last executing test programs: 7m24.123359331s ago: executing program 32 (id=466): r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000006400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000280)={0xb0, 0x0, r2, [{{0x2, 0x0, 0x3, 0x0, 0x0, 0x1, {0x1, 0x401, 0x3a, 0x39, 0x3, 0x80000000, 0x0, 0x8001, 0x0, 0x1000, 0xfff, r3, r4, 0x200, 0x1}}, {0x6, 0x0, 0x5, 0x1, 'fuse\x00'}}]}, 0xb0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r3, &(0x7f0000000040)='./file0\x00') r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x200201, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x891b, &(0x7f0000002280)={'lo\x00', {0x2, 0x4e23, @broadcast}}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r5, 0xd2bd4000) ioctl$ASHMEM_SET_NAME(r5, 0x40087707, &(0x7f0000000ec0)='\x00\x00\xff\x02\x01\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 7m15.597385288s ago: executing program 33 (id=567): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x2ac240, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x12) 4m36.300499144s ago: executing program 5 (id=3131): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r2}) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x0, 0x80, 0x9}, 0x0, 0x0, 0x0, 0x2}, 0x80, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r3, 0x0, 0x44000080) close_range(r0, 0xffffffffffffffff, 0x2) 4m36.213457236s ago: executing program 5 (id=3132): creat(0x0, 0x2) r0 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}]}}) r2 = accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x941f) creat(0x0, 0x2) (async) dup(0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}]}}) (async) accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) (async) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000007100)={0x2020}, 0x941f) (async) 4m36.194922496s ago: executing program 5 (id=3133): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000001680)={0x5d0, r3, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x18, 0x16, 0x12, 0x30, 0x60, 0x0, 0x6c, 0x6, 0x20, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8, 0x7, 0x0, 0x9, 0xa, 0x3, 0xffff]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x8}, {0x7, 0x4}, {0x2, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7f, 0x1, 0x1, 0x1, 0xf70c, 0x6, 0x8]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x1b, 0x12, 0x48, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x9, 0x7, 0x4, 0xff81, 0x3, 0x173, 0x8]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {0x0, 0x7}, {0x2, 0x7}, {0x5, 0x2}, {0x3, 0x7}, {0x2, 0x2}, {0x7, 0xa}, {0x5, 0x9}, {0x0, 0x2}, {0x7, 0x2}, {0x2}, {0x3, 0x9}, {}, {0x1}, {0x6, 0x8}, {0x5, 0xa}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0xa}, {0x6, 0xa}, {0x4, 0x5}, {0x7, 0x9}, {0x1, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4522, 0x3ff, 0x8000, 0xd898, 0x1ff, 0x9, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x89f, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x0, 0x400, 0x22b, 0xb, 0xabf6, 0xce]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x4, 0x4, 0x8, 0x8, 0xe, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0xa}, {0x0, 0x3}, {0x6, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x6, 0x9, 0x2, 0x1, 0x24, 0x61]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0xfff, 0x0, 0x3, 0x4edd, 0xf10a, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd20, 0xfff7, 0x2, 0x8a, 0x4, 0x431, 0x7, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf4, 0x6, 0x1, 0xfffc, 0xaa9a, 0x0, 0x2, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x10, 0x0, 0x3, 0xffff, 0x5, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x70ab, 0x5, 0x3, 0x80, 0x0, 0x4, 0xa097, 0xe]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x4, 0x6, 0x10, 0x2baa, 0xe7, 0x3, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x3b4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x800, 0x8, 0x5, 0x6559, 0xfff, 0x4, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0xa}, {0x0, 0x6}, {0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x4}, {0x2, 0x2}, {0x0, 0x3}, {0x7, 0x9}, {0x3, 0x9}, {0x7, 0x3}, {0x5, 0xa}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x200, 0xfffe, 0x7f, 0x3f3, 0x7, 0x8, 0xb]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x48, 0x3, 0x1c, 0x36, 0x32, 0xc, 0x1b, 0x3, 0xc, 0xb, 0x5, 0x36, 0xb, 0x6c, 0x21, 0x30, 0x9, 0x16, 0x60, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x1}, {0x3, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x16, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf2c, 0x40, 0xa8, 0x5, 0x0, 0x8b, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8000, 0x400, 0x4, 0x8, 0x4, 0x7, 0x5b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x10, 0x5, 0x5, 0x40, 0x0, 0xc]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x7, 0x4, 0x9, 0x9, 0x8000]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x6}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x5}, {0x4, 0x1}, {0x4, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x1}, {0x0, 0xa}, {0x3, 0x8}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x6}, {0x5, 0xa}, {0x6}, {0x6}, {}, {0x1}, {0x5, 0x9}, {0x1}, {0x1, 0x8}, {0x4, 0x2}, {0x5, 0x8}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x4}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x5}, {0x6, 0x2}, {0x5, 0xa}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf1b, 0x5, 0x2, 0x4, 0x2, 0xff, 0xfffe, 0x4180]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0xb, 0x3, 0x48, 0x18, 0x16, 0x24, 0x2, 0x1b, 0x24, 0x6c, 0x48, 0xc, 0x12, 0x56, 0x1, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xe, 0x8, 0x5, 0x5, 0x8, 0xad46, 0x2a9f]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x6, 0xb, 0x6, 0x6c, 0x4, 0x36, 0x5, 0x36, 0x0, 0x6, 0x24, 0x6, 0x60, 0x48, 0x24, 0x16, 0x1b, 0x18, 0x2, 0x16, 0x5, 0x48, 0x3, 0x0, 0x9, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x4, 0x200, 0xec28, 0xf940, 0x2, 0x16d1, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x8, 0x3, 0x8, 0xda4, 0x0, 0x6, 0x3ff]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x280, 0x4, 0x5, 0xf, 0x7, 0xd, 0xc00]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x6}, {0x6, 0x7}, {0x7, 0x2}, {0x4, 0x7}, {0x4, 0x9}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x9}, {0x1, 0x5}, {0x2, 0x5}, {0x4}, {0x5, 0x9}, {0x4, 0x4}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x9}, {0x2}, {0x4}, {0x3}, {0x1, 0xa}, {0x4, 0x1}, {0x5, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x4, 0xa}, {0x6, 0x2}, {0x0, 0x8}, {0x3}, {0x6, 0x4}, {0x2, 0x5}, {0x0, 0x5}, {0x0, 0x7}, {0x5, 0x9}, {0x6, 0x4}, {0x0, 0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x5, 0x2}, {0x7, 0x4}, {0x2, 0xa}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x3, 0x5}, {0x2, 0x6}, {0x4, 0x5}, {0x4}, {0x1}, {0x0, 0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x6}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0xa}, {0x2, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x5}, {0x4, 0xa}, {0x0, 0x6}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0x4}, {0x2, 0xa}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x3}, {0x4, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x7}, {0x6}, {0x3, 0x2}, {0x0, 0x5}, {0x0, 0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x0, 0x8}, {0x2, 0x1}, {0x0, 0x5}, {0x5, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3ff, 0x80, 0x2, 0x2, 0x5, 0x2, 0x2a]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x1}, {0x3, 0x9}, {0x7, 0x1}, {0x0, 0x6}, {}, {0x1, 0x9}, {0x0, 0x6}, {0x4, 0x8}, {0x6, 0x9}, {0x1}, {0x4, 0x7}, {0x4}, {0x6, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x4, 0x24, 0x5, 0x48, 0x24, 0x2, 0x12, 0xb, 0x2, 0x5d, 0x5, 0x18, 0x6c, 0x60, 0x16]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x9}, {0x0, 0x4}, {0x6, 0x9}, {0x1, 0x7}, {0x4, 0x2}, {0x5, 0x1}, {0x6, 0x8}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x6}, {0x6, 0x1}, {0x4, 0x3}, {0x1, 0x4}, {0x1, 0x7}, {0x7, 0x4}, {0x6}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x1}, {0x5}, {0x5, 0x8}, {0x2, 0x7}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0xa}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x5}, {0x3, 0x4}, {0x4, 0x5}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x2}, {0x4, 0x9}, {0x5}, {0x7, 0x4}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x7}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0x8}, {0x7}, {0x1, 0x9}, {0x1, 0x7}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x23, 0x5, 0x3ff, 0x4, 0x1, 0x3, 0x1aea]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x6c, 0x16, 0x48, 0xc, 0x6c]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x48, 0x0, 0x24, 0x30, 0x48, 0x16]}]}]}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) r4 = dup(r2) (async) write(0xffffffffffffffff, &(0x7f0000000a00)="1c0000001a009b8a140000003b9b301f000000000000000c0000000036dd509459d70b25c5e86121dfb2ae1260a28ddcd7ff1db3a0771944383c5a2132c1603111e424c9498b74", 0x47) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) (async) write$cgroup_devices(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e030800dd5c9801288563a20dad501406"], 0xffdd) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) syz_io_uring_setup(0x19fa, &(0x7f0000000140)={0x0, 0xc8ea, 0x0, 0x3, 0x1a8}, &(0x7f0000000fc0), &(0x7f0000001000)) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) read(r7, &(0x7f0000000200)=""/60, 0x3c) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=vd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',debug=0x0000000000000007,\x00']) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') socket$inet_udplite(0x2, 0x2, 0x88) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r10, r11, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000600), 0x116108f, &(0x7f00000007c0)={{'fd', 0x3d, r4}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@allow_other}, {@blksize}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x401}}, {@default_permissions}], [{@euid_eq={'euid', 0x3d, r12}}]}}) (async) read$FUSE(r8, &(0x7f00000029c0)={0x2020}, 0x2020) 4m36.090244868s ago: executing program 5 (id=3134): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write(r1, &(0x7f00000002c0)='u', 0x1) r2 = socket(0x2, 0x3, 0xff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="4d01", 0x2, 0x4000085, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m35.559762349s ago: executing program 5 (id=3137): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x6ebe, &(0x7f00000001c0)={0x0, 0x1886, 0x1, 0x0, 0x336}, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x5874, &(0x7f00000002c0)={0x0, 0x7028, 0x20, 0x2, 0x3c0, 0x0, r1}, &(0x7f0000000340), &(0x7f0000000380)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x2) ppoll(&(0x7f0000000200)=[{r4, 0x10}], 0x1, 0x0, &(0x7f0000000400)={[0x9]}, 0x8) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x82) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x3}) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000000c0)={0x0, 0x10001}) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x3}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fd, @fda={0x66646185, 0x8, 0x1, 0xc}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m35.490237s ago: executing program 5 (id=3143): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x3, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x3, 0x8, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x24}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x10, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xa8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x53, 0x5e, 0x4}}}}}}}]}}, 0x0) (async, rerun: 64) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x9) sendfile(0xffffffffffffffff, r1, 0x0, 0x5) 4m35.48809669s ago: executing program 34 (id=3143): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x3, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x3, 0x8, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x24}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x10, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xa8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x53, 0x5e, 0x4}}}}}}}]}}, 0x0) (async, rerun: 64) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x9) sendfile(0xffffffffffffffff, r1, 0x0, 0x5) 2m13.090421516s ago: executing program 2 (id=4997): syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a2401"], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000980200000000000000040000000000000b5f6239a10f649c71247af85fad8e13b79c68558c7551e6d4b81316fc6299e63afb9761611f83a434c6d014143a4f50cb3ad937840c97642dff68502a1b68447c0ea2fcc0e6fc80f45fdfffaf41a030c8e9a7b9d479a066c8a8acb2c4fc2c4db2004985a20f6d76824e1ac0fb87f59312887634b56045517d46b33a6c38446d9bc08be951b4f3f2dea4f73a19270a9face21051da998a7984d0b317fc92ecd47e922d557751614a1ef555b2d4ae2a1020fff90db7e4e56d77aee2eff2afd4a5c828726f7debf370eda25200"/240]) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) 2m11.928542189s ago: executing program 2 (id=5008): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000240)={{r0}, r1, 0x14, @unused=[0x1, 0x0, 0xd, 0x3], @subvolid=0x40}) ioctl$KDSKBLED(r0, 0x4b65, 0x5) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000002b80)={0x0, [{0x1, 0x298, 0xcb5ce9f9, &(0x7f0000001240)="ba7ff8db86a61e1c633cb60ca9b30b20addcbf974fe0eae5c6704e2e515a465757851fc15b8db304e0e8468c550c8f03266e209e78b539a4dbd9e52afd8f6d3c3d5ad08a278e63e4946d899782d98445477ec8"}, {0x0, 0x2b8, 0x3ff, &(0x7f00000012c0)="7af42877143fdf83206ee9b4b2a4e3b38111a9756fcb9a20c650089a653e7dfbfccd90e77e439f6d640dd5e6094b77a4fbd23a55f26776068885c865a9220caa1008eb54d3cf68cecdad5420d1b1651da3d1ad1a649029"}, {0x1, 0x700, 0x6737, &(0x7f0000001340)="5d345adf91c54adf72e8ace8f441a0cdbb035987ebe940fe5632a430e6b26a4409ab5adf40d5e5d4b96287efc7db21684ef70bd86f2f4fa183e57ef93bd880ff455512598731e9b3b01ec069a871bead0cd4b371e0877fa4b638b06ca5f908aaa7a697bd63ffbabcb8f617538cc57055613c022dedff475327d323543731365dc162cb701b73b14d95a79878672e50509a28ad86a510a6da36cbc7b7316ec858ec7bb02dc7a420d8e89816525c94f0ee0c08be1cc236946047e736e9018b038f81b5efe420db4f30979c7d3f917978ad69e30246356a4a0c17e939f7407bee9a"}, {0x0, 0x600, 0x9, &(0x7f0000001440)="6f1db9297bea6673a414a974b5d6bf0fd515c6ce597c05d9179d2101eb891c2e3a7ccc5b33c95e74f0501d6475458a2cc4c8d35dc1bf3f851588eebc32a8ec5e76ed75b5aadc31fd3e36cbc23fc89444345c4882af343b37ddd24003165193a8f94927ce757c931b0cc49bf0a730e239d09eaddedadfc426130572a5902902879d539becd2bf0da4127b14f38db5c8ea8a67a746456830e7e32049513bfd5fd1862e74e40df5f51143b656e1e4007ce602dfcfbfb36f11f5b6618a86f9ed678c"}, {0x0, 0x510, 0x7fffffff, &(0x7f0000001500)="7e0503e628848e9aeec0793396210156a41df8cac0bb2f4909cc2a9e41cb30b405979f8a4cdf668fff6485832c07fb4defc5b4e56a4d4492deb5f4b83ec968e5ea3d847537835d98ad9c59502757b98d2736e7698544e061ee1fcd0d737ddb9ffde756ac15b9bf6bc898d7345afa9b95087118c482b6304a644a4507eabfabfb6643b0d8b34abddd847889851e0fe831dfe299415f98ed71a9eca1196526d597cb0d"}, {0x1, 0x470, 0x0, &(0x7f00000015c0)="21c4df4eab95e21eaeffeeb3a4e75ba7b783060531dc6b68835251f9c8471850da5242c9ae94603cc0524f99f2bee3decac106f5e3524a076acbe74095951e3c4faa518e6dc044c46696e8092baf2517f97d51c203838f8f2395ea8d5f36fc1a3ab44afeef50fd7b60842048aacbf01b1ff7ec65a6cb2ff60f5d3ee2029a3e3803b30eb6df998d3309d217a12825"}, {0x1, 0x5f0, 0x50, &(0x7f0000001680)="d3d59bc893184d87b9a4176ce98e4ded6f1e1e5287d0e4f06fd5bdf294582bd09584d4eba7333719327bda7b9064e6a1205a51bcc2311ee58316ae66f0526d8bb40320f56c7338c8ebeb2e9ac7849d079ef26f56256746eeaec5b9b78727c121e73c3dc34554e1f80e46a03e1902002b5a46dd57f522a10eea1af8a79cbb215c9045d2952d38b0e263d9a99e4f1490c15c8c4cac22d4f2fdeacb3d0f005666ea8667dd27f1907b71766e56cc06bb8e7078ceeedafd892b6d32e657c9d93c"}, {0x3, 0x8000, 0x10, &(0x7f0000001740)="9c764a94dcfa5b9bdc72ac653f23e27f814018d373c125f18f43949359118e8fb269d456f598f5e3306290b8a9ec8fc1b9fd20562d070d00ed3b386d40326be63aded982d0dab01b0d178822495ec27020d0b45236329c9eb5a8e176dd53ab5605c49f005510d3d93b5577cfd53daa0f2a3aa4520421d4213b12865355abd4ee0878b337865566bbbc3936922625a8779451f783b01d79cf42a19ad9ae0b72431ec893873f86eb53f204b7529822650d68f81c520abd286ce9f8b98681f4735b9debe599947ede9f033163e4982174eecde0d7d5203f4e21646af457ec8ba88906f0b3ba4c34c050519557b88ce05f8fd5ee45709a9b00ec79acf35c3050bf5b78fbdac5aaa923c75cf732ec43c81a2ae867385189c04da5a2473d94a5d4b800bcd0eb6a61e18269b6f6da7c9d84c0b4a6abe72619f91c847253f77a4608238bdcf3b16a551c570b7c4dbf58b6eafe5b025ad6c6e876a6df111c74c7054bf800a82384c20816cb29d1be7bf91706793cd2a2615b0d40db047f225be558931080aaf2cebc9f8cda7938a8fb14a1431bf20c5aff841b77c53b79aecd8fbef7ba2c4b80f92abbc94ff5aabe31ffbf502bcc94db8bc5a52409020159f50abf23d7682d5e64908ad3a8149a83c03d23889366caf4104ce0822ca458bab88ba6b909b02c91252bb7184e94c2a284f65717e5ef665ee5d65b5a1eda48f93212dae870a5616a1c7e217cffda9618fc08ecf2ad4ba7251eafb7a893ef056bf888522e4e81070f59c8ccfa37bcfc6f4df922154c87ef97ce7495cf1469c180cf16f5d0b2f7771140514a9a0a44257d8b80f2893044125ed5acfabd3d8eeb18f895b4fdf49ad24ceeb3c043118352bd81b4eae7cb7941c1f7f7842e085b6c6551d40aa6952ba5a7f856f303230c660fdb04d1e755c97dca49fbc3ad8dc7b571153c470c2956d0e6ddcf5ecc92d25301d116ed8067dafcffd2305c5768049e8b340f536aa6319133dbe0d678fe45577928ca476a3301a3d1b069b15ff4e32620d715e9f8779bde7e2b97a2463de8dd8e4ddfb14e319d022315d64831e891365c7c3302c95a04b7fae5255c47ae11df004bca343ff5d99d7dbc273c4ae8e8d24f9f7dfc604e4b368dbeb22d96479720695090aac71c1c61dee579081b1b9b26f0c63984cb9e5377a3511aa8561f66fe19385bf6555f87e6bd82daed4a8784f019d9bcd1b1e4a840ec237f551d8599861e043b5dcf27dc020b9d77730de8b4ca90512788a2e8874a2d2b59d90698be5147e2ee58cb5a3bd78ccd114f108796605d8a210df57331bd2f359f181bb9091575c9cc2645682cb0a7acc54604aca3efc8c8d662e58110fe80c1db4728813ac219854c15cda779d3f38fe920b17d7d68b35e815d57eaddf4728e50f68bd92d8b2235785805ea84f6dd03470e6781b797ab1d0bd66b7b7c1efc4dd1a09826924f675c3c832e96efdf42c08b4a6649af6ad40b0bed0ca82337020d47fae45e836b928dc30690c6193f47d99e34593ba051d8f5f74ab47848ae870a9c9256b0dd3dabe71d5169ba05b15c79ad75c731685f302b134467fac1f1023ba357ec241e9ded22c6ae7efc8cce5f9bdb27e80c8a057ea7576aac512fec5bd36a71aacae4231789743cd529d71e18a1c128ed6f5a3e205dd7bf0ac3d14d17de18ac5a54ad14ebde7caa3d39859092db2f5c55a9a4220d0a7ec91ae03b799e5a6d085887ff60717cb3be2d5ec3d1f578450a4f83ee9f14ee8ff2aaf94c20cc4982ec44bee38d43b83069b32168a83e6d51fe83538e9ea15e7c85825bbb6ad3ac6114a13ad5b869c10a8c3d46787cf02caa29089dc51d8377b0a72a5f2823bb23960448aca129929f5276200d4cf4e86cbfa6eec885a443a776bb7d2ba4986bde7be57242192e9fb8a6467b527a6cc45d53cd7ae7e63abadee9e7ab6d72009781d6f423d81169aafa60533a40983eae2977ed40d4f76e3c6a1f26fdc933198c11c8716f7f2df4560f521f86c8b30ed1d5dc858d45f1d4ea500d3fdb29a17a70334a1747536d73777c542c1e92a98fcff2cb6234df45c7eda7af2e8fe67972b311314de1ef30c32749684ef0f7e2461716ce7bf00c5190b2980555a6b4a9f0fc4e524ca30ed4358203465b4de6d0d9eede999274db1e411764c525dce4de97dedd866cb78c6803686d85c2edae0c621798f366c044299d813f24f00d4d45f93ecc73d3aa4260dea3cf8d7d4ea4331bb2a4434881c614548714fdaa60fe02be8338624a801c53a7dabc007ba50221819bb3ede36629dac44cab8e12c1f77076ba95fdebf40c374e97f662177e9b4db4c022cb3c3ed342e574b6e76cfb5d789a4cf5245c4cc44089fbff70afec16097af32b4622ad0fd105e94d590697cf773a186e6732366b839cbc08a177f9e0dbfdf41ea81148b0b29e9f8bc1bb27e083acca734ab887527c32eab4562d2a1bb4d80e8f39195a6bf5af6a7eb3149f1fe33e1981877845d530691926d5da7f7ed3c291be773fbbfd4df59359c2511e1f34e8b7068af3e721ef0a1f940f035f627471730d39dc165cae760de737a0a22827abbd84a14beec0a59b1a34fe514fd11f3b7284d7c35699e274cc32c238769ac4ff65359088066454580db87db0ccc9a7402cd437e59e0ebaf506574182d7606cf52efcc78e1d3ce243865737cc583a7461a364bf0588ba2abac5479d8d77a6be08d8562614e9e0fcd584c62c087a475260060b9c1324d169843172baeeda91ae75586f10b965c63e70bd9093d458113b3b976b3ce11a1ca63e7ba6ef4de56be0727fca13ccea5a195d98ffdefbfcbf1e32d642618b8d7ec0b89d09da54f75d3541ead701a99987604cbebc9e39dd532db513f60715be36aa1aba2765b00420f944f5dcd5be932971c571e786e1e3c8ae03da8369bfd32de9ddb2cec29eead9d52883a45a1acb471fd6bf75352797856e3ec18b009258405058331f8aa406f8c11c8ac4d07ad22bce6478138e0f1f4774b3defec8046425a66bbcd3de5994aa60851db241ee72071122628c192f30e4c3848d216388d347da6383aa47451a9e33b22d17376a48e898cd8a53c4ec31aac271ad1b9fa7dbfd3484e982718d067c05d59968561c2f7878434031ed60f0fc134928465277e3408a8b1c4ca255ccc888f5d1955731ed516a3d34debe6ee93220a1944b07519f2d3f8d14806cd959745a6b28fa9fad4fce08bbb80eb9c76a00d8296d31faaeb96b8d499a18c33509548d46237b293d8042d366235c9f5f91df1eed639eee1e6f46c7105032a2adc267747976253bf0114f5fd39109fcedba9fb2e3b8bcbeb486c1f68a54728ad5477bc388c04904456788a9697e08fa0922daba53da01048c781f2061be3b64ac2f532f2cb968f2af26532fc500ccd63dbc091cd493568e584b217d1f0a992cbc57578f81092f6c514879e2f49881fc971639d9a53704db8e032a5d65004c8b3b87f6aa27a63da4a50c2f55423d66323d56aebd31aad04ef42be96d7f9a81b3c5c15df14146f0d56fb4c58311e25319fb8f40292b5a909ae0eb180c3084d26b3514a73bf8f7bb60f0329c02c4534089e621abd56177c50dc37eb852392d73fc9459197631987eea6074f8dc4bd92eec1b47459025b25f5c435a27804e0c13a984cb71529eb8766ad87888a460102f2e9f6ce0994abcd7b0c96fd208fcdd6c5df44bf0e19cbbb966583ce60db547f3ac67287530d77fc85ec27c12a36391e4b9fe2a1c1fb02fb0c097b5e9e59249441d4874dd560aaf2328c5dc1030e294c26ac11691329f78ee715a9f6bf73c953fc1c341c696510c09c1c49298d216142226028fd7556369077fadbad28fd6798e5caa82fba988256e4208cbb29b12151bc0c7e8b733dae4ecbfc0fb3d0cd00bb3b1e4aa85e17f63aa79a9b68e2906bc2a993399c3f3574392fae3c984e5968349be9de0d718e81496633bee6620ec46c5ce906327816ecacde23c3bf7fb926b1bd4ed906c639f77eaf6cda0ff83f8977b83b8e4d03a61ba0a904a95c464b52cca8192b7ec12e7eac0c80a05b815b8e17c098714c64cc2445b840097778dc00b9633c8f423194eceb5671fc3c930a8cd0a28b6bcb6bc5352a806df054f78c7bf30444ade4909824f1dcf2fde7dfa36c5ecf2dfafe956cd30eb1439143ce4c2eb91b02560c975ea5b36a3f81c96f54baf1f15093f054f569a114f294d3b02501f0f2c49dd4a2b2f656e93f7cdda344d11de3a8bfdb22763f1171e695cfb789bdeec597dd0048bc73173440be1795c176a3770093c3906ebaed0fbc1229883c188b8c1af6c72692a5c1e21fd0e27eae5e30e8545938bfebf26b93c6f6a44a95d537902243e20582b3f18c20d26a97696141ee1954b82ada98f4c59aa932310664cb07713f90dfc95f155eb7b62a1f4e9879800963af2e40aa24ab0faa6087d69f96a632a33e928c387521f03b8e9b1bb33082a8ce16b54b1ccb815dc189f1409d6b92670fb4cdb6eb3aeec6006859d85da69b50fbc30e7c2f8b9f648b782de0a65f38b5ec0493413a4e0b5830b1c39c12e4885fb15416530a3c28fdfde2a4b3d3e5c873e7f6fdcce1ff9d3cc3bf19f9435d80e5665fcfb5ae0250549e0b26d7d922e26af6854bdd78719dcfa798ddd0d5e49ad700e02a303b5a2cee476d8b5f1562cfbb1cfd28b13f570958e5af5af98e3aebb5187c2d6d332dbcbdbcf9dfd63733fb908403d13232d68c107220657be791440eadc72fa3d17ffd8be4a3379824ac5028b1a2d02105309f51039bc2acc91e5e410d7ed653f28ec38b4ff473878334635e06d53daf9a105869f61c7f5c42ec7fac752b558f2916a8f5bfab47c1cd707f6bbf8440acb9bc386b6db9b98ab855a720a4036ad967843f981246b3bca505bfc6cfbce17d182c0c4fc00cd3bbf876f7b9f250c0c796e29e04cfb99dc445862117a1e2f9033e60be252a80fd21847671243f53bc32e7625d8d91bb4b85fc57a22ec9f6e7e4a77af54e4c7dbe83269840ed698bf21edc29b53f1375d4fc89f0e6f0e3984edff3a589bea7a6b2465116c353bb71f2925244499e2ca5d45cea710f7989cb2f23b41c5d298b604eb0f42aecab7ba68a1053b4bd11d029ba136abd29110ee67392cb05c0aba37a74ae3babacf3ec52118b0e04fcb18a8bc7eb384539451834018c25d49e947dce92d1b87b88bc96c6b1201b2de75f0e40a25483d30ec39e7aae1980a5377b504714b913ab89d413ea6ee9a18f56d19daeb02e45cfc6d6c183ccb9feb63bf5c231954c36250f1375ee0d9ba1c32bb6b047e36342aeb9aaf894ed094cb8d2c9936ac55104c83eff2e573e05decfce7faf2bc19a9d26ed70d8fd0aa76dd6285df5eb93992c97a89de1d873076046df70c66a5e64e26f4e3ce20ccd2c6cd771f5f0e701f7d11240984509fb591c1ca377914c5a963c198abb4aa93ee481ef810d4d46af17ba6b6675d94970cd261470fb34b23817e3e695e330b773f281f18464baae0a9ff805943a013916beecf7e408092ec98a10fb66c9e1150340d2176dd250d5754626240a41c1359134a9d2924b9e4d94da15a40c0cc067f8f406974e698f63cc99e5c7d1ac8abe2e7f997e211c2e97df395573d44b86e40b742a30e05a6d605b893c9410d45597d7bf38c2418bfa35b92880998315f8a39da7bbfa2d21c32fa4265fb25b2ec64e14061fe5ae8274eb3c92c18423fe737ef3f7c2072b2c2958b689e03447817433d6622bad7e4aa4a9a8489eec6e685ad3558b237c869f7d9a2656dbda29409db2c45"}, {0x1, 0x140, 0x3, &(0x7f0000002740)="b3e0d39b9ca31cdf88e7def1cbd3dba0f06ec2656ef7d12c888dc9b6f5c9a306cc13e18481b52bd6"}, {0x1, 0x240, 0xffffffff, &(0x7f0000002780)="0def677c240190a6476a68baecb652aa0e45f123be3b755852ba58a7825326fc725ad841ce0595541070c1dabdd0e98f4f25f77b35a785ca8c3b92e83398727471ed8d0930e50e98"}, {0x2, 0x388, 0xa, &(0x7f0000002800)="3fd93d756bf5a9d177194095619dca9d3a8c593593b72757427f96e85e9a9745794ab57610ed98994404e5b5847d8e258958718d8c8dae986fc59b71b190540fdd52867a3307c49f5de7dae0fd456687ef74e5f3346e7610d6905958511e57abc011cf1d48fac74efb01fccf15849b943e"}, {0x1, 0x4d0, 0x8, &(0x7f0000002880)="e5a0c8f3d730e6c22093307fa7c08efd8ae6f278c2927b74827cdfe71b60c3c5f3327ae2d217eec878ba6d1773b81bd99252707ee47d80951a1342b9fa9bb7ac839450638f2d1173cfccb2d9b76dd8dbd7f69b1f240cfe3f4f27f8ad5803f275cfa4e2d3863dc9dd98f2ceb48da19a9cd3de1695222f3602d57164bbc58e5a0d95120e6f933506b7b71a7d8b7aa5ea99bcdd02612f50cff672d1"}, {0x2, 0x7b0, 0xb, &(0x7f0000002940)="9efcb1b10a7c7e3e112dc738f96b8c2f9b412a6df2bd45672c6677346392662b3806a9b60a0ecf0369769f39d7635627667f0c3f877e4002af17b80f6768b875d2b50c44b6ff970dbf6bb84496ad917b14443bb74d74db105e324b45349a044094f5d7ba24a8d7bda077ac9e21ca6a4c0e59170555f5e6b0c1af5c709b34e1e2401e74f0f68d0907e4e03efdcb03a34158dd0c3f2798ef752ef68d5e6d655e86e5e61d59ea0a7911f18c229018badb2ac59556e08380ba6059acc7f6b3405429527438a44b3057779316ec502f377225a6e13530b2a22b421b487f500ee688ace3b755df83c9cf65e7cd671716882cb42a7456cd49ab"}, {0x1, 0x288, 0x5, &(0x7f0000002a40)="7c970fa2246adf932800226565678c8abae1ef8b1694b2ca10a22dcd3a7ec2be33467aaedef99a8d2597b94aa4129798393c7c4ea941dfe194e3a8da7068fbe1a90a25b9cd5ce4aa6f37bfab370bba14a6"}, {0x1, 0x308, 0x5, &(0x7f0000002ac0)="cac9b94572fd3382ecbfd8f4cc0acadc06a6680e34862a431aabb462c1275126ee565c6bdce55b95b5e3cbe6ac0a713c98709248a24e1bd6012939c519ffa53d27f390dbbbd7ae0db1949dfa0ff60fe588c788ca84ef1ad9e5635276dbda6f5a45"}, {0x1, 0x48, 0x81, &(0x7f0000002b40)="398f9968102489f176"}]}) (async) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002f00)={0x0, &(0x7f0000002d40)=[@wrmsr={0x1e, 0x20, {0x908, 0x9}}, @in_dx={0x82, 0x20, {0x4b79, 0x1}}, @wrmsr={0x1e, 0x20, {0x862, 0x34e}}, @wr_crn={0x46, 0x20, {0x8, 0x1000}}, @uexit={0x0, 0x18, 0x79c26a7}, @wr_drn={0x6e, 0x20, {0x1, 0x5}}, @out_dx={0xaa, 0x28, {0xc9e3, 0xa, 0xfff}}, @code={0xa, 0x58, {"c482d93ba2b5000000420f01c5c481f972f6ebb9800000c00f3235000400000f30430f01c4c40235a78003000000b805000000b9d1ad00000f01d9f342ad66ba6100ec400f9332"}}, @cpuid={0x14, 0x18, {0xfff, 0x2}}, @wr_drn={0x6e, 0x20, {0x6, 0x54}}, @rdmsr={0x32, 0x18, {0x9a3}}, @rdmsr={0x32, 0x18, {0xbce}}, @wr_drn={0x6e, 0x20}], 0x1c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000002f80), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000003080)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003040)={&(0x7f0000002fc0)={0x6c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r0, 0x4068aea3, &(0x7f00000030c0)) (async) r5 = syz_io_uring_setup(0x78df, &(0x7f0000003140)={0x0, 0xab58, 0x8000, 0x2, 0x294, 0x0, r0}, &(0x7f00000031c0), &(0x7f0000003200)) (async) r6 = dup3(r3, r2, 0x80000) close_range(r5, r6, 0x0) r7 = accept$inet6(r6, 0x0, &(0x7f0000003240)) r8 = accept$packet(r6, &(0x7f0000003380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000033c0)=0x14) sendto(r7, &(0x7f0000003280)="2d90ab255121b7cc85aa3d3ae64644334ed81fcdb670f2b1c681337a2ab798c4479c5f0f7328748dee0a946a39cd0687772efe2fd9395eea0e1409ddf3a9583f106e4a95c01feb2a1b25532a51502a730f63ccd453304f01d8af92aa554ed46060fce3527dabaa5176e845f6cd8eb790961e9057995703ff7378dfa94b87e16a4183a7e4b03b64c27041eae8a8cfa4516b9e073c117f6c1b4cf2ed401a2ac2fbe04cf271560237af8eaba232b5911120c239f0ebcccad1179ef912d4e2b6a51d4218d7e34cd245e5563d", 0xca, 0x1, &(0x7f0000003400)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x1, 0x4, 0x4, {0xa, 0x4e21, 0xe6f2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80) (async) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000003480)=0x9) (async) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000034c0), 0x400801, 0x0) close_range(r8, r9, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000003500)={[{0xb, 0x4, 0x7, 0x4, 0x5, 0x80, 0x7, 0x9, 0x5, 0x5, 0xa, 0x7, 0x400}, {0x726, 0x0, 0xe7, 0x8b, 0x0, 0x6, 0xcf, 0x81, 0x72, 0xf7, 0x8, 0x9f, 0x8}, {0x10000, 0x3, 0x4, 0x8, 0x0, 0x4, 0x1, 0x10, 0x6, 0xf4, 0x2, 0x5, 0x6}], 0x8}) (async) ftruncate(r2, 0x3) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000003580), 0x400040, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x32) ioctl$KVM_SET_PIT(r11, 0x8048ae66, &(0x7f00000035c0)={[{0x7, 0x1, 0x71, 0x7, 0x4, 0xfa, 0x1, 0xff, 0xfd, 0x5, 0x6}, {0x1, 0x4000, 0x3, 0x0, 0xc3, 0x1, 0x4, 0x0, 0x3, 0x3, 0xdb, 0x0, 0x5}, {0x5, 0xe, 0xe, 0x6, 0x2, 0x80, 0x6, 0x81, 0x0, 0x1, 0xfb, 0xf9, 0x100000001}], 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000003640)={0x84, @private=0xa010100, 0x4e21, 0x0, 'wrr\x00', 0x0, 0x7, 0x5d}, 0x2c) ioctl$AUTOFS_IOC_FAIL(r10, 0x9361, 0x9) 2m11.916422559s ago: executing program 2 (id=5009): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2m11.86219911s ago: executing program 2 (id=5010): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402405a1a440000102030109025c0002010000000904000001020d000005240600010524f900000d240f0100000000000000000006241a0000000905810300020000000904f7ff003cd76ad038b954ef4da6e1aeb619020d00000904010102020d100000000000"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x958028, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r5}, 0xfffffffffffffffc, 0x1ff, 0x100000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010020, 0x0) sendmmsg$unix(r6, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m10.525790046s ago: executing program 2 (id=5031): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x7aa7000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) nanosleep(&(0x7f0000000140), 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) r3 = dup(r2) write$cgroup_subtree(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9e65) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 2m10.274254361s ago: executing program 2 (id=5032): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x206080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m10.226920742s ago: executing program 35 (id=5032): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x206080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m44.186725781s ago: executing program 3 (id=5240): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$TCPDIAG_GETSOCK(r3, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="ae1fc89a59f8", 0x6}, {&(0x7f0000000140)="23f11c0e004c995f9e141a85ef2471f2534b77e8bc5aa2632a1c82acb45778404f08bc032c0b9c105355c8b1d7e0bf77b9442f3ecde1a9a135bf43971bb8996cddb9"}], 0x10a4}}], 0x400000000000337, 0x80) syz_usb_disconnect(0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat(r3, &(0x7f00000021c0)='./file0\x00', 0x4001, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvfrom(r6, 0x0, 0x62, 0x40000160, 0x0, 0x0) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m43.445958156s ago: executing program 3 (id=5250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r1, 0x10e, 0xb, &(0x7f0000000000)=""/22, &(0x7f0000000040)=0x16) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4ea4, 0x0, @empty, 0xff}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002042, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000000)=[@enter_looper, @enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = gettid() sched_setscheduler(r5, 0x1, &(0x7f0000000080)) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000002600)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x5c, 0x0, &(0x7f00000005c0)=[@acquire={0x40046305, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000640)={@flat=@binder={0x73622a85, 0x1015, 0x3}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1001, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x40}, @register_looper, @register_looper], 0x66, 0x0, &(0x7f00000007c0)="b84587c73613840dbab0eee80ee2d22e185f9599af0677020bd1ef6258521ee3d290ba1ce7c1d1959c12124075163ef5322cea37cef6b92382460669c2a826b0f43f3bcac9db82750f88e0ee7f6f8c15b6673b36b17f808b24e5f4aa4b6eff112cced83ff513"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r3}], 0x51, 0x0, &(0x7f0000000740)="88830000cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8abff48000000000000000461ba22fd7fca4f6c2d92"}) 1m43.341067568s ago: executing program 4 (id=5252): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8010, 0xffffffffffffffff, 0x320c8000) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000146000/0x3000)=nil, &(0x7f0000903000/0x2000)=nil, 0x3000, 0x3}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x10001, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (rerun: 32) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES64=r6, @ANYRES64, @ANYRESOCT=r3, @ANYRES8], 0x2f) (async) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async, rerun: 64) chdir(&(0x7f0000001100)='./file0\x00') (rerun: 64) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000180)=0x10, 0x4) (async, rerun: 64) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, &(0x7f0000000040)) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40080, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000440)={0x1, 0x2, 0x7fffffffffffffff, 0x1000}) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r10 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 32) unlinkat(r10, &(0x7f0000000280)='./file0\x00', 0x200) (rerun: 32) 1m43.293259449s ago: executing program 3 (id=5254): r0 = open(&(0x7f00000007c0)='./file0\x00', 0x446083, 0x99) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0100001a0000082bbd7000fedbdf251300000004009300fbf2a43c38f29b0a768a362eb4479861e833339996fe5965718e825a5ca3e0e2fccbef75bb868ace9fc51c0fe761dc9522e9f0864b22990797cafa55f90609ab1bd1a7d1a0cb44a523802b49063d885c4d5f885df2272bb25cf91bfc17355a3d745e2efec0e32040e6d531f4a4769f8477360142ecb13f69315e27187123608bd2697725219225d08f55c24c2be06bb55b28672676559db6e2dacc33e0b8fc3c1525fdaaefe1ed66d332e895bb5c6e78931e66747f8d34d1f90f7cec6996f7510b923b32720628971bd9c39cb2d511567c7cc1e61b45fd608c6542d4ee77aa05221f5afd79b74476eb255cccd11c454e4983020c09e55c46462c6336a628ad994cf2152b1a67e61fb912e575cf4ed097e320167b3f777ef82373ed33df16aee88fc3f96884d66c2464af2602acdf9e7d9920d243cddaf7f1349ce1ddfab2dd4aab75c0510f838519d351101006af365300"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x4993955fbc322e46) getresgid(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) gettid() timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000680)="ea51a3e5432a1db443e21300e515eb86a3b4ca713d47623caa5b4bb530636ff57f82bdfea214086cf26b94fa2185c6e4c69048b7d686f6347f58e0792e8672c7835dde80621157de37166fa0919c070eede82e5a4fa534fe86572a6d539c98c1d52bf41d5ffb0778a75d78cec13e2ba49bae5a6d679bd24dbd9ec17f2cc29d5b9c0855e18c3faa16798a41b2cc118f8594bfb494eae198b8245fd67c5bd266df28ce213810a69079473168c8cd711373", &(0x7f0000000740)="61be72"}}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x3, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r0, &(0x7f00000026c0)={0x2020}, 0x2020) write$UHID_DESTROY(r3, &(0x7f0000000180), 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) mount$incfs(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000780)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x0, 0x3}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe07", 0xb}], 0x1) splice(r4, 0x0, r6, 0x0, 0x9, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 1m43.293007639s ago: executing program 4 (id=5255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close_range(r0, 0xffffffffffffffff, 0x0) 1m43.142171172s ago: executing program 4 (id=5258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/custom1\x00', 0x1800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = dup3(r1, r1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x559942, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000002040)={0x1, 0x0, @pic={0x6, 0x6, 0xfd, 0x25, 0x7f, 0x1, 0xf7, 0x8, 0x8, 0x4, 0xfc, 0xc, 0xc, 0x7f, 0xf, 0xdd}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[], 0xcc}}, 0xc890) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x60001, 0x31c}, 0x8) bind$bt_sco(r3, &(0x7f0000000100), 0x8) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0x9}, {&(0x7f0000003040)=""/4108, 0xffd}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000002bc0)=""/122, 0x80}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002f00)=""/268, 0x10c}, {&(0x7f0000000b40)=""/134, 0x86}, {&(0x7f0000000680)=""/72, 0x48}], 0xa}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0, 0xfffffffffffffd87}, 0x81}, {{0x0, 0x0, 0x0}, 0x1007}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x7, 0x40000000, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, 0x0, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) r9 = eventfd2(0x7, 0x80001) io_submit(r8, 0x2, &(0x7f0000000640)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0xffff, r6, &(0x7f0000000500)="556137efe8bb9492b7c9f3941409e96f5495688e320b9458feb86daa580985f1aff897946a0641ea3d84fed426621f19ba521297d1d764f6ea50a281747c61e53edf4d99aae8250f7cddd3074643f95d82e5c06a679ec4b3705c", 0x5a, 0x3c, 0x0, 0x2, r9}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x101, r3, &(0x7f0000000880)="91a5163ad557957c91512294543aef3b5558807c848538e1fd4898f60e0e68d1dd009aa8ec80348286afb96faf8470a6542af61ae381bfed93c80e334838d1b139421c056c31db4e0aeac484e5967c96ef516473c913531cea4ff9b426f4165db1600d0c5c25da5dae480b243a48336784c5571da13f320a75f30b9870985e18ddd11aca38e57f6190a96e080f265c8dac9a21137eee7b6a323cddd02a28cb79fdf2608128ab2b93963f2ca88691766ddcb5be2d73311fb29f1847df729daec0e2ad9534d43f986be55e0cd9fa7da625edb98ed5f926635acae9bdf4675f3013febd9031220aefbebfe911b60bbd82", 0xef, 0x8000000000000000, 0x0, 0x2}]) socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xa584dc764b1b848a) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4) r12 = syz_pidfd_open(0x0, 0x0) statx(r11, &(0x7f0000000440)='./file0\x00', 0x6000, 0x40, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000240)=[r13, 0xffffffffffffffff]) setgroups(0x3, &(0x7f0000002140)=[r15, r14, r15]) ioctl$EVIOCGID(r11, 0x80084502, &(0x7f0000000980)=""/180) close_range(r3, r12, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) listen(r3, 0x0) 1m43.091675813s ago: executing program 3 (id=5260): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x1b>l\xf6\x1d\\(\x95\xa5\xe0\xd0`]\xc3\x14&\xc3\x82;2zW\x8d\xadE\xa4B\x16Kq\x12\xf9T\xcb\xd5\xad\xe8%\x99HnJ.\xca\x15;\x05\x83YYa\xbbhEL\xd8\xa3\xaa\x15\xb7\xaf\xb2\xaa\xb4\xff6L\x90\x056\xdb\xf4\xeaI=\xa4\'\xc3<\xb0\xcc\xcb\x86\aFA\xef\x97|\xe3!\xeb\x82s*\\Y\xb9\xd3\x9dW\xce\xea\xc3\xdb\xc7\xa2by\xba\x97\xb2\x1aop\x04$/b*x\x87\x11;yN\\6\xa3\x8al\x06}\xadXw\xda\v\xeb\x97\x86,Z\x91\xce\xe21\x16%9\xbf\xbb\x9f3JO\x1cE\x92\xb5\xcaO\xcb\xe72\xc1\xc6@T\x10\xac\x9b\xabZGU`s\xdd\xb6\xe9^S\xf8n\xcf;\xb7\ahR\xe0{X\x90C}\xf9B\xa8\xe0-3P\a\x10Y(%\v%,L\xf4\x97\x96)\x85U8M\x89O', 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x10000}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x24d, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a0, 0x6, 0x1, 0x400002, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x3, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x6, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x403fc, 0xffff58b9, 0x4c2336d3, 0x4, 0x20000001, 0xfffffff8, 0x1000401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7faf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x3ff, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x4, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x10007, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x3ff, 0x7b, 0xfffffff8, 0x100040, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0x8, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaeb, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff", 0xb}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="200000001e00230700000000000000000500a980080026006401011404000e005cb3038e64adb31c18b3d48c35ceda94d403807ed739eff5a18700b08e8d6da174c8b224588b9d128bbdfd755d23e86ba6e9a1aac623af18092216397d333bbcfaabe948e93d04ce7c0507b8955592efb58f45a65f9b0b9668e10463e8ec6d86f8d8041d4071ea12cb000000000000000000000000000000a4cfd37aa954cadaa2e097bdf62cf2455ee5cb40005b35ee13b8598b759320aa8ec5dbb4528b830e4d2bcf4729c1e69f856386574f8c12a4639fd1295c7549784e040c19af004adc099285901d679aadbf1b1ec1ccdb49c96fa17ce03e171458d84a255468bc16492b1ce53a2786e976ad2b4ecc2648fe"], 0x20}], 0x1, 0x0, 0x0, 0x24008015}, 0x20040010) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x2000000, 0x10000}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000280)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 1m43.016370204s ago: executing program 4 (id=5261): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) r3 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) umount2(&(0x7f0000000080)='./file0\x00', 0x5) ptrace$setsig(0x4203, r3, 0x6, 0x0) syz_open_procfs(r3, &(0x7f0000000000)='net/udp\x00') move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r5], 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m42.048196973s ago: executing program 3 (id=5266): syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async, rerun: 32) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') (rerun: 32) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x85) (async) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000001280)={0xbe, 0x0, 0x1}) r7 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000edfc054d564b"]) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x89a0, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0xffff8000) 1m41.971777165s ago: executing program 3 (id=5269): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0xffc9, 0x7}}, 0x28) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@mcast1}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) 1m41.941365255s ago: executing program 36 (id=5269): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0xffc9, 0x7}}, 0x28) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@mcast1}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) 1m41.812042088s ago: executing program 4 (id=5272): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=[@increfs, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000280)="581a17919c", 0x5}], 0x1) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) r9 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x54, r3, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b00), r10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)={0x14, r11, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40060}, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) clock_gettime(0x6, &(0x7f0000004100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000035b000/0x400000)=nil, 0x400000) 1m41.635148141s ago: executing program 4 (id=5274): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86220080}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) pwritev2(r1, &(0x7f0000001280)=[{0x0}, {&(0x7f0000001200)}, {&(0x7f0000001240)="45b1d857082c649949135f8de272", 0xe}], 0x3, 0x86, 0x6, 0x18) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x1c, 0x2004, 0x0, 0x7, 0x0}) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000001100)=0x1) mount$overlay(0x0, 0x0, 0x0, 0x10000, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, 0x0) mlock(&(0x7f000002f000/0x2000)=nil, 0x2000) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x894a, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) r8 = gettid() rt_sigqueueinfo(r8, 0x21, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f000021d000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) 1m41.586637802s ago: executing program 37 (id=5274): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86220080}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) pwritev2(r1, &(0x7f0000001280)=[{0x0}, {&(0x7f0000001200)}, {&(0x7f0000001240)="45b1d857082c649949135f8de272", 0xe}], 0x3, 0x86, 0x6, 0x18) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x1c, 0x2004, 0x0, 0x7, 0x0}) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000001100)=0x1) mount$overlay(0x0, 0x0, 0x0, 0x10000, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, 0x0) mlock(&(0x7f000002f000/0x2000)=nil, 0x2000) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x894a, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) r8 = gettid() rt_sigqueueinfo(r8, 0x21, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f000021d000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) 1m17.399884515s ago: executing program 6 (id=5503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) timerfd_gettime(r1, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r3, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) (async) fcntl$setpipe(r2, 0x407, 0x10001) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1m17.284914468s ago: executing program 6 (id=5507): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)={0xe555, {{0x2, 0x4e21, @local}}, 0x1, 0x5, [{{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e24, @private=0xa010101}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e20, @broadcast}}]}, 0x310) 1m17.238990509s ago: executing program 6 (id=5508): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x6a6c02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) pwritev2(r1, &(0x7f0000001280)=[{0x0}, {&(0x7f0000001200)}, {&(0x7f0000001240)="45b1d857082c649949135f8de272", 0xe}], 0x3, 0x86, 0x6, 0x18) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x1c, 0x2004, 0x0, 0x7, 0x0}) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000001100)=0x1) mount$overlay(0x0, 0x0, 0x0, 0x10000, 0x0) fchmod(r3, 0x272ff0f82de3c34f) getsockopt$inet_buf(r2, 0x0, 0x2e, &(0x7f0000001600)=""/4102, 0x0) mlock(&(0x7f000002f000/0x2000)=nil, 0x2000) r5 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x894a, 0x0) process_vm_readv(0x0, &(0x7f00000005c0)=[{&(0x7f0000001000)=""/112, 0x70}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/172, 0xfe}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) r7 = gettid() rt_sigqueueinfo(r7, 0x21, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f000021d000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000700)=@newtfilter={0x594, 0x2c, 0x603, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0xffff, 0xa}, {0x4}}, [@f_rsvp6={{0xa}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_RSVP_SRC={0x14, 0x3, @local}]}}, @f_rsvp6={{0xa}, {0xc8, 0x2, [@TCA_RSVP_ACT={0xa4, 0x6, [@m_simple={0xa0, 0x17, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x11, 0x3, '/dev/rnullb0\x00'}]}, {0x5f, 0x6, "aa4f3de010bf3afbe814dd7e1f036041a1e2f22ef62cd57aff56a6ed91c445a13f39dea2ca76da4657d5553433bc1c98194f464e61624398fc00750df9f1c97d29ff9b4df9d234f26354554151935f5ba173a6407b726a8c4d037e"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7fff, 0x7fff, 0x8}, {0x9, 0xf80, 0x5}, 0x16, 0xd0}}]}}, @f_tcindex={{0xc}, {0x42c, 0x2, [@TCA_TCINDEX_POLICE={0x420, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x8, 0x0, 0x6, 0xd2b, 0x7, 0xc0b0000, 0xb, 0x80006, 0x7, 0x80000000, 0xd743, 0x2, 0x1ff, 0x4, 0x1, 0xe16, 0x9, 0x8001, 0xd, 0x1, 0x7, 0xef49, 0x2, 0x10, 0x4, 0x125, 0xd, 0x3, 0x1, 0xfffffffa, 0x3, 0xfffffffb, 0x4, 0x2, 0xfffffff7, 0x10001, 0x4, 0x2, 0xffffffff, 0x6, 0x7f, 0x8, 0x4, 0x2, 0x0, 0xfffffffc, 0x1, 0x140, 0x80000000, 0x169, 0x8000, 0x7, 0x401, 0x4, 0xfffffffc, 0x6271, 0x3, 0x70e1, 0x6, 0x1, 0x10000, 0x7, 0x2, 0xfff, 0x2, 0x3, 0x80, 0xffff, 0x8001, 0x8, 0xfffffffa, 0x7ce0efc7, 0x40, 0x3, 0x2, 0x10, 0x2, 0xfffffffe, 0x9, 0x67c, 0x0, 0x9, 0x65, 0x8, 0x2, 0x571, 0x0, 0x9, 0x1, 0x9, 0x8, 0x2, 0x4, 0x0, 0x9, 0x28000, 0x401, 0x5, 0x5, 0xfffffff9, 0x7f, 0x5, 0x6ef, 0x9, 0x37ea, 0x3, 0x10001, 0x6, 0x0, 0x7fff, 0x8, 0x8c, 0x101, 0x7, 0x3, 0x8a1, 0x50f, 0x5, 0x36, 0x1, 0x0, 0xfffffffa, 0x2, 0x3, 0x200, 0x80, 0x0, 0x81, 0xffff685c, 0x7, 0x3c, 0x8, 0x5, 0xa, 0x101, 0x0, 0x8000, 0x80000001, 0x4, 0x65ab, 0x3, 0x2, 0x8, 0x1, 0xfffffffe, 0xacd, 0x200, 0x0, 0x31cf, 0x52, 0x7, 0x3, 0x0, 0x3, 0x4, 0x6, 0x8, 0xffff87e6, 0xa4, 0x6, 0x6, 0x7551, 0x9, 0xffffd7b8, 0x1c, 0x8, 0x200020, 0x968, 0x1c9, 0x0, 0x6, 0x6, 0x8, 0x7, 0xfa96, 0x401, 0x7ff, 0x6, 0x43fb, 0x6, 0x7fff, 0x9, 0x5d3, 0x8, 0x5, 0x8, 0x5, 0x10000, 0xff, 0x3, 0x6, 0xac, 0x5, 0xec0, 0xc, 0x0, 0x3, 0x3ff, 0xfffffe85, 0x7, 0x1, 0x6, 0x81, 0x8, 0x9, 0xf, 0x8001, 0x6, 0x2, 0x2, 0x5, 0xdd, 0x3b1, 0x1, 0x2, 0x5, 0x77, 0x1c, 0x1e1, 0x3, 0x50f, 0x9, 0xfec, 0x7, 0x8, 0x9, 0x5, 0x7fff, 0x8, 0xda, 0xffffffe6, 0x1, 0x400, 0x1, 0x3, 0x1, 0x3, 0x4, 0xfffffff1, 0x800, 0x2, 0x0, 0x8, 0x6, 0xc, 0x2, 0xfff, 0xffff, 0x9, 0x8, 0x1, 0x2, 0xa, 0x4, 0x400]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xf9b3}]}}, @f_rsvp6={{0xa}, {0x2c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}}]}, 0x594}, 0x1, 0x0, 0x0, 0x10}, 0x80) 1m17.233690179s ago: executing program 6 (id=5510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.pending_reads\x00', 0x100, 0x4) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240), &(0x7f0000000280)='./file0/../file0\x00', 0x11, 0x1) (async) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x5, 0x1, 0x0, &(0x7f0000000000)=0xffffffff, 0x5000001) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x814a0, 0x0) (async, rerun: 64) unshare(0x22020600) (async, rerun: 64) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0xa, 0x4, 0x3, 0x5, 0x1, 0xffffffffffffffff}) (rerun: 64) r2 = syz_open_procfs(r1, &(0x7f0000000100)='sched\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 1m17.12648894s ago: executing program 6 (id=5512): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) mlock(&(0x7f000002f000/0x2000)=nil, 0x2000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7", 0x31, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003d80)=@newtaction={0xe4, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0xd0, 0x1, [@m_ipt={0xcc, 0x1, 0x0, 0x0, {{0xffffffd7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x0, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x48, 0x6, {0xba15, 'security\x00', 0xdb, 0xffff, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x904400, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) write$P9_RVERSION(r3, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x7, 0x6, '9P2000'}, 0x13) sendfile(r5, r5, 0x0, 0x7a680000) socket$inet6(0xa, 0x80002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000339000/0x3000)=nil, 0x3000) 1m16.854134886s ago: executing program 6 (id=5516): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x2}, @register_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) madvise(&(0x7f0000338000/0x1000)=nil, 0x1000, 0x15) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000500)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') faccessat2(r3, &(0x7f0000000040)='\x00', 0x1, 0x1300) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x66, 0x0, &(0x7f00000007c0)="b84587c73613840dbab0eee80ee2d22e185f9599af0677020bd1ef6258521ee3d290ba1ce7c1d1959c12124075163ef5322cea37cef6b92382460669c2a826b0f43f3bcac9db82750f88e0ee7f6f8c15b6673b36b17f808b24e5f4aa4b6eff112cced83ff513"}) socket$pppl2tp(0x18, 0x1, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x4d8182) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r1}], 0x51, 0x0, &(0x7f0000000740)="88830000cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8abff48000000000000000461ba22fd7fca4f6c2d92"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x2}, @register_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async) madvise(&(0x7f0000338000/0x1000)=nil, 0x1000, 0x15) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000500)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') (async) faccessat2(r3, &(0x7f0000000040)='\x00', 0x1, 0x1300) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x66, 0x0, &(0x7f00000007c0)="b84587c73613840dbab0eee80ee2d22e185f9599af0677020bd1ef6258521ee3d290ba1ce7c1d1959c12124075163ef5322cea37cef6b92382460669c2a826b0f43f3bcac9db82750f88e0ee7f6f8c15b6673b36b17f808b24e5f4aa4b6eff112cced83ff513"}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x4d8182) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r1}], 0x51, 0x0, &(0x7f0000000740)="88830000cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8abff48000000000000000461ba22fd7fca4f6c2d92"}) (async) 1m16.853797956s ago: executing program 38 (id=5516): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x2}, @register_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) madvise(&(0x7f0000338000/0x1000)=nil, 0x1000, 0x15) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000500)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') faccessat2(r3, &(0x7f0000000040)='\x00', 0x1, 0x1300) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x66, 0x0, &(0x7f00000007c0)="b84587c73613840dbab0eee80ee2d22e185f9599af0677020bd1ef6258521ee3d290ba1ce7c1d1959c12124075163ef5322cea37cef6b92382460669c2a826b0f43f3bcac9db82750f88e0ee7f6f8c15b6673b36b17f808b24e5f4aa4b6eff112cced83ff513"}) socket$pppl2tp(0x18, 0x1, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x4d8182) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r1}], 0x51, 0x0, &(0x7f0000000740)="88830000cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8abff48000000000000000461ba22fd7fca4f6c2d92"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x18, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x2}, @register_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async) madvise(&(0x7f0000338000/0x1000)=nil, 0x1000, 0x15) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000500)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') (async) faccessat2(r3, &(0x7f0000000040)='\x00', 0x1, 0x1300) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000005c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x66, 0x0, &(0x7f00000007c0)="b84587c73613840dbab0eee80ee2d22e185f9599af0677020bd1ef6258521ee3d290ba1ce7c1d1959c12124075163ef5322cea37cef6b92382460669c2a826b0f43f3bcac9db82750f88e0ee7f6f8c15b6673b36b17f808b24e5f4aa4b6eff112cced83ff513"}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x4d8182) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000580)=[@free_buffer={0x40086303, r1}], 0x51, 0x0, &(0x7f0000000740)="88830000cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7fa8abff48000000000000000461ba22fd7fca4f6c2d92"}) (async) 47.394219253s ago: executing program 8 (id=5813): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x2004020, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@verity_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="44c93428ddd24d0000003300000126bd7000fbdbdf2532004980a6351f7a2da1202628c49a8918fd37745b3b1470a5100e936f821ada5d0eeb8aa6ea44004e699ea17483c3fd15420000d9f749eb3a414cc4059abcf82e17c85448ab94c8fab6130000000000005384016e4c14c9b0a97a282d5e50216a928e97307f1d3ec392ab5aa7b59a45a5f6d8e55bf8b964a80c7bb7817af209f53e12e2c5563402fdb51db19a65f8e6eaa77645ce2dd1231638fcfe59416c4052c6e3eea3263d7c337360d470633e898fa9b0be96a8216858162b827ae1fe4f9808b10a594fedd0822f9b7f77034ced80fa5af263ed22ee51ff08ee8e2cf69d30f099e55318e91568edb0fe84581d5dca4bb37f5e842938c15d9802ad3cdb28bdb39558e6b37ae6e10a1c7fdfd1fb023934ce6cc366bb161b7457d81d562e235210b291a8b11ef4c83693ff72020a630941220f8f27d34e4a395ae10e8cde227b12973feb6fc90917271686008331b3b974a7df94b7b72a61839566159b3c086a17be2831ed6fab66c4b6d629be70e7c6db285c70cf7276bd0e0fed4f31f1960dfeb4161506fbc315a8b5dbb949cea22635b264352f0d485373f58bd75f43ec33703103047470b767e630d5f2ae375e8f4b796044560b79b0911ae5"], 0x44}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='G', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x1f, r1, 0x800000d0a, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_off}], [{@smackfshat={'smackfshat', 0x3d, '\xff\xff'}}, {@measure}, {@uid_eq}, {@dont_appraise}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='./file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[]) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xf, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000769000/0x2000)=nil, 0x2000, 0x1000001, 0x20010, 0xffffffffffffffff, 0x110e2000) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$inet6(0xa, 0x3, 0x2f) 47.393732563s ago: executing program 8 (id=5814): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff8) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x9, 0x1, 0x4, 0x1, 0x17, "ae93bd743ccb0d8d8a247badda8868f79bcea0"}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) 47.391343832s ago: executing program 8 (id=5815): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = memfd_secret(0x0) r3 = open_tree(r2, &(0x7f0000000000)='.\x00', 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x4000, 0x100000001}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000841}, 0x24004084) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)={0x164, r6, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6ee}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xafec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9831}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff83}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x10080}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x5421d2fb7d8931b1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x2, 0x28}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}], 0x54, 0x0, &(0x7f0000000580)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7f8aab8148a0e021b5cf4690a761ba22fd7fca4f6c2d70eccab5"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) memfd_secret(0x0) (async) open_tree(r2, &(0x7f0000000000)='.\x00', 0x8000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x4000, 0x100000001}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) (async) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000841}, 0x24004084) (async) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)={0x164, r6, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6ee}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xafec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9831}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff83}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x10080}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x5421d2fb7d8931b1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x2, 0x28}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}], 0x54, 0x0, &(0x7f0000000580)="8883f5f7cbff9a34b3f74f293f723b276cf06db9629e224672eb6f1cfcc713e6e2bf82da4da36b0d8fb9148859b56d7ccf9d9b7a69f1872e006c7f8aab8148a0e021b5cf4690a761ba22fd7fca4f6c2d70eccab5"}) (async) 47.309666094s ago: executing program 8 (id=5816): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 47.296953284s ago: executing program 8 (id=5817): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x280, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x2, {{0x2, 0x2}, 0x2}}, 0x10) 47.070236559s ago: executing program 8 (id=5818): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}}, 0x1c) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x100202) (async) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x100202) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) 47.068734439s ago: executing program 39 (id=5818): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}}, 0x1c) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x100202) (async) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x100202) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) 44.403752291s ago: executing program 1 (id=5856): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x804, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0}) unshare(0x62040200) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={&(0x7f0000003f00)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r10 = syz_pidfd_open(r4, 0x0) setns(r10, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r11 = socket$inet6(0xa, 0x3, 0x4) close_range(r11, r0, 0x0) 43.135786356s ago: executing program 1 (id=5865): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000000)='map_files\x00') capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0xb84e5000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') 43.122442266s ago: executing program 1 (id=5866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0x73}], 0x1, 0x6c, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 43.046278338s ago: executing program 1 (id=5867): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff1) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='erofs\x00', 0x80c000, &(0x7f0000000100)='dax,always') mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0xa03c0000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 43.043714608s ago: executing program 1 (id=5868): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = getpgrp(0x0) r4 = syz_clone(0x18008080, &(0x7f00000001c0)="7063e558a97dde9618be401556d2bd5a343f127476762604eca5cbb68b1329d6120d383864c33424e517da2ecf5d46cacbecab37e3d0475a3634ac244e3e5d223d2e09e6d64fe0004b51b0dcca809ab77ee27fe7e505999d4f5d5b574bef0f145db778716a0199ebf039c3aa579ce9a58045fa41fcd46bf89d7c4c500e2f824820f777eb4620197407bee2ad5ff8b935948177a6b11e628992fdc8f9bd2e2f094c957fd84eed2e1609f62bdcf92440881089b593ddce6ff9edf15fae26764360d50e93e557c29b4a210cf27609a676a78028da2876fb7251d794c253bd8533c963fdf97b47608de42e3da2846ca7060bcf", 0xf1, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000300)="293c7e9e3b1e4d7ec35a02893b9daf2be1cc3a2120d1564b3d145ace2acd631e11f6474d") tgkill(r3, r4, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 42.494153338s ago: executing program 7 (id=5871): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x10}}, @ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x7c, [@broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xea}}], 0x40}}], 0x1, 0x46000) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) (async) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0xfffffffffffffffe) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000400)='.\x00', 0x200) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x402040, 0xae) ppoll(&(0x7f0000000180)=[{r3, 0xc0}, {r0, 0x100}, {r4, 0x6000}, {r4, 0x9}], 0x4, &(0x7f00000000c0), &(0x7f0000000100)={[0x4]}, 0x8) 42.492491688s ago: executing program 7 (id=5872): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2400000026000305"], 0x24}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0x73}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 42.41748528s ago: executing program 7 (id=5873): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000fc7f0000"], 0x78) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087707, &(0x7f0000000000)='\x00\x000\x10\x00\x00\a\x00\x00\x00\x00\x00\x00\x00^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcbgQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xe3\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x00\xfe\xff\xffo \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x8e\x04\x00\x00\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94@\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00y\xd2\x88s\xd1~}\x10\xffR\xbbt\xf0:>\xe7\xfd(\xad\xacS\x0f\xa5\xa4\xcfN\xdd\xc0\xf3\xc5\n3\xa6*\x97\xf7\xdb\xccT\x02\x9f\x96D\x85_\xfc\xf8?\xbc\x00\x00\x00\x00\x00\x00') r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 42.39800211s ago: executing program 7 (id=5874): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r1, 0xf7, 0xe6}, &(0x7f0000000340)={'enc=', 'oaep', ' hash=', {'blake2s-224\x00'}}, &(0x7f0000000400)="9a83ef6cb4b90c97748d9555d8ffd836384925f54c75dbd3fca6d87f11070eafd82c1a192bc3b222681e2624a5e1d6568465e0156ab4b6b7dc727dc8b82514e7e8fec1907e5e140eeda8ff964ea4edf8d74c309b6c9ba636107f523eb31fdee6818bd579891d04d392eb5a5bb3d0ee1cfd041173baa2dc1b517be7a93e4b02903740c2bf56f4ab896b84119019b1b2dba30196196926007880df5a479f32b408fed86f060adce9ad663486c32eaea6f9efc1f9f05ec183d4944aefe1ac149b5d9c228f0165abd13c06e4872c5fa937ec184504595e17c4178b3037cb51a0dcf69c243c9dcb2c16e3ddb94c0c298f9a7fbac3c7b1adf627", &(0x7f0000000500)=""/230) keyctl$unlink(0x9, r1, r1) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$invalidate(0x15, r1) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x4d, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYRES16=r0]) 42.207778364s ago: executing program 0 (id=5881): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000001c0)=0x5, 0x4) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000001c0)=0x5, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000180)='./file1\x00', r2, &(0x7f0000001100)='./file1\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') (async) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') r3 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x8a, &(0x7f0000000140)=0x1, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x8a, &(0x7f0000000140)=0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000000100)=""/4096, &(0x7f0000000000)=0x1000) (async) getsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000000100)=""/4096, &(0x7f0000000000)=0x1000) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') (async) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x2000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000240001002cdbdf255200000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r8, 0x4068aea3, &(0x7f00000002c0)={0x80, 0x0, 0x4}) 42.142137735s ago: executing program 0 (id=5882): prctl$PR_MCE_KILL(0x35, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="f320c5a29f098c0f56a51a9322079081"], 0x18) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002240)={&(0x7f000001b000/0x4000)=nil, &(0x7f000001a000/0x3000)=nil, &(0x7f000001d000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f000001e000/0x1000)=nil, &(0x7f000001a000/0x3000)=nil, &(0x7f000001d000/0x4000)=nil, &(0x7f000001b000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000020000/0x2000)=nil, &(0x7f0000002140)="f7999ddfdb7d1b9d4a39f44693c77aeb9d3cc1af65c8285b9697b3b1e9621c7ecab708ecc6c90d1889f7323bf1af4ba2f967acc3932143104441d28034d89f75d787b60e806fc169935d1c22694bf9d6391a73dbb9729c57861c68613de4d35bfe3344e37f5ce27bbb6ea95a5cc8e2e943684ac2e9c2cd88a369dfde6d59d320fcdb24a93424f7559513c3094115f1cc4b5b7eb92a938db0c92d10cd8fdd578bde3a76a8f8b5ae6d6dbee2aee136460e3ee022c78f23e2f2610237652815f1a92288efd1eabe83cbab59778d0764c50e486321eb38cf054421091bfe9502", 0xde, r0}, 0x68) (async) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='!(+.\x00') (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000000c0)={{0x3, 0x0, 0x80, {0xffff1000, 0x5000, 0x3}}, "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", "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"}) (async) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0x85b83000) 42.140986895s ago: executing program 0 (id=5883): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0xf1, 0xa, 0x80, 0x8, 0x45a, 0x5210, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xbd, 0x20, 0xf, [{{0x9, 0x4, 0xf8, 0x8, 0x0, 0x7a, 0xf5, 0x4c, 0x5}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x40f}}, {0xf6, &(0x7f0000000140)=@string={0xf6, 0x3, "7c220833e06064f9f82854fae26dd02b9375ccc01e8547dbb5af3c64e72c080e30bf3faf4d0d80218e479d54e7160db85646b09b55e48c55993ecbfcf378a57e17ef289af8f26163e482fb1721c2005cdabdb66726280e8daf2fc64078c6a52af25ffbadee2dc854022bdf5fe6452d73fc619b0f2bb604c2050d75d60a9414c52a55b2fee661cbe1661b075ffc5f5d9c13f7bb53a246b24fa092766b398789a77d21e9b62110fe25a2be3f6bb27b0112d52e0352fcce3487ca6d1386e93d24b0e3ba9a1ac0a62ab5f9365deefb49f279315abbd53800b18d8871705316fc82b604cdcfa4af7732ced429f536e81cb710e4bce98c"}}]}) 41.614258656s ago: executing program 0 (id=5886): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket(0x27, 0x1, 0x970) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x4000000, 0xb2, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) close_range(r0, 0xffffffffffffffff, 0x0) 41.613686915s ago: executing program 9 (id=5887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x180e, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x2000000, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/22) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000380)=[@exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x49, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525e"}) 41.613195336s ago: executing program 9 (id=5888): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x2c, 0x1, 0x1, [r2, r1, r1, r1, r1, r2, r1]}}], 0x30}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x398b0a074fd50390, r0, 0xe5441000) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)={0x1}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f000002f000/0x2000)=nil, 0x2000) 41.102155815s ago: executing program 9 (id=5889): ftruncate(0xffffffffffffffff, 0x398a0bdb) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) (async) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/cgroup\x00') (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) 40.640386575s ago: executing program 0 (id=5890): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x4, 0x3, 0x9, 0x0, 0x0, '\t\x00'}) r2 = syz_open_pts(r1, 0x101000) dup3(r2, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x174) 40.469630938s ago: executing program 9 (id=5891): r0 = socket(0x27, 0x800, 0x2af7) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000040)={{0xeeef0000, 0x11113001, 0xb, 0x26, 0x21, 0x7, 0xfa, 0x4d, 0xa, 0x0, 0x5, 0x9}, {0x10000, 0x4, 0x0, 0x97, 0x33, 0xf, 0x5, 0x4, 0x4, 0x0, 0x8, 0x5}, {0x5000, 0x2000, 0xd, 0x6, 0x9, 0x2a, 0xc0, 0x3, 0x8, 0xb3, 0x6, 0x6}, {0x0, 0xeeee8000, 0xe, 0x6, 0x8, 0x0, 0xd, 0xf7, 0x5, 0x7, 0x5, 0x3}, {0x2000, 0x4000, 0x8, 0x6, 0xb, 0x6f, 0x9, 0x4, 0x0, 0xd9, 0x43, 0xc}, {0x80a0000, 0x80a0000, 0x9, 0x8, 0x0, 0x80, 0x6e, 0x3, 0x5, 0x5, 0x7, 0x9}, {0xffff1000, 0x3b331000, 0xd, 0x5, 0x7, 0x4, 0xb0, 0x3, 0x1, 0xeb, 0x7, 0x6a}, {0x2, 0x4, 0x9, 0x0, 0x5, 0x9, 0x7, 0x51, 0x5, 0xc8, 0xf, 0x88}, {0xeeee8000, 0x3}, {0xf000, 0x8}, 0x40000, 0x0, 0xeeef0000, 0x400025, 0xd, 0x4800, 0x1, [0xae97, 0x7, 0x0, 0x1]}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000180)={"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"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"7fa3e4168776191ffa0234325a411d53cc472e2fe69e1023c61a07fd14c037cf312e942fc4943b49f1b0145fc5992c773edc7becfcd27108f1527add568bb4a33e33ae368c404bdb28ff17bdbac9c8af255e1efb82733a1854632fee6a672f6c2871e931e20f793484dd58dd27eed6bd09b97c690b10ed408d164b0bb80ca7feb05cf86ab15306083407154b49f8923f6b3cad30d61a19297ae2f2bdd31245683af3606545cddf1353daf0f8ce7fd8f21f603c083feba068e1e12d6c45c485b39f1b82ab17aefd3a7163af05269e27c63207569bd8324981338d4a71f76c9d9bf2d97437df48962796d1be64d504ba0dfe6365b6a9c39569d09e71aca6dd2c248be65d6ae8f812f45fb0a8af34e52cd5dbe290efd4dc0a391afad1f81ffdbba011fd3b9b356da643a696bd3fd6a1ca3ad5887673659dea0361b53ad53fa7f38aed42b5fab15d08b173a0deed5b73b5972939c8fc33f65f98defb5c462b05fead4b510ef4502dfff2f4ced88c9913e618b0919458887d64307cc59c435387f695521ed0f2b9acafd702b6ae3e048539f7d40a698b28f1b1d4443347acfac6a963738a9b5bd479b74e0c0496ae6580094e484906cf2298ed7d44b1a85837d7587ac6d4660c2094585e8ce66c42397d5a181698647a259789935ea31fb129f403bcdc2aff268b5231cce73f8272a1fd07fb5de32ae9e96a1cde8f3be1e38065c28c4a1f25b106e7b0503c585393ff98010ce67f44a0776597a6b0bd8d3a7a9d5e5e9fd924dcb222b27841c7fb0b7832426882b5515bba51747b0c6741be738989bea8825bef86a06c3f7fd4e922f7c640ee08d3e62fa3de324a81517b26743b29353a0d4f4f724d16599b122eb6874959cbf47980f4936151c50dfbcced4dd0e2174744c158ecc4c756e0902462dd7fff3471cd0accc52ab4a02a7c9405c9b929782a8240f6cc74ccdad35cf10276c275cfc191861ece0e920cb23bf2001595ec31c0327be9df9ccc725b9c8ecf470e946233433e711c0ed5e575d7f2254fe17c0a740e0316ce2ba0be9a74ef69aabb336ef88a5bd641a47bacaed9fd5585e76641eebe496fb7c97d6fb87f34b0625858e2ec8627649ca64f913269c49857854ca028682b5b4e759f080a60c3b3d9a2649166f675fd0ffba3e6058b38f27816ce3442f6ec30a350790a4ccbcc16c32d9687220d3804b31b093ddef08190ff24eacbd5663dcf28b6d391fb2a01af0ca1110417cbfc232b7c8630546d0a4db443e96ac93014b56139a4f75cca3ba38e170ab8a0beb827f6d7c7290c1a656309d009ed7727c8bc2acedc2841086af0797f5052b2f27f74ec2b0caad530a21d087570c020cf85d64cce0086da8ac88b14fcad9cc3548a046744cc4837f7e0e1573da3e7800436f71ecce5d79c2416f6aa89d85014de992b077fffe4f1e221e92f531ea7"}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000980)) pwritev2(r3, &(0x7f0000001c40)=[{&(0x7f00000009c0)="47c22160d86b87bbd21eb7529248f9f405dc789facfe15b29d62398de350f3d808feac2911eca7dc5e40bc651d004f41c78b2588fedaef7f112b186ce0d69ac02f08462eae4c7b86bae0a647be3eeb636c4595318481290031d04a1906b534bf5c844f88657b4d6b00b1de3ca8ae46def5c7f74f78837ff6ac6c201a8ccf07d6b5b05f9d89ae2c18d5b33bfbad3ec8631646fef53c5d2949be12c05d566c9b5c185d7abc2e", 0xa5}, {&(0x7f0000000a80)="b58b5f0142f2c10285a7bd04e62a6661406539a1c418379d930d81a678155bf714f5e185ad77c82e9aadd95b59bd61577215b58bd1fb21d26d0f543129e0afd40103d355d4659fd459d341e3e497aca422e0397eb2b43de204a6c3a2449df7c2c0f6e006df6c07d517a25eaf301f791c1d0661f5c4af56ceda7bb36ac4fce091bd12703ca3b17b9396a3739b92bca7db4a56cb173c5ea5caee766523de84c155c100", 0xa2}, {&(0x7f0000000b40)="979f1830e8877ade10a4d469a667cdac5be53bf49faf5ac9db0675a159397674542ad4c866e5123b3e1eb1fc66a7543ab7aae9c4fb533041f0994e2bef620c4a2f2081e1027b2cb44cdcc29ff8c173ff605ad2a0f4377f863c8214149378fe2d7f226eee14877b6b3b803da7cc565c256d6e4733d914c8529b6e50cc09964e572552db95f0d8bc4a072d66b0b4b399aca44e8f57a6c73fbf638e6b44e93c7d47fbc9fdfbae17be22a35f0026b3f652c9c191ac7f2f04e300ec0c1c6443b0be55fe823e69de318b2e599aa55f844a6b0b46b0d31d4e993f91885d1c03", 0xdc}, {&(0x7f0000000c40)="ece27c3ca6769fc9606f85b9e2d1f00a68ab317b7887859584c10fc68343eab0468d5699529ebaed85b413f7044cf577cce43ce6da514960e666cb77f220f9f915a54fea176c3e5c58df8ea4d8dae71dc6682c32d37490f7fee31b7cf2b8ccc4548af97275ea83520b3070aa79445c43e3e5f04f8927312a7930d296a3454080b1ebc3c7173626bb00af3cb3e55fad7eb3613e7ef33d9cedf7b9a681ef8509fe0b6b4c640f2a288d4cd2911abcec24221d5ffc078cf58d626a761f0319ebb060d8750764d6569c049de9ac4c7d054792e9e258e25b756b469d4f45148b85b538448ac416543c34ea0e674e4d829ee474d78c9c164cea85a9a18950ae9a400af8e2d3754a80f7aaf3fcf3e0cf31b829dc930eb5e94cfba8c9aa104387bcb527c570077f8a4fba6b6a2c306632a7bcc19d65846f5a3f1541ff8b7d77d4ede553d5e3d4b953883901797f5f82e97d5416bda96c742966cbd6025839714bb648178bce42fcc3d6461023b3a6bf65d3bdd00922fa54e7e9da0d61d6cc8632aa63a538da82fd203811a2103a1e043c3c0a13ecdb9627b866c790ef970625de0d1fd522d3dd3506e5d850d82b156aa2e796d944b6b655105f635a697ee520bd0a1ff96f513ee0dd0a082241ae4738befbda5eb0c13247a8590dd522401ffdc1e0f50374110b5146f7e3f1d7811e8dece1e2e2daa6b3d2f7ef690586867cb71a5718ed3b9a2a68310625a7cfb0ceef00634edab69c3063cdf1483769568b5e24b96e3571d75d0cb19864b9cb6d0910693ab308f08701b4feba539d6b57394dcb75577b179be7c2d83970a06f582623d65938505e1b94a7d7a222789202dc7c868888ec02a025a91aa006953772def2531da7537f36ffbd754b5cdc94e5c36d42a8be6e17967993a786a3c89316eac48a7fa0da721d1669d771817188760695f75c360429922a813f24a424e9ce25aafdb8f43c9c8a0010087b76cf4fbc46925c5bb45b2eceb028cbfae3b5669aee9099016662dc54428d69053b329b7281dddb033b5a109c84fa5fde7fc9d5d27dd3e2218d73b6d6508a458493d0e890289f7c72ebe0ed46f217e22218f65158179774077b3a0a9a9632f42793871146cfd109eb13aeb22ca49539238d4dd45202d7db2900011f532f3f672603aa571bb21e9befefec4c7b4b18083bee3eacd3a687cf6959cc53a337fd0fc3bf1942f9a9d4be176331323290df28cf4c157585e2acae3eb1658011550ff51549cf3f47b665af09446cc387b68a0d2fb6c609c54bf515fe6a5bd39b06d4d3bcc7a354118dbeb270d275be47d76af21072fbf1e8f9f0134b73f3ad950753e70afaa77d223f716146d0800ade86c3e74f8b9983f67bac651a2cbd7e28239812a508448c3220213bfda79f3d5f5262c57aa84b6db976bd1ae5172835a6c33c60276f6f60dcf75be001f7af46940b57701dd46cfcfdfaca86134b3097a39b0277467d82743779d4a19400ea8c487a743cfd49d535587e8dcce34ac470e5734cee46f8b08ef44fc4b8d02d75132aa576364b17db2c75a89f007dd1ca92ff4e4307714175c4288bc1dee75695667d0c6903346a8fc910e8a9380cf11ace63955dd07106b66b00e307651c74233ddd1d06a759cf143c495720a0621135f4c53bb54560cd221e4212166a6d7981f7ba5ede0d435d37fc7a346418ebc0319152eeaf0c148805fdcd647f789c387593d33e22f4ed9f311a5b14938e08994fb70a9cfb0e432c207e4663be5523884353f7bcca1eb66e9b5a76f7aba0dcd71abc54c829d347ec30c2744f6d1a50e940bb60280261054b583d8687f514d53e933946a514d3e6ed2328438f57263a6f7afe48cc66fd5afbe31c63c812d608f7dd3fced6e479772fe448b7365a91083e5a60f4dfd32b6e0fce820cc832e54544e44b63b5eafaca1c006b54152411eb5ebf1084173165206893cedbc0ffc85a21612ffcaf019097bc7cd599e2f2954bbba44672f8ce815dbedb086ed7bf31661d94776d1d852dab04272fef67f2108f4f5db13fdd43f1349e79f5c4cae180c439cc252eb86ea2cd5d9f30a54ff37b7b1cf3632231177e5929fe8be07a13be2a01b887e9e234383dbdde79d0c1c49cd3755dd66d95a92bc40935e5c93b79bcbf7f5bdf59cb8f86e659c3ace835a91b7252956194bebb3a4642dd18bb6563b98d4497d5c2b4100c5cadc87a7df7e83be4554871c00a8c645f807019a4f0f57253f8eda322e0de0c059f87163d8404107da7343c91309c5f21c39d9ebe745040a8307401233140fa9add70aa7a67a834dcf58b7957bb2508ce3718fd661f9c385d1bf662ac878f77e2a2dcca47b06294c944aeaaaa71ecfed96df2d55426afd6df102b89babfe615790e4dd05832908f5edb30bf1ce354d04587319dd88e6770e15ae15dff83e5b532a963a28085a8c9d6599f493198bca20c5c27b0184f87006d95ea56f9800188840f95fe6ee7df30334e3e96a5ef8a8d0752fa28d0f16127ad0869221123da0af8e72878f8e0a6e6364176163e38d9d3e31d563de14c4d95dca4e3e75043cbcfc34b40ab7d3bde00f203d76a14e4a8feac8ec7248f1186f1d5340c530ebc18d0907ffeb77d624519fa974be55fecff947ba1fafe0de925e1e797648805bb04e34b528511ee2c8fa029e8ebd42926934645f21bf6326f7c7e726f2fd21f6c8e0cf5f1605c8dbe46d7a7d71a3e2e1385ea72c5bf40935a866b8ba6847c808eea632ebeb5a90baeb7b714397020698dea5525479059988b17d5d44326947406dd1eec45f286b2fca053cea16b667530e8051dc5773f63804e02eb38899cf93228535e8932c0920be4d3bb11dc5c4fc7015f47601803d62e19454ec7c5abb32a1d36922f82ea8fc201f0760bbaa90055150ea971dcec42da606b1f0266a4ceacdaa631834dfc8dd4c7c8b1d008051967c125f9c1d6202590fa0802aa8ac14d481ce6bc8b0798e554ad5a66320b7ae8b7e7ddd9c665c8f2f61f04985676a4b1ef73e5ee3e4de233b70598337df8f946c0f54b26296a417751e61ce4c1beae893a33eff30e6d99ee1baa61d3bbe1efdcabd0ed8c660b044c83309acf947a3c1f0d208a89fadbfdc5976a0412bfe216ad1ded0c27cb5d741e5bee60e7893b9452aa87853296f20ac041c0f4cb5fbc7e4f9a0eac56054358a64e34fd6fc50318ee05a7caa7f990bef0c514174799e2330de53102c1515e86e641e1c4e3e79b961c36dd7a6d9430703666bd78217e87e18f07fb62bdc4cc5a78f733e34b5869b92ce50a47b70c145d72eaa337c4bf4c983d8a4fe7035833664b15d4345e9b2601861af046348ebf450805c02e5741402fb1d7d62438b6b3d789467b5b63cf551c9dc3c2dfc4023e5da899dd55460e6db5dc8bc35702447c2e2e804ce13c1765483c1290b99666d4e87d5552d81fbc2cd3923138e07eba32fdaa750c8095df0fefacf57b616d8a1d8867919c2b311a7ada291ea19c2b83f8e9e6ea78519b7747e8d1b101395facdd4ba1adfc1848d35e65bae6f0cc784d8c257a3dbf3264fa32dbeadea6049eb662d016ed26dcd48a03322c73ef1a90673a241976309fbdcb1563c2f84960c177fa69349ef8f5fe53080423078b03c2fdedc9fc4e3c92bb4813fbe76d26e8a7af4a7e57194a0184b6bedeea14ea270d2f4b77ddc0ed8f6f4e5b46cb65deae703518c57130e890453bf875c9877938a74c929573224a0ef51cedf45ace0e6954baa1429a8a37f1671d785572b2d16b51a1ef80380904fc57acb33b61b731f4da50400a03f649fdb1441c7eb0fe37897a6d87fa78785e5483aa7d791caf18f46b8552175158cf72b2a05af8a793d25528d253107f86963481a7bf2bca9c038fdb79662ba0ec82accf94708ea8c7fc2762c9ee559d87cae1d90781e79feed5e3dbe6e77b40259e93ee46ea0e87bbcc336aa9bbae534787f5704fc6233f4dfe78156b64ffbc837b435e9fe2c381af05702c1eeb18c523ffe07e39e85bafaa8cbd99b508ae0abc4207f278c66396f6197ceeea08f0cd8c16bac788cfade492df92219eee3b3cf2d834285281692bfc689fffcebbff0652f4cc78e0d115aba602e7ccd8bdc8fc319a6b8d7cfd7cfb5530cb2d2015193acd6d824ad0d6a43b7cfa897766fe616bdb41c9bca444f0c6b19e354d0db68b1fd82ba899d846a398a0456c183ab290ff39a6b595c3d92e51f3d450ab1e5ddc5ecdb4324208bdf8bb697397586630fca95cdbdc43ee5d9cb68ef306d458a895acedcdbfc334ddada13980938e37b16caaf05fe99e06da1419d8ce539e0de491f04da53373fd369603031d3abe88322240f072b810ea2aef41e1e92afc0d544bea35d517bba688b37582e9641d096a8dc6c23b48b4dc9ea3419f77040b25da83ebcaefa7012454b0423dfab83250bb1fdef368eb44cbbafb21d3ac6ffa5cc207b26d9195003eb64361755c2917f938f09eff48f22081e5f51c37a9c4e5baa1b91738c456b3a178e5e9213dd77b789f6c3285cff23909afc1b926a408b9c3dddb22596bb11717ea0f56a45f0f6a66d328bb086971e3924e0f2a12d8edb9abd026b24a489cd182b833fc5f5c280a4c61f76695bf1b4fba5e2faa8cd4c53847e76805ad593389f62abe53e883ce561462ab8cf5eb7f04e0b28dacd8c3fb0015322ae40844e2941b7ff6c431cd3ad9f02535eabfc058d4cdf5dd2ad659450c1198b1a9d724f460cf16f48c4571c5a36339f5376de1a4ab2c34307a72aa4c2e0c5f081490a3154f36c43e91168253ebf2a11aa88a5dddedeb33db6b0e706561edfe0e6665e9d93a0beefa481f4cc1db5e5c7e8b2db1f035e20137f367e688480312fe139de0c72b08dc94a0a8f44279ee69ac76593fb6ce7a040fdb039d2bc183696df9493f967a08b6935398b9c5a6a8ff1acdfb8d93039881160cbe445fdd2665da7bb0d4e252b4a7fab62cfaa5c57674cc584db6d618cefeb3892d2a8a4820669cc5d41809eb265f99aca5164c2b36a95344467615d8cee7f170f21dd0db0da08284b79e84584a834b2ef245db36b3a631648abdd9a66d4ad1e99881785836cc84039ef1026091c5b1479d6db1ab3d0d420d84b468e3bd6bcd83804b451d4cf9e5e3052ca4d888dad56afb053883e07809f8737a411b294add16606a2060cf8491674dbdd0db238236df88482fee94103fffd91df9c464fa2fdb324a49cf30a946b360446c96bd9677badccb0392b290d9c14fe694a3caab1d3318ad006853715577650141da222a464cd6bbd07c7ca34761613484623403d7660008b32169afb1885f908ed2badce38c68e85c59161604d9c3a2f46337aac33160f1df6067308b051ca36a7791b4e8d5c704a502e88c992194c651129ae719bf50aed0100911ccacaff78e2cc2dd3d95cf018836af365c8aed288116a75aae5e07dffe8706da587bad268f5c5ea1473045c08cc5ba2e3319c2b941bdbec1703e1c63a5f993a513f067b83d5e0d7cbeb6064ea25980f885dbce8530848a1686ae2df6064eb60b5c113c560e5d9b200e0ee39a441186056e5127a5919dd101ac0d39cd55408745b91724cd7ec8da5987754cf7eead0826e1b39504f099cbee10e96429fa10f1bba469646435ca68083d34b66b98f30a6e19dfd443ee2c0dfe9655bd3c1dbe7b8b09ac4a3b6f8f502f4cf7b3c2e3117ee83adf394fc671d4f1cf4a72f1315f6c152aa2ba8acdfd3fcc4a6c26a36bcdc914a6e544d271e47ca08fec73f3c6296b5586e2612b405ac82e3bb1781655780f23dfc73a43fb26aed9ea", 0x1000}], 0x4, 0x1f5d, 0x6, 0xc) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000001c80)) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000001cc0)) r5 = open(&(0x7f0000001d40)='./file0\x00', 0x4c00, 0x50) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f0000001d80)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x38, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008800}, 0x800) ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000001f00)={0x5, 0xef, 0xe}) listen(r3, 0x3) tkill(0x0, 0x29) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000001f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = syz_clone(0x2000, &(0x7f0000002180)="52e98494bcb25c0dd9e6558d6a65fb6984d5b6344b58f29033944c631c0d5f735b1ef09e4f681d22aea91224cac784e7c5e4d3c065ad20e40c3861b9baf609eabdb8f25ee35563eb95322bc9d76b10be678ffa4f8602f6ea63e5e50df06ff2041c7f24540238e3e9526de6edfd0c2f43f0135b5117edf42cb2f788d1aeb0490bda2d11f558752fa99a3a9d78319f153fb172183410d61085769f94af3bdebd19969fe690b7cdb319", 0xa8, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)="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") kcmp$KCMP_EPOLL_TFD(r7, 0xffffffffffffffff, 0x7, r3, &(0x7f00000032c0)={r5, r5, 0x5f58e85a}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r5) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000003440)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x4c, r8, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1aa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x810) bind$netlink(r0, &(0x7f0000003480)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000003640)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003600)={&(0x7f0000003540)={0xbc, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x905}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe9f3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2000c080}, 0x800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003680)) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f00000036c0)) 39.85352594s ago: executing program 1 (id=5892): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x5, 0xffffffff}, {0xb, 0x5}]}}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) syz_usb_disconnect(0xffffffffffffffff) close(r4) close_range(r1, 0xffffffffffffffff, 0x0) 37.921945418s ago: executing program 9 (id=5893): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f00000001c0)=[0x7fff, 0x1]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000086000040"]) unshare(0x22020400) close_range(r1, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 37.468650676s ago: executing program 7 (id=5894): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1000, 0x0, 0x0, 0xa, 0x60, 0x0, 0xc}, 0xfffffffe}, [@migrate={0x50, 0x11, [{@in6=@empty, @in6=@rand_addr=' \x01\x00', @in6=@loopback, @in=@loopback, 0x3c, 0x0, 0x0, 0x6, 0x8, 0x2}]}]}, 0xa0}}, 0x0) r2 = dup3(r1, r0, 0x80000) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000000)=[@exit_looper], 0x0, 0x0, 0x0}) ioctl$FIOCLEX(r0, 0x5451) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x60, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffdcc, 0x0, 0x0, 0x0}, 0x400}, @increfs={0x40046304, 0x80}], 0x55, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"}) write$P9_RVERSION(r2, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x100, 0x8, '9P2000.u'}, 0x15) 34.531379994s ago: executing program 0 (id=5895): openat$random(0xffffffffffffff9c, &(0x7f0000000c80), 0x181, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x5, 0x2012, r0, 0x5401000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00000ee000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) open(0x0, 0x1a1342, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x57, 0x8004, 0x0, 0xffffff98) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x44000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 30.940956154s ago: executing program 9 (id=5896): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r3}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r4, 0x0, 0x44000080) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000780)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1800, 0x0, 0x2, 0x1}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) getsockname(r4, &(0x7f0000000200)=@phonet, &(0x7f0000000180)=0x80) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) clock_settime(0x0, &(0x7f0000000100)={0x0, 0x3938700}) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') preadv(r7, &(0x7f0000000500)=[{&(0x7f0000000340)=""/132, 0x84}, {&(0x7f00000005c0)=""/107, 0x6b}, {&(0x7f0000000400)=""/116, 0x74}], 0x3, 0x9, 0xa84) mmap$binder(&(0x7f000027a000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0xfffffffffffffffe) close_range(r0, 0xffffffffffffffff, 0x0) 28.129918739s ago: executing program 7 (id=5897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$tcp_mem(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00091000000007fa8294d4fb1cf6c33320914eb8510314e654fe45f3deea22fe005cf7725f4bbe1be140b6aaec90131df4c6749d71ac6649d86a1c1c8d456c3b95b26e916cf8a75f31a659ce6033f8"], 0x0, 0x0, 0x0}, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x19000, 0x1}) r4 = socket(0x28, 0x5, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x101, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 18.601891455s ago: executing program 40 (id=5892): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x5, 0xffffffff}, {0xb, 0x5}]}}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) syz_usb_disconnect(0xffffffffffffffff) close(r4) close_range(r1, 0xffffffffffffffff, 0x0) 6.856553815s ago: executing program 41 (id=5896): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r3}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r4, 0x0, 0x44000080) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000780)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1800, 0x0, 0x2, 0x1}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) getsockname(r4, &(0x7f0000000200)=@phonet, &(0x7f0000000180)=0x80) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) clock_settime(0x0, &(0x7f0000000100)={0x0, 0x3938700}) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') preadv(r7, &(0x7f0000000500)=[{&(0x7f0000000340)=""/132, 0x84}, {&(0x7f00000005c0)=""/107, 0x6b}, {&(0x7f0000000400)=""/116, 0x74}], 0x3, 0x9, 0xa84) mmap$binder(&(0x7f000027a000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0xfffffffffffffffe) close_range(r0, 0xffffffffffffffff, 0x0) 3.850015784s ago: executing program 42 (id=5897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$tcp_mem(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00091000000007fa8294d4fb1cf6c33320914eb8510314e654fe45f3deea22fe005cf7725f4bbe1be140b6aaec90131df4c6749d71ac6649d86a1c1c8d456c3b95b26e916cf8a75f31a659ce6033f8"], 0x0, 0x0, 0x0}, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x19000, 0x1}) r4 = socket(0x28, 0x5, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x101, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 43 (id=5895): openat$random(0xffffffffffffff9c, &(0x7f0000000c80), 0x181, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x5, 0x2012, r0, 0x5401000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00000ee000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) open(0x0, 0x1a1342, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x57, 0x8004, 0x0, 0xffffff98) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x44000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) kernel console output (not intermixed with test programs): v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.8-1/input0 [ 446.543235][ T9] usbhid 10-1:1.0: can't add hid device: -71 [ 446.566008][ T9] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 446.567246][ T1548] hid-led 0003:27B8:01ED.0031: ThingM blink(1) initialized [ 446.583172][ T9] usb 10-1: USB disconnect, device number 8 [ 446.736398][T17051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.745021][T17051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.756502][ T1548] usb 9-1: USB disconnect, device number 8 [ 446.990764][T17095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 446.991084][T17095] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 446.997629][T17095] rust_binder: Read failure Err(EFAULT) in pid:1217 [ 447.012981][T17096] tc_dump_action: action bad kind [ 447.013048][T17095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 447.033773][T17095] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 447.087023][ T36] audit: type=1400 audit(1758475607.872:53024): avc: denied { execute } for pid=17099 comm="syz.6.5397" path="/proc/1219/task/1220/net/fib_trie" dev="proc" ino=4026533236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 447.165956][T17106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:81 [ 447.185966][T17110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 447.202334][T17104] binder: Unknown parameter 'defcontext01777777777777777777777' [ 447.236043][ T36] audit: type=1400 audit(1758475608.022:53025): avc: denied { nlmsg_tty_audit } for pid=17112 comm="syz.9.5403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 447.287110][T17125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.295764][T17125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.511991][T17151] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5414'. [ 447.521071][ T1026] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 447.521261][T17151] binder: Bad value for 'stats' [ 447.534542][T17151] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5414'. [ 447.534695][T17152] binder: Bad value for 'stats' [ 447.672176][ T1026] usb 10-1: unable to get BOS descriptor or descriptor too short [ 447.682205][ T1026] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.692514][ T1026] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.703622][ T1026] usb 10-1: string descriptor 0 read error: -22 [ 447.709897][ T1026] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.719170][ T1026] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.729563][ T1026] usb 10-1: 0:2 : does not exist [ 447.810765][ T9] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 447.933219][ T1026] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 447.944543][ T1026] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5) [ 447.952262][ T9] usb 7-1: device descriptor read/64, error -71 [ 447.960451][ T1026] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 447.970359][ T1026] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 447.981549][ T1026] usb 10-1: USB disconnect, device number 9 [ 448.190808][ T9] usb 7-1: device descriptor read/64, error -71 [ 448.313761][T17169] rust_binder: Write failure EINVAL in pid:225 [ 448.401334][ T36] audit: type=1400 audit(1758475609.192:53026): avc: denied { setattr } for pid=17180 comm="syz.7.5423" name="/" dev="incremental-fs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.431457][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 448.570773][ T9] usb 7-1: device descriptor read/64, error -71 [ 448.631652][T17194] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 448.639020][T17194] rust_binder: Write failure EINVAL in pid:99 [ 448.810773][ T9] usb 7-1: device descriptor read/64, error -71 [ 448.866087][T17208] rust_binder: 102: no such ref 0 [ 448.871293][T17208] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 448.871331][T17208] rust_binder: Read failure Err(EFAULT) in pid:102 [ 448.930888][ T9] usb usb7-port1: attempt power cycle [ 448.931585][T17210] netlink: 1363 bytes leftover after parsing attributes in process `syz.8.5433'. [ 449.270776][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 449.291800][ T9] usb 7-1: device descriptor read/8, error -71 [ 449.421972][ T9] usb 7-1: device descriptor read/8, error -71 [ 449.660825][ T9] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 449.681837][ T9] usb 7-1: device descriptor read/8, error -71 [ 449.821881][ T9] usb 7-1: device descriptor read/8, error -71 [ 449.850853][ T330] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 449.930902][ T9] usb usb7-port1: unable to enumerate USB device [ 450.000777][ T330] usb 10-1: Using ep0 maxpacket: 16 [ 450.007281][ T330] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 450.016242][ T330] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.026477][ T330] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 450.035655][ T330] usb 10-1: config 1 has no interface number 1 [ 450.041891][ T330] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 450.054805][ T330] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.069304][ T330] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 450.078493][ T330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.086626][ T330] usb 10-1: Product: syz [ 450.090984][ T330] usb 10-1: Manufacturer: syz [ 450.095686][ T330] usb 10-1: SerialNumber: syz [ 450.302762][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5435'. [ 450.363291][T17219] overlayfs: statfs failed on './file0' [ 450.374238][ T330] usb 10-1: USB disconnect, device number 10 [ 450.481980][T17225] __vm_enough_memory: pid: 17225, comm: syz.8.5437, bytes: 18014402804453376 not enough memory for the allocation [ 450.504898][T17227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 450.900570][T17239] netlink: 'syz.9.5442': attribute type 4 has an invalid length. [ 450.914842][T17239] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.5442'. [ 450.925004][T17239] input: syz0 as /devices/virtual/input/input36 [ 450.934712][T17239] rust_binder: Error while translating object. [ 450.934761][T17239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 450.941127][T17239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 450.970826][ T9] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 451.131973][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.143575][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 451.154553][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 451.164376][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 451.177555][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.186654][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.195396][ T9] usb 7-1: config 0 descriptor?? [ 451.250749][ T65] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 451.402402][ T65] usb 10-1: not running at top speed; connect to a high speed hub [ 451.411077][ T65] usb 10-1: config 7 has an invalid interface number: 93 but max is 0 [ 451.419301][ T65] usb 10-1: config 7 has no interface number 0 [ 451.425563][ T65] usb 10-1: config 7 interface 93 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 451.436653][ T65] usb 10-1: config 7 interface 93 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 451.447863][ T65] usb 10-1: config 7 interface 93 altsetting 128 has an endpoint descriptor with address 0x6B, changing to 0xB [ 451.459650][ T65] usb 10-1: config 7 interface 93 altsetting 128 endpoint 0xB has invalid maxpacket 991, setting to 64 [ 451.470743][ T65] usb 10-1: config 7 interface 93 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 451.482023][ T65] usb 10-1: config 7 interface 93 has no altsetting 0 [ 451.490581][ T65] usb 10-1: New USB device found, idVendor=10ce, idProduct=ea6a, bcdDevice=55.6a [ 451.499874][ T65] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.508149][ T65] usb 10-1: Product: syz [ 451.512555][ T65] usb 10-1: Manufacturer: syz [ 451.517383][ T65] usb 10-1: SerialNumber: syz [ 451.600803][ T331] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 451.609708][ T9] plantronics 0003:047F:FFFF.0032: ignoring exceeding usage max [ 451.619033][ T9] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving [ 451.628313][ T9] plantronics 0003:047F:FFFF.0032: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 451.750785][ T331] usb 9-1: Invalid ep0 maxpacket: 16 [ 451.791313][T17248] rust_binder: 17247 RLIMIT_NICE not set [ 451.881086][ T331] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 452.040771][ T331] usb 9-1: Invalid ep0 maxpacket: 16 [ 452.046339][ T331] usb usb9-port1: attempt power cycle [ 452.390763][ T331] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 452.411157][ T331] usb 9-1: Invalid ep0 maxpacket: 16 [ 452.525099][ T9] rust_binder: 0: removing orphan mapping 0:24 [ 452.541109][ T331] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 452.561119][ T331] usb 9-1: Invalid ep0 maxpacket: 16 [ 452.566651][ T331] usb usb9-port1: unable to enumerate USB device [ 453.050791][ T338] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 453.200968][ T338] usb 9-1: Invalid ep0 maxpacket: 16 [ 453.204855][T17258] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 453.213571][T17258] rust_binder: Write failure EINVAL in pid:254 [ 453.330768][ T338] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 453.490773][ T338] usb 9-1: Invalid ep0 maxpacket: 16 [ 453.496341][ T338] usb usb9-port1: attempt power cycle [ 453.681170][ T9] usb 7-1: USB disconnect, device number 60 [ 453.798539][T17267] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5451'. [ 453.840769][ T338] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 453.863403][ T338] usb 9-1: Invalid ep0 maxpacket: 16 [ 453.865104][T17272] cgroup: Need name or subsystem set [ 453.876917][T17272] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 453.876949][T17272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 453.990828][ T338] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 454.020272][ T65] usb 10-1: USB disconnect, device number 11 [ 454.023509][ T338] usb 9-1: Invalid ep0 maxpacket: 16 [ 454.034411][ T338] usb usb9-port1: unable to enumerate USB device [ 454.113544][T17293] binder: Bad value for 'defcontext' [ 454.119458][T17293] binder: Bad value for 'defcontext' [ 454.136249][T17298] tipc: Enabling of bearer rejected, already enabled [ 454.276151][ T36] audit: type=1326 audit(1758475615.062:53027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17307 comm="syz.6.5464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c5e38ec29 code=0x0 [ 454.423499][T17314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 454.423712][T17314] rust_binder: Failed copying remainder into alloc: EFAULT [ 454.430227][T17314] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 454.437641][T17314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 454.446207][T17314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:123 [ 454.486086][T17318] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 454.502649][T17318] rust_binder: 128: no such ref 2 [ 454.507740][T17318] rust_binder: 128: no such ref 2 [ 454.537178][T17322] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 454.554271][ T36] audit: type=1400 audit(1758475615.342:53028): avc: denied { append } for pid=17317 comm="syz.8.5466" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 454.584627][T17326] loop4: detected capacity change from 0 to 8388608 [ 454.676400][T17330] rust_binder: 17329 RLIMIT_NICE not set [ 454.676595][T17329] rust_binder: Error while translating object. [ 454.682501][T17329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 454.688750][T17329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 454.698506][T17330] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 454.711632][ T338] rust_binder: 17328: removing orphan mapping 0:4224 [ 454.794530][ T36] audit: type=1326 audit(1758475615.582:53029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17340 comm="syz.7.5472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd34238ec29 code=0x0 [ 454.868879][T17342] rust_binder: Failed copying remainder into alloc: EFAULT [ 454.868901][T17342] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 454.876343][T17342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 454.884665][T17342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:145 [ 455.154496][T17345] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 455.224816][T17346] rust_binder: Write failure EINVAL in pid:1277 [ 455.637570][T17354] rust_binder: 279: no such ref 3 [ 455.648981][T17354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 455.775952][ T36] audit: type=1326 audit(1758475616.562:53030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.9.5478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf44d8ec29 code=0x0 [ 455.894680][T17369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 455.948380][T17370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:137 [ 457.713558][T17399] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 457.723606][T17399] rust_binder: Error while translating object. [ 457.730077][T17399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 457.736332][T17399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1300 [ 457.758306][T17401] rust_binder: 17401 RLIMIT_NICE not set [ 457.767828][T17401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 457.773621][T17401] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender. [ 457.783159][T17401] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1302 [ 457.799502][ T355] rust_binder: 17400: removing orphan mapping 0:1048 [ 457.820776][ T1548] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 457.892489][T17409] rust_binder: 17408 RLIMIT_NICE not set [ 457.898607][ T355] rust_binder: 17407: removing orphan mapping 0:4120 [ 458.329920][T17424] No source specified [ 458.350536][T17429] netlink: 'syz.9.5498': attribute type 4 has an invalid length. [ 458.473388][T17434] binder: Unknown parameter '18446744073709551615' [ 458.576619][T17449] SELinux: policydb version 2134819135 does not match my version range 15-33 [ 458.585901][T17449] SELinux: failed to load policy [ 458.782646][T14659] tipc: Resetting bearer [ 458.808177][T14659] tipc: Disabling bearer [ 459.153674][T17477] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.160971][T17477] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.168349][T17477] bridge_slave_0: entered allmulticast mode [ 459.175068][T17477] bridge_slave_0: entered promiscuous mode [ 459.181847][T17477] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.188929][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.196506][T17477] bridge_slave_1: entered allmulticast mode [ 459.202932][T17477] bridge_slave_1: entered promiscuous mode [ 459.263630][T17477] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.270769][T17477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.278059][T17477] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.285211][T17477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.308401][T15913] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.315983][T15913] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.332550][T15915] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.339688][T15915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.349257][T15915] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.356395][T15915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.384579][T17477] veth0_vlan: entered promiscuous mode [ 459.396984][T17477] veth1_macvtap: entered promiscuous mode [ 459.458796][T17496] overlay: Bad value for 'redirect_dir' [ 459.590834][ T331] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 459.710808][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 459.762007][ T331] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.773286][ T331] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.783671][ T331] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 459.792917][ T331] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.802863][ T331] usb 10-1: config 0 descriptor?? [ 459.862123][ T9] usb 2-1: config 0 has an invalid descriptor of length 29, skipping remainder of the config [ 459.872675][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 459.883228][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=d3.17 [ 459.892376][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.900407][ T9] usb 2-1: Product: syz [ 459.904651][ T9] usb 2-1: Manufacturer: syz [ 459.909272][ T9] usb 2-1: SerialNumber: syz [ 459.914878][ T9] usb 2-1: config 0 descriptor?? [ 460.123842][T17498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17498 comm=syz.1.5521 [ 460.215823][ T331] hid-led 0003:27B8:01ED.0033: probe with driver hid-led failed with error -71 [ 460.231883][T17504] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 460.240468][ T331] usb 10-1: USB disconnect, device number 12 [ 460.276805][ T45] usb 2-1: USB disconnect, device number 26 [ 460.320567][T17508] rust_binder: Error while translating object. [ 460.320611][T17508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 460.327248][T17508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 460.339512][T17509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 460.512172][T17516] syzkaller0: entered promiscuous mode [ 460.524554][T17516] syzkaller0: entered allmulticast mode [ 460.617851][T17523] netlink: 'syz.8.5529': attribute type 5 has an invalid length. [ 460.631131][T17523] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.5529'. [ 461.010808][ T45] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 461.161534][ T45] usb 10-1: Using ep0 maxpacket: 8 [ 461.168003][ T45] usb 10-1: config 162 has an invalid interface number: 79 but max is 1 [ 461.176614][ T45] usb 10-1: config 162 has an invalid interface number: 183 but max is 1 [ 461.185225][ T45] usb 10-1: config 162 has an invalid descriptor of length 92, skipping remainder of the config [ 461.195915][ T45] usb 10-1: config 162 has no interface number 0 [ 461.202436][ T45] usb 10-1: config 162 has no interface number 1 [ 461.208787][ T45] usb 10-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 461.222025][ T45] usb 10-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 461.233096][ T45] usb 10-1: config 162 interface 183 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 461.246653][ T45] usb 10-1: config 162 interface 79 has no altsetting 0 [ 461.253839][ T45] usb 10-1: config 162 interface 183 has no altsetting 0 [ 461.262302][ T45] usb 10-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 461.271642][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.279762][ T45] usb 10-1: Product: syz [ 461.284219][ T45] usb 10-1: Manufacturer: syz [ 461.288918][ T45] usb 10-1: SerialNumber: syz [ 461.497443][ T45] pl2303 10-1:162.79: required endpoints missing [ 461.504965][ T45] pl2303 10-1:162.183: required endpoints missing [ 461.512419][ T45] usb 10-1: USB disconnect, device number 13 [ 461.604002][T17558] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 461.613342][T17558] rust_binder: Write failure EINVAL in pid:22 [ 461.632586][T17562] netlink: 'syz.1.5539': attribute type 4 has an invalid length. [ 461.646467][T17562] netlink: 'syz.1.5539': attribute type 5 has an invalid length. [ 461.654257][T17562] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.5539'. [ 461.950814][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 462.088923][T17583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 462.089302][T17583] rust_binder: Error while translating object. [ 462.095844][T17583] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 462.102277][T17583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 462.112262][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.112465][T17583] rust_binder: 17582 RLIMIT_NICE not set [ 462.121986][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 462.136023][T17582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 462.138600][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.147819][T17582] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 462.161605][ T9] usb 2-1: config 0 descriptor?? [ 462.165316][T17582] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:298 [ 462.270770][ T355] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 462.430748][ T355] usb 10-1: Using ep0 maxpacket: 8 [ 462.437000][ T355] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 462.446427][ T355] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.455205][ T355] usb 10-1: config 0 descriptor?? [ 462.581097][ T9] wacom 0003:056A:0015.0034: unknown main item tag 0x0 [ 462.588338][ T9] wacom 0003:056A:0015.0034: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 462.598491][ T9] wacom 0003:056A:0015.0034: hidraw0: USB HID v9.14 Device [HID 056a:0015] on usb-dummy_hcd.1-1/input0 [ 462.610594][ T9] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0015.0034/input/input37 [ 462.627048][ T9] usb 2-1: USB disconnect, device number 27 [ 462.661317][ T355] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 462.680974][ T1631] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 462.681990][T15956] Bluetooth: hci0: command 0x1003 tx timeout [ 462.803428][ T36] audit: type=1400 audit(1758475623.592:53031): avc: denied { relabelfrom } for pid=17587 comm="syz.8.5548" name="" dev="pipefs" ino=98454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 463.299991][T17593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5550'. [ 463.433937][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5554'. [ 463.443861][T17601] rust_binder: Fixups oob 165 172 361 173 [ 463.443880][T17601] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 463.449846][T17601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 463.458280][T17601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 463.480593][T17603] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 463.502613][T17605] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 463.517844][T17605] rust_binder: Write failure EINVAL in pid:51 [ 463.736848][T17616] usb usb8: usbfs: process 17616 (syz.8.5560) did not claim interface 0 before use [ 463.760776][ T45] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 463.763838][T17616] fuse: Bad value for 'fd' [ 463.805879][T17621] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.848035][T17625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.854796][T17625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 463.930733][ T45] usb 2-1: device descriptor read/64, error -71 [ 464.029506][ T355] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 464.047145][ T355] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 464.058730][ T355] asix 10-1:0.0: probe with driver asix failed with error -71 [ 464.067522][ T355] usb 10-1: USB disconnect, device number 14 [ 464.113706][T17638] rust_binder: 229: no such ref 0 [ 464.118959][T17637] rust_binder: 229: no such ref 3 [ 464.124141][T17638] rust_binder: Write failure EINVAL in pid:229 [ 464.124265][T17637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229 [ 464.210771][ T45] usb 2-1: device descriptor read/64, error -71 [ 464.237826][T17651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 464.238155][T17650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8209 sclass=netlink_route_socket pid=17650 comm=syz.9.5571 [ 464.257938][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 464.263020][T17650] rust_binder: Error while translating object. [ 464.265667][T17650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 464.272097][T17650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:242 [ 464.308177][T17653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:245 [ 464.390780][T17662] rust_binder: 17662 RLIMIT_NICE not set [ 464.420760][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 464.432719][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.443990][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 464.457757][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 464.463712][ T1548] rust_binder: 17661: removing orphan mapping 0:1024 [ 464.466854][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.476156][ T45] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 464.495590][ T9] usb 9-1: config 0 descriptor?? [ 464.546171][T17666] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 464.546208][T17666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 464.546366][T17665] rust_binder: 17664 RLIMIT_NICE not set [ 464.563829][T17666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:256 [ 464.569847][T17664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:256 [ 464.630817][ T45] usb 2-1: device descriptor read/64, error -71 [ 464.830818][ T330] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 464.880824][ T45] usb 2-1: device descriptor read/64, error -71 [ 464.982002][ T330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.993279][ T330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.003506][ T45] usb usb2-port1: attempt power cycle [ 465.009046][ T330] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 465.018829][ T330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.027850][ T330] usb 10-1: config 0 descriptor?? [ 465.050377][ T338] rust_binder: 17581: removing orphan mapping 0:4248 [ 465.114305][T17672] netlink: 'syz.7.5578': attribute type 2 has an invalid length. [ 465.350790][ T45] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 465.372097][ T45] usb 2-1: device descriptor read/8, error -71 [ 465.498951][T17673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.503852][ T45] usb 2-1: device descriptor read/8, error -71 [ 465.508203][T17673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.740773][ T45] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 465.761791][ T45] usb 2-1: device descriptor read/8, error -71 [ 465.835835][ T330] hid-led 0003:27B8:01ED.0035: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.9-1/input0 [ 465.852783][ T330] hid-led 0003:27B8:01ED.0035: ThingM blink(1) initialized [ 465.892056][ T45] usb 2-1: device descriptor read/8, error -71 [ 465.907227][T17677] rust_binder: 305: no such ref 3 [ 465.912429][T17677] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 465.919557][T17677] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 465.926774][T17677] rust_binder: Write failure EFAULT in pid:305 [ 465.937119][T17680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 465.972679][T17683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 465.987282][ T36] audit: type=1400 audit(1758475626.772:53032): avc: granted { setsecparam } for pid=17681 comm="syz.7.5581" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 466.006841][ T45] usb usb2-port1: unable to enumerate USB device [ 466.015129][ T36] audit: type=1400 audit(1758475626.802:53033): avc: granted { setsecparam } for pid=17681 comm="syz.7.5581" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 466.015284][T17682] rust_binder: Error in use_page_slow: ESRCH [ 466.034819][T17682] rust_binder: use_range failure ESRCH [ 466.038115][ T355] usb 10-1: USB disconnect, device number 15 [ 466.043071][T17682] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 466.052890][T17682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 466.060933][T17682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:310 [ 466.547307][T17691] fuse: Unknown parameter 'grÿp_id' [ 467.007734][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 467.015358][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 467.029847][ T9] usb 9-1: USB disconnect, device number 19 [ 467.063464][T17707] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 467.142664][T17707] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 467.149304][T17707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191 [ 467.149327][T17708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:191 [ 467.220832][ T65] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 467.330543][T17725] rust_binder: 202: no such ref 3 [ 467.336310][T17725] rust_binder: Read failure Err(EAGAIN) in pid:202 [ 467.358349][T17728] binder: Unknown parameter 'ÿ00000000000000000000004' [ 467.380757][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 467.387176][ T65] usb 2-1: config index 0 descriptor too short (expected 548, got 36) [ 467.395443][ T65] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 467.405279][ T65] usb 2-1: config 0 has no interface number 0 [ 467.411452][ T65] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 467.421373][ T65] usb 2-1: config 0 interface 41 altsetting 2 has an endpoint descriptor with address 0x94, changing to 0x84 [ 467.432987][ T65] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 467.442961][ T65] usb 2-1: config 0 interface 41 has no altsetting 0 [ 467.451147][ T65] usb 2-1: New USB device found, idVendor=0fe6, idProduct=0002, bcdDevice= 0.00 [ 467.460209][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.468281][ T65] usb 2-1: Product: syz [ 467.472617][ T65] usb 2-1: Manufacturer: syz [ 467.477310][ T65] usb 2-1: SerialNumber: syz [ 467.483289][ T65] usb 2-1: config 0 descriptor?? [ 467.488593][T17696] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 467.497688][T17696] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 467.514968][T17743] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 467.522766][T17743] rust_binder: Write failure EINVAL in pid:334 [ 467.532963][T17745] rust_binder: Failed copying remainder into alloc: EFAULT [ 467.539243][T17745] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 467.546965][T17745] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 467.555402][T17745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:336 [ 467.598657][ T36] audit: type=1326 audit(1758475628.382:53034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17752 comm="syz.9.5604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf44d8ec29 code=0x0 [ 467.672212][T17759] rust_binder: Write failure EINVAL in pid:270 [ 467.723353][T17761] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 468.206353][T17775] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 468.290371][T17785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 468.295029][T17785] rust_binder: Read failure Err(EAGAIN) in pid:230 [ 468.302072][T17785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 468.321599][T17787] rust_binder: Write failure EFAULT in pid:232 [ 468.781283][ T9] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 468.875817][T17797] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 468.929300][T17798] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 468.936177][T17798] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 468.945241][T17798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:239 [ 468.955739][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 468.975437][ T9] usb 10-1: config 3 has an invalid interface number: 39 but max is 1 [ 468.983913][ T9] usb 10-1: config 3 has an invalid interface number: 188 but max is 1 [ 468.992542][ T9] usb 10-1: config 3 has no interface number 0 [ 468.998911][ T9] usb 10-1: config 3 has no interface number 1 [ 469.005762][ T9] usb 10-1: config 3 interface 39 has no altsetting 0 [ 469.012950][ T9] usb 10-1: config 3 interface 188 has no altsetting 0 [ 469.021629][ T9] usb 10-1: New USB device found, idVendor=0781, idProduct=0200, bcdDevice=6f.07 [ 469.031003][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.039221][ T9] usb 10-1: Product: syz [ 469.043839][ T9] usb 10-1: Manufacturer: syz [ 469.048581][ T9] usb 10-1: SerialNumber: syz [ 469.811110][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5616'. [ 469.894537][T17800] netlink: 'syz.8.5616': attribute type 22 has an invalid length. [ 470.062215][ T65] usb 2-1: USB disconnect, device number 32 [ 470.129800][T17808] rust_binder: Write failure EFAULT in pid:62 [ 470.500770][ T65] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 470.623828][T17814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 470.623868][T17814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:348 [ 470.648258][T17816] input: syz0 as /devices/virtual/input/input40 [ 470.661810][ T65] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.682943][ T65] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.709254][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.721827][ T65] usb 2-1: Product: syz [ 470.726155][ T65] usb 2-1: Manufacturer: syz [ 470.733320][ T65] usb 2-1: SerialNumber: syz [ 470.739834][T17818] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 470.740165][T17818] rust_binder: Error while translating object. [ 470.761967][T17818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 470.768466][T17818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:250 [ 470.771878][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5625'. [ 470.824524][T17825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 470.842664][T17825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 470.849393][T17825] rust_binder: Error while translating object. [ 470.856063][T17825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 470.862317][T17825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:253 [ 470.915816][T17835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 471.240782][ T355] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 471.411903][ T355] usb 9-1: config 7 has an invalid interface number: 2 but max is 1 [ 471.420106][ T355] usb 9-1: config 7 has an invalid interface number: 255 but max is 1 [ 471.428584][ T355] usb 9-1: config 7 has no interface number 0 [ 471.435085][ T355] usb 9-1: config 7 has no interface number 1 [ 471.441483][ T355] usb 9-1: config 7 interface 2 has no altsetting 0 [ 471.448766][ T355] usb 9-1: config 7 interface 255 has no altsetting 0 [ 471.456943][ T9] ums-sddr09 10-1:3.39: USB Mass Storage device detected [ 471.466282][ T355] usb 9-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice=fa.dc [ 471.475820][ T355] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.484204][ T355] usb 9-1: Product: syz [ 471.488482][ T355] usb 9-1: Manufacturer: syz [ 471.493127][ T355] usb 9-1: SerialNumber: syz [ 471.502873][ T9] ums-sddr09 10-1:3.188: USB Mass Storage device detected [ 471.511403][T17839] rust_binder: Write failure EFAULT in pid:279 [ 471.562210][ T9] usbhid 10-1:3.188: couldn't find an input interrupt endpoint [ 471.577163][ T9] usb 10-1: USB disconnect, device number 16 [ 471.700130][T17836] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 471.700157][T17836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 471.708288][T17836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:261 [ 471.963230][ T65] cdc_ncm 2-1:1.0: failed to get mac address [ 471.978800][ T65] cdc_ncm 2-1:1.0: bind() failure [ 471.985740][ T65] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 471.993941][ T65] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 472.003753][ T65] usb 2-1: USB disconnect, device number 33 [ 472.336360][T17848] netlink: 600 bytes leftover after parsing attributes in process `syz.9.5632'. [ 472.482440][T17858] binder: Unknown parameter 'fscontext?}' [ 472.498998][T17861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65099 sclass=netlink_route_socket pid=17861 comm=syz.1.5636 [ 472.705077][ T65] rust_binder: 17874: removing orphan mapping 0:1024 [ 472.721674][T17878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:86 [ 472.738567][T17882] overlay: filesystem on ./file1 not supported as upperdir [ 472.768290][T17884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 472.779977][T17886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 472.787136][T17886] rust_binder: Error while translating object. [ 472.793729][T17886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 472.799944][T17886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:94 [ 472.809749][T17887] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 473.070766][ T65] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 473.230738][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 473.237152][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 473.246189][ T65] usb 2-1: config 6 has an invalid interface number: 248 but max is 0 [ 473.254439][ T65] usb 2-1: config 6 has no interface number 0 [ 473.260577][ T65] usb 2-1: config 6 interface 248 has no altsetting 0 [ 473.269001][ T65] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 473.278116][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.286183][ T65] usb 2-1: Product: syz [ 473.290378][ T65] usb 2-1: Manufacturer: syz [ 473.295028][ T65] usb 2-1: SerialNumber: syz [ 473.503886][ T65] ums-karma 2-1:6.248: USB Mass Storage device detected [ 473.532889][ T65] usb 2-1: USB disconnect, device number 34 [ 473.901147][T17900] overlay: ./file0 is not a directory [ 473.937001][ T355] usb 9-1: USB disconnect, device number 20 [ 473.962259][T16070] udevd[16070]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.255/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 474.093823][ T9] rust_binder: 17914: removing orphan mapping 0:4208 [ 474.161242][T17923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 474.161269][T17923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:367 [ 474.197047][T15913] Bluetooth: hci0: Frame reassembly failed (-84) [ 474.270793][ T65] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 474.330799][ T330] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 474.400824][ T65] usb 10-1: device descriptor read/64, error -71 [ 474.483541][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 474.495730][ T330] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 474.509282][T17931] EXT4-fs: Conflicting test_dummy_encryption options [ 474.509429][ T330] usb 2-1: can't read configurations, error -22 [ 474.640774][ T65] usb 10-1: device descriptor read/64, error -71 [ 474.650799][ T330] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 474.750864][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 474.800747][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 474.807434][ T330] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 474.815432][ T330] usb 2-1: can't read configurations, error -22 [ 474.821819][ T330] usb usb2-port1: attempt power cycle [ 474.890814][ T65] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 474.910775][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 474.917238][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.928187][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.938058][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 474.950966][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 474.960041][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.968863][ T9] usb 9-1: config 0 descriptor?? [ 475.020793][ T65] usb 10-1: device descriptor read/64, error -71 [ 475.161359][ T330] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 475.181175][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 475.188133][ T330] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 475.196471][ T330] usb 2-1: can't read configurations, error -22 [ 475.270764][ T65] usb 10-1: device descriptor read/64, error -71 [ 475.330805][ T330] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 475.351194][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 475.358035][ T330] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 475.366301][ T330] usb 2-1: can't read configurations, error -22 [ 475.372741][ T330] usb usb2-port1: unable to enumerate USB device [ 475.380963][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 475.388585][ T65] usb usb10-port1: attempt power cycle [ 475.394664][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 475.402272][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 475.403827][T17934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.409564][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 475.409835][T17934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.419733][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 475.423614][T17935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.429743][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 475.437319][T17934] rust_binder: validate_parent_fixup: new_min_offset=60, sg_entry.length=0 [ 475.443519][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 475.450931][T17934] rust_binder: Error while translating object. [ 475.459561][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 475.466984][T17934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 475.473270][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 475.480557][T17934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 475.489649][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 475.517072][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0036/input/input41 [ 475.536736][ T9] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 475.552017][ T9] usb 9-1: USB disconnect, device number 21 [ 475.740760][ T65] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 475.761950][ T65] usb 10-1: device descriptor read/8, error -71 [ 475.891935][ T65] usb 10-1: device descriptor read/8, error -71 [ 476.130770][ T65] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 476.151980][ T65] usb 10-1: device descriptor read/8, error -71 [ 476.200801][T15956] Bluetooth: hci0: command 0x1003 tx timeout [ 476.200950][ T1631] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 476.283987][ T65] usb 10-1: device descriptor read/8, error -71 [ 476.390882][ T65] usb usb10-port1: unable to enumerate USB device [ 476.986000][T17949] tipc: Started in network mode [ 476.990979][T17949] tipc: Node identity aed57e6a777f, cluster identity 4711 [ 476.998245][T17949] tipc: Enabled bearer , priority 0 [ 477.005109][T17950] tipc: Enabling of bearer rejected, already enabled [ 477.022383][T17949] syzkaller0: entered promiscuous mode [ 477.027963][T17949] syzkaller0: entered allmulticast mode [ 477.033831][T17949] tipc: Resetting bearer [ 477.040776][T17949] tipc: Resetting bearer [ 477.055531][T17949] tipc: Disabling bearer [ 477.182326][T17962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.286084][T17982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.293433][T17982] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 477.300483][T17982] rust_binder: Error while translating object. [ 477.312837][T17982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 477.331646][T17982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 477.332915][T17985] netlink: 'syz.8.5681': attribute type 1 has an invalid length. [ 477.362766][T17985] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.363044][T17985] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 477.367700][T17993] netlink: 'syz.9.5683': attribute type 4 has an invalid length. [ 477.369501][T17985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 477.385361][T17985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:296 [ 477.385743][T17994] netlink: 'syz.9.5683': attribute type 4 has an invalid length. [ 477.412395][T17993] netlink: 'syz.9.5683': attribute type 4 has an invalid length. [ 477.421258][T17994] netlink: 'syz.9.5683': attribute type 4 has an invalid length. [ 477.455256][T18000] devpts: called with bogus options [ 477.512367][T18014] tmpfs: Unknown parameter '.[¨size' [ 477.526297][T18016] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5690'. [ 477.720803][ T338] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 477.872126][ T338] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.883262][ T338] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.893199][ T338] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 477.902380][ T338] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.911769][ T338] usb 9-1: config 0 descriptor?? [ 478.060743][ T36] audit: type=1326 audit(1758475638.842:53035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.7.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34238ec29 code=0x7fc00000 [ 478.100819][T18029] overlayfs: failed to resolve './file0': -2 [ 478.106034][ T36] audit: type=1326 audit(1758475638.842:53036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.7.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd34238ec29 code=0x7fc00000 [ 478.128012][T18031] rust_binder: Error while translating object. [ 478.130528][T18031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 478.138500][ T36] audit: type=1326 audit(1758475638.842:53037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.7.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34238ec29 code=0x7fc00000 [ 478.153701][T18031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:391 [ 478.172052][ T36] audit: type=1326 audit(1758475638.842:53038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.7.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34238ec29 code=0x7fc00000 [ 478.217878][ T36] audit: type=1326 audit(1758475638.842:53039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.7.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34238ec29 code=0x7fc00000 [ 478.228690][T18039] binder: Unknown parameter 'secÎçbel' [ 478.263834][ T36] audit: type=1326 audit(1758475638.842:53040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.7.5677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34238ec29 code=0x7fc00000 [ 478.288055][ T36] audit: type=1401 audit(1758475638.872:53041): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A667361646D5F657865635F743A73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E2F66696C6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 478.296020][ T36] audit: type=1400 audit(1758475639.052:53042): avc: denied { create } for pid=18044 comm="syz.7.5701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 478.372625][T18053] rust_binder: 18052 RLIMIT_NICE not set [ 478.408664][T18052] rust_binder: Error while translating object. [ 478.414431][T18052] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 478.420623][T18052] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 478.430131][T18052] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:118 [ 478.454838][T18058] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 478.846012][ T338] hid-led 0003:27B8:01ED.0037: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.8-1/input0 [ 478.863963][ T338] hid-led 0003:27B8:01ED.0037: ThingM blink(1) initialized [ 479.158350][T18077] overlay: ./file1 is not a directory [ 479.329207][T18083] rust_binder: Write failure EFAULT in pid:128 [ 479.393079][ T45] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 479.410816][ T45] hid-generic 0000:0000:0000.0038: hidraw1: HID v0.00 Device [syz1] on syz0 [ 479.450902][T18093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 479.450937][T18093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:132 [ 479.676547][T18103] netlink: 1 bytes leftover after parsing attributes in process `syz.7.5720'. [ 479.711005][ T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 479.733293][T18111] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 479.784202][T18111] rust_binder: 18110 RLIMIT_NICE not set [ 479.790894][T18111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:429 [ 479.860759][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 479.877625][ T45] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 479.886775][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.894916][ T45] usb 2-1: Product: syz [ 479.899116][ T45] usb 2-1: Manufacturer: syz [ 479.903953][ T45] usb 2-1: SerialNumber: syz [ 479.910206][ T45] usb 2-1: config 0 descriptor?? [ 479.916871][ T45] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 479.925669][ T45] usb 2-1: Detected FT-X [ 479.937089][ T36] audit: type=1326 audit(1758475640.722:53043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18120 comm="syz.9.5725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf44d8ec29 code=0x0 [ 480.116230][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 480.486659][ T355] usb 9-1: USB disconnect, device number 22 [ 480.498659][T18125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 480.498881][T18125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 480.506112][T18125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:304 [ 480.528902][ T45] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 480.531206][T18127] netlink: 'syz.8.5727': attribute type 5 has an invalid length. [ 480.570540][T18129] binder: Unknown parameter 'defcontext01777777777777777777777' [ 480.751449][T18095] kvm: pic: non byte write [ 480.891698][ T45] usb 2-1: USB disconnect, device number 39 [ 480.901626][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 480.911219][ T45] ftdi_sio 2-1:0.0: device disconnected [ 481.340771][ T65] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 481.501888][ T65] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.512122][ T65] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 481.521754][ T65] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 481.531023][ T65] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 481.539039][ T65] usb 9-1: SerialNumber: syz [ 481.750266][ T65] usb 9-1: 0:2 : does not exist [ 481.755294][ T65] usb 9-1: unit 5: unexpected type 0x0a [ 481.762552][ T65] usb 9-1: USB disconnect, device number 23 [ 481.951635][T18174] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 481.951672][T18174] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 481.958225][T18174] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 481.964946][T18174] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 482.038678][T18185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 482.045226][T18185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:456 [ 482.700785][ T65] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 482.862012][ T65] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 482.870272][ T65] usb 2-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 482.880611][ T65] usb 2-1: config 0 has no interface number 0 [ 482.886760][ T65] usb 2-1: too many endpoints for config 0 interface 9 altsetting 175: 88, using maximum allowed: 30 [ 482.897694][ T65] usb 2-1: config 0 interface 9 altsetting 175 has 0 endpoint descriptors, different from the interface descriptor's value: 88 [ 482.910994][ T65] usb 2-1: config 0 interface 9 has no altsetting 0 [ 482.917607][ T65] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 482.927101][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.935869][ T65] usb 2-1: config 0 descriptor?? [ 483.132614][T18208] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 483.140638][T18210] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 483.344296][ T65] usb 2-1: string descriptor 0 read error: -71 [ 483.352090][ T65] usb 2-1: USB disconnect, device number 40 [ 483.522732][T18227] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 483.531129][T18227] overlayfs: missing 'lowerdir' [ 483.536209][T18227] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 483.544694][T18227] overlayfs: missing 'lowerdir' [ 483.549824][T18227] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 483.558267][T18227] overlayfs: missing 'lowerdir' [ 483.563616][T18227] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 483.572129][T18227] overlayfs: missing 'lowerdir' [ 483.578928][T18227] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 483.587604][T18227] overlayfs: missing 'lowerdir' [ 483.593238][T18227] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 483.601842][T18227] overlayfs: missing 'lowerdir' [ 485.020809][T18285] tc_dump_action: action bad kind [ 485.028098][T18285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 485.028376][T18285] rust_binder: Read failure Err(EAGAIN) in pid:359 [ 485.043985][ T36] audit: type=1400 audit(1758475645.832:53044): avc: denied { create } for pid=18284 comm="syz.8.5775" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 485.330749][ T65] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 485.395673][T18291] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 485.490824][ T65] usb 9-1: Using ep0 maxpacket: 32 [ 485.505329][ T65] usb 9-1: descriptor type invalid, skip [ 485.511023][ T65] usb 9-1: descriptor type invalid, skip [ 485.516685][ T65] usb 9-1: descriptor type invalid, skip [ 485.522441][ T65] usb 9-1: descriptor type invalid, skip [ 485.528099][ T65] usb 9-1: descriptor type invalid, skip [ 485.534610][ T65] usb 9-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 8 [ 485.544393][ T65] usb 9-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.557732][ T65] usb 9-1: config 1 interface 0 has no altsetting 0 [ 485.567125][ T65] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.576397][ T65] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.584504][ T65] usb 9-1: Product: æ”໫ೠë¢à§ç”—᫨çšêŽ°çŽ¤áž¼í’ˆì”Ÿâ–¿íƒ î’¡ì­»ç†ä¥”åž±ë㿲횑奔ꞌ澂跙î¾èƒ¨î±ˆáš­ç½¨â¾¸å¨¶åƒ§á¿¯î‹–声쭖ì Â¡ã²çž»î¹œï’ªè‰„钣噱î€Ûâšà²˜áží†”鯎岎縡᫑鯔æ€æ½¸ì¿˜ê›»á’¢ã‹ŽèŸ£â£›á‹«í¾ç¹¬á‰ˆã©‰è¢®é¯¬æ‡€æ†³îŒë”«ç¼â³á‹é†‡ê†éŒ–赆貈ฺ댇 [ 485.612253][ T65] usb 9-1: Manufacturer:  [ 485.616884][ T65] usb 9-1: SerialNumber: syz [ 485.626560][T18285] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 485.634265][T18285] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 485.657974][T18300] netlink: 124 bytes leftover after parsing attributes in process `syz.9.5780'. [ 486.042847][T18285] rust_binder: Error while translating object. [ 486.042897][T18285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 486.049143][T18285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:359 [ 486.060008][ T65] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 486.081506][ T65] usb 9-1: USB disconnect, device number 24 [ 486.330804][ T330] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 486.481895][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.492858][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.502681][ T330] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 486.511774][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.520354][ T330] usb 2-1: config 0 descriptor?? [ 486.575990][T18332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 486.603493][T18332] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 486.610158][T18332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 486.618209][T18332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:361 [ 486.661123][T18337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 486.670285][T18337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:366 [ 486.727672][T18302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.745470][T18302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.759633][T18342] 9pnet_fd: Insufficient options for proto=fd [ 487.157509][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 487.164703][ T330] usbhid 2-1:0.0: can't add hid device: -32 [ 487.170762][ T330] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 487.179866][ T330] usb 2-1: USB disconnect, device number 41 [ 487.354463][T18353] overlayfs: failed to clone upperpath [ 487.512905][T18369] fuse: Bad value for 'fd' [ 487.559506][ T36] audit: type=1326 audit(1758475648.342:53045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18375 comm="syz.9.5806" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf44d8ec29 code=0x0 [ 487.709472][T18389] netlink: 'syz.1.5809': attribute type 4 has an invalid length. [ 487.730133][ T36] audit: type=1326 audit(1758475648.512:53046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.1.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f07d8ec29 code=0x7ffc0000 [ 487.754308][ T36] audit: type=1326 audit(1758475648.512:53047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.1.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f07d8ec29 code=0x7ffc0000 [ 487.778065][ T36] audit: type=1326 audit(1758475648.512:53048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.1.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3f07d8ec29 code=0x7ffc0000 [ 487.802159][ T36] audit: type=1326 audit(1758475648.512:53049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.1.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f07d8ec29 code=0x7ffc0000 [ 487.826079][ T36] audit: type=1326 audit(1758475648.512:53050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.1.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3f07d8ec29 code=0x7ffc0000 [ 487.849784][ T36] audit: type=1326 audit(1758475648.512:53051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.1.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f07d8ec29 code=0x7ffc0000 [ 487.873504][ T36] audit: type=1326 audit(1758475648.522:53052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.1.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f07d2ae09 code=0x7ffc0000 [ 487.897485][ T36] audit: type=1326 audit(1758475648.522:53053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18392 comm="syz.1.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3f07d8ec29 code=0x7ffc0000 [ 488.017202][T18399] input: syz1 as /devices/virtual/input/input43 [ 488.025214][T18399] rust_binder: Write failure EFAULT in pid:176 [ 488.260798][ T45] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 488.420759][ T45] usb 2-1: Invalid ep0 maxpacket: 32 [ 488.491492][T18406] overlay: Unknown parameter 'smackfshat' [ 488.519787][T18411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 488.550780][ T45] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 488.571770][T18412] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 488.571797][T18412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 488.580420][T18412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:384 [ 488.591229][T18413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 488.692896][T15913] bridge_slave_1: left allmulticast mode [ 488.705132][T15913] bridge_slave_1: left promiscuous mode [ 488.711127][ T45] usb 2-1: Invalid ep0 maxpacket: 32 [ 488.716728][T15913] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.724126][ T45] usb usb2-port1: attempt power cycle [ 488.730273][T15913] bridge_slave_0: left allmulticast mode [ 488.736527][T15913] bridge_slave_0: left promiscuous mode [ 488.742324][T15913] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.854042][T15913] veth1_macvtap: left promiscuous mode [ 488.859651][T15913] veth0_vlan: left promiscuous mode [ 488.960001][T18419] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.967564][T18419] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.974805][T18419] bridge_slave_0: entered allmulticast mode [ 488.981288][T18419] bridge_slave_0: entered promiscuous mode [ 488.988100][T18419] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.988417][T18426] netlink: 596 bytes leftover after parsing attributes in process `syz.9.5821'. [ 488.995234][T18419] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.011504][T18419] bridge_slave_1: entered allmulticast mode [ 489.017796][T18419] bridge_slave_1: entered promiscuous mode [ 489.062959][T18419] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.070060][T18419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.077379][T18419] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.084515][T18419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.092095][ T45] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 489.107071][T15920] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.111127][ T45] usb 2-1: Invalid ep0 maxpacket: 32 [ 489.119555][T15920] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.129623][T15914] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.136694][T15914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.145859][T15920] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.152941][T15920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.183386][T18419] veth0_vlan: entered promiscuous mode [ 489.194853][T18419] veth1_macvtap: entered promiscuous mode [ 489.241182][ T45] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 489.261427][ T45] usb 2-1: Invalid ep0 maxpacket: 32 [ 489.266913][ T45] usb usb2-port1: unable to enumerate USB device [ 489.620373][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5825'. [ 490.348798][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 490.348818][ T36] audit: type=1326 audit(1758475651.132:53119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.0.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf618ec29 code=0x7fc00000 [ 490.636981][T18461] overlayfs: failed to clone upperpath [ 491.245586][T18494] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 491.246781][T18495] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 491.259059][T18496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 491.290127][T18503] tipc: Started in network mode [ 491.301730][T18503] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 491.311114][T18503] tipc: Enabled bearer , priority 10 [ 491.468819][T18532] fuseblk: Bad value for 'fd' [ 491.611672][T18536] cgroup: fork rejected by pids controller in /syz0 [ 491.760725][ T10] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 491.921732][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 491.929922][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 491.933161][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5858'. [ 491.938791][ T10] usb 2-1: config 9 has an invalid interface number: 49 but max is 0 [ 491.948826][T18605] netlink: 'syz.9.5858': attribute type 40 has an invalid length. [ 491.954980][ T10] usb 2-1: config 9 has no interface number 0 [ 491.969179][ T10] usb 2-1: config 9 interface 49 has no altsetting 0 [ 491.977825][ T10] usb 2-1: New USB device found, idVendor=c251, idProduct=4003, bcdDevice= 1.00 [ 491.987056][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.995132][ T10] usb 2-1: Product: syz [ 491.999594][ T10] usb 2-1: Manufacturer: syz [ 492.004326][ T10] usb 2-1: SerialNumber: syz [ 492.245543][T18534] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=18534 comm=syz.1.5856 [ 492.430731][ T330] tipc: Node number set to 4269801494 [ 492.559013][ T10] usb-storage 2-1:9.49: USB Mass Storage device detected [ 492.566999][ T10] usb-storage 2-1:9.49: Quirks match for vid c251 pid 4003: 80 [ 492.683554][ T10] usb 2-1: USB disconnect, device number 46 [ 492.715113][ T36] audit: type=1326 audit(1758475653.502:53120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.0.5864" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bf618ec29 code=0x0 [ 492.831091][T18639] erofs: dax options not supported [ 493.432757][ T36] audit: type=1326 audit(1758475654.222:53121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18648 comm="syz.9.5870" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf44d8ec29 code=0x0 [ 493.502650][T18660] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 493.599842][ T36] audit: type=1400 audit(1758475654.382:53122): avc: denied { map } for pid=18674 comm="syz.0.5878" path="socket:[105652]" dev="sockfs" ino=105652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 493.633971][T18677] bridge0: port 3(veth0_to_bridge) entered blocking state [ 493.641206][T18677] bridge0: port 3(veth0_to_bridge) entered disabled state [ 493.648564][T18677] veth0_to_bridge: entered allmulticast mode [ 493.655033][T18677] veth0_to_bridge: entered promiscuous mode [ 493.661295][T18677] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.673656][T18677] bridge0: port 3(veth0_to_bridge) entered blocking state [ 493.680981][T18677] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 493.712295][T18686] overlayfs: failed to clone upperpath [ 493.712306][T18685] overlayfs: failed to clone upperpath [ 494.233903][T18696] netlink: 'syz.9.5885': attribute type 4 has an invalid length. [ 494.241757][T18696] netlink: 'syz.9.5885': attribute type 5 has an invalid length. [ 494.249559][T18696] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.5885'. [ 494.361142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 494.373419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 494.385450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 494.397549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 494.409754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 494.421730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 494.433936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 494.446163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 494.458258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 494.470317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 499.074147][ C0] sched: DL replenish lagged too much [ 499.370712][ C0] net_ratelimit: 129381 callbacks suppressed [ 499.370739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 499.370790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 499.376809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 499.389077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.401020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 499.413108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.424998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 499.437117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 499.449103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 499.461135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.513835][T18723] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65381 sclass=netlink_xfrm_socket pid=18723 comm=syz.7.5894 [ 504.380711][ C0] net_ratelimit: 143234 callbacks suppressed [ 504.380736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 504.380792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.386943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 504.399098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 504.411263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 504.423290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 504.435219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 504.447449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.459354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 504.471342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.390690][ C0] net_ratelimit: 144213 callbacks suppressed [ 509.390715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 509.390792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.396784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 509.408778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 509.420856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 509.433259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 509.445187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 509.457242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.469061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 509.481046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.400713][ C0] net_ratelimit: 145152 callbacks suppressed [ 514.400736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 514.400799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.406828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 514.418826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 514.430817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 514.443006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 514.454869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 514.466961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.478789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 514.490778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.410689][ C0] net_ratelimit: 147244 callbacks suppressed [ 519.410714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 519.410716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.410879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.416803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 519.429030][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 519.441103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 519.453171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 519.465219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 519.477153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 519.489259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 524.420693][ C0] net_ratelimit: 143086 callbacks suppressed [ 524.420718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 524.420746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.426795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 524.438874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 524.450835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 524.463015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.474814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 524.486887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.498785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 524.510749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 529.060226][T15920] bridge_slave_1: left allmulticast mode [ 529.430705][ C0] net_ratelimit: 138951 callbacks suppressed [ 529.430732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 529.430773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.436806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 529.448790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 529.460791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 529.472825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 529.484750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 529.496962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.508770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 529.520835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 530.162076][T15920] bridge_slave_1: left promiscuous mode [ 530.912020][T15920] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.442051][T15920] bridge_slave_0: left allmulticast mode [ 532.090823][T15920] bridge_slave_0: left promiscuous mode [ 533.270887][T15920] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.440717][ C0] net_ratelimit: 141241 callbacks suppressed [ 534.440740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 534.440800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.446900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 534.459040][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.470906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 534.483147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 534.495207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 534.507330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.519678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 534.531768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.450675][ C1] net_ratelimit: 141001 callbacks suppressed [ 539.450700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.450738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 539.456779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.468680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 539.480706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.492668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 539.504760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.516644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 539.528649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 539.540900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 544.460677][ C0] net_ratelimit: 139073 callbacks suppressed [ 544.460702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 544.460712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 544.460837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.466955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 544.478942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.490844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 544.502736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.514829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 544.526836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.538693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 549.470674][ C1] net_ratelimit: 130151 callbacks suppressed [ 549.470698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.470734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 549.476892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.488777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 549.500857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 549.512926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 549.525103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.536867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 549.548869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.560855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 554.480706][ C0] net_ratelimit: 141157 callbacks suppressed [ 554.480732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 554.480810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.486814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 554.498819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.510790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 554.522946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.534842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 554.547023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.558870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 554.570830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 559.490679][ C0] net_ratelimit: 139814 callbacks suppressed [ 559.490705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 559.490752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.496776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 559.508836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.520837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 559.532927][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.544780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 559.556842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 559.569004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 559.581106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 564.500678][ C1] net_ratelimit: 141428 callbacks suppressed [ 564.500702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.500748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 564.506763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 564.518850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 564.531223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 564.543051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 564.555189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.566912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 564.578899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.590796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 569.510698][ C0] net_ratelimit: 141351 callbacks suppressed [ 569.510723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 569.510773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.516794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 569.529150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.541252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 569.553487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.565285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 569.577283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 569.589264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 569.601337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 574.520661][ C0] net_ratelimit: 141317 callbacks suppressed [ 574.520686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 574.520712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.526756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 574.538900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.550750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 574.562722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 574.574978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 574.587023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 574.598926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 574.611001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.530678][ C0] net_ratelimit: 141324 callbacks suppressed [ 579.530704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 579.530710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.530767][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 579.536778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 579.549035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 579.560974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 579.572840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.584801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 579.596816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.608761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 584.540687][ C1] net_ratelimit: 143837 callbacks suppressed [ 584.540714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.540748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 584.546880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.560679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 584.571107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.582962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 584.595582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.607608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 584.619564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 584.631567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 589.550657][ C1] net_ratelimit: 138121 callbacks suppressed [ 589.550684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.550706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 589.556808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 589.568746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 589.580996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.592741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 589.604718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.616587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 589.628839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.640886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 594.560690][ C0] net_ratelimit: 139624 callbacks suppressed [ 594.560717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 594.560718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.560796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.566806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 594.578781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.590780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 594.602809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 594.614918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 594.627159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.638951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 599.570680][ C0] net_ratelimit: 140556 callbacks suppressed [ 599.570707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 599.570829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.576797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 599.588804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.600857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 599.613008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.625061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 599.640913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.649145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 599.661098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 604.580648][ C0] net_ratelimit: 136400 callbacks suppressed [ 604.580675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 604.580860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.586754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 604.598751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.610881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 604.623043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.635095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 604.647303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.659193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 604.671247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 609.590651][ C0] net_ratelimit: 136940 callbacks suppressed [ 609.590675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 609.590702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.597179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 609.609268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.621257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 609.633258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.645198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 609.657327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.669179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 609.681139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.600678][ C0] net_ratelimit: 135422 callbacks suppressed [ 614.600701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 614.600737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 614.606866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 614.619458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.631216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 614.643365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.655358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 614.667288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.679425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 614.691542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.610649][ C0] net_ratelimit: 139268 callbacks suppressed [ 619.610673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 619.610857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.616759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 619.628771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.640679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 619.652646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.664874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 619.677158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.689003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 619.700964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.620643][ C1] net_ratelimit: 136832 callbacks suppressed [ 624.620671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.620710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 624.626902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.638749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 624.650802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.662881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 624.675008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.686961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 624.699232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.711482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 629.630633][ C1] net_ratelimit: 142045 callbacks suppressed [ 629.630659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.630694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 629.637007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.648729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 629.660754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.672634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 629.684613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.696577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 629.708757][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.720713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 634.640653][ C1] net_ratelimit: 131514 callbacks suppressed [ 634.640679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.640700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 634.646740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.658744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 634.670780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.682658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 634.694656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.706619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 634.718847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.730564][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 639.650875][ C0] net_ratelimit: 132759 callbacks suppressed [ 639.650994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 639.651120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.657140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 639.669127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.681179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 639.693152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.705137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 639.717226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.729056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 639.741207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.660670][ C1] net_ratelimit: 139915 callbacks suppressed [ 644.660696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.660715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 644.666777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.678671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 644.690792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.702740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 644.714983][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.726862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 644.739079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.751203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 649.670629][ C0] net_ratelimit: 140640 callbacks suppressed [ 649.670655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 649.670720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.676733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 649.688710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.700729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 649.712855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.724645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 649.736681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.748649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 649.760894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.680641][ C1] net_ratelimit: 143001 callbacks suppressed [ 654.680667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.680700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 654.686838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.699010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 654.711135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.723126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 654.735124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.747121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 654.759354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.771156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 655.521657][T15920] tipc: Disabling bearer [ 659.690638][ C0] net_ratelimit: 143608 callbacks suppressed [ 659.690662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 659.690781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.696730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 659.708819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.720781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 659.732962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.744846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 659.757078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.769245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 659.781397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.700650][ C0] net_ratelimit: 135887 callbacks suppressed [ 664.700674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 664.700926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.706763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 664.718879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.730895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 664.742961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.754846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 664.766919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.779267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 664.791237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.710639][ C1] net_ratelimit: 137047 callbacks suppressed [ 669.710662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.710689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 669.716740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.728844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 669.741124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.752996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 669.764962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.777034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 669.789122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 669.801050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 674.720656][ C0] net_ratelimit: 145600 callbacks suppressed [ 674.720689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 674.720720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.726887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 674.738884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.750865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 674.763367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.775248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 674.787319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.799285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 674.811337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.730638][ C0] net_ratelimit: 136006 callbacks suppressed [ 679.730673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 679.730821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.736755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 679.748779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.760680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 679.772741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.784710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 679.796873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.808823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 679.820820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.842146][ T37] INFO: task kworker/u8:54:15914 blocked for more than 122 seconds. [ 683.850185][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 683.997136][ T36] audit: type=1400 audit(1758475844.752:53123): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1565]" dev="pipefs" ino=1565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 684.012405][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 684.152566][ T37] task:kworker/u8:54 state:D stack:0 pid:15914 tgid:15914 ppid:2 flags:0x00004000 [ 684.302114][ T37] Workqueue: ipv6_addrconf addrconf_verify_work [ 684.308450][ T37] Call Trace: [ 684.426679][ T37] [ 684.429667][ T37] __schedule+0x1322/0x1df0 [ 684.514670][ T37] ? __sched_text_start+0x10/0x10 [ 684.519767][ T37] ? worker_thread+0xc58/0x1250 [ 684.524758][ T37] ? kthread_data+0x54/0xc0 [ 684.529285][ T37] ? wq_worker_sleeping+0x69/0x260 [ 684.534466][ T37] ? trace_contention_begin+0xc0/0xc0 [ 684.539864][ T37] schedule+0xc6/0x240 [ 684.543990][ T37] schedule_preempt_disabled+0x14/0x30 [ 684.549472][ T37] __mutex_lock+0x81e/0x1b50 [ 684.554107][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 684.560929][ T37] ? __kasan_check_write+0x18/0x20 [ 684.566074][ T37] ? ttwu_do_activate+0x630/0x630 [ 684.571142][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 684.576628][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 684.582561][ T37] ? kvfree_rcu_bulk+0x297/0x4d0 [ 684.587532][ T37] ? try_to_wake_up+0xdfb/0x1b00 [ 684.592545][ T37] __mutex_lock_slowpath+0xe/0x20 [ 684.597656][ T37] mutex_lock+0x102/0x1c0 [ 684.602024][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 684.606906][ T37] ? wake_up_process+0x14/0x20 [ 684.611715][ T37] rtnl_lock+0x19/0x20 [ 684.615901][ T37] addrconf_verify_work+0x1d/0x50 [ 684.620978][ T37] process_scheduled_works+0x7d5/0x1020 [ 684.626560][ T37] worker_thread+0xc58/0x1250 [ 684.631276][ T37] kthread+0x2c7/0x370 [ 684.635369][ T37] ? __cfi_worker_thread+0x10/0x10 [ 684.640497][ T37] ? __cfi_kthread+0x10/0x10 [ 684.645120][ T37] ret_from_fork+0x67/0xa0 [ 684.649566][ T37] ? __cfi_kthread+0x10/0x10 [ 684.654193][ T37] ret_from_fork_asm+0x1a/0x30 [ 684.659082][ T37] [ 684.740632][ C0] net_ratelimit: 136473 callbacks suppressed [ 684.740658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 684.740710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.746745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 684.758733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.770742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 684.782695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.794683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 684.806699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.818650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 684.830638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.855626][ T37] INFO: task syz.7.5513:17470 blocked for more than 123 seconds. [ 687.261112][ T37] Not tainted syzkaller #0 [ 687.266102][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.274850][ T37] task:syz.7.5513 state:D stack:0 pid:17470 tgid:17470 ppid:15841 flags:0x00004006 [ 687.285080][ T37] Call Trace: [ 687.288386][ T37] [ 687.291438][ T37] __schedule+0x1322/0x1df0 [ 687.295977][ T37] ? __sched_text_start+0x10/0x10 [ 687.301061][ T37] ? mutex_spin_on_owner+0x1e8/0x470 [ 687.306398][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 687.311575][ T37] ? __kasan_check_write+0x18/0x20 [ 687.316726][ T37] ? trace_contention_begin+0xc0/0xc0 [ 687.322177][ T37] ? __kasan_check_write+0x18/0x20 [ 687.327348][ T37] schedule+0xc6/0x240 [ 687.331487][ T37] schedule_preempt_disabled+0x14/0x30 [ 687.336986][ T37] __mutex_lock+0x81e/0x1b50 [ 687.341635][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 687.348434][ T37] ? locks_remove_file+0x346/0x1000 [ 687.353691][ T37] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 687.359869][ T37] ? __cfi_locks_remove_file+0x10/0x10 [ 687.365373][ T37] ? __call_rcu_common+0x41f/0x700 [ 687.370703][ T37] ? __asan_memset+0x39/0x50 [ 687.375332][ T37] ? __fsnotify_parent+0x217/0x5c0 [ 687.380470][ T37] __mutex_lock_slowpath+0xe/0x20 [ 687.385530][ T37] mutex_lock+0x102/0x1c0 [ 687.389877][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 687.394764][ T37] ? call_rcu+0x14/0x20 [ 687.398922][ T37] rtnl_lock+0x19/0x20 [ 687.403096][ T37] tun_chr_close+0x41/0x150 [ 687.407700][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 687.412823][ T37] __fput+0x1fe/0xa00 [ 687.416815][ T37] ? call_rcu+0x14/0x20 [ 687.420986][ T37] ____fput+0x20/0x30 [ 687.425061][ T37] task_work_run+0x1e3/0x250 [ 687.429654][ T37] ? __cfi_task_work_run+0x10/0x10 [ 687.434786][ T37] ? free_nsproxy+0x223/0x290 [ 687.439471][ T37] do_exit+0x9bc/0x2630 [ 687.443651][ T37] ? __sched_text_start+0x10/0x10 [ 687.448686][ T37] ? __cfi_do_exit+0x10/0x10 [ 687.453300][ T37] ? __kasan_check_write+0x18/0x20 [ 687.458431][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 687.463567][ T37] ? __kasan_check_read+0x15/0x20 [ 687.468603][ T37] ? cgroup_update_frozen+0x160/0x990 [ 687.473988][ T37] do_group_exit+0x22a/0x300 [ 687.478583][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 687.483907][ T37] get_signal+0x139d/0x14f0 [ 687.488434][ T37] arch_do_signal_or_restart+0x96/0x720 [ 687.494003][ T37] ? common_nsleep+0x93/0xb0 [ 687.498600][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 687.504794][ T37] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 687.510526][ T37] ? __kasan_check_read+0x15/0x20 [ 687.515681][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 687.521891][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 687.527361][ T37] do_syscall_64+0x64/0xf0 [ 687.531791][ T37] ? clear_bhb_loop+0x50/0xa0 [ 687.536474][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 687.542396][ T37] RIP: 0033:0x7fd3423c14e5 [ 687.546814][ T37] RSP: 002b:00007fd343210f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 687.555243][ T37] RAX: fffffffffffffdfc RBX: 00007fd3425d5fa0 RCX: 00007fd3423c14e5 [ 687.563234][ T37] RDX: 00007fd343210fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 687.571313][ T37] RBP: 00007fd342411e41 R08: 0000000000000000 R09: 0000000000000000 [ 687.579291][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 687.587281][ T37] R13: 00007fd3425d6038 R14: 00007fd3425d5fa0 R15: 00007fff4920f748 [ 687.595270][ T37] [ 687.600429][ T37] INFO: task syz.0.5875:18665 blocked for more than 126 seconds. [ 687.801119][ T37] Not tainted syzkaller #0 [ 687.806119][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.940945][ T37] task:syz.0.5875 state:D stack:0 pid:18665 tgid:18665 ppid:18419 flags:0x00004006 [ 688.094099][ T37] Call Trace: [ 688.097435][ T37] [ 688.100385][ T37] __schedule+0x1322/0x1df0 [ 688.104951][ T37] ? __sched_text_start+0x10/0x10 [ 688.110008][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 688.115207][ T37] ? __kasan_check_write+0x18/0x20 [ 688.120350][ T37] ? trace_contention_begin+0xc0/0xc0 [ 688.125883][ T37] ? __kasan_check_write+0x18/0x20 [ 688.131047][ T37] schedule+0xc6/0x240 [ 688.135144][ T37] schedule_preempt_disabled+0x14/0x30 [ 688.140661][ T37] __mutex_lock+0x81e/0x1b50 [ 688.145377][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 688.152202][ T37] ? locks_remove_file+0x346/0x1000 [ 688.157446][ T37] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 688.163649][ T37] ? __cfi_locks_remove_file+0x10/0x10 [ 688.169133][ T37] ? __call_rcu_common+0x41f/0x700 [ 688.174321][ T37] ? __asan_memset+0x39/0x50 [ 688.178972][ T37] ? __fsnotify_parent+0x217/0x5c0 [ 688.184154][ T37] __mutex_lock_slowpath+0xe/0x20 [ 688.189222][ T37] mutex_lock+0x102/0x1c0 [ 688.193621][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 688.198509][ T37] ? call_rcu+0x14/0x20 [ 688.202850][ T37] rtnl_lock+0x19/0x20 [ 688.206949][ T37] tun_chr_close+0x41/0x150 [ 688.211494][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 688.216623][ T37] __fput+0x1fe/0xa00 [ 688.220648][ T37] ? call_rcu+0x14/0x20 [ 688.224836][ T37] ____fput+0x20/0x30 [ 688.228849][ T37] task_work_run+0x1e3/0x250 [ 688.233507][ T37] ? __cfi_task_work_run+0x10/0x10 [ 688.238642][ T37] ? free_nsproxy+0x223/0x290 [ 688.243371][ T37] do_exit+0x9bc/0x2630 [ 688.247557][ T37] ? __sched_text_start+0x10/0x10 [ 688.252625][ T37] ? __cfi_do_exit+0x10/0x10 [ 688.257243][ T37] ? __kasan_check_write+0x18/0x20 [ 688.262487][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 688.267627][ T37] ? __kasan_check_read+0x15/0x20 [ 688.272709][ T37] ? cgroup_update_frozen+0x160/0x990 [ 688.278279][ T37] do_group_exit+0x22a/0x300 [ 688.282933][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 688.288408][ T37] get_signal+0x139d/0x14f0 [ 688.292994][ T37] arch_do_signal_or_restart+0x96/0x720 [ 688.298580][ T37] ? common_nsleep+0x93/0xb0 [ 688.303227][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 688.309416][ T37] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 688.315212][ T37] ? __kasan_check_read+0x15/0x20 [ 688.320280][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 688.326401][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 688.331906][ T37] do_syscall_64+0x64/0xf0 [ 688.336346][ T37] ? clear_bhb_loop+0x50/0xa0 [ 688.341071][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 688.347087][ T37] RIP: 1a53:0x68daea46cc5edccd [ 688.351903][ T37] RSP: 0077:32e0a89da0a6d686 EFLAGS: 00050b93 ORIG_RAX: 3b493b81f3229b3a [ 688.360345][ T37] RAX: 6f6e7731ab4b6b0b RBX: dbcb4109fa9cda36 RCX: 3e3c321b47be3c4b [ 688.368547][ T37] RDX: 118bd9baed355380 RSI: 7bce7d772e443656 RDI: bd3ec18b9b897ec2 [ 688.376567][ T37] RBP: de30a4e9e08443b1 R08: 9e00aa80badf9ca3 R09: 262a8f46fc1abed3 [ 688.384629][ T37] R10: d108cbe03db740d8 R11: f0a971f7bb0d4045 R12: 6c14749917ebe22e [ 688.392641][ T37] R13: f371a5dada18777f R14: d6f16f60921a6484 R15: 83b20c40cccad612 [ 688.400692][ T37] [ 689.740837][ T37] INFO: task syz-executor:18735 blocked for more than 128 seconds. [ 689.748886][ T37] Not tainted syzkaller #0 [ 689.753846][ C0] net_ratelimit: 130813 callbacks suppressed [ 689.753865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 689.753937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 689.754005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 689.754073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 689.754141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 689.754208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 689.754257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.754283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 689.754330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.754350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:6f:82:ac:66:38, vlan:0) [ 690.327225][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 690.336105][ T37] task:syz-executor state:D stack:0 pid:18735 tgid:18735 ppid:1 flags:0x00004004 [ 690.346339][ T37] Call Trace: [ 690.349636][ T37] [ 690.352589][ T37] __schedule+0x1322/0x1df0 [ 690.357113][ T37] ? __sched_text_start+0x10/0x10 [ 690.362224][ T37] ? mutex_spin_on_owner+0x1e8/0x470 [ 690.367522][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 690.372661][ T37] ? __kasan_check_write+0x18/0x20 [ 690.377786][ T37] ? trace_contention_begin+0xc0/0xc0 [ 690.383177][ T37] ? __kasan_check_write+0x18/0x20 [ 690.388316][ T37] schedule+0xc6/0x240 [ 690.392463][ T37] schedule_preempt_disabled+0x14/0x30 [ 690.397950][ T37] __mutex_lock+0x81e/0x1b50 [ 690.402666][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 690.409443][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 690.414852][ T37] ? cred_has_capability+0x281/0x380 [ 690.420172][ T37] ? selinux_perf_event_alloc+0x110/0x110 [ 690.426112][ T37] ? unwind_get_return_address+0x51/0x90 [ 690.431802][ T37] __mutex_lock_slowpath+0xe/0x20 [ 690.436854][ T37] mutex_lock+0x102/0x1c0 [ 690.441325][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 690.446208][ T37] ? ns_capable+0x91/0xf0 [ 690.450562][ T37] ? netlink_net_capable+0x129/0x160 [ 690.455906][ T37] rtnetlink_rcv_msg+0x75f/0xa00 [ 690.460878][ T37] ? avc_has_perm_noaudit+0x268/0x360 [ 690.466355][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 690.471867][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 690.477252][ T37] ? avc_has_perm+0x144/0x220 [ 690.481953][ T37] netlink_rcv_skb+0x22b/0x4a0 [ 690.486728][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 690.492202][ T37] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 690.497497][ T37] ? netlink_autobind+0x1c0/0x1c0 [ 690.502544][ T37] ? is_vmalloc_addr+0x11/0x40 [ 690.507316][ T37] rtnetlink_rcv+0x20/0x30 [ 690.511766][ T37] netlink_unicast+0x8c3/0xa60 [ 690.516718][ T37] netlink_sendmsg+0x7f0/0xaf0 [ 690.521595][ T37] ? __cfi_netlink_sendmsg+0x10/0x10 [ 690.526901][ T37] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 690.532209][ T37] ? security_socket_sendmsg+0x33/0xd0 [ 690.537679][ T37] __sys_sendto+0x66a/0x6f0 [ 690.542209][ T37] ? __cfi___sys_sendto+0x10/0x10 [ 690.547259][ T37] ? __fput+0x6ea/0xa00 [ 690.551438][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 690.556731][ T37] ? __kasan_check_read+0x15/0x20 [ 690.561781][ T37] __x64_sys_sendto+0xe9/0x100 [ 690.566631][ T37] x64_sys_call+0x2c2c/0x2ee0 [ 690.571384][ T37] do_syscall_64+0x58/0xf0 [ 690.575832][ T37] ? clear_bhb_loop+0x50/0xa0 [ 690.580522][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 690.586461][ T37] RIP: 0033:0x7f98b1390a63 [ 690.590896][ T37] RSP: 002b:00007ffdd25ca498 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 690.599313][ T37] RAX: ffffffffffffffda RBX: 00007f98b2104620 RCX: 00007f98b1390a63 [ 690.607333][ T37] RDX: 0000000000000028 RSI: 00007f98b2104670 RDI: 0000000000000003 [ 690.615420][ T37] RBP: 0000000000000001 R08: 00007ffdd25ca4b4 R09: 000000000000000c [ 690.623416][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 690.631414][ T37] R13: 0000000000000000 R14: 00007f98b2104670 R15: 0000000000000000 [ 690.639396][ T37] [ 691.400805][ T37] INFO: task syz-executor:18736 blocked for more than 130 seconds. [ 691.408767][ T37] Not tainted syzkaller #0 [ 691.431361][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 691.440160][ T37] task:syz-executor state:D stack:0 pid:18736 tgid:18736 ppid:1 flags:0x00004004 [ 691.486405][ T37] Call Trace: [ 691.489739][ T37] [ 691.511324][ T37] __schedule+0x1322/0x1df0 [ 691.515906][ T37] ? __sched_text_start+0x10/0x10 [ 691.585445][ T37] ? mutex_spin_on_owner+0x1e8/0x470 [ 691.590830][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 691.595971][ T37] ? __kasan_check_write+0x18/0x20 [ 691.601129][ T37] ? trace_contention_begin+0xc0/0xc0 [ 691.606538][ T37] ? __kasan_check_write+0x18/0x20 [ 691.611711][ T37] schedule+0xc6/0x240 [ 691.615903][ T37] schedule_preempt_disabled+0x14/0x30 [ 691.621420][ T37] __mutex_lock+0x81e/0x1b50 [ 691.626045][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 691.632852][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 691.638259][ T37] ? cred_has_capability+0x281/0x380 [ 691.643588][ T37] ? selinux_perf_event_alloc+0x110/0x110 [ 691.649339][ T37] ? unwind_get_return_address+0x51/0x90 [ 691.655029][ T37] __mutex_lock_slowpath+0xe/0x20 [ 691.660095][ T37] mutex_lock+0x102/0x1c0 [ 691.664480][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 691.669590][ T37] ? ns_capable+0x91/0xf0 [ 691.673982][ T37] ? netlink_net_capable+0x129/0x160 [ 691.679390][ T37] rtnetlink_rcv_msg+0x75f/0xa00 [ 691.684385][ T37] ? avc_has_perm_noaudit+0x268/0x360 [ 691.689794][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 691.695292][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 691.700733][ T37] ? avc_has_perm+0x144/0x220 [ 691.705442][ T37] netlink_rcv_skb+0x22b/0x4a0 [ 691.710242][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 691.715916][ T37] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 691.721276][ T37] ? netlink_autobind+0x1c0/0x1c0 [ 691.726329][ T37] ? is_vmalloc_addr+0x11/0x40 [ 691.731149][ T37] rtnetlink_rcv+0x20/0x30 [ 691.735590][ T37] netlink_unicast+0x8c3/0xa60 [ 691.740378][ T37] netlink_sendmsg+0x7f0/0xaf0 [ 691.745194][ T37] ? __cfi_netlink_sendmsg+0x10/0x10 [ 691.750509][ T37] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 691.755845][ T37] ? security_socket_sendmsg+0x33/0xd0 [ 691.761343][ T37] __sys_sendto+0x66a/0x6f0 [ 691.765877][ T37] ? __cfi___sys_sendto+0x10/0x10 [ 691.771223][ T37] ? __fput+0x6ea/0xa00 [ 691.775526][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 691.780860][ T37] ? __kasan_check_read+0x15/0x20 [ 691.785935][ T37] __x64_sys_sendto+0xe9/0x100 [ 691.790810][ T37] x64_sys_call+0x2c2c/0x2ee0 [ 691.795559][ T37] do_syscall_64+0x58/0xf0 [ 691.800003][ T37] ? clear_bhb_loop+0x50/0xa0 [ 691.804762][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 691.810713][ T37] RIP: 0033:0x7fb27db90a63 [ 691.815155][ T37] RSP: 002b:00007ffd2f0b2be8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 691.823703][ T37] RAX: ffffffffffffffda RBX: 00007fb27e904620 RCX: 00007fb27db90a63 [ 691.831718][ T37] RDX: 0000000000000028 RSI: 00007fb27e904670 RDI: 0000000000000003 [ 691.839718][ T37] RBP: 0000000000000001 R08: 00007ffd2f0b2c04 R09: 000000000000000c [ 691.847761][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 691.855797][ T37] R13: 0000000000000000 R14: 00007fb27e904670 R15: 0000000000000000 [ 691.863811][ T37] [ 691.868817][ T37] INFO: task syz-executor:18737 blocked for more than 130 seconds. [ 692.232339][ T37] Not tainted syzkaller #0 [ 692.237332][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 692.262013][ T37] task:syz-executor state:D stack:0 pid:18737 tgid:18737 ppid:1 flags:0x00004004 [ 692.523479][ T37] Call Trace: [ 692.526812][ T37] [ 692.529765][ T37] __schedule+0x1322/0x1df0 [ 692.886023][ T37] ? __sched_text_start+0x10/0x10 [ 692.891139][ T37] ? mutex_spin_on_owner+0x1e8/0x470 [ 692.896459][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 692.901646][ T37] ? __kasan_check_write+0x18/0x20 [ 692.906795][ T37] ? trace_contention_begin+0xc0/0xc0 [ 692.912243][ T37] ? __kasan_check_write+0x18/0x20 [ 692.917575][ T37] schedule+0xc6/0x240 [ 692.921846][ T37] schedule_preempt_disabled+0x14/0x30 [ 692.927331][ T37] __mutex_lock+0x81e/0x1b50 [ 692.932148][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 692.938945][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 692.944397][ T37] ? cred_has_capability+0x281/0x380 [ 692.949708][ T37] ? selinux_perf_event_alloc+0x110/0x110 [ 692.955477][ T37] ? unwind_get_return_address+0x51/0x90 [ 692.961159][ T37] __mutex_lock_slowpath+0xe/0x20 [ 692.966211][ T37] mutex_lock+0x102/0x1c0 [ 692.970562][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 692.975476][ T37] ? ns_capable+0x91/0xf0 [ 692.979931][ T37] ? netlink_net_capable+0x129/0x160 [ 692.985269][ T37] rtnetlink_rcv_msg+0x75f/0xa00 [ 692.990234][ T37] ? avc_has_perm_noaudit+0x268/0x360 [ 692.995775][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 693.001348][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 693.006777][ T37] ? avc_has_perm+0x144/0x220 [ 693.011518][ T37] netlink_rcv_skb+0x22b/0x4a0 [ 693.016317][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 693.021840][ T37] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 693.027164][ T37] ? netlink_autobind+0x1c0/0x1c0 [ 693.032394][ T37] ? is_vmalloc_addr+0x11/0x40 [ 693.037192][ T37] rtnetlink_rcv+0x20/0x30 [ 693.041666][ T37] netlink_unicast+0x8c3/0xa60 [ 693.046548][ T37] netlink_sendmsg+0x7f0/0xaf0 [ 693.051448][ T37] ? __cfi_netlink_sendmsg+0x10/0x10 [ 693.056762][ T37] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 693.062109][ T37] ? security_socket_sendmsg+0x33/0xd0 [ 693.067684][ T37] __sys_sendto+0x66a/0x6f0 [ 693.072238][ T37] ? __cfi___sys_sendto+0x10/0x10 [ 693.077334][ T37] ? __fput+0x6ea/0xa00 [ 693.081572][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 693.086889][ T37] ? __kasan_check_read+0x15/0x20 [ 693.091976][ T37] __x64_sys_sendto+0xe9/0x100 [ 693.096772][ T37] x64_sys_call+0x2c2c/0x2ee0 [ 693.101503][ T37] do_syscall_64+0x58/0xf0 [ 693.105944][ T37] ? clear_bhb_loop+0x50/0xa0 [ 693.110661][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 693.116609][ T37] RIP: 0033:0x7fcf0c790a63 [ 693.121067][ T37] RSP: 002b:00007fff7558d048 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 693.129505][ T37] RAX: ffffffffffffffda RBX: 00007fcf0d504620 RCX: 00007fcf0c790a63 [ 693.137524][ T37] RDX: 0000000000000028 RSI: 00007fcf0d504670 RDI: 0000000000000003 [ 693.145530][ T37] RBP: 0000000000000001 R08: 00007fff7558d064 R09: 000000000000000c [ 693.153548][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 693.161808][ T37] R13: 0000000000000000 R14: 00007fcf0d504670 R15: 0000000000000000 [ 693.169802][ T37] [ 693.281732][ T37] INFO: task syz-executor:18738 blocked for more than 132 seconds. [ 693.289678][ T37] Not tainted syzkaller #0