb 10-1: device descriptor read/8, error -71
[ 1147.605032][ T1039] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[ 1147.627429][ T1039] usb 10-1: device descriptor read/8, error -71
[ 1147.766428][ T1039] usb 10-1: device descriptor read/8, error -71
[ 1147.852531][T16459] tipc: Enabling of bearer <udp:s> rejected, already enabled
[ 1147.876283][T16463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17946'.
[ 1147.887330][ T1039] usb usb10-port1: unable to enumerate USB device
[ 1148.235313][   T36] audit: type=1326 audit(2000000008.867:34895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.8.17949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6fc98e929 code=0x0
[ 1148.295366][T16473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1148.295395][T16473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:725
[ 1148.304912][T16473] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[ 1148.314070][T16473] rust_binder: Read failure Err(EFAULT) in pid:725
[ 1148.540031][T16478] fuseblk: Bad value for 'source'
[ 1148.562135][T16478] 9pnet_fd: Insufficient options for proto=fd
[ 1148.568882][T16478] fuseblk: Bad value for 'source'
[ 1148.677338][T16493] netlink: 'syz.1.17956': attribute type 27 has an invalid length.
[ 1149.152906][T16517] netlink: 16 bytes leftover after parsing attributes in process `syz.9.17964'.
[ 1149.162994][T16517] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1149.224991][T16527] netlink: 'syz.0.17969': attribute type 12 has an invalid length.
[ 1149.906541][   T36] audit: type=1326 audit(2000000010.439:34896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16566 comm="syz.1.17983" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88a98e929 code=0x0
[ 1152.073277][T16664] FAULT_INJECTION: forcing a failure.
[ 1152.073277][T16664] name failslab, interval 1, probability 0, space 0, times 0
[ 1152.086707][T16664] CPU: 0 UID: 0 PID: 16664 Comm: syz.8.18019 Not tainted 6.12.30-syzkaller-gd893caf112c8 #0 64e33962539d0ce7a45dea9f0941eea22919d800
[ 1152.086757][T16664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1152.086772][T16664] Call Trace:
[ 1152.086780][T16664]  <TASK>
[ 1152.086788][T16664]  __dump_stack+0x21/0x30
[ 1152.086820][T16664]  dump_stack_lvl+0x10c/0x190
[ 1152.086845][T16664]  ? __cfi_dump_stack_lvl+0x10/0x10
[ 1152.086872][T16664]  ? avc_has_perm+0x144/0x220
[ 1152.086896][T16664]  ? __cfi_avc_has_perm+0x10/0x10
[ 1152.086919][T16664]  dump_stack+0x19/0x20
[ 1152.086943][T16664]  should_fail_ex+0x3d9/0x530
[ 1152.086980][T16664]  should_failslab+0xac/0x100
[ 1152.087017][T16664]  __kmalloc_cache_noprof+0x41/0x3c0
[ 1152.087044][T16664]  ? vhost_task_create+0x101/0x350
[ 1152.087074][T16664]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[ 1152.087108][T16664]  vhost_task_create+0x101/0x350
[ 1152.087138][T16664]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[ 1152.087173][T16664]  ? __cfi_vhost_task_create+0x10/0x10
[ 1152.087205][T16664]  ? __cfi_vhost_task_fn+0x10/0x10
[ 1152.087234][T16664]  ? __kasan_check_write+0x18/0x20
[ 1152.087258][T16664]  ? mutex_lock+0x92/0x1c0
[ 1152.087282][T16664]  ? __cfi_mutex_lock+0x10/0x10
[ 1152.087307][T16664]  ? kernel_text_address+0xa9/0xe0
[ 1152.087332][T16664]  kvm_mmu_post_init_vm+0x1a6/0x310
[ 1152.087357][T16664]  kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0
[ 1152.087382][T16664]  ? _parse_integer_limit+0x195/0x1e0
[ 1152.087408][T16664]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1152.087432][T16664]  ? kstrtoull+0x13b/0x1e0
[ 1152.087455][T16664]  ? kstrtouint+0x78/0xf0
[ 1152.087477][T16664]  ? ioctl_has_perm+0x1aa/0x4d0
[ 1152.087507][T16664]  ? __asan_memcpy+0x5a/0x80
[ 1152.087533][T16664]  ? ioctl_has_perm+0x3e0/0x4d0
[ 1152.087564][T16664]  ? has_cap_mac_admin+0xd0/0xd0
[ 1152.087596][T16664]  ? __kasan_check_write+0x18/0x20
[ 1152.087621][T16664]  ? mutex_lock_killable+0x92/0x1c0
[ 1152.087647][T16664]  ? __cfi_mutex_lock_killable+0x10/0x10
[ 1152.087673][T16664]  ? proc_fail_nth_write+0x17e/0x210
[ 1152.087699][T16664]  kvm_vcpu_ioctl+0x96f/0xee0
[ 1152.087728][T16664]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[ 1152.087766][T16664]  ? __cfi_vfs_write+0x10/0x10
[ 1152.087793][T16664]  ? __kasan_check_write+0x18/0x20
[ 1152.087817][T16664]  ? mutex_unlock+0x8b/0x240
[ 1152.087842][T16664]  ? __cfi_mutex_unlock+0x10/0x10
[ 1152.087868][T16664]  ? __fget_files+0x2c5/0x340
[ 1152.087900][T16664]  ? __fget_files+0x2c5/0x340
[ 1152.087931][T16664]  ? bpf_lsm_file_ioctl+0xd/0x20
[ 1152.087954][T16664]  ? security_file_ioctl+0x34/0xd0
[ 1152.087986][T16664]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[ 1152.088014][T16664]  __se_sys_ioctl+0x132/0x1b0
[ 1152.088045][T16664]  __x64_sys_ioctl+0x7f/0xa0
[ 1152.088075][T16664]  x64_sys_call+0x1878/0x2ee0
[ 1152.088105][T16664]  do_syscall_64+0x58/0xf0
[ 1152.088126][T16664]  ? clear_bhb_loop+0x50/0xa0
[ 1152.088153][T16664]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 1152.088178][T16664] RIP: 0033:0x7fc6fc98e929
[ 1152.088197][T16664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1152.088216][T16664] RSP: 002b:00007fc6fd88c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1152.088241][T16664] RAX: ffffffffffffffda RBX: 00007fc6fcbb5fa0 RCX: 00007fc6fc98e929
[ 1152.088258][T16664] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1152.088272][T16664] RBP: 00007fc6fd88c090 R08: 0000000000000000 R09: 0000000000000000
[ 1152.088286][T16664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1152.088300][T16664] R13: 0000000000000000 R14: 00007fc6fcbb5fa0 R15: 00007fff2e660358
[ 1152.088320][T16664]  </TASK>
[ 1152.501387][   T36] audit: type=1400 audit(2000000012.852:34897): avc:  denied  { execute } for  pid=16687 comm="syz.8.18028" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1152.557161][T16696] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[ 1152.769042][   T36] audit: type=1326 audit(2000000013.114:34898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16719 comm="syz.9.18041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3a138e929 code=0x0
[ 1152.831121][T16725] input: syz1 as /devices/virtual/input/input132
[ 1153.542890][T16755] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1153.550908][T16755] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[ 1153.559318][T16755] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1153.567243][T16755] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[ 1153.644317][T16760] rust_binder: Error while translating object.
[ 1153.644374][T16760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1153.651003][T16760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:775
[ 1153.895352][   T36] audit: type=1326 audit(2000000014.162:34899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.9.18063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a138e929 code=0x7fc00000
[ 1154.296372][  T304] usb 9-1: new low-speed USB device number 74 using dummy_hcd
[ 1154.468536][  T304] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1154.477721][  T304] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1154.486516][  T304] usb 9-1: config 0 descriptor??
[ 1154.616174][   T36] audit: type=1326 audit(2000000014.836:34900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.9.18063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3a132ab19 code=0x7fc00000
[ 1154.646752][   T36] audit: type=1326 audit(2000000014.836:34901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.9.18063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa3a132abdf code=0x7fc00000
[ 1154.670489][   T36] audit: type=1326 audit(2000000014.836:34902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.9.18063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa3a138e929 code=0x7fc00000
[ 1154.770490][T16810] netlink: 'syz.0.18074': attribute type 3 has an invalid length.
[ 1154.770833][T16811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=16811 comm=syz.1.18075
[ 1154.778443][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18074'.
[ 1155.769718][T16896] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1155.778905][   T36] audit: type=1326 audit(2000000015.931:34903): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16894 comm="syz.0.18102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccd738e929 code=0x0
[ 1155.887747][T16898] netlink: 1619 bytes leftover after parsing attributes in process `syz.0.18102'.
[ 1156.420797][  T304] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1156.430967][  T304] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[ 1156.442027][  T304] asix 9-1:0.0: probe with driver asix failed with error -71
[ 1156.450432][  T304] usb 9-1: USB disconnect, device number 74
[ 1156.854988][   T36] audit: type=1400 audit(2000000016.895:34904): avc:  denied  { write } for  pid=16926 comm="syz.0.18115" name="file0" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1156.878124][   T36] audit: type=1400 audit(2000000016.895:34905): avc:  denied  { open } for  pid=16926 comm="syz.0.18115" path="/140/file0" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1156.992673][   T36] audit: type=1326 audit(2000000017.063:34906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16939 comm="syz.8.18119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6fc98e929 code=0x0
[ 1157.352262][  T538] usb 9-1: new low-speed USB device number 75 using dummy_hcd
[ 1157.512527][  T538] usb 9-1: Invalid ep0 maxpacket: 16
[ 1157.651429][  T538] usb 9-1: new low-speed USB device number 76 using dummy_hcd
[ 1157.811706][  T538] usb 9-1: Invalid ep0 maxpacket: 16
[ 1157.817328][  T538] usb usb9-port1: attempt power cycle
[ 1158.185763][  T538] usb 9-1: new low-speed USB device number 77 using dummy_hcd
[ 1158.207477][  T538] usb 9-1: Invalid ep0 maxpacket: 16
[ 1158.345962][  T538] usb 9-1: new low-speed USB device number 78 using dummy_hcd
[ 1158.367698][  T538] usb 9-1: Invalid ep0 maxpacket: 16
[ 1158.373133][  T538] usb usb9-port1: unable to enumerate USB device
[ 1158.538463][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18125'.
[ 1158.605367][T16968] tipc: Enabling of bearer <udp:s> rejected, already enabled
[ 1159.214547][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18135'.
[ 1159.534737][T17027] incfs: Backing dir is not set, filesystem can't be mounted.
[ 1159.542301][T17027] incfs: mount failed -2
[ 1160.671159][T17093] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1160.799615][T17105] rust_binder: Write failure EFAULT in pid:810
[ 1160.897123][T17113] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[ 1160.903520][T17113] rust_binder: Read failure Err(EFAULT) in pid:816
[ 1160.919313][T17115] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[ 1160.919341][T17115] rust_binder: Read failure Err(EFAULT) in pid:816
[ 1160.986324][T17121] netlink: 'syz.8.18185': attribute type 1 has an invalid length.
[ 1161.219161][T17147] netlink: 'syz.1.18192': attribute type 4 has an invalid length.
[ 1161.227085][T17147] netlink: 17 bytes leftover after parsing attributes in process `syz.1.18192'.
[ 1161.827818][T17163] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1161.905062][T17172] netlink: 108 bytes leftover after parsing attributes in process `syz.0.18203'.
[ 1162.162119][T17190] netlink: 'syz.8.18210': attribute type 1 has an invalid length.
[ 1162.170984][T17190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[ 1162.171018][T17190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:844
[ 1162.247178][T17181] netlink: 'syz.0.18207': attribute type 4 has an invalid length.
[ 1162.427299][T17212] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18217'.
[ 1162.447272][T17212] netlink: 43 bytes leftover after parsing attributes in process `syz.0.18217'.
[ 1162.467374][T17212] netlink: 'syz.0.18217': attribute type 6 has an invalid length.
[ 1162.480984][T17212] netlink: 'syz.0.18217': attribute type 5 has an invalid length.
[ 1162.499999][T17212] netlink: 43 bytes leftover after parsing attributes in process `syz.0.18217'.
[ 1162.782197][T17239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17239 comm=syz.0.18228
[ 1163.877290][T17276] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1163.883878][T15689] Bluetooth: hci0: Frame reassembly failed (-90)
[ 1164.396015][T17302] overlayfs: failed to clone lowerpath
[ 1164.462008][   T36] audit: type=1326 audit(2000000024.055:34907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.0.18251" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccd738e929 code=0x0
[ 1164.884371][   T36] audit: type=1326 audit(2000000024.448:34908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17336 comm="syz.1.18263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc88a98e929 code=0x0
[ 1166.049761][T31848] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1166.050006][T14792] Bluetooth: hci0: command 0x1003 tx timeout
[ 1166.116106][T17395] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1166.180547][T17403] fuse: Bad value for 'fd'
[ 1166.328496][T17420] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1166.328560][T17420] rust_binder: Write failure EINVAL in pid:861
[ 1166.452695][T17439] netlink: 'syz.8.18301': attribute type 4 has an invalid length.
[ 1166.485744][T17439] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.18301'.
[ 1166.506490][T17446] netlink: 68 bytes leftover after parsing attributes in process `syz.9.18304'.
[ 1166.609995][   T36] audit: type=1400 audit(2000000282.064:34909): avc:  denied  { execute } for  pid=17468 comm="syz.9.18313" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=259498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1166.641637][T17471] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[ 1166.779885][T17492] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1167.011779][   T31] usb 9-1: new high-speed USB device number 80 using dummy_hcd
[ 1167.172103][   T31] usb 9-1: Using ep0 maxpacket: 16
[ 1167.178299][   T31] usb 9-1: config 0 has an invalid interface number: 251 but max is 0
[ 1167.186582][   T31] usb 9-1: config 0 has no interface number 0
[ 1167.192698][   T31] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1167.202781][   T31] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1167.214356][   T31] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1167.223502][   T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1167.231703][   T31] usb 9-1: Product: syz
[ 1167.235865][   T31] usb 9-1: Manufacturer: syz
[ 1167.240514][   T31] usb 9-1: SerialNumber: syz
[ 1167.245755][   T31] usb 9-1: config 0 descriptor??
[ 1167.251083][T17487] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1167.258615][T17487] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1167.481308][T17487] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1167.493107][T17487] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1167.931861][T17487] rust_binder: Error while translating object.
[ 1167.931902][T17487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[ 1167.938284][T17487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:879
[ 1167.948456][   T31] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1167.967756][   T31] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[ 1167.979776][   T31] asix 9-1:0.251: probe with driver asix failed with error -71
[ 1167.989938][   T31] usb 9-1: USB disconnect, device number 80
[ 1168.056549][T17544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18341'.
[ 1169.034362][T17613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18365'.
[ 1169.059062][T17615] 9pnet_fd: Insufficient options for proto=fd
[ 1169.823420][  T304] usb 9-1: new high-speed USB device number 81 using dummy_hcd
[ 1169.985065][  T304] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1169.995542][  T304] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1170.005201][  T304] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1170.014322][  T304] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1170.022388][  T304] usb 9-1: SerialNumber: syz
[ 1170.246817][  T304] usb 9-1: 0:2 : does not exist
[ 1170.253813][  T304] usb 9-1: USB disconnect, device number 81
[ 1170.263126][T11756] udevd[11756]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1170.417242][T17713] TCP: out of memory -- consider tuning tcp_mem
[ 1170.658316][T17734] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1170.669050][T17734] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1170.676472][T17734] bridge_slave_0: entered allmulticast mode
[ 1170.683146][T17734] bridge_slave_0: entered promiscuous mode
[ 1170.694514][T17734] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.701819][T17734] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.709324][T17734] bridge_slave_1: entered allmulticast mode
[ 1170.716084][T17734] bridge_slave_1: entered promiscuous mode
[ 1170.777259][T17734] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.784389][T17734] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1170.791746][T17734] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1170.798829][T17734] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1170.823709][T15689] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1170.831747][T15689] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.842834][T15684] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1170.849935][T15684] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1170.859079][T15684] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.866195][T15684] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1170.895253][T17734] veth0_vlan: entered promiscuous mode
[ 1170.907534][T17734] veth1_macvtap: entered promiscuous mode
[ 1170.991721][T15684] bridge_slave_1: left allmulticast mode
[ 1170.997858][T15684] bridge_slave_1: left promiscuous mode
[ 1171.004069][T15684] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1171.012167][T15684] bridge_slave_0: left allmulticast mode
[ 1171.018006][T15684] bridge_slave_0: left promiscuous mode
[ 1171.024314][T15684] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.155698][T17755] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1171.162886][T17755] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.170141][T17755] bridge_slave_0: entered allmulticast mode
[ 1171.176697][T17755] bridge_slave_0: entered promiscuous mode
[ 1171.183942][T15684] veth1_macvtap: left promiscuous mode
[ 1171.189523][T15684] veth0_vlan: left promiscuous mode
[ 1171.233161][T17755] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1171.240264][T17755] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1171.247384][T17755] bridge_slave_1: entered allmulticast mode
[ 1171.253791][T17755] bridge_slave_1: entered promiscuous mode
[ 1171.313404][T17755] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1171.320505][T17755] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1171.327808][T17755] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1171.334879][T17755] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1171.359236][T15689] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.366797][T15689] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1171.376474][  T303] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1171.383560][  T303] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1171.393048][T15689] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1171.400172][T15689] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1171.431030][T17755] veth0_vlan: entered promiscuous mode
[ 1171.444494][T17755] veth1_macvtap: entered promiscuous mode
[ 1171.482754][T17766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18424'.
[ 1171.484331][T17767] rust_binder: 17767: no such ref 2
[ 1171.497668][T17767] rust_binder: 17767: no such ref 2
[ 1171.526507][   T36] audit: type=1326 audit(2000000286.666:34910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17770 comm="syz.0.18426" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccd738e929 code=0x0
[ 1171.718043][T17776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1171.733511][T17776] tipc: Disabling bearer <eth:syzkaller0>
[ 1172.111228][   T10] usb 9-1: new high-speed USB device number 82 using dummy_hcd
[ 1172.271572][   T10] usb 9-1: Using ep0 maxpacket: 8
[ 1172.278540][   T10] usb 9-1: config 6 has an invalid interface number: 146 but max is 1
[ 1172.286938][   T10] usb 9-1: config 6 has an invalid interface number: 84 but max is 1
[ 1172.295333][   T10] usb 9-1: config 6 has no interface number 0
[ 1172.301426][   T10] usb 9-1: config 6 has no interface number 1
[ 1172.307554][   T10] usb 9-1: config 6 interface 84 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[ 1172.318512][   T10] usb 9-1: config 6 interface 84 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 1172.329417][   T10] usb 9-1: config 6 interface 84 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[ 1172.340200][   T10] usb 9-1: config 6 interface 84 has no altsetting 0
[ 1172.348544][   T10] usb 9-1: New USB device found, idVendor=12d1, idProduct=1436, bcdDevice= 0.00
[ 1172.357682][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1172.365795][   T10] usb 9-1: Product: 휑瘓듘쏸ྑၷ䧼ᜇ࣓ᜫᖔ䢂錅馂돜穻ỻ끋₥⫫⌇닞춑匼޲䄩蓛꯯截捶ꨌ磚毘㞳ᙕ¢쥿ພ欨䑚셭໏乽ꐣ黝㼊휁귫쉬歿笴脵覔臢銟▞ⰿꂽ췈奁쌟⥀퓘躲㢪飀騾䮶겙哆㢯ﶖ聢매囼≨ᕺ㨴䒰⇄玳ㆮ聱㌟๹얥ɾ滣扨ᑚ靇럫픺귃퍸㽖ཊ髾藡ﰟ
[ 1172.401145][   T10] usb 9-1: Manufacturer: 䠊
[ 1172.405828][   T10] usb 9-1: SerialNumber: ⠁
[ 1172.424009][T17789] rust_binder: 17789: no such ref 0
[ 1172.429337][T17789] rust_binder: Write failure EFAULT in pid:6
[ 1172.472484][T17801] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[ 1172.496784][T17807] SELinux: security_context_str_to_sid () failed with errno=-22
[ 1172.637043][   T10] usb-storage 9-1:6.146: USB Mass Storage device detected
[ 1172.685580][   T10] usb-storage 9-1:6.84: USB Mass Storage device detected
[ 1172.712855][   T10] usb 9-1: USB disconnect, device number 82
[ 1172.784674][   T31] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1172.923683][   T31] usb 2-1: device descriptor read/64, error -71
[ 1173.180268][   T31] usb 2-1: device descriptor read/64, error -71
[ 1173.190558][T17842] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1173.190596][T17842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:908
[ 1173.200355][T17842] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[ 1173.209547][T17842] rust_binder: Read failure Err(EFAULT) in pid:908
[ 1173.447515][   T31] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1173.607882][   T31] usb 2-1: device descriptor read/64, error -71
[ 1173.704700][T17870] fuse: Bad value for 'fd'
[ 1173.864467][   T31] usb 2-1: device descriptor read/64, error -71
[ 1173.982227][   T31] usb usb2-port1: attempt power cycle
[ 1174.244090][T15684] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1174.251276][T15684] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1174.345562][   T31] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1174.367958][   T31] usb 2-1: device descriptor read/8, error -71
[ 1174.506985][   T31] usb 2-1: device descriptor read/8, error -71
[ 1174.762434][   T31] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1174.784895][   T31] usb 2-1: device descriptor read/8, error -71
[ 1174.923974][   T31] usb 2-1: device descriptor read/8, error -71
[ 1175.040495][   T31] usb usb2-port1: unable to enumerate USB device
[ 1176.162952][   T10] usb 2-1: new low-speed USB device number 53 using dummy_hcd
[ 1176.324566][   T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1176.333730][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1176.342652][   T10] usb 2-1: config 0 descriptor??
[ 1176.398175][T14792] Bluetooth: hci0: command 0x1003 tx timeout
[ 1176.398274][T31848] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1176.431764][   T36] audit: type=1400 audit(2000000291.250:34911): avc:  denied  { ioctl } for  pid=17895 comm="syz.8.18472" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1176.481561][T17900] batadv_slave_0: entered promiscuous mode
[ 1176.751639][   T31] usb 9-1: new high-speed USB device number 83 using dummy_hcd
[ 1176.776679][   T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1176.786735][   T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[ 1176.797003][   T10] asix 2-1:0.0: probe with driver asix failed with error -32
[ 1176.921933][   T31] usb 9-1: Using ep0 maxpacket: 8
[ 1176.930518][   T31] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1176.938971][   T31] usb 9-1: no configurations
[ 1176.943765][   T31] usb 9-1: can't read configurations, error -22
[ 1177.019389][T17900] batadv_slave_0: left promiscuous mode
[ 1177.046941][T17920] netlink: 28 bytes leftover after parsing attributes in process `syz.8.18480'.
[ 1177.113824][T17925] netlink: 28 bytes leftover after parsing attributes in process `syz.8.18481'.
[ 1177.122979][T17925] netlink: 43 bytes leftover after parsing attributes in process `syz.8.18481'.
[ 1177.132079][T17925] netlink: 'syz.8.18481': attribute type 6 has an invalid length.
[ 1177.139956][T17925] netlink: 'syz.8.18481': attribute type 5 has an invalid length.
[ 1177.147814][T17925] netlink: 43 bytes leftover after parsing attributes in process `syz.8.18481'.
[ 1177.170986][T17928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:939
[ 1177.201310][T17932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=17932 comm=syz.8.18484
[ 1177.337163][T17943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18488'.
[ 1178.055195][   T31] usb 9-1: new high-speed USB device number 84 using dummy_hcd
[ 1178.215487][   T31] usb 9-1: Using ep0 maxpacket: 8
[ 1178.225150][   T31] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1178.237041][   T31] usb 9-1: no configurations
[ 1178.241730][   T31] usb 9-1: can't read configurations, error -22
[ 1178.248293][   T31] usb usb9-port1: attempt power cycle
[ 1178.367669][T17992] vcan0: entered allmulticast mode
[ 1178.373108][T17992] vcan0: left allmulticast mode
[ 1178.431522][T17998] incfs: Error accessing: ./file0.
[ 1178.436763][T17998] incfs: mount failed -20
[ 1178.993018][T18029] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[ 1178.995958][   T45] usb 2-1: USB disconnect, device number 53
[ 1179.094617][   T36] audit: type=1326 audit(2000000293.747:34912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18049 comm="syz.8.18526" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6fc98e929 code=0x0
[ 1179.096707][T18052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56318 sclass=netlink_route_socket pid=18052 comm=syz.8.18526
[ 1179.280985][T18073] overlay: Unknown parameter 'uid>00000000000000000000'
[ 1179.290397][T18073] overlay: Unknown parameter 'uid>00000000000000000000'
[ 1179.355917][   T36] audit: type=1400 audit(2000000293.981:34913): avc:  denied  { remount } for  pid=18079 comm="syz.1.18535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1179.487687][  T304] usb 9-1: new high-speed USB device number 86 using dummy_hcd
[ 1179.605288][   T31] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1179.648067][  T304] usb 9-1: Using ep0 maxpacket: 16
[ 1179.654315][  T304] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1179.665274][  T304] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1179.671950][  T304] usb 9-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[ 1179.681136][  T304] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1179.689852][  T304] usb 9-1: config 0 descriptor??
[ 1179.765657][   T31] usb 2-1: Using ep0 maxpacket: 8
[ 1179.771838][   T31] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[ 1179.780023][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1179.790168][   T31] usb 2-1: config 0 has no interface number 0
[ 1179.797860][   T31] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1179.806944][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.814975][   T31] usb 2-1: Product: syz
[ 1179.819354][   T31] usb 2-1: Manufacturer: syz
[ 1179.823969][   T31] usb 2-1: SerialNumber: syz
[ 1179.829392][   T31] usb 2-1: config 0 descriptor??
[ 1179.835504][   T31] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[ 1179.841950][   T31] usb 2-1: No valid video chain found.
[ 1180.050311][   T36] audit: type=1400 audit(2000000294.636:34914): avc:  denied  { mounton } for  pid=18079 comm="syz.1.18535" path="/13/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1180.050967][T18080] incfs: Can't find or create .index dir in ./file0
[ 1180.080023][T18080] incfs: mount failed -30
[ 1180.086749][   T36] audit: type=1400 audit(2000000294.673:34915): avc:  denied  { read } for  pid=18079 comm="syz.1.18535" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1180.108809][   T36] audit: type=1400 audit(2000000294.673:34916): avc:  denied  { open } for  pid=18079 comm="syz.1.18535" path="/13/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[ 1180.138555][  T304] logitech-djreceiver 0003:046D:C71B.0077: hidraw0: USB HID v0.05 Device [HID 046d:c71b] on usb-dummy_hcd.8-1/input0
[ 1180.298393][  T304] usb 2-1: USB disconnect, device number 54
[ 1180.365878][   T31] usb 9-1: USB disconnect, device number 86
[ 1180.905421][   T36] audit: type=1400 audit(2000000295.431:34917): avc:  denied  { unmount } for  pid=17755 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1180.915496][T18146] netlink: 104 bytes leftover after parsing attributes in process `syz.1.18558'.
[ 1180.982319][T18161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[ 1180.982352][T18161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:51
[ 1181.025203][T18165] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[ 1181.065202][T18172] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[ 1181.083896][T18172] netlink: 'syz.8.18569': attribute type 2 has an invalid length.
[ 1181.174755][T18187] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18574'.
[ 1181.257542][T18208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1181.266161][T18208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1181.422787][  T304] usb 9-1: new high-speed USB device number 87 using dummy_hcd
[ 1181.508226][ T2084] usb 2-1: new full-speed USB device number 55 using dummy_hcd
[ 1181.583063][  T304] usb 9-1: Using ep0 maxpacket: 16
[ 1181.590988][  T304] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1181.600295][  T304] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1181.608349][  T304] usb 9-1: Product: syz
[ 1181.612551][  T304] usb 9-1: Manufacturer: syz
[ 1181.617253][  T304] usb 9-1: SerialNumber: syz
[ 1181.624531][  T304] r8152-cfgselector 9-1: Unknown version 0x0000
[ 1181.630855][  T304] r8152-cfgselector 9-1: config 0 descriptor??
[ 1181.664486][T18212] x_tables: duplicate underflow at hook 2
[ 1181.670148][ T2084] usb 2-1: not running at top speed; connect to a high speed hub
[ 1181.678876][ T2084] usb 2-1: config 1 has an invalid interface number: 5 but max is 2
[ 1181.687393][ T2084] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[ 1181.696616][ T2084] usb 2-1: config 1 has no interface number 3
[ 1181.703126][ T2084] usb 2-1: too many endpoints for config 1 interface 5 altsetting 255: 40, using maximum allowed: 30
[ 1181.714198][ T2084] usb 2-1: config 1 interface 5 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 40
[ 1181.727573][ T2084] usb 2-1: config 1 interface 5 has no altsetting 0
[ 1181.735811][ T2084] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1181.745350][ T2084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1181.753597][ T2084] usb 2-1: Product: Ў
[ 1181.757955][ T2084] usb 2-1: Manufacturer: 篡ꔝ끈ꄊ㨣얙⊜萝渝å멚៚糝鑋৲ꃳ攵ⴾ틠舗嶭鞙Ȭ졍ꑇ吝蘗Τ㵬⃐칻㰶ꚵ觊꾼㫵셊ﮚ쥑燾臩妛
[ 1181.774515][ T2084] usb 2-1: SerialNumber: syz
[ 1181.853243][  T304] r8152-cfgselector 9-1: Needed 1 retries to read version
[ 1181.861113][  T304] r8152-cfgselector 9-1: Unknown version 0x3870
[ 1181.867548][  T304] r8152-cfgselector 9-1: bad CDC descriptors
[ 1181.998828][ T2084] usb 2-1: 2:1 : unknown format tag 0x1 is detected.  processed as MPEG.
[ 1182.016870][ T2084] usb 2-1: found format II with max.bitrate = 3, frame size=175
[ 1182.025151][ T2084] usb 2-1: 2:1 : unknown format tag 0x1 is detected.  processed as MPEG.
[ 1182.033710][ T2084] usb 2-1: found format II with max.bitrate = 3, frame size=175
[ 1182.045063][ T2084] usb 2-1: 2:1: cannot set freq 10229545 to ep 0x82
[ 1182.067520][ T2084] usb 2-1: USB disconnect, device number 55
[ 1182.078771][   T45] r8152-cfgselector 9-1: USB disconnect, device number 87
[ 1182.102402][ T8925] udevd[8925]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1182.699514][T18291] netlink: 36 bytes leftover after parsing attributes in process `syz.8.18608'.
[ 1182.728637][T18266] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1182.866594][T18306] netlink: 57 bytes leftover after parsing attributes in process `syz.9.18614'.
[ 1182.947549][T18309] rust_binder: Error in use_page_slow: ESRCH
[ 1182.947583][T18309] rust_binder: use_range failure ESRCH
[ 1182.955463][T18309] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[ 1182.961017][T18309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[ 1182.969338][T18309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1027
[ 1183.047658][   T45] usb 2-1: new low-speed USB device number 56 using dummy_hcd
[ 1183.219899][   T45] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1183.228987][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1183.238115][   T45] usb 2-1: config 0 descriptor??
[ 1183.465344][   T45] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1183.475497][   T45] asix 2-1:0.0: probe with driver asix failed with error -71
[ 1183.477760][T18322] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[ 1183.484087][T18322] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1183.486524][   T45] usb 2-1: USB disconnect, device number 56
[ 1184.024126][T18359] 9pnet_fd: Insufficient options for proto=fd
[ 1184.341802][T18387] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1184.349953][T18387] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[ 1184.358365][T18387] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1184.366328][T18387] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[ 1184.422992][T18391] netlink: 'syz.1.18643': attribute type 12 has an invalid length.
[ 1184.609807][T18433] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[ 1184.617187][T18433] rust_binder: Write failure EINVAL in pid:117
[ 1184.650466][T18436] binder: Unknown parameter 'context�'
[ 1184.676312][T18443] bridge0: port 3(veth1_macvtap) entered blocking state
[ 1184.683668][T18443] bridge0: port 3(veth1_macvtap) entered disabled state
[ 1184.690902][T18443] veth1_macvtap: entered allmulticast mode
[ 1184.698942][T18443] veth1_macvtap: left allmulticast mode
[ 1184.706042][T18443] bridge0: port 3(veth1_macvtap) entered blocking state
[ 1184.713945][T18443] bridge0: port 3(veth1_macvtap) entered disabled state
[ 1184.736778][T18443] veth1_macvtap: entered allmulticast mode
[ 1184.743401][T18443] veth1_macvtap: left allmulticast mode
[ 1184.783561][T15684] bridge_slave_1: left allmulticast mode
[ 1184.789346][T15684] bridge_slave_1: left promiscuous mode
[ 1184.795359][T15684] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1184.812171][T15684] bridge_slave_0: left allmulticast mode
[ 1184.822277][T15684] bridge_slave_0: left promiscuous mode
[ 1184.827995][T15684] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1184.839561][T18462] 9pnet_fd: Insufficient options for proto=fd
[ 1184.939885][   T45] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1184.957446][T15684] tipc: Disabling bearer <udp:syz0>
[ 1184.971979][T15684] tipc: Left network mode
[ 1184.977866][T15684] veth1_macvtap: left promiscuous mode
[ 1184.987380][T15684] veth0_vlan: left promiscuous mode
[ 1185.122734][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1185.136898][   T45] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1185.146986][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1185.159164][   T45] usb 2-1: config 0 descriptor??
[ 1185.165273][   T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1185.255198][   T36] audit: type=1400 audit(2000000299.500:34918): avc:  denied  { write } for  pid=18506 comm="syz.9.18682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1185.380009][   T31] usb 2-1: USB disconnect, device number 57
[ 1185.666880][ T6052] usb 9-1: new high-speed USB device number 88 using dummy_hcd
[ 1185.827230][ T6052] usb 9-1: Using ep0 maxpacket: 8
[ 1185.833854][ T6052] usb 9-1: config 0 has an invalid interface number: 151 but max is 1
[ 1185.842603][ T6052] usb 9-1: config 0 has no interface number 1
[ 1185.854032][ T6052] usb 9-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1185.866679][ T6052] usb 9-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[ 1185.878468][ T6052] usb 9-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[ 1185.895315][ T6052] usb 9-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1185.905808][ T6052] usb 9-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1185.920305][ T6052] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89
[ 1185.945607][ T6052] usb 9-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[ 1185.964058][ T6052] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1185.972284][ T6052] usb 9-1: Product: syz
[ 1185.977051][ T6052] usb 9-1: Manufacturer: syz
[ 1185.986938][ T6052] usb 9-1: SerialNumber: syz
[ 1185.994969][ T6052] usb 9-1: config 0 descriptor??
[ 1185.995402][T18539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18694'.
[ 1186.010997][T18519] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1186.023084][ T6052] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1186.235980][T18519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1186.245338][T18519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1186.255352][T18519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1186.264086][T18519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1186.575581][  T538] usb 2-1: new low-speed USB device number 58 using dummy_hcd
[ 1186.737180][  T538] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1186.757171][  T538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1186.785604][  T538] usb 2-1: config 0 descriptor??
[ 1186.803314][   T31] usb 9-1: USB disconnect, device number 88
[ 1187.010915][  T538] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1187.021018][  T538] asix 2-1:0.0: probe with driver asix failed with error -32
[ 1187.544819][T18605] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[ 1187.720748][T18625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1102
[ 1187.996459][   T36] audit: type=1326 audit(2000000302.063:34919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.8.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fc98e929 code=0x7ffc0000
[ 1188.035638][   T36] audit: type=1326 audit(2000000302.063:34920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.8.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fc98e929 code=0x7ffc0000
[ 1188.065388][   T36] audit: type=1326 audit(2000000302.063:34921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.8.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc6fc98e929 code=0x7ffc0000
[ 1188.105344][   T36] audit: type=1326 audit(2000000302.091:34922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.8.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fc98e929 code=0x7ffc0000
[ 1188.130476][   T36] audit: type=1326 audit(2000000302.091:34923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.8.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6fc98e929 code=0x7ffc0000
[ 1188.160251][   T36] audit: type=1326 audit(2000000302.091:34924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.8.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fc98e929 code=0x7ffc0000
[ 1188.184706][   T36] audit: type=1326 audit(2000000302.091:34925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.8.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6fc98e929 code=0x7ffc0000
[ 1188.208715][   T36] audit: type=1326 audit(2000000302.091:34926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.8.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fc98e929 code=0x7ffc0000
[ 1188.244313][   T36] audit: type=1326 audit(2000000302.091:34927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18664 comm="syz.8.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fc6fc98e929 code=0x7ffc0000
[ 1188.960031][T18728] binder: Unknown parameter 'defcontext'
[ 1188.966795][T18728] binder: Unknown parameter 'defcontext'
[ 1188.983761][T18733] tmpfs: Unsupported parameter 'mpol'
[ 1189.208171][T18771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1189.216742][T18771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1189.614889][ T6052] usb 2-1: USB disconnect, device number 58
[ 1189.643779][   T45] usb 9-1: new high-speed USB device number 89 using dummy_hcd
[ 1189.804119][   T45] usb 9-1: Using ep0 maxpacket: 16
[ 1189.810576][   T45] usb 9-1: config 0 has no interfaces?
[ 1189.816862][   T45] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1189.826105][   T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1189.834123][   T45] usb 9-1: SerialNumber: syz
[ 1189.839515][   T45] usb 9-1: config 0 descriptor??
[ 1189.987609][ T6052] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[ 1190.034059][T18794] netlink: 124 bytes leftover after parsing attributes in process `syz.9.18777'.
[ 1190.147107][ T6052] usb 2-1: not running at top speed; connect to a high speed hub
[ 1190.155772][ T6052] usb 2-1: config index 0 descriptor too short (expected 32914, got 146)
[ 1190.164316][ T6052] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1190.174563][ T6052] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1190.183693][ T6052] usb 2-1: config 1 has no interface number 1
[ 1190.190087][ T6052] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1190.202977][ T6052] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[ 1190.218679][ T6052] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1190.227890][ T6052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1190.235961][ T6052] usb 2-1: Product: syz
[ 1190.240341][ T6052] usb 2-1: Manufacturer: syz
[ 1190.245281][ T6052] usb 2-1: SerialNumber: syz
[ 1190.465634][T18777] rust_binder: Failed to allocate buffer. len:80, is_oneway:false
[ 1190.469050][ T6052] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1190.484788][ T6052] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[ 1190.496203][ T6052] usb 2-1: USB disconnect, device number 59
[ 1191.052723][T18855] netlink: 'syz.1.18802': attribute type 30 has an invalid length.
[ 1191.546703][  T538] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1191.707221][  T538] usb 2-1: Using ep0 maxpacket: 8
[ 1191.714752][  T538] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1191.726819][  T538] usb 2-1: no configurations
[ 1191.731538][  T538] usb 2-1: can't read configurations, error -22
[ 1192.616291][  T538] usb 2-1: new low-speed USB device number 61 using dummy_hcd
[ 1192.776141][  T538] usb 2-1: Invalid ep0 maxpacket: 32
[ 1192.781674][  T538] usb usb2-port1: attempt power cycle
[ 1192.809312][   T31] usb 9-1: USB disconnect, device number 89
[ 1192.837608][T18991] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[ 1192.869966][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18853'.
[ 1193.161003][  T538] usb 2-1: new low-speed USB device number 62 using dummy_hcd
[ 1193.182792][  T538] usb 2-1: Invalid ep0 maxpacket: 32
[ 1193.246565][ T6052] usb 9-1: new high-speed USB device number 90 using dummy_hcd
[ 1193.321356][  T538] usb 2-1: new low-speed USB device number 63 using dummy_hcd
[ 1193.343111][  T538] usb 2-1: Invalid ep0 maxpacket: 32
[ 1193.348543][  T538] usb usb2-port1: unable to enumerate USB device
[ 1193.406857][ T6052] usb 9-1: Using ep0 maxpacket: 8
[ 1193.413263][ T6052] usb 9-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[ 1193.423614][ T6052] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1193.432844][ T6052] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1193.444795][ T6052] hub 9-1:32.0: bad descriptor, ignoring hub
[ 1193.451006][ T6052] hub 9-1:32.0: probe with driver hub failed with error -5
[ 1193.781234][   T31] usb 9-1: USB disconnect, device number 90
[ 1193.939305][T19030] input: syz0 as /devices/virtual/input/input135
[ 1194.208653][   T45] usb 9-1: new high-speed USB device number 91 using dummy_hcd
[ 1194.369018][   T45] usb 9-1: Using ep0 maxpacket: 16
[ 1194.375266][   T45] usb 9-1: config 0 has no interfaces?
[ 1194.381569][   T45] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1194.390715][   T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1194.398711][   T45] usb 9-1: SerialNumber: syz
[ 1194.404142][   T45] usb 9-1: config 0 descriptor??
[ 1194.772363][T19061] netlink: 1603 bytes leftover after parsing attributes in process `syz.9.18875'.
[ 1196.323851][T19153] rust_binder: Failed to allocate buffer. len:104, is_oneway:true
[ 1196.707508][T19178] tipc: Enabling of bearer <udp:s> rejected, already enabled
[ 1197.338777][ T2084] usb 9-1: USB disconnect, device number 91
[ 1197.528402][T19195] netlink: 'syz.8.18920': attribute type 2 has an invalid length.
[ 1197.939718][   T45] usb 9-1: new high-speed USB device number 92 using dummy_hcd
[ 1198.100089][   T45] usb 9-1: Using ep0 maxpacket: 16
[ 1198.106393][   T45] usb 9-1: config 0 has no interfaces?
[ 1198.112663][   T45] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1198.121899][   T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1198.129900][   T45] usb 9-1: SerialNumber: syz
[ 1198.135380][   T45] usb 9-1: config 0 descriptor??
[ 1199.393624][   T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1199.532584][   T10] usb 2-1: device descriptor read/64, error -71
[ 1199.789165][   T10] usb 2-1: device descriptor read/64, error -71
[ 1200.045737][   T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1200.185684][   T10] usb 2-1: device descriptor read/64, error -71
[ 1200.241166][T19297] overlayfs: missing 'lowerdir'
[ 1200.441286][   T10] usb 2-1: device descriptor read/64, error -71
[ 1200.559131][   T10] usb usb2-port1: attempt power cycle
[ 1200.922371][   T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1200.944846][   T10] usb 2-1: device descriptor read/8, error -71
[ 1201.083952][   T10] usb 2-1: device descriptor read/8, error -71
[ 1201.097088][  T501] usb 9-1: USB disconnect, device number 92
[ 1201.191560][T19314] input: syz0 as /devices/virtual/input/input136
[ 1201.350029][   T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1201.378960][   T10] usb 2-1: device descriptor read/8, error -71
[ 1201.522067][   T10] usb 2-1: device descriptor read/8, error -71
[ 1201.638777][   T10] usb usb2-port1: unable to enumerate USB device
[ 1201.852450][   T31] usb 9-1: new high-speed USB device number 93 using dummy_hcd
[ 1201.993187][T19340] netlink: 37 bytes leftover after parsing attributes in process `syz.0.18970'.
[ 1202.003518][T19340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18970'.
[ 1202.012600][T19340] bridge_slave_1: left allmulticast mode
[ 1202.012816][   T31] usb 9-1: Using ep0 maxpacket: 16
[ 1202.018459][T19340] bridge_slave_1: left promiscuous mode
[ 1202.025158][   T31] usb 9-1: config 0 has no interfaces?
[ 1202.029541][T19340] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1202.035907][   T31] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1202.051098][   T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1202.051157][T19340] bridge_slave_0: left allmulticast mode
[ 1202.060603][   T31] usb 9-1: SerialNumber: syz
[ 1202.070874][   T31] usb 9-1: config 0 descriptor??
[ 1202.072363][T19340] bridge_slave_0: left promiscuous mode
[ 1202.082069][T19340] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1203.370651][   T31] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1203.541561][   T31] usb 2-1: Using ep0 maxpacket: 8
[ 1203.548086][   T31] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1203.556713][   T31] usb 2-1: config 4 has an invalid interface number: 147 but max is 0
[ 1203.564947][   T31] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1203.575081][   T31] usb 2-1: config 4 has no interface number 0
[ 1203.583017][   T31] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[ 1203.592288][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.600348][   T31] usb 2-1: Product: syz
[ 1203.604518][   T31] usb 2-1: Manufacturer: syz
[ 1203.609217][   T31] usb 2-1: SerialNumber: syz
[ 1203.836687][   T31] usb 2-1: Found UVC 0.02 device syz (04f2:b746)
[ 1203.843457][   T31] uvcvideo 2-1:4.147: Entity type for entity Output 251 was not initialized!
[ 1203.852448][   T36] audit: type=1326 audit(2000000316.908:34928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19385 comm="syz.9.18988" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3a138e929 code=0x0
[ 1203.852924][   T31] usb 2-1: Failed to create links for entity 251
[ 1203.882136][   T31] usb 2-1: Failed to register entities (-22).
[ 1203.890469][   T31] usb 2-1: USB disconnect, device number 68
[ 1204.412765][   T36] audit: type=1326 audit(2000000317.422:34929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19391 comm="syz.1.18990" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f0858e929 code=0x0
[ 1204.522374][T19393] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1205.040957][   T31] usb 9-1: USB disconnect, device number 93
[ 1205.074462][   T36] audit: type=1326 audit(2000000318.040:34930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19406 comm="syz.8.18997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7fc6fc98e929 code=0x0
[ 1205.365909][T19423] rust_binder: 19423: no such ref 0
[ 1205.371206][T19423] rust_binder: 19423: no such ref 0
[ 1205.883487][T19441] rust_binder: 19441: no such ref 1
[ 1205.888830][T19441] rust_binder: 19441: no such ref 3
[ 1205.894224][T19441] rust_binder: Write failure EFAULT in pid:1239
[ 1206.294009][T19453] incfs: Options parsing error. -22
[ 1206.305609][T19453] incfs: mount failed -22
[ 1206.314467][T19453] binder: Unknown parameter 'context�'
[ 1207.782310][T19532] rust_binder: Write failure EFAULT in pid:1267
[ 1207.849875][T19315] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1208.032670][T19315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1208.044185][T19315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1208.054064][T19315] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1208.063293][T19315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1208.072898][T19315] usb 2-1: config 0 descriptor??
[ 1208.508820][T19315] cp2112 0003:10C4:EA90.0078: unknown main item tag 0x0
[ 1208.515916][T19315] cp2112 0003:10C4:EA90.0078: unknown main item tag 0x0
[ 1208.523966][T19315] cp2112 0003:10C4:EA90.0078: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[ 1208.647568][T19550] rust_binder: Write failure EINVAL in pid:1281
[ 1208.722355][T19523] binder: Unknown parameter 'dCfH*K�
/I��NX�r�^��!��e;�_J��P.}z�
[ 1208.722355][T19523] Ӧln8�hx�n��1fkt���n�zZ��z}$;�/ȪX�OD'
[ 1208.763618][T19315] cp2112 0003:10C4:EA90.0078: error requesting version
[ 1208.780418][T19315] cp2112 0003:10C4:EA90.0078: probe with driver cp2112 failed with error -71
[ 1208.795732][T19315] usb 2-1: USB disconnect, device number 69
[ 1209.100667][  T304] usb 9-1: new high-speed USB device number 94 using dummy_hcd
[ 1209.271705][  T304] usb 9-1: Using ep0 maxpacket: 8
[ 1209.278439][  T304] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1209.287321][  T304] usb 9-1: config 1 has an invalid interface number: 81 but max is 0
[ 1209.295791][  T304] usb 9-1: config 1 has no interface number 0
[ 1209.307024][  T304] usb 9-1: New USB device found, idVendor=19d2, idProduct=6a61, bcdDevice=b0.c0
[ 1209.322159][  T304] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1209.334344][  T304] usb 9-1: Product: syz
[ 1209.338850][  T304] usb 9-1: Manufacturer: syz
[ 1209.343632][  T304] usb 9-1: SerialNumber: syz
[ 1209.567618][  T304] usb 9-1: bad CDC descriptors
[ 1209.573420][  T304] usb 9-1: USB disconnect, device number 94
[ 1210.192482][T19661] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0
[ 1210.192505][T19661] rust_binder: Error while translating object.
[ 1210.201172][T19661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1210.207489][T19661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1299
[ 1210.229689][T19677] netlink: 104 bytes leftover after parsing attributes in process `syz.8.19085'.
[ 1210.248668][T19677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1301
[ 1210.340790][  T501] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1210.444334][T19689] rust_binder: Error while translating object.
[ 1210.444372][T19689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[ 1210.450641][T19689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1311
[ 1210.511870][  T501] usb 2-1: Using ep0 maxpacket: 8
[ 1210.529494][  T501] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1210.539413][  T501] usb 2-1: no configurations
[ 1210.544122][  T501] usb 2-1: can't read configurations, error -22
[ 1210.779510][   T10] usb 9-1: new high-speed USB device number 95 using dummy_hcd
[ 1210.940600][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1210.951905][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1210.961686][   T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1210.974706][   T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1210.983825][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1210.992562][   T10] usb 9-1: config 0 descriptor??
[ 1211.161842][T19707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19096'.
[ 1211.268584][T19719] fuseblk: Bad value for 'fd'
[ 1211.432372][   T10] plantronics 0003:047F:FFFF.0079: unknown main item tag 0xd
[ 1211.443533][   T10] plantronics 0003:047F:FFFF.0079: No inputs registered, leaving
[ 1211.460973][   T10] plantronics 0003:047F:FFFF.0079: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1211.642382][T19694] binder: Bad value for 'max'
[ 1211.741266][  T501] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1211.901626][  T501] usb 2-1: Using ep0 maxpacket: 8
[ 1211.908842][  T501] usb 2-1: config 6 has an invalid interface number: 146 but max is 1
[ 1211.917325][  T501] usb 2-1: config 6 has an invalid interface number: 84 but max is 1
[ 1211.925492][  T501] usb 2-1: config 6 has no interface number 0
[ 1211.931593][  T501] usb 2-1: config 6 has no interface number 1
[ 1211.937736][  T501] usb 2-1: config 6 interface 84 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[ 1211.948695][  T501] usb 2-1: config 6 interface 84 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 1211.959632][  T501] usb 2-1: config 6 interface 84 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[ 1211.970365][  T501] usb 2-1: config 6 interface 84 has no altsetting 0
[ 1211.977588][  T501] usb 2-1: language id specifier not provided by device, defaulting to English
[ 1211.990100][  T501] usb 2-1: New USB device found, idVendor=12d1, idProduct=1436, bcdDevice= 0.00
[ 1211.999232][  T501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1212.007238][  T501] usb 2-1: Product: syz
[ 1212.011451][  T501] usb 2-1: SerialNumber: syz
[ 1212.235692][  T501] usb-storage 2-1:6.146: USB Mass Storage device detected
[ 1212.289117][  T501] usb-storage 2-1:6.84: USB Mass Storage device detected
[ 1212.343101][  T501] usb 2-1: USB disconnect, device number 72
[ 1212.755298][T19764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19116'.
[ 1212.766218][T19764] netlink: 'syz.0.19116': attribute type 16 has an invalid length.
[ 1212.774438][T19764] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.19116'.
[ 1212.833599][T19780] cgroup: noprefix used incorrectly
[ 1212.840112][T19780] overlayfs: conflicting options: nfs_export=on,index=off
[ 1212.907846][T19782] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19124'.
[ 1213.195166][   T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1213.366210][   T10] usb 2-1: Using ep0 maxpacket: 8
[ 1213.373443][   T10] usb 2-1: config 6 has an invalid interface number: 146 but max is 1
[ 1213.382019][   T10] usb 2-1: config 6 has an invalid interface number: 84 but max is 1
[ 1213.390560][   T10] usb 2-1: config 6 has no interface number 0
[ 1213.396845][   T10] usb 2-1: config 6 has no interface number 1
[ 1213.403398][   T10] usb 2-1: config 6 interface 84 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[ 1213.414723][   T10] usb 2-1: config 6 interface 84 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 1213.426110][   T10] usb 2-1: config 6 interface 84 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[ 1213.437145][   T10] usb 2-1: config 6 interface 84 has no altsetting 0
[ 1213.444670][   T10] usb 2-1: language id specifier not provided by device, defaulting to English
[ 1213.456939][   T10] usb 2-1: New USB device found, idVendor=12d1, idProduct=1436, bcdDevice= 0.00
[ 1213.466434][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1213.474745][   T10] usb 2-1: Product: syz
[ 1213.479299][   T10] usb 2-1: SerialNumber: syz
[ 1213.690825][   T45] usb 9-1: USB disconnect, device number 95
[ 1213.710882][   T10] usb-storage 2-1:6.146: USB Mass Storage device detected
[ 1213.767213][   T10] usb-storage 2-1:6.84: USB Mass Storage device detected
[ 1213.817764][   T10] usb 2-1: USB disconnect, device number 73
[ 1214.385937][T19838] /dev/loop0: Can't lookup blockdev
[ 1214.415639][T19841] binder: Bad value for 'max'
[ 1214.469384][   T36] audit: type=1400 audit(2000000326.833:34931): avc:  denied  { map } for  pid=19846 comm="syz.1.19144" path="socket:[268559]" dev="sockfs" ino=268559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1214.487298][T19849] rust_binder: Write failure EFAULT in pid:357
[ 1214.506498][T19851] rust_binder: Write failure EFAULT in pid:359
[ 1214.519144][T19851] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[ 1214.654648][   T36] audit: type=1400 audit(2000000327.001:34932): avc:  denied  { read } for  pid=19855 comm="syz.1.19147" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1214.678222][   T36] audit: type=1400 audit(2000000327.001:34933): avc:  denied  { open } for  pid=19855 comm="syz.1.19147" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1214.719767][T19862] binfmt_misc: register: failed to install interpreter file ./file0
[ 1215.361912][T19881] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1215.655320][T19910] rust_binder: Write failure EINVAL in pid:1342
[ 1215.744746][T19908] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1215.759229][T19908] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1215.766601][T19908] bridge_slave_0: entered allmulticast mode
[ 1215.773264][T19908] bridge_slave_0: entered promiscuous mode
[ 1215.779921][T19908] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1215.787392][T19908] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1215.796483][T19908] bridge_slave_1: entered allmulticast mode
[ 1215.803021][T19908] bridge_slave_1: entered promiscuous mode
[ 1215.884160][T19908] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1215.891379][T19908] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1215.898695][T19908] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1215.905781][T19908] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1215.935482][T14076] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1215.943185][T14076] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1215.953939][T15684] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1215.961065][T15684] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1215.970220][T14076] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1215.977306][T14076] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1216.005768][T19908] veth0_vlan: entered promiscuous mode
[ 1216.017088][T19908] veth1_macvtap: entered promiscuous mode
[ 1216.072446][T19936] SELinux: failed to load policy
[ 1216.281357][T19940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19174'.
[ 1216.361330][T19953] overlayfs: failed to clone upperpath
[ 1216.624589][T19955] netlink: 5 bytes leftover after parsing attributes in process `syz.1.19178'.
[ 1216.720180][T19966] /dev/rnullb0: Can't open blockdev
[ 1216.726682][   T36] audit: type=1326 audit(2000000328.947:34934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19965 comm="syz.1.19182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f0858e929 code=0x0
[ 1216.807186][   T36] audit: type=1326 audit(2000000329.012:34935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19930 comm="syz.8.19172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fc98e929 code=0x7fc00000
[ 1216.835972][T19967] 9pnet_fd: Insufficient options for proto=fd
[ 1216.964252][T19979] fuse: Bad value for 'fd'
[ 1217.097258][   T45] usb 9-1: new high-speed USB device number 96 using dummy_hcd
[ 1217.236312][   T45] usb 9-1: device descriptor read/64, error -71
[ 1217.492859][   T45] usb 9-1: device descriptor read/64, error -71
[ 1217.748107][T20004] /dev/sg0: Can't lookup blockdev
[ 1217.760325][   T45] usb 9-1: new high-speed USB device number 97 using dummy_hcd
[ 1217.885086][   T36] audit: type=1400 audit(2000000330.022:34936): avc:  denied  { write } for  pid=20022 comm="syz.1.19205" name="001" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1217.919165][   T45] usb 9-1: device descriptor read/64, error -71
[ 1217.935527][   T36] audit: type=1400 audit(2000000330.050:34937): avc:  denied  { map } for  pid=20022 comm="syz.1.19205" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1218.027737][T20033] input: syz1 as /devices/virtual/input/input138
[ 1218.177025][   T45] usb 9-1: device descriptor read/64, error -71
[ 1218.210804][T20053] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19218'.
[ 1218.311034][   T45] usb usb9-port1: attempt power cycle
[ 1218.496944][T20078] 9pnet_fd: Insufficient options for proto=fd
[ 1218.548207][T20084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1218.548239][T20084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:37
[ 1218.557743][T20084] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[ 1218.566885][T20084] rust_binder: Read failure Err(EFAULT) in pid:37
[ 1218.690138][   T45] usb 9-1: new high-speed USB device number 98 using dummy_hcd
[ 1218.723279][   T45] usb 9-1: device descriptor read/8, error -71
[ 1218.862320][   T45] usb 9-1: device descriptor read/8, error -71
[ 1219.117819][   T45] usb 9-1: new high-speed USB device number 99 using dummy_hcd
[ 1219.140233][   T45] usb 9-1: device descriptor read/8, error -71
[ 1219.244718][T20100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19233'.
[ 1219.279517][   T45] usb 9-1: device descriptor read/8, error -71
[ 1219.331647][  T501] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[ 1219.395848][   T45] usb usb9-port1: unable to enumerate USB device
[ 1219.492980][  T501] usb 2-1: not running at top speed; connect to a high speed hub
[ 1219.501614][  T501] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1219.512168][  T501] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1219.521210][  T501] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 33, using maximum allowed: 30
[ 1219.532046][  T501] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1219.541841][  T501] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[ 1219.556903][  T501] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1219.565991][  T501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.574087][  T501] usb 2-1: Product: syz
[ 1219.578306][  T501] usb 2-1: Manufacturer: syz
[ 1219.582908][  T501] usb 2-1: SerialNumber: syz
[ 1220.041547][  T501] usb 2-1: 0:2 : does not exist
[ 1220.048626][  T501] usb 2-1: USB disconnect, device number 74
[ 1220.066768][T11756] udevd[11756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1220.463668][T20147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=20147 comm=syz.1.19247
[ 1220.476445][T20147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=20147 comm=syz.1.19247
[ 1220.489213][   T45] usb 9-1: new high-speed USB device number 100 using dummy_hcd
[ 1220.490306][T20147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=20147 comm=syz.1.19247
[ 1220.542628][   T36] audit: type=1326 audit(2000000332.510:34938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20148 comm="syz.0.19248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccd738e929 code=0x0
[ 1220.657209][   T45] usb 9-1: Using ep0 maxpacket: 16
[ 1220.662828][   T45] usb 9-1: no configurations
[ 1220.667469][   T45] usb 9-1: can't read configurations, error -22
[ 1220.806918][   T45] usb 9-1: new high-speed USB device number 101 using dummy_hcd
[ 1220.892439][ T2084] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[ 1220.967270][   T45] usb 9-1: Using ep0 maxpacket: 16
[ 1220.972924][   T45] usb 9-1: no configurations
[ 1220.977566][   T45] usb 9-1: can't read configurations, error -22
[ 1220.984018][   T45] usb usb9-port1: attempt power cycle
[ 1221.055027][ T2084] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1221.063497][ T2084] usb 2-1: not running at top speed; connect to a high speed hub
[ 1221.072015][ T2084] usb 2-1: config 13 has an invalid interface number: 90 but max is 0
[ 1221.080267][ T2084] usb 2-1: config 13 has no interface number 0
[ 1221.086553][ T2084] usb 2-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1221.100785][ T2084] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7
[ 1221.109932][ T2084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1221.117977][ T2084] usb 2-1: Product: syz
[ 1221.122139][ T2084] usb 2-1: Manufacturer: syz
[ 1221.126728][ T2084] usb 2-1: SerialNumber: syz
[ 1221.352171][   T45] usb 9-1: new high-speed USB device number 102 using dummy_hcd
[ 1221.353422][ T2084] usb 2-1: USB disconnect, device number 75
[ 1221.370228][ T8838] udevd[8838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.90/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1221.386997][   T45] usb 9-1: Using ep0 maxpacket: 16
[ 1221.392784][   T45] usb 9-1: no configurations
[ 1221.397463][   T45] usb 9-1: can't read configurations, error -22
[ 1221.533888][   T45] usb 9-1: new high-speed USB device number 103 using dummy_hcd
[ 1221.555824][   T45] usb 9-1: Using ep0 maxpacket: 16
[ 1221.561455][   T45] usb 9-1: no configurations
[ 1221.566247][   T45] usb 9-1: can't read configurations, error -22
[ 1221.572675][   T45] usb usb9-port1: unable to enumerate USB device
[ 1221.901156][   T36] audit: type=1326 audit(2000000333.783:34939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20155 comm="syz.1.19251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0858e929 code=0x7ffc0000
[ 1221.925329][   T36] audit: type=1326 audit(2000000333.783:34940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20155 comm="syz.1.19251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0858e929 code=0x7ffc0000
[ 1221.972896][T20165] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[ 1221.972916][T20165] rust_binder: Read failure Err(EFAULT) in pid:466
[ 1222.023356][T20170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1222.038574][T20170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1222.271515][   T31] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1222.442551][   T31] usb 2-1: Using ep0 maxpacket: 16
[ 1222.448817][   T31] usb 2-1: config 1 interface 1 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1222.459712][   T31] usb 2-1: config 1 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1222.472543][   T31] usb 2-1: config 1 interface 1 has no altsetting 0
[ 1222.480685][   T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1222.489798][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1222.497861][   T31] usb 2-1: Product: syz
[ 1222.502046][   T31] usb 2-1: Manufacturer: syz
[ 1222.506703][   T31] usb 2-1: SerialNumber: syz
[ 1222.731351][   T31] usb 2-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[ 1222.739826][   T31] usb 2-1: found format II with max.bitrate = 4, frame size=5
[ 1222.747395][   T31] usb 2-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[ 1222.755951][   T31] usb 2-1: found format II with max.bitrate = 4, frame size=5
[ 1222.764439][   T31] usb 2-1: failed to enable PITCH for EP 0x82
[ 1222.774810][   T31] usb 2-1: USB disconnect, device number 76
[ 1222.785878][ T8925] udevd[8925]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1222.964446][T20176] rust_binder: Error while translating object.
[ 1222.964478][T20176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[ 1222.970758][T20176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47
[ 1223.075480][T20185] incfs: Can't find or create .index dir in ./cgroup
[ 1223.091415][T20185] incfs: mount failed -22
[ 1223.152112][T20186] overlayfs: unescaped trailing colons in lowerdir mount option.
[ 1223.479545][ T2084] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[ 1223.639898][ T2084] usb 10-1: Using ep0 maxpacket: 8
[ 1223.646863][ T2084] usb 10-1: config 6 has an invalid interface number: 146 but max is 1
[ 1223.655178][ T2084] usb 10-1: config 6 has an invalid interface number: 84 but max is 1
[ 1223.663472][ T2084] usb 10-1: config 6 has no interface number 0
[ 1223.669646][ T2084] usb 10-1: config 6 has no interface number 1
[ 1223.675849][ T2084] usb 10-1: config 6 interface 84 altsetting 1 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[ 1223.686927][ T2084] usb 10-1: config 6 interface 84 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 1223.698507][ T2084] usb 10-1: config 6 interface 84 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[ 1223.709338][ T2084] usb 10-1: config 6 interface 84 has no altsetting 0
[ 1223.716583][ T2084] usb 10-1: language id specifier not provided by device, defaulting to English
[ 1223.728562][ T2084] usb 10-1: New USB device found, idVendor=12d1, idProduct=1436, bcdDevice= 0.00
[ 1223.737751][ T2084] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1223.745829][ T2084] usb 10-1: Product: syz
[ 1223.750138][ T2084] usb 10-1: SerialNumber: syz
[ 1223.757516][T19315] usb 9-1: new low-speed USB device number 104 using dummy_hcd
[ 1223.918979][T19315] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1223.928185][T19315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1223.937465][T19315] usb 9-1: config 0 descriptor??
[ 1223.974579][ T2084] usb-storage 10-1:6.146: USB Mass Storage device detected
[ 1224.050449][ T2084] usb-storage 10-1:6.84: USB Mass Storage device detected
[ 1224.093515][ T2084] usb 10-1: USB disconnect, device number 52
[ 1224.163457][T19315] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1224.173534][T19315] asix 9-1:0.0: probe with driver asix failed with error -32
[ 1224.728629][T20256] rust_binder: 20256: no such ref 3
[ 1224.871419][   T36] audit: type=1400 audit(2000000336.561:34941): avc:  denied  { watch watch_reads } for  pid=20273 comm="syz.1.19290" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1225.046681][T20282] input input139: cannot allocate more than FF_MAX_EFFECTS effects
[ 1225.329025][T20789] usb 2-1: new full-speed USB device number 77 using dummy_hcd
[ 1225.491834][T20789] usb 2-1: not running at top speed; connect to a high speed hub
[ 1225.492525][T20298] rust_binder: BC_FREEZE_NOTIFICATION_DONE 00000000400c630e not found
[ 1225.500580][T20789] usb 2-1: config index 0 descriptor too short (expected 32914, got 146)
[ 1225.508054][T20298] rust_binder: Write failure EINVAL in pid:74
[ 1225.516339][T20789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1225.532786][T20789] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1225.541770][T20789] usb 2-1: config 1 has no interface number 1
[ 1225.547916][T20789] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1225.560761][T20789] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[ 1225.573192][T20789] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1225.582372][T20789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1225.590455][T20789] usb 2-1: Product: syz
[ 1225.594693][T20789] usb 2-1: Manufacturer: syz
[ 1225.599340][T20789] usb 2-1: SerialNumber: syz
[ 1225.824804][T20317] rust_binder: Write failure EINVAL in pid:92
[ 1225.887871][T20789] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1225.902082][T20789] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[ 1225.918669][T20789] usb 2-1: USB disconnect, device number 77
[ 1225.964340][T20331] rust_binder: Failed to allocate buffer. len:104, is_oneway:true
[ 1225.976746][T20333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20333 comm=syz.9.19308
[ 1225.998414][T20333] input: syz0 as /devices/virtual/input/input141
[ 1226.408788][   T45] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[ 1226.442024][T20349] rust_binder: 20349: no such ref 0
[ 1226.447408][T20349] rust_binder: Write failure EINVAL in pid:526
[ 1226.462710][T20351] tipc: Started in network mode
[ 1226.473844][T20351] tipc: Node identity 96f18ac0497c, cluster identity 4711
[ 1226.481009][T20351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1226.517243][T20354] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1226.529205][T20356] input: syz0 as /devices/virtual/input/input142
[ 1226.569129][   T45] usb 10-1: Using ep0 maxpacket: 8
[ 1226.577800][T20346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1226.586719][T20346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1226.598255][   T45] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1226.607362][   T45] usb 10-1: no configurations
[ 1226.611587][T20367] netlink: 'syz.0.19319': attribute type 4 has an invalid length.
[ 1226.612934][   T45] usb 10-1: can't read configurations, error -22
[ 1226.620349][T20367] netlink: 'syz.0.19319': attribute type 5 has an invalid length.
[ 1226.634340][T20367] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.19319'.
[ 1226.681341][T20352] tipc: Disabling bearer <eth:syzkaller0>
[ 1226.694040][T20378] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1226.704308][T20377] rust_binder: Error in use_page_slow: ESRCH
[ 1226.704336][T20377] rust_binder: use_range failure ESRCH
[ 1226.710840][T20377] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[ 1226.716357][T20377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[ 1226.724436][T20377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:119
[ 1227.060933][   T45] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[ 1227.125280][   T10] usb 9-1: USB disconnect, device number 104
[ 1227.210611][   T45] usb 10-1: device descriptor read/64, error -71
[ 1227.468704][   T45] usb 10-1: device descriptor read/64, error -71
[ 1227.584831][   T45] usb usb10-port1: attempt power cycle
[ 1227.927993][T20416] binder: Bad value for 'max'
[ 1227.948203][   T45] usb 10-1: new high-speed USB device number 55 using dummy_hcd
[ 1227.970736][   T45] usb 10-1: device descriptor read/8, error -71
[ 1228.037745][T20431] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1228.038681][T20431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1228.045352][T20431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:544
[ 1228.080834][   T36] audit: type=1326 audit(2000000339.563:34942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20442 comm="syz.0.19348" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccd738e929 code=0x0
[ 1228.120347][   T45] usb 10-1: device descriptor read/8, error -71
[ 1228.135151][T20444] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1228.143387][T20444] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[ 1228.152150][T20444] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1228.161916][T20444] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[ 1228.375860][   T45] usb 10-1: new high-speed USB device number 56 using dummy_hcd
[ 1228.399403][   T45] usb 10-1: device descriptor read/8, error -71
[ 1228.537183][   T45] usb 10-1: device descriptor read/8, error -71
[ 1228.655017][   T45] usb usb10-port1: unable to enumerate USB device
[ 1228.934131][T20450] rust_binder: Error while translating object.
[ 1228.934176][T20450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1228.940437][T20450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1392
[ 1229.051049][T20460] netlink: 'syz.8.19354': attribute type 12 has an invalid length.
[ 1229.241791][   T45] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1229.403354][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1229.412878][ T2084] usb 9-1: new low-speed USB device number 105 using dummy_hcd
[ 1229.414560][   T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1229.435161][   T45] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[ 1229.444249][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1229.455842][   T45] usb 2-1: config 0 descriptor??
[ 1229.595951][ T2084] usb 9-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1229.604262][ T2084] usb 9-1: config 0 has an invalid interface number: 0 but max is -1
[ 1229.612690][ T2084] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1229.621883][ T2084] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 1229.632889][ T2084] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 1229.643008][ T2084] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1229.652957][ T2084] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 1229.668301][ T2084] usb 9-1: string descriptor 0 read error: -22
[ 1229.674773][ T2084] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 1229.685192][ T2084] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1229.694495][ T2084] usb 9-1: config 0 descriptor??
[ 1229.700406][ T2084] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1229.707947][ T2084] hub 9-1:0.0: probe with driver hub failed with error -5
[ 1229.716044][ T2084] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input143
[ 1229.899934][T20455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1229.908554][T20455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1229.918483][ T2084] usb 9-1: USB disconnect, device number 105
[ 1229.918770][   T45] logitech 0003:046D:CA04.007A: unknown main item tag 0x0
[ 1229.931918][   T45] logitech 0003:046D:CA04.007A: unknown main item tag 0x0
[ 1229.941566][   T45] logitech 0003:046D:CA04.007A: unknown main item tag 0x0
[ 1229.949552][   T45] logitech 0003:046D:CA04.007A: hidraw0: USB HID vf.ff Device [HID 046d:ca04] on usb-dummy_hcd.1-1/input0
[ 1229.964161][   T45] logitech 0003:046D:CA04.007A: no inputs found
[ 1230.136381][T20455] binder: Bad value for 'defcontext'
[ 1230.142546][ T2084] usb 2-1: USB disconnect, device number 78
[ 1230.738560][   T45] usb 9-1: new high-speed USB device number 106 using dummy_hcd
[ 1230.914251][T20490] rust_binder: Error while translating object.
[ 1230.914282][T20490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1230.920642][T20490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:557
[ 1230.932140][   T45] usb 9-1: config 192 has an invalid interface number: 162 but max is 0
[ 1230.946997][T20493] netlink: 'syz.9.19366': attribute type 12 has an invalid length.
[ 1230.961606][   T45] usb 9-1: config 192 has no interface number 0
[ 1230.969850][   T45] usb 9-1: config 192 interface 162 has no altsetting 0
[ 1230.978495][   T45] usb 9-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3
[ 1230.987777][   T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1230.999771][   T45] usb 9-1: Product: syz
[ 1231.004023][   T45] usb 9-1: Manufacturer: syz
[ 1231.008709][   T45] usb 9-1: SerialNumber: syz
[ 1231.040539][T20504] 9pnet_fd: Insufficient options for proto=fd
[ 1231.240950][ T6052] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[ 1231.285408][T20508] rust_binder: 20508: no such ref 0
[ 1231.290693][T20508] rust_binder: Write failure EINVAL in pid:1406
[ 1231.401293][ T6052] usb 10-1: Using ep0 maxpacket: 16
[ 1231.414379][ T6052] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1231.425438][ T6052] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1231.435370][ T6052] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1231.448441][ T6052] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1231.457637][ T6052] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1231.466634][ T6052] usb 10-1: config 0 descriptor??
[ 1231.902072][ T6052] microsoft 0003:045E:07DA.007B: unknown main item tag 0x0
[ 1231.909462][ T6052] microsoft 0003:045E:07DA.007B: ignoring exceeding usage max
[ 1231.919633][ T6052] microsoft 0003:045E:07DA.007B: unknown main item tag 0x0
[ 1231.927021][ T6052] microsoft 0003:045E:07DA.007B: unknown main item tag 0x4
[ 1231.934327][ T6052] microsoft 0003:045E:07DA.007B: unknown main item tag 0x5
[ 1231.943210][ T6052] ==================================================================
[ 1231.951316][ T6052] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0
[ 1231.958988][ T6052] Read of size 2368 at addr ffff88811f808a81 by task kworker/0:5/6052
[ 1231.967153][ T6052] 
[ 1231.969497][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: kworker/0:5 Not tainted 6.12.30-syzkaller-gd893caf112c8 #0 64e33962539d0ce7a45dea9f0941eea22919d800
[ 1231.969532][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1231.969550][ T6052] Workqueue: usb_hub_wq hub_event
[ 1231.969590][ T6052] Call Trace:
[ 1231.969598][ T6052]  <TASK>
[ 1231.969606][ T6052]  __dump_stack+0x21/0x30
[ 1231.969640][ T6052]  dump_stack_lvl+0x10c/0x190
[ 1231.969667][ T6052]  ? __cfi_dump_stack_lvl+0x10/0x10
[ 1231.969694][ T6052]  ? __cfi__printk+0x10/0x10
[ 1231.969720][ T6052]  print_address_description+0x71/0x220
[ 1231.969738][ T6052]  print_report+0x4a/0x70
[ 1231.969753][ T6052]  kasan_report+0x163/0x1a0
[ 1231.969789][ T6052]  ? mon_bin_event+0x12c1/0x23e0
[ 1231.969818][ T6052]  ? mon_bin_event+0x12c1/0x23e0
[ 1231.969843][ T6052]  kasan_check_range+0x299/0x2a0
[ 1231.969870][ T6052]  ? mon_bin_event+0x12c1/0x23e0
[ 1231.969890][ T6052]  __asan_memcpy+0x31/0x80
[ 1231.969916][ T6052]  mon_bin_event+0x12c1/0x23e0
[ 1231.969947][ T6052]  ? mon_bin_complete+0x50/0x50
[ 1231.969971][ T6052]  ? __kmalloc_noprof+0x1b1/0x450
[ 1231.969995][ T6052]  ? __hid_request+0x1e8/0x410
[ 1231.970016][ T6052]  ? hid_connect+0x49a/0x1a20
[ 1231.970050][ T6052]  ? hid_hw_start+0xcb/0x160
[ 1231.970080][ T6052]  ? ms_probe+0x194/0x460
[ 1231.970108][ T6052]  ? __cfi_mon_bin_submit+0x10/0x10
[ 1231.970135][ T6052]  mon_bin_submit+0x2b/0x40
[ 1231.970158][ T6052]  mon_submit+0x1b9/0x230
[ 1231.970204][ T6052]  usb_hcd_submit_urb+0x12d/0x1a20
[ 1231.970227][ T6052]  ? bus_probe_device+0x18b/0x270
[ 1231.970252][ T6052]  ? usb_probe_device+0x1d4/0x380
[ 1231.970285][ T6052]  ? really_probe+0x2d3/0x890
[ 1231.970317][ T6052]  ? __driver_probe_device+0x198/0x280
[ 1231.970343][ T6052]  ? driver_probe_device+0x54/0x3f0
[ 1231.970376][ T6052]  ? __device_attach_driver+0x2f1/0x4b0
[ 1231.970409][ T6052]  usb_submit_urb+0x111b/0x1800
[ 1231.970434][ T6052]  usb_start_wait_urb+0x11b/0x2f0
[ 1231.970456][ T6052]  ? usb_api_blocking_completion+0xd0/0xd0
[ 1231.970477][ T6052]  ? __kasan_kmalloc+0x96/0xb0
[ 1231.970509][ T6052]  ? __kasan_check_write+0x18/0x20
[ 1231.970537][ T6052]  ? usb_alloc_urb+0x9b/0x200
[ 1231.970568][ T6052]  usb_control_msg+0x25a/0x490
[ 1231.970592][ T6052]  usbhid_raw_request+0x457/0x590
[ 1231.970613][ T6052]  __hid_request+0x1e8/0x410
[ 1231.970636][ T6052]  hidinput_connect+0x241b/0x3340
[ 1231.970678][ T6052]  hid_connect+0x49a/0x1a20
[ 1231.970709][ T6052]  ? usbhid_start+0x1a67/0x2530
[ 1231.970733][ T6052]  ? __cfi_hid_connect+0x10/0x10
[ 1231.970766][ T6052]  hid_hw_start+0xcb/0x160
[ 1231.970796][ T6052]  ms_probe+0x194/0x460
[ 1231.970823][ T6052]  hid_device_probe+0x2c4/0x5d0
[ 1231.970854][ T6052]  ? __cfi_hid_device_probe+0x10/0x10
[ 1231.970880][ T6052]  really_probe+0x2d3/0x890
[ 1231.970906][ T6052]  __driver_probe_device+0x198/0x280
[ 1231.970937][ T6052]  driver_probe_device+0x54/0x3f0
[ 1231.970974][ T6052]  ? __device_attach_driver+0x2db/0x4b0
[ 1231.971007][ T6052]  __device_attach_driver+0x2f1/0x4b0
[ 1231.971033][ T6052]  bus_for_each_drv+0x260/0x2f0
[ 1231.971053][ T6052]  ? __cfi___device_attach_driver+0x10/0x10
[ 1231.971085][ T6052]  ? __cfi_bus_for_each_drv+0x10/0x10
[ 1231.971112][ T6052]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 1231.971137][ T6052]  __device_attach+0x2bd/0x3a0
[ 1231.971164][ T6052]  ? device_attach+0x40/0x40
[ 1231.971193][ T6052]  ? _raw_spin_lock+0x8c/0x120
[ 1231.971215][ T6052]  ? __cfi__raw_spin_lock+0x10/0x10
[ 1231.971241][ T6052]  device_initial_probe+0x1e/0x30
[ 1231.971273][ T6052]  bus_probe_device+0x18b/0x270
[ 1231.971299][ T6052]  device_add+0x80c/0xc00
[ 1231.971326][ T6052]  hid_add_device+0x39b/0x560
[ 1231.971350][ T6052]  usbhid_probe+0xde3/0x12b0
[ 1231.971378][ T6052]  usb_probe_interface+0x696/0xc00
[ 1231.971412][ T6052]  ? __cfi_usb_probe_interface+0x10/0x10
[ 1231.971444][ T6052]  really_probe+0x2d3/0x890
[ 1231.971470][ T6052]  __driver_probe_device+0x198/0x280
[ 1231.971495][ T6052]  driver_probe_device+0x54/0x3f0
[ 1231.971528][ T6052]  ? __device_attach_driver+0x2db/0x4b0
[ 1231.971561][ T6052]  __device_attach_driver+0x2f1/0x4b0
[ 1231.971592][ T6052]  bus_for_each_drv+0x260/0x2f0
[ 1231.971611][ T6052]  ? __cfi___device_attach_driver+0x10/0x10
[ 1231.971637][ T6052]  ? __cfi_bus_for_each_drv+0x10/0x10
[ 1231.971661][ T6052]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 1231.971686][ T6052]  __device_attach+0x2bd/0x3a0
[ 1231.971717][ T6052]  ? device_attach+0x40/0x40
[ 1231.971742][ T6052]  ? _raw_spin_lock+0x8c/0x120
[ 1231.971758][ T6052]  ? __cfi__raw_spin_lock+0x10/0x10
[ 1231.971775][ T6052]  device_initial_probe+0x1e/0x30
[ 1231.971802][ T6052]  bus_probe_device+0x18b/0x270
[ 1231.971830][ T6052]  device_add+0x80c/0xc00
[ 1231.971868][ T6052]  usb_set_configuration+0x1ad4/0x20b0
[ 1231.971898][ T6052]  usb_generic_driver_probe+0x95/0x160
[ 1231.971919][ T6052]  usb_probe_device+0x1d4/0x380
[ 1231.971954][ T6052]  ? __cfi_usb_probe_device+0x10/0x10
[ 1231.971991][ T6052]  really_probe+0x2d3/0x890
[ 1231.972023][ T6052]  __driver_probe_device+0x198/0x280
[ 1231.972048][ T6052]  driver_probe_device+0x54/0x3f0
[ 1231.972073][ T6052]  ? __device_attach_driver+0x2db/0x4b0
[ 1231.972108][ T6052]  __device_attach_driver+0x2f1/0x4b0
[ 1231.972141][ T6052]  bus_for_each_drv+0x260/0x2f0
[ 1231.972165][ T6052]  ? __cfi___device_attach_driver+0x10/0x10
[ 1231.972197][ T6052]  ? __cfi_bus_for_each_drv+0x10/0x10
[ 1231.972216][ T6052]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 1231.972240][ T6052]  __device_attach+0x2bd/0x3a0
[ 1231.972272][ T6052]  ? device_attach+0x40/0x40
[ 1231.972301][ T6052]  ? _raw_spin_lock+0x8c/0x120
[ 1231.972318][ T6052]  ? __cfi__raw_spin_lock+0x10/0x10
[ 1231.972335][ T6052]  device_initial_probe+0x1e/0x30
[ 1231.972361][ T6052]  bus_probe_device+0x18b/0x270
[ 1231.972388][ T6052]  device_add+0x80c/0xc00
[ 1231.972420][ T6052]  usb_new_device+0x9ed/0x1590
[ 1231.972448][ T6052]  ? __cfi_usb_new_device+0x10/0x10
[ 1231.972476][ T6052]  hub_event+0x265b/0x41a0
[ 1231.972506][ T6052]  ? __cfi_hub_event+0x10/0x10
[ 1231.972538][ T6052]  ? __kasan_check_write+0x18/0x20
[ 1231.972565][ T6052]  ? pwq_dec_nr_in_flight+0x6c7/0xc60
[ 1231.972595][ T6052]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[ 1231.972612][ T6052]  ? kick_pool+0xb9/0x550
[ 1231.972628][ T6052]  process_scheduled_works+0x7d5/0x1020
[ 1231.972657][ T6052]  worker_thread+0xc58/0x1250
[ 1231.972694][ T6052]  kthread+0x2c7/0x370
[ 1231.972712][ T6052]  ? __cfi_worker_thread+0x10/0x10
[ 1231.972742][ T6052]  ? __cfi_kthread+0x10/0x10
[ 1231.972757][ T6052]  ret_from_fork+0x64/0xa0
[ 1231.972777][ T6052]  ? __cfi_kthread+0x10/0x10
[ 1231.972791][ T6052]  ret_from_fork_asm+0x1a/0x30
[ 1231.972824][ T6052]  </TASK>
[ 1231.972834][ T6052] 
[ 1232.599160][ T6052] Allocated by task 6052:
[ 1232.603504][ T6052]  kasan_save_track+0x3e/0x80
[ 1232.608246][ T6052]  kasan_save_alloc_info+0x40/0x50
[ 1232.613388][ T6052]  __kasan_kmalloc+0x96/0xb0
[ 1232.618026][ T6052]  __kmalloc_noprof+0x1b1/0x450
[ 1232.622961][ T6052]  __hid_request+0xa9/0x410
[ 1232.627545][ T6052]  hidinput_connect+0x241b/0x3340
[ 1232.632620][ T6052]  hid_connect+0x49a/0x1a20
[ 1232.637170][ T6052]  hid_hw_start+0xcb/0x160
[ 1232.641664][ T6052]  ms_probe+0x194/0x460
[ 1232.645857][ T6052]  hid_device_probe+0x2c4/0x5d0
[ 1232.650752][ T6052]  really_probe+0x2d3/0x890
[ 1232.655295][ T6052]  __driver_probe_device+0x198/0x280
[ 1232.660646][ T6052]  driver_probe_device+0x54/0x3f0
[ 1232.665826][ T6052]  __device_attach_driver+0x2f1/0x4b0
[ 1232.671274][ T6052]  bus_for_each_drv+0x260/0x2f0
[ 1232.676178][ T6052]  __device_attach+0x2bd/0x3a0
[ 1232.681062][ T6052]  device_initial_probe+0x1e/0x30
[ 1232.686171][ T6052]  bus_probe_device+0x18b/0x270
[ 1232.691064][ T6052]  device_add+0x80c/0xc00
[ 1232.695440][ T6052]  hid_add_device+0x39b/0x560
[ 1232.700159][ T6052]  usbhid_probe+0xde3/0x12b0
[ 1232.704775][ T6052]  usb_probe_interface+0x696/0xc00
[ 1232.710176][ T6052]  really_probe+0x2d3/0x890
[ 1232.714818][ T6052]  __driver_probe_device+0x198/0x280
[ 1232.720142][ T6052]  driver_probe_device+0x54/0x3f0
[ 1232.725213][ T6052]  __device_attach_driver+0x2f1/0x4b0
[ 1232.730727][ T6052]  bus_for_each_drv+0x260/0x2f0
[ 1232.735619][ T6052]  __device_attach+0x2bd/0x3a0
[ 1232.740457][ T6052]  device_initial_probe+0x1e/0x30
[ 1232.745555][ T6052]  bus_probe_device+0x18b/0x270
[ 1232.750470][ T6052]  device_add+0x80c/0xc00
[ 1232.754839][ T6052]  usb_set_configuration+0x1ad4/0x20b0
[ 1232.760342][ T6052]  usb_generic_driver_probe+0x95/0x160
[ 1232.765827][ T6052]  usb_probe_device+0x1d4/0x380
[ 1232.770710][ T6052]  really_probe+0x2d3/0x890
[ 1232.775255][ T6052]  __driver_probe_device+0x198/0x280
[ 1232.780573][ T6052]  driver_probe_device+0x54/0x3f0
[ 1232.785638][ T6052]  __device_attach_driver+0x2f1/0x4b0
[ 1232.791183][ T6052]  bus_for_each_drv+0x260/0x2f0
[ 1232.796146][ T6052]  __device_attach+0x2bd/0x3a0
[ 1232.800942][ T6052]  device_initial_probe+0x1e/0x30
[ 1232.806082][ T6052]  bus_probe_device+0x18b/0x270
[ 1232.810961][ T6052]  device_add+0x80c/0xc00
[ 1232.815332][ T6052]  usb_new_device+0x9ed/0x1590
[ 1232.820195][ T6052]  hub_event+0x265b/0x41a0
[ 1232.824650][ T6052]  process_scheduled_works+0x7d5/0x1020
[ 1232.830235][ T6052]  worker_thread+0xc58/0x1250
[ 1232.834953][ T6052]  kthread+0x2c7/0x370
[ 1232.839045][ T6052]  ret_from_fork+0x64/0xa0
[ 1232.843487][ T6052]  ret_from_fork_asm+0x1a/0x30
[ 1232.848280][ T6052] 
[ 1232.850618][ T6052] The buggy address belongs to the object at ffff88811f808a80
[ 1232.850618][ T6052]  which belongs to the cache kmalloc-8 of size 8
[ 1232.864339][ T6052] The buggy address is located 1 bytes inside of
[ 1232.864339][ T6052]  allocated 7-byte region [ffff88811f808a80, ffff88811f808a87)
[ 1232.878336][ T6052] 
[ 1232.880679][ T6052] The buggy address belongs to the physical page:
[ 1232.887107][ T6052] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11f808
[ 1232.896066][ T6052] anon flags: 0x4000000000000000(zone=1)
[ 1232.901727][ T6052] page_type: f5(slab)
[ 1232.905727][ T6052] raw: 4000000000000000 ffff888100041500 0000000000000000 dead000000000001
[ 1232.914335][ T6052] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000
[ 1232.922939][ T6052] page dumped because: kasan: bad access detected
[ 1232.929376][ T6052] page_owner tracks the page as allocated
[ 1232.935111][ T6052] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8049, tgid 8049 (syz-executor), ts 311876650846, free_ts 311522719771
[ 1232.954580][ T6052]  post_alloc_hook+0x3b9/0x3f0
[ 1232.959457][ T6052]  prep_new_page+0x1c/0x120
[ 1232.963994][ T6052]  get_page_from_freelist+0x46bb/0x4750
[ 1232.969573][ T6052]  __alloc_pages_noprof+0x30d/0x6c0
[ 1232.974789][ T6052]  alloc_slab_page+0x6b/0x1f0
[ 1232.979500][ T6052]  allocate_slab+0x69/0x440
[ 1232.984034][ T6052]  ___slab_alloc+0x59a/0x8b0
[ 1232.988653][ T6052]  __kmalloc_node_noprof+0x23e/0x450
[ 1232.993965][ T6052]  __vmalloc_node_range_noprof+0x544/0x1420
[ 1232.999888][ T6052]  vzalloc_noprof+0xfd/0x1d0
[ 1233.004518][ T6052]  do_arpt_get_ctl+0x7d6/0x1050
[ 1233.009398][ T6052]  nf_getsockopt+0x28b/0x2b0
[ 1233.014024][ T6052]  ip_getsockopt+0x14c/0x1e0
[ 1233.018627][ T6052]  tcp_getsockopt+0x103/0x130
[ 1233.023332][ T6052]  sock_common_getsockopt+0xaf/0xd0
[ 1233.028551][ T6052]  do_sock_getsockopt+0x3a6/0x6d0
[ 1233.033585][ T6052] page last free pid 6052 tgid 6052 stack trace:
[ 1233.039922][ T6052]  free_unref_page+0xae5/0xdd0
[ 1233.044693][ T6052]  __free_pages+0x6b/0x3b0
[ 1233.049131][ T6052]  __free_slab+0xb6/0x110
[ 1233.053483][ T6052]  free_slab+0x18/0xf0
[ 1233.057575][ T6052]  discard_slab+0x23/0x40
[ 1233.061932][ T6052]  __slab_free+0x201/0x2b0
[ 1233.066374][ T6052]  ___cache_free+0xc9/0xe0
[ 1233.070809][ T6052]  qlist_free_all+0xb5/0x130
[ 1233.075421][ T6052]  kasan_quarantine_reduce+0x14f/0x180
[ 1233.080900][ T6052]  __kasan_slab_alloc+0x28/0x90
[ 1233.085796][ T6052]  kmem_cache_alloc_node_noprof+0x139/0x3b0
[ 1233.091888][ T6052]  __alloc_skb+0x10c/0x370
[ 1233.096327][ T6052]  mld_newpack+0x152/0x9e0
[ 1233.100765][ T6052]  add_grhead+0x67/0x310
[ 1233.105021][ T6052]  add_grec+0xf16/0x11e0
[ 1233.109285][ T6052]  mld_send_initial_cr+0x157/0x320
[ 1233.114445][ T6052] 
[ 1233.116788][ T6052] Memory state around the buggy address:
[ 1233.122451][ T6052]  ffff88811f808980: fa fc fc fc 05 fc fc fc fa fc fc fc 05 fc fc fc
[ 1233.130602][ T6052]  ffff88811f808a00: 05 fc fc fc 05 fc fc fc fa fc fc fc 05 fc fc fc
[ 1233.138719][ T6052] >ffff88811f808a80: 07 fc fc fc 05 fc fc fc 05 fc fc fc 06 fc fc fc
[ 1233.146912][ T6052]                    ^
[ 1233.151054][ T6052]  ffff88811f808b00: fa fc fc fc 05 fc fc fc fa fc fc fc 00 fc fc fc
[ 1233.159153][ T6052]  ffff88811f808b80: 05 fc fc fc 05 fc fc fc 03 fc fc fc 05 fc fc fc
[ 1233.167331][ T6052] ==================================================================
[ 1233.175407][ T6052] Disabling lock debugging due to kernel taint
[ 1233.187381][ T6052] microsoft 0003:045E:07DA.007B: No inputs registered, leaving
[ 1233.197556][ T6052] microsoft 0003:045E:07DA.007B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[ 1233.209599][ T6052] microsoft 0003:045E:07DA.007B: no inputs found
[ 1233.216336][   T36] audit: type=1400 audit(2000000344.362:34943): avc:  denied  { read } for  pid=90 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 1233.238365][ T6052] microsoft 0003:045E:07DA.007B: could not initialize ff, continuing anyway
[ 1233.250924][ T6052] usb 10-1: USB disconnect, device number 57
[ 1233.257669][   T36] audit: type=1400 audit(2000000344.362:34944): avc:  denied  { search } for  pid=90 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1233.284027][   T36] audit: type=1400 audit(2000000344.362:34945): avc:  denied  { write } for  pid=90 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1233.305899][   T36] audit: type=1400 audit(2000000344.362:34946): avc:  denied  { add_name } for  pid=90 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 1233.326949][   T36] audit: type=1400 audit(2000000344.362:34947): avc:  denied  { create } for  pid=90 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1233.347719][   T36] audit: type=1400 audit(2000000344.362:34948): avc:  denied  { append open } for  pid=90 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1233.371387][   T36] audit: type=1400 audit(2000000344.362:34949): avc:  denied  { getattr } for  pid=90 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 1233.694293][   T45] usb-storage 9-1:192.162: USB Mass Storage device detected
[ 1233.702518][   T45] usb-storage 9-1:192.162: device ignored
[ 1233.750268][   T45] usb 9-1: USB disconnect, device number 106