last executing test programs: 4m11.263522349s ago: executing program 0 (id=127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x1802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0xfd, 0x591000) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000640)={r6, 0x2, 0xaa30, 0x1}) getsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f00000001c0), &(0x7f0000000a40)=0x4) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_POLL(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x304d}}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 4m11.101688633s ago: executing program 0 (id=129): mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x0, 0x35ce9dbc6723c18f, &(0x7f0000000080)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4m11.099513413s ago: executing program 0 (id=130): open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) userfaultfd(0x80001) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x34}], 0x1}, 0x20000000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000a00)="be5b1799b88f355df76dcd", 0xb}], 0x1, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) read$char_usb(r5, &(0x7f0000000080)=""/139, 0xfdef) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) r6 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24000000, 0xfffffffffffffffd, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x2, 0xff, 0x7, 0x7fc, 0x1}, 0x20) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80982, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) 4m11.085152393s ago: executing program 0 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000280)={@private2}, 0x14) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f00000002c0)=0x8004004c, 0x4) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r3, 0x22e7c000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) (async) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') (async) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000280)={@private2}, 0x14) (async) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f00000002c0)=0x8004004c, 0x4) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40000100000200) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r3, 0x22e7c000) (async) 4m11.016732134s ago: executing program 0 (id=134): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0x8000e5, 0x0, 0x0, 0x0, 0xe4}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x101}], 0x2, 0x600100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000200), 0x15}, {&(0x7f0000000280)="777fdcf3ee22ead2d964851572cd881f43d6fb7967d77dff3caa239235f024e13dfa0c5e6e49fe6df871c58de0cfcb5e83037eba5cb4bc7dd51458cf9b75d1bb1bfdabf03b0d5c13a34592aeca794954e6ab7edd2ceb13415fe14bcc04315d10c3a13e0a000000000000637d38099a75345f011c05827acf1131153b3b31c5acc146e547a15838a0741817c4ddb2c1807365e0cbd980583f44343ee479a42c4cfe9c237c0d966da8cf14ed8948b51d138bb2abd543b2ab485662d6d52ec2301d5b2f477ff8bdbc421e328135e0de0169155e467aa16dcc34d71019a6930d672c008740c4dc67a2c5e2", 0x7b}, {&(0x7f0000003500)="31e582f478ec4b9df9f1d01f1583e5a776e4f5c166536f0d6cff0a77b56f11f362bbb1e721236e00510e9d864f3a6f1f0b8d3476e1763c634e2c1927263d4b2be35061f94d365a9b188f91864468a404c9dc0e10626ab94bd9773624b0953a5fb5a050c8aea43ebfc42a066182a83ac1e83a9e425971780335ce14be59e00a575a6eed62447b0b8a485d8dd47fa63fe3644a22b79a0ddd6f1f8e9a930151f6dd59bbd848ae4f06afc808b62a699482fa96d0d197930a243afff2b5f1272b4c36e49550cf6d0293c63a77730f878d50d0198176c88f7d83cdeabc8e9b5186bd955b2e244b4b8338bcdc47890f5b63f725f5ebac47ccbd6cd696a0db935d03a2c627950ffda93d6cc3312048e2389267be41616ebc1396cab6776dcc29d48a91455b02c97f1b229cb79e27bc63cb940f77527fa2310ff546e0cc0bf17b603e5cc063db31daa4c06af3987343545372578d8058f8101719afd64d8f3cf91deb6301f544b0453e4816f601a5420cbf7098185cbbc45a08af395a1e50fff3fe9b241390762ed148d5cc0921a39be27610ba60fd726c365804e6da68f88c1dbcc58aa2122c62f9d402642c2dcca174418d05ed5577d6b9d7c23a92d58bcdd7df4207d7814f62974d55dd490eaebfda0f734121f57ca932f4e26b8e9621ae52160717104c900153bb7e9f6e033b2013b1c45446b49f0520c5b35ab6bc19f1ada291541b0633e6b9a53b076a438611a0203dd36e24aa988db705f128400735a1b1d408397a5d5e1aad4fa326ca1bb25fd89e04da9a41ae474d480eaff9fe090830cfc56d871520928ad2b625f1cb6554f89848f636983b63f07d44b237b47d7e11260e8872034c71fc63b6a8c81eae527c0292dae5eb051699ae5582f50b1df77cd064fad30da3e57e76af8b69bcd64e2e6ebb2fa1c4ec104885381b353acbc21fc23b9eb15f6bba6db2a0ff69fa7fd18561ca537e213dc4638e4e3ea464f151097becba8ea640845e1682febcdbec4f7f1a04f0121f92bb08c6591217226d19bb1aca9c8fe3deeeadff6cb4eb24f52df855eb7c5a6f489b6198edbefd9ecf2164a7a2ad028ce7b470cc6322be72435b41248bebecd8ca7ac4ca76065df97839cc6d74b703757a05904acb2c9fb316bc2e02a421baf125ee97311d8ee358b704e696336009be8dfaca8605eaf7820e656c27f5bb58345ded4ff6a84cc5cc5ec2589b5e6f8b4595e4a05d4175d38096b61178e550e9e1c06007c7192e16944882dd0d48edddaf6b21393565f4aab26fe88b8b48b67a753fb2dbc4577c965a37368d8a2e1e0bd29f91d0b279d18e798e1e34764fbcf6aa6f83d41c89ed8ea5f39cbce962c0982f667c0d7a844fe4e670b0c2a2934875520049349870a04ebcceeaeba42d946641f1db90d5cf7bb5b305e329757bc80efc1936f394d9d5ac7841b2f383f7fea8bd681c9ec6c51b8b9e1210ae6a95f725d946be77aa5e38ae8b4a239d49fc0d3b4e6f18cfa21384b41cd387ac0e8e6933ada76ee8fcd9624e4e062dc44613f1b1bb44e16d37a020ca036b68c93adde8ff0fdf53ad253cc104e930b0f6c143fbee3fee03295661ecd3d76d7fff2b09831a24d34cea9286817d0821488a19b25fad48fb6dafabeee349c8f42021e1e8e22f8bf6b86947e55ef2b3bb9fb851f8d0cc9b07c98491ea4847fbaf2fcfd68165b64635900f1465b0850bf79f4543ffc2bf431b6ce68ac5510c3df86f9f4ec348ab9d46002a62fd7a5a02dded81269d665619377ebfe423da5c250afd59a6d4cf5953513a61c9f005b5817524a565142c277ab786e9939443d02c49c614bdd7761fe681ccabec04697f7cf01c8c9b24239d665ea4d5f9a91b139adbc93da1390e2dcd0a78de29b42ba621368fa277aa1e4c119c556e55b0c586437bff82b0c26e60fa57a5795af69dbe9925d0106be8df74e6c34f1f1148fa34484472d482ac2fd3b8b9b3ce9f5dbee54b103aec73e20df8942a6497b5be263594c5504a2f3b6d50d337939ecc39d13b01cddab75542f2a1bc85c13e6e32dde1001927c7ae0c5105298957c02ddeb015a6bd08ca2e450caa4c2ad6ed508a39301bc209182a93e9a37fa4233300b9dbe654c0d57de83ca1f716bf80369056a72dc9ea6978c9dc17dc96cb12431660b934935c988888c4dfa1f8e422edda9a7e7e449faa9bf4210ad797fd8ba2728123e9c4c906af767d6fa586628f462f3be84ff02db3be1fe49a759eaf923d4699f8d7e285c76e6b369f4f1fa89b4daea46adeab055f051d3fb91b66488fe9482b5d3dc7f66e837aae6a2bc816f56b3f76813cd1aad43aa5630db9bba53afa7e4af6867e6be2bbd08fe77e43d18955e22411dbb9d3bc487bdd16bba003136070180c743cc189965e20ed2895b4a4cb3eed04d5a7699615943d4101811033e67a3036c612b00fe90aa9fa90f32cb2ae2119b1878226bd33d4b260317d98146873d2074251634c22cb8a41319fed54ce21e302a3db75e2b765cb6b2ceecf29c81bef495be869a3ba719aa8b2e36050a42d5fa8b5e4c32b6e09ed7b26d789f437538a1f8a75e4e4ee9ab7e14ef303e31667c48e60e133685573bf290deb868df143aa96ea2dddaed95b863bb3ad1d6f766020f61de2e0df6d423a8ff3a15909643eb35aeb53d0aac5194a6733d2ec31237e8bfb89878e0a2b5af0cd50ad94c2e270a8f6fe2ded37705ec9000217607a34a3995e916148a983f4dfbdb589bbafb30a0dca3311487533f39a2a2757f5716810369e50ef3c443958cc80e7803a2effc1dcac9efb777a01fd74b228c4d02f452e75647f0b848591953a7db34aa7fa520be0fffd97bc133016e1abf55be12fca2699089c08a2ae7b5d38da1569338b2008f31f0470b52c37f9586d28b2af0d98faf8d04974103051c7c39fd13b3b207d82dd744f72ec8e5ab41697c750ad7644c28cba3b4d7efd0f81835b60f21637e3cf42aae221b6b1519114b73fcc6bbc1d48ead760d5965678b57262d17fbf6086d71a548a797b68673221db88d7c346e3ffbd319f8bfe6c9fe72422ff315e8fa3a5a174c0538e3d81a9ca9553b33cdaf11e58f8e62be0ab5754f93f9f23a99dc1ce9b70411728b614b9942edc5d24095d5774eb7638704d9373adb5906fe7dfb9946e7466465ec0bee7c3f748fe76a66d7543187d48d0b120640b2d6dceffcaad8f25fbe2eaed3f55217db8c184d3fddc761dbbb8d153058e0e2c9c4bf86f42a0e3330e455d92380c9b4a6070c90dfeca0e0cc8c66d07cbc1753b59ee39e69688c831bfe2fa84f93afbc25493feeeea41973364f775301f630c154715606515ea17cacf0c9e99a1c899c3b5fa4d46e559c7d2e68558036e171cfd41a50ef533d80c9146c0c97951c8135d254631cf638ee57fd0394ea5e97154ae47b311cbfb996e1f48a78370ec0756c87215031474f668330256f3bce3b140d2d781da402e1d9cb44325c4dab907dd8facecbc9220fee1c4b95321f696f84e4987d03567894811b2603f47e23666dddae0887da00b5d4490f8fbf4518a1aafb514a5ddc05816156b41456b7f400fe9657f44cd49336e47edb65d2a93713434de32427c348707ea4150cc014687f9293854f44069d853d68183fd82a1cb91d91b32e1abf70dc0a6baabc33ee808c83528641ebf682bc5fd2cb0ca667f168f7479769e3bf940f6219631fcb389603644b70aa3f690303c831f66d7ae4d14ff0074d81f2ed967ed4ce7d6573b853b676f8926f3551c8e2ed1dddbbad0faca188bb22f6182524ce66b59cf4325dcff9e88ec7698608710bd26285a9526817f6e8bb129652c3af844391216240da50d75c5f812a4ed965d7608741418bc1b536f7a40612cac1c18f719364f33ce895dc81a2ad15f937c4a89054251eb3db3821d8affd911e60c44b0ffb9504b8a32d233e54409c7e1b7b2766f0e526d2617d694092904a3ee6b0a0109b72ece86e0a82bc963ba90668592de7bd5b7893d4edafaa6dec9c3dc1f236cc14ae8ca5b4260b354d164305751658203bf38f493ef086dd36396321d8a16baeaf90e9bb7a6d5370c2d3afb7238d6b613dd4f0250b9186f62e10202123930136f9264c36ae75ab04a61e4a22d2da475fa15ae445e0646b1a3c8785fd9eba5565f90bfd53eca35c6dadf462e4f6c94e319d050447344400bb3cf01d6fe76712887f635f92fc849193240ac77ac1194c01620986e287bbc2a73069e219a206f69084e34de920de366cda08793fb10aafe76e96f9dd8b8fbb27762dde22b8f16b8a84eead55b2abad9e5fd15dc265a03ace4020f44076ee31306bdc6e3070fd54e2bb2331748df1eb424b515c0350e69ecc6c20b4fc41cd9f7745033f0f7f0cda391dc15ff6c73b5b8d586664664e77d68fdb946dd1be65d0f69697641f0b0687bee4505a373d4fff2d352a8647c51f85da8a157392f29da0a163f6fb72ff93fc0f764a95049d7b241a7b6d6426cea8c0795f38fe765357833cb7c438f9a3aed4b30a5d9ec2d67cf7cd907e737c805b1a282105b26545459aa40517d81279063b6794bcc04ced47b84c3bd73f8662fb2f547edcee34743c74a8d0a60db5014ffe1a7ed77d4f463e32bb49afaf33d284f4046e30904d85d256f19fc010ae547f61658452c947ad856839fedfa3e6a3c4c3de103e41056db98458a0e6341171f9e3dbffa261de915e4a90b1961b37a6586dec23fcbf0339b4e99f585e1c1dd4e06832215f5d9d922e5f32145b0c76c4279d3e6e3c752b3ee9040b8ae984c53a9987c224d05d10fed194254723058f9a227d78941b32bbb4a69081bd7f696cf87520115d66fdd1ad754a36dd0d0d63cc2d8bb95afeee69f23d15820717ab2618f574d527ebdeb29c6e9cd0530ac9ae1ffbdf10a68996ddb35d5a2df703a04c1dfc09b9c91ab12cc2a8c66d77a4cf0b9fd477693c84d1cbee643dd66c5c0863197432287acb138cba1f411ac72ad8d08f58af9f75632d6db3a1486f42cf9d4dfe27e7b438cfeafd006b948ce0e23004e5f2a5177792b10e6a98aa0d9bae40a53a1c4f9b4db64d33316fd13d8a0f4ca8637860f52acdfb55d58694f98a53f57b0a93afcd4e9cf8f2df71e5dfd16021c397c19ddd2884d7c6c91b2ce91d5d55c56ff28db5682fb2222d0b8237d6dc7753ecd8bbfa756567c7f31920d3ff30020ff1a563867cff1528abd58fb0bd9ff8dbe31982ca5397319c4202633faf4cec8f4a1c1c7c60a656997aaae5a5955dba6df87b8df9adef85407995bd8d186d553367b729c4b4a7aab36100c0d41da27a8f588d4b755ba3c683cf3cbda3ba734a2a547317ce9f9bd3edb3c1997f47027eb943c072c71be9fd9151793166e43d5bf8def0247c7f540ba9fd0425f3eaab7ee8edb64c2d9908501bf2b2d0e9d28b86351cce152e2da30a45bb3ad5974543fa7c7c7992b2867d1abc102fa4457a0ea82d5e612d723518d87a3d52c5db27bd1f4f1aa9d78242329157336fcf7ba22851b183a87fe24c89ea5c299252da6e859744a503d9217a3bfdd2607e00ffe15b35284a10ea3de46931576a54e7b22239d0c3960ced09deeadb49256ad8c975a73f413a0f3757aabbc952ebafa0056dfe8ef0da4692d0a40de4c4c5ffd6149ea95945578d40b88325b1aa20d6a6bc5ebc82ac567d36b3f722104ede93bc758abe24380eb1ea43ea8bb523eacd1e5b28f4aa273761d6e3ec2b453eec923b8bac6c9485c0eef69bcc80bf157d303bcdd5811daf03a8ae44784e64b23393e1e95134d965ec9e026a1992c22936b3ef9382a8e4e4d39ffe78bf2ad150e4af26e7b76f3f3231bb9aff3e03a8a0ab1614fbefcf16ee0", 0x1000}], 0x3, 0x80000, 0x4f) 4m11.012003364s ago: executing program 0 (id=137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80000) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fedbdf25030000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="570d5b0373be5315a1ff06dab2d7d92f05fa649c1b18340322eef03b581ba4b42d39378270", @ANYRES32=r4, @ANYBLOB="0c00030008000000000000000c00040007000000000000000c0003001000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x20000040) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000240)={0x0, 0x0, 0x34, &(0x7f0000000540)={0x46, 0xfffffffffffff985, 0xd}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f9, &(0x7f0000000a40)={'ip6gre0\x00', 0x0}) syz_usb_connect(0x1, 0xe2, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008726c620080442ea11cc010203010902d0000100000000090435000505bf300009050f104000050808072501820e07000905020100046040ff09050904400003050209050c0510000905050905060c00020503a88a0360213e20937f1d39e23b4b424951bf3c1dd92f8a3e7ae7949c3d539079328d52f951fb802aa3a03eedc500d8364de6df43ca2fa8726f93e6261ccd774e9e9e54100b8a21818232482cd128f9a89cc7bd2d641961c31191f38f19b67e84d9d902ea9333e75f7f3d801173520e4000e7ed59853577bed992af93a505a3e22beaf18c"], 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x102) syz_usb_disconnect(r6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x38) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0x40045506, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r10, 0xd6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0xc02, 0x0) 4m10.944776126s ago: executing program 32 (id=137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80000) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fedbdf25030000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="570d5b0373be5315a1ff06dab2d7d92f05fa649c1b18340322eef03b581ba4b42d39378270", @ANYRES32=r4, @ANYBLOB="0c00030008000000000000000c00040007000000000000000c0003001000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x20000040) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000240)={0x0, 0x0, 0x34, &(0x7f0000000540)={0x46, 0xfffffffffffff985, 0xd}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f9, &(0x7f0000000a40)={'ip6gre0\x00', 0x0}) syz_usb_connect(0x1, 0xe2, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008726c620080442ea11cc010203010902d0000100000000090435000505bf300009050f104000050808072501820e07000905020100046040ff09050904400003050209050c0510000905050905060c00020503a88a0360213e20937f1d39e23b4b424951bf3c1dd92f8a3e7ae7949c3d539079328d52f951fb802aa3a03eedc500d8364de6df43ca2fa8726f93e6261ccd774e9e9e54100b8a21818232482cd128f9a89cc7bd2d641961c31191f38f19b67e84d9d902ea9333e75f7f3d801173520e4000e7ed59853577bed992af93a505a3e22beaf18c"], 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x102) syz_usb_disconnect(r6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x38) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0x40045506, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r10, 0xd6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0xc02, 0x0) 2m58.828066149s ago: executing program 1 (id=968): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000040)=[@decrefs], 0x0, 0x0, 0x0}) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x3ff]}, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x10001) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80000c, 0x10012, r5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') exit(0x1ff) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') read(r5, 0x0, 0x0) 2m58.79139646s ago: executing program 1 (id=970): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x4}, &(0x7f0000000080)=0x28) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) (rerun: 64) 2m58.739508851s ago: executing program 1 (id=972): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="0f20e06635020000000f22e00f01df0f01caf30f51cc3e0f08f00fb1677bf20f4e5d00bad104b80500ef0f20d8c4e27ddfb8dc00ffc6", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) fsopen(0x0, 0x0) (async) fchdir(0xffffffffffffffff) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd) 2m58.712994021s ago: executing program 1 (id=973): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f23d50f07f283f9c7410f068fc918017571c462a59a110f013866baa0008f4978d1812e4b00006466460f78c7f08a", 0x2f}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m58.678734142s ago: executing program 1 (id=974): io_setup(0x4, &(0x7f0000000000)=0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name, &(0x7f0000000240)=0x10, 0xc0800) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4000, @remote}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000780)={'nat\x00', 0x0, 0x4, 0x59, [0x5, 0x2, 0x0, 0x5, 0x8001, 0x3f13], 0x8, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000700)=""/89}, &(0x7f0000000800)=0x78) sendto$inet(r6, &(0x7f00000005c0)="e3a0f6a66adc7e20b17055c09ac36fbb8a57c39a6ba641a79052e59d558666226bf110dd4dcdd8851bf3c301ad1c95dbdc0b17ba90b8ec5a45397e9b0ce89a7f456aae52e63a9d182f36df07835bbc3e9d78306ed4666287696a6360651bbd30a2a1face95422bbeebe5822868a6f7896cd2660f9641495fbd62778bae39232cdc8830681f90ba03913af914e6a5a03f12c4a861046ccc80c4c5814226cb977589c7896c94", 0xfffffffffffffea4, 0x24040092, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000540)={0xffff, 0xffffffffffffffff, 'id1\x00'}) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x9c, r2, &(0x7f0000000040)="3000cbfeded7475214e7b4fd0b8cf1d06fb70d3b2bd3", 0x16, 0x8001, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x1, r3, &(0x7f0000000280)="6d8b3bd1023c8667fab26bb83db5302534f05d718179e87fb707be2fb92077a9402c50b6f42281788cf8d74c4c5b32d138f14f8e60318e6f0639e3ff2022935dfee30cf2762aec8eb25faac56501d51bccb3f079c8915d7fa1c1b324c127dacf538256b58c9dcc7b0d62", 0x6a, 0x1f2, 0x0, 0x3, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x3e, 0xffffffffffffffff, &(0x7f0000000480)="9b728385bb08d6ce0d76d89e7cbcaaceae6824eb51002e513b1648febcbb6c2f374f2123328bcb469b36d1e27494e045b89729d42880e82c957972d91aa1f3a05c247d78f426a8e03cc9dc457344ee9dd88bf83fb62eead1df9ce7def285828d6fd1b0472be3c7ebfb56ffabf8015fde9ed9657d59399e90ee5df21a21d003161eb0daeb0a157eec76b6cccae1033a46f42e612f2e8e1645a9699404a0a2da283ddc8c0064291636912bb43b00", 0xad, 0x0, 0x0, 0x1, r7}]) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, 0x0, 0x52) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$can_bcm(0x1d, 0x2, 0x2) dup3(r12, r11, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6314, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x4f, 0x0, 0x0}) 2m58.556087864s ago: executing program 1 (id=975): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8) unlinkat(r4, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000002c0)={0x7, 0x4000, 0x0, 0xffffffffffffffff, 0x9}) (async) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001) 2m43.495229831s ago: executing program 33 (id=975): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8) unlinkat(r4, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000002c0)={0x7, 0x4000, 0x0, 0xffffffffffffffff, 0x9}) (async) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001) 6.603380526s ago: executing program 2 (id=3329): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x48400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000140), 0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0145401, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x2}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) dup(0xffffffffffffffff) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x100, r2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.580503307s ago: executing program 2 (id=3330): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9, 0x4}) clock_nanosleep(0x4, 0x1, 0x0, 0x0) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0xa30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) renameat2(r2, &(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00', 0x2) ioctl$BLKDISCARDZEROES(r2, 0x127c, &(0x7f00000001c0)) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="e8cf2796ff196642ef604d98cda575a187c058bce77cb1a203e38799ae0f0f3a13d180970bc448750498de11db7da60f5727b4737b688531707446d761e9b284e472f437cc31f766c264385949a70ecd313247c344861b9fa5b9fc351663dfeaeb080d35fbf55c087721b65a70e8a659bc01689c06b8fe744d41f204cafa6c74245133f762aee8edcff1b509d21c5206baa06406462546a45687e68bf32cf01052f7144e461d343ee23cb384d3acb6a1f0189568175366769f7d895e5f3d33521defad0ad4c26795d3f32850e911377a4b0d41deeb75052be2", @ANYRESOCT=r3, @ANYBLOB="2c7766646cc96f", @ANYBLOB='trans=fd,rfdno=', @ANYBLOB="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"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mmap(&(0x7f0000ddc000/0x2000)=nil, 0x2000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000a97000/0x1000)=nil, 0x1000}}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400add427ab62201745b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003fffffffffffffffff7ffffe7ee000000deff0000000200000000", 0x58}], 0x1) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xc) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r2) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00042dbd7000fedbdf25030003000000080002000000080009000000000008000700", @ANYRES32=r2, @ANYBLOB="060006000100000008000100", @ANYRES32=0x0, @ANYBLOB="05000d000500000014000b00ff020000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0xc001}, 0x4010) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r9, 0x40309439, &(0x7f0000000200)={0x1, 0x4, 0x16}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="b9bc030000b8b7000000ba000000000f3066ba4300b006ee670f236c660f0766baa000b000eeb9800000c00f3235002000000f30c4c1f95a9021ffffff0f79dac4e3bd0af100c4c3b57d2f0c", 0x4c}], 0x1, 0x11, 0x0, 0x0) 6.562693487s ago: executing program 2 (id=3331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000c40)={0x1, 0x1, {0x20, 0x37, 0x10, 0x200001e, 0x8, 0x40000a, 0x5, 0xbd, 0x1}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000) pselect6(0x2a, 0x0, &(0x7f0000000080)={0x1, 0xa, 0x0, 0x5, 0xf039, 0xffff, 0x2, 0x7}, &(0x7f00000000c0)={0x5, 0x7, 0xe882, 0x1000, 0x5, 0x2, 0x7f, 0x800}, &(0x7f0000000140), &(0x7f00000001c0)={0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000300)={0x78, r5, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ab1670bed041cbabf26656a58fc8d80b00c316acd308c9cd"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "62d01d72d220bbce283869bac908f24702fa4fd84988d303"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x28, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) r12 = socket(0x200000000000011, 0x4000000000080002, 0x1) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r12, &(0x7f0000000d00)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe4, r9, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x10}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40088d1}, 0x4000000) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r3, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffffff, 0x41}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20060000) 6.498108398s ago: executing program 2 (id=3333): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000440)={0x80, 0x6, 0x304, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = epoll_create1(0x0) fremovexattr(r1, &(0x7f0000000240)=@random={'btrfs.', '::*,\x00'}) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) r4 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20008045}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0) pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 6.481048789s ago: executing program 2 (id=3334): restart_syscall() (async, rerun: 64) restart_syscall() (async, rerun: 64) restart_syscall() (async) restart_syscall() (async) restart_syscall() (async, rerun: 32) restart_syscall() (async, rerun: 32) restart_syscall() (async) restart_syscall() (async, rerun: 32) restart_syscall() (async, rerun: 32) restart_syscall() restart_syscall() restart_syscall() (async, rerun: 64) restart_syscall() (rerun: 64) restart_syscall() (async) restart_syscall() (async) restart_syscall() (async, rerun: 64) restart_syscall() (async, rerun: 64) restart_syscall() (async, rerun: 64) restart_syscall() (rerun: 64) restart_syscall() (async) restart_syscall() (async, rerun: 32) restart_syscall() (async, rerun: 32) restart_syscall() (async, rerun: 32) restart_syscall() (rerun: 32) restart_syscall() (async) restart_syscall() restart_syscall() (async, rerun: 64) restart_syscall() (async, rerun: 64) restart_syscall() (async) restart_syscall() 6.287743633s ago: executing program 2 (id=3337): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(r0, &(0x7f00000089c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffa}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="cdbff55020c60c94af736f45baa39261d24e7d35ccd03e4f64db0abfd26dbf302ef093e0590dededb9a74c2050efb3abb692e7ba5fcc3eff489921af6f948a5068cb279bbd2c668ba936277e9e6d457aa4eb9f57f2bf2586863e7996560898ded9505899ba906edb6c41437dcdbefb17bb2527c5bdb1991629221556892eff9b", 0x80}, {&(0x7f00000000c0)="5f5aec3c2db90ee2a427387cbf0a8448b8804fdc16327d7d11d881605f10a48c785e47bc11422d0e3d88270b92028234a423e8cc865b7457f6fe7c6c160a2e51168a728fe5e43544287add5323990835d8d7ce47810a3f343ffd0ab7773bcdc8f215c8e64d297029ee1d2214bff49f2349d7ef5cfbee3e", 0x77}, {&(0x7f0000000140)="bdf2ab15e133d94b4e5e23495a483d68a1dc6139fd8f975ad978f0e428a0dc77ff7845ebdd5b3f689d3bd07699e1112bbe9c84a1566b03ac46ed07b19241", 0x3e}], 0x3, &(0x7f0000000200)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x33, 0x6, '\x00', [@jumbo, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x2, [0x5, 0x3]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x78}}, {{&(0x7f0000000280)={0xa, 0x4e20, 0x4, @remote, 0xca6}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000002c0)="99fd9c3a4883487e863684f999cfa702971c649fb58c3691aa447c4c8360c92183062c7c6b6c3b526e549a5ee4fa77de09022b0cc649972144c7e6f107462b1d934077acb395150afa9de6b7fff00cc71dc6a8768071b440632689f049ea92b1ac2ce8ff81807e182e10d1217fef81170972d2705bbcadf5b30ef9da7cf33e35cf9afaec4b2d0d89f3f1c7a213c4a626c9448c9cf06571e017f9449a18587ccde2e1e46b2f5ee6dfdb38ed8739f49a6e529570d78ab3dc72f8023caaaabbaee9ef6b3790f752aaca0e7e09", 0xcb}, {&(0x7f00000003c0)="79a0fe417fadb57391915ee374d62ed5558ede7371500c117da86be4e6fbc5db2e2f1dffda1a89366251fb0ad90322c26a27beee4ffcb010e5484bdf528f4716ce1388c66427e37eaac71df37cfe9e856ffef55742ea26f405cde7b2dc5a25d4b862db137408e8acafb91f2d50b1190a223c9bbb9c4236e95eedab73c682531fbe8b787f7ca465c178b9323319a6c28439c5476ca3bea9fdefc618e486e801ee76", 0xa1}], 0x2, &(0x7f00000004c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hopopts={{0x68, 0x29, 0x36, {0x25, 0x9, '\x00', [@generic={0x96, 0x42, "29dfd180713503d145ea3c1bfa7efd988c0da73099b0de22b1bcd6e5206fe3aac832949f88d4fdfd4cad7bd817e44642f26cc6c99f8fb1b6f5e7bf8cef87353eca5b"}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000540)="b13010fad8ba7091de136e095e5cb9c20c3094f67baf41c7a6f28fd32a806b9d1b4731db63ede2cc1c78f8643a3ba076d4199ebb72a94f17c4cd38366fc6341496f54a85a2cc634a2f22eba8924f03d5f6981131f6ff775d0e8e7cf4b249c7f67598a94f08e3041e1a58cadf779980348569444e98221206cfc5a9b5ea521229caea588815b9c528ae40fef0b62cb3756a87d0e2ac0c594ae08f990b94310948ca0ff9113c6f54667d01fc103bb3015e9be02c2866fe05a263f1586cdb21825710c8d89538eedd75e68a6cd2e98945db49e31745a50e0c7f5b71fcd767", 0xdd}, {&(0x7f0000000640)="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", 0x1000}], 0x2, &(0x7f0000001680)=[@hopopts_2292={{0xa8, 0x29, 0x36, {0x8, 0x11, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x9, [0x3, 0xf, 0x7, 0x7fffffffffffffff]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @pad1, @generic={0x40, 0x35, "5a0168185feef689ee668c6d572ed3dfd54bb2ba98615473d6da130ff5103602ea0ad09f4d22e8630a36bd7a34ab7d2709bd1f62aa"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0xe, [0x80000001]}}, @enc_lim={0x4, 0x1, 0x28}]}}}, @hopopts={{0x48, 0x29, 0x36, {0x29, 0x5, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x20, {0x1, 0x6, 0x6, 0x5, [0x8, 0x8, 0x7]}}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0xb}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x88, 0x8, 0x1, 0x8, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback]}}}], 0x148}}, {{&(0x7f0000001800)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001840)="96e0f39f5aa940d11b2dc9192c62a8a59cd04a5d57912667f01b8629059cb66de0e7ec107aed986f839204542e8368ed137a940b7c83960ed68c22f4e50d8cabb05653b1d2754326d411f35b3b4eb039405c5f0a14bb26d4177e9fcf2eb3922846e4f3dbc03e29de89820a2f26e8be476678ee8a4d562b665ce8a35f4b6ae8c16484d47213f6f49df06891fefe6c3cc5597fb7ae85c57dc6d873e3a573f91a7623312543bc47ded7ada9767741c881d3dc3cd08d2fe6642b2a0b9d67fd2ade610c2b96a3696c2c9456b1980adb0b", 0xce}, {&(0x7f0000001940)="61d59a6a5a040c74fe5231ed398009ffeda176115fda2166e6b51c417074976fda24f36741ff70c14ea3daa8ef5fade499e7ccbea09c8024257f95eeaf9c0c60f057f53da45719753d44cc9f02323e88f46c70b45e4fa5bbdc94", 0x5a}, {&(0x7f00000019c0)="acc22b8b2c771e2096e7c4b26dd7d8db2924bd6a31bf2965ef03a541e19dcdd76207f25d9a520797f9cd", 0x2a}, {&(0x7f0000001a00)="e59bed089319f86ab4b545327fd38cffce4fb53b003ea1a5361409ffe483750b54f80f9dd546bcc533f497400348bb6415585b65c636e1cecfc04950f50508c77ff587", 0x43}, {&(0x7f0000001a80)="c7d6e582659bc878930b44fae7cff48a33273679be32e8a74df79860a4d2b89157717b0b57f0214b8cb667a002708d7b2162c06d7a3a224a04d69e82f12a4f97395eac674e8fb756a5eb794e47a1c29c5a", 0x51}, {&(0x7f0000001b00)="8fc3fe642cf9279f0f82b266bfb1a2ca6b8b47306ac26c9c08fd23a37fbee234d56c9466e2cb3ba27a2cff22f43a6890c4c3189d8fc1e05da98beca0bd055ad57313bf56223e09aabc53f5fa955ee838adca6468f2d7b40601903489f88ec6539f41ef463d2cbb0900a5f9e7e5fdf4fc486915fa0ac870484393a4636456c145dbac239a59b6056b06231ce82ab21f24ac798376", 0x94}, {&(0x7f0000001bc0)="d861fcb150dbc842b78ba5168f6ab04923e506151d8992a045046f2507f86403cda5c09bffb0d1eba0a839b34718623af78c0f16d97d0ee875", 0x39}], 0x7, &(0x7f0000001d40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xa}}, @dstopts_2292={{0x1038, 0x29, 0x4, {0x2c, 0x203, '\x00', [@pad1, @generic={0x5, 0x1000, "182a8adc02d50abfb784ce4ee8e472e414672a394a5f7268bec4f4c29da293726671a7daa43bef21e35fee374ce1892f97b653cdd1c0967b690a4f3a23274e6069c245feeca646d0858760f88fa4c295d13816f0c0ae1adeb38ada413417bab0957aa50b3f7f7a1e54c3d01e88c629381d8cb20bcd7fa366af74cd71c54c67ef1f6615c5d31b6ba60d06ea3eda3a995362de523fd768727a821b98cfd50b20948167ff2ed9493018c94fa815a2d03fba943e36e45fa1140285b91b819bf1a7a68e4a5871087d2185ecf873b7dc9a383ed1b0d54adefff1d638da936a648630d3280c4047e7b2ef338d4db77eb423f1748720317606742d1ef433f5f6b3d655123a05086e03435c364ffab6e01f53c007561d33525bf75c6462084ba5346a490ead8dfa367e4546425d49f81bf81760c65b0ebe9f7204e0c2d975b65fb258387950e242093471c30608e52bb1fa90a28983b4c71c9c6f98711f1dc0bea5f6f2524c27dd02690ff5bba04fe4c08dc8a67eaef9a69f33de8ffcd1ba8382c15331b5804ef675786988a18953f48b53f922d3848548e001759597a630fa24a66bff5c6cff6e13203412fd6722d89e2aaa7e3353d78a3d388405840dc3e406fddb7e0a1ffc310d9865a3a4360eb2aa48ee90e995d588852d127ec77fd3dd70abd8e3a153ccba9ebb2743847a9c3fea2caa62ddf6c266f64c52b813507578699ed8d06bf8fea8fbb0dfd529cf450fbd386a62fb29ca70b8b82628634c6c84498164582f2d5d169756299d1dff62b91d90d51282c1f4a65d7076d1565836c607036dbafe82c6c03abdf323ccfc0af5981e848ff5c65ad02d0b06fa88db1b35be27b1f1bab40e91c9f1a72e4ff5ee6ca8a217da07ba77612761dc78b48094128262213b0def56d44bda2200735cbff2d0634a82c96bd31bc8360ee4f2abd88d17b3a25a8c96c983348747461b1e06288ac96900d09482f02ec13a12c58842630cb5e55b13aef9e2c9bdb2a25947dee26dcd27139c97d108fe8d3ccc5319037f78f7b0deaf4fab9b5ba098b88ccd6912b8ab452c4580a60b91062ea2c59f136c14f54c3ee345f6f1403f7d6a8262f88b1b3ade9364a92ee2079dc5e15be3ebc6aaafe011f146813b7836daac155bbf2360e3baa329e002a8f59747ffd5f893cc1ea3c0a83a8f023b8d0f60aa5ea310b57a2af5e2411eb43dc7afea121800f100a96e7496c9fbcec9d471683c4a8392fb5512e7b848d8e761ecc14d0b90584193a012ec268795b5addf6da81ed5fd78b00a99c3e7961cadf64750bae5dae8131fa4289cc3d3abaddd4f3af915edd8d78a88a8562cdd415de520a320b96638dec5cd80bcbb4df87184593eb7f5b3156c02f1d55c63090d559815a84daf7414ca60a3c0ffdc93ea8d47806816de56a60d8fd3711a836234988c9cd136305fbdc88eb924aaa19845eeba2bc6192c0ae778b197bf747f92bacf342ac44501784647ff89f6b9e8b261db3c7b6d4069176a96950f993fc9a6c6ce06688bb5a12be8392fcf39c75cf7f59aa0641cdacc7a71387ef8c8069e9ffdf5f888dfc773fbd41c795353fa61db40c7afeea68514e25d0faf3914d16fbf936b8782fb9acb89b607db7db96a17e6a6ee7fb7165e6b0bf3115e2376256fe87c3b121d563ffe770cc37fb47854c16a5ddde8b33b7387e1e4deab3e28b7928a2e7cdbe8563481f1080e96b1399a11e0ecd227d6c8d270ae54a48768e55bc375c45999e636b66c754827ef6512106a5260e1a07338a9c00c33069ac3ee43c8486705557d8f4d088a2f33254376cca61a2bb8cc13e417514e65e6535722257b361b351d7c66d9deb44c4b85677c1a882e8b9d99f1dd679e495628b4cdb00a55808469d9c9b73993831be90e8dbf77ef1952612aa70144426f95fbf2da14660cdc9d012ca792bfa06c8dde4c734407e9e395ef3638054a4ad6f46037b432e65f0b0922ce4cb388e1f7cd24ba5e1925c2b541cfe4be5ca8b02748d967bf375d94f7e84fe416ff1634639fbf2f02e41f60feeab8c8217e009ea287c23eaaa95a95e01e9aa5989e4d8c87d3e4881ab2bf808d58f7514d50927e04830463a999f2e2eac74dbfe824d463c8f0e84599540ce3582b7239078f548c69eef8328928faa686005629f02e1e83a91f53abc35fb11673f644558f77a43ae161b9bbce9aa2aae87811d970349d7e8a2d2bb4d313de7273a8a08f5b345b8cf4214f3c5ac3df24958324b3423f8ddbb314b6cc75cc8d9d3f0dcbea41e096903a90abbd80a743da23b1defefbdd31a3003823b41685b6ff51cb572df3c0bec988e43f750ce7c49aa4b3c919fa7e07c2901ef4e92d6d1b99c1e6469e3c8d1d9f4b8e6333539ee3cc898447386f74fdd4996177a8a1869454899288b300f1cb90a69b1db7f80882be5df4e340a8e9f2fb72be011592a50b35d5a7ce884b1eb22fea97821d9ceb227f14f9e0794ce81b1b350c5e821c14b0d889d94604d6478fdf56da4e0cbcbec3f45f943d908f468dcb992d6dadaaddea650464e80a6464b5ff6787ca91d47af13b45f0d22cabc4f99543eff76bf568ac8296ba9fe7a142a44cd22eb493992fd75437cd4287c512a0d1d41c10b44f6a2e3285772397ececff990fbaaf7abab894d504446349798fe820bf6db5ef344d4e5d06db7ef2e2132f8009e68b7bd73c01ec1a87e8d393cc9f7215d36aa6f12670f226424dbbf7611d5019b9d2c19938c29b1d2bbf10567621a0bb359cf0f3cb8dfc1eeaaeee39b4b66d69945352bd079271f18bbf2f45c091381e84e891fcfff266544c2a1c46f233c9f0d3f5b5477804163ff8761b3bd4ffaafd0e52e137c2add7c1e3dd9ed6f59843640e741eba7aa8a8c1d8bd5d03ec7bf37f150a50f1db1ec2de175c5f0e8fe430535b6c17560573cb849e0980a9b1f13dd24c0fe44393fb7f943c411f7d3e43fd184852a104e84b964ae47a880b75a56d3cbb744de8a5122f7fa90649161a9f09bfcd4e99dd4911b532dca014c60a6fa8b8626572da6ccf08cb499af3c01dcaca8178298489d6f736d517b5ee267f91b9ad349a5f8eb5ae7595ba164407ee5893936510c46ad04b05754af58ffa843cd064cf85488d26d502a9e91501f0ec065b3066f21d9836a5b1aefce9aacc6b57b7a68d496ad87306e43c49b8b2ef04891a1c5ef9f479c19a96191d66249a4db5c3e7e4bc23236211c6fc8597b3a859734a386042a6801a8e365c081b4d13d4c931a4dcb715a44ece323b498bbe4ecf7d218f9ccd0259739a7cb6c2580548008b57ee5471febc613b49735227559f5be1dbd55569acd065130f7875b68e08995a780a77ca6fb5b5c1d46f91e950d09b55fb488ac7300cac9a72c4bc39958fa4e639372c7af977c8ae15191be604797b09d73083f339eccca814f89d7645b8b9b30db979e31fec35598ef175ff5630cbcb64e861c8348e650ae642d742dc57a8c02dafa4195f2f9902d07c99e2e17cfa1d4b8a134a400122fcda470d328e90d90cc5c9e655266ae694ac8d2cefcbbdfbeb609d310820a6d960216b251d4b7e8e769fed8605ea1be9b3c0d866d95d86b79dce7cbaa5565be5fd2ff1bb96ed29c9f92e7fd55135710e16ad210bf75501ca4132c6f72e741d37bfbfbdfa79d17ee0079ca5772dca024bdaefc9e1de9ef87cc97b2ae40ab977c1787b41e96d63299e05dee92737a16e7d3dd4f356148c83a0dcbe877e9584e95d5d82ad2deeed3d4b8ed41152dbb80c2b6f798a201c482574d43995a444d1ffea9332b4229b90b66ab9dc23406737cde84b3d513abdf384fcb7cc550c1ae80738cca4726bfe0acbd639081f5cafb0daa095898f482158f6f7b27ffbfe3ef7a9404e35ac1daea8eceba3d5aef08524add12bc723e100f2ac5aa38e3df26adffd621d6ac3421a154a4fb59895389197d6554ef5dc826a253ad7220a04fe4b70bb66ee290acef6d3e1c388019e0202327d31e8a71806bd86d93025299572f3ea6b17bfc4aa0ab5c3c05981e7c00f6206e7241bfc0975ac69d507fa24fa9f6ca68b9ce1f30d2f0678ecad40b05fe6082d1c89877401d89c16bc9ce83e3f2bcdb7bbfdb49add0ea427604cd2809a3e933ad2b78f99cb39eb3dbcbb6d1d70de55342ca6a7263be2266548b1cbc38d06a201333a330685dc773aeb98458e318ded379de0f7c4b208c8c58cde75c144207cd09dc80c3c355bbccfa620d28193e68cbc5d74125946c9deb0fddc30e9ac75f8b5c05756685093222724f5c2d358a12972f055e623659a27b9ac60685d082111571457f00ee0c2984be116b39efa5d6c1ffce03b91cc1e5ec2cdfa04d2ae1e5d7a09be376bc3edaf72ceff0e1215e8430355790c2fb44a954d5fe6f5ee10ea985dd0ffc34cf199d573bfabba1e19c82f08e04745872226c02bf84ca7e8ab0089888f3e5cba5ae68d8c30897cbd6a053c64131ab8782f97c6c6e0b5cb671391613fc5d2aad6a5d463a6f1a27f9877c9b2b17192774d93450a691ec45713959ea8587f0695700719811ee1122cf5a797bf1ac3abb575f0f340a0d9f1762fb6692e5bb5dbb5ea1ac6954b66689dfc40daa4652dfb4aba692448f91a34f5e3d46e9e99e7cced9d7a62110324d115c58df147f79f538a0b8aec23d991ded2e514c0d9f65a3c93375e228dabb5642cbe692209188fe1fb637adecd64211a1ed2faa90e47c0926acbdaee7754b97f79ffd0ec1607bb57f3e48871969c5e71d5bc039b0cf0d480413010b43d42a8027433e07aca96c0ee6a878e0baf20c275434f56aa5f065e2f3d21098d4bfa021a56abe7f67045ef7e68678850ba6f4fb88b1ac06d38b995fbc1d17fed1d9ff605df61da067bcd56859655e05b9823ff728a3fa7dacf9ad58d8f81c240aee07019e852b2014534f561faa2a00d926dcc22c38cdbafc5dca34a1fb74e8d09fd3dc130b65b8421e9596a7593f9bfedf69839e8373ad414771dbd9416f3546205b5885265c22aa3cb3f8ef2297fa0c75ab4f094a3cc30f27b32d35a10e802270f71d76c047201f876d75200454026e81a8a2a2571dee5f3a7e19c1d31be36ae7485f49cb2b987656bbcd3ecb094b89f7431ea692675c9a2d65e12c04378ab99ba9220442d5e2c0dfd46baa4a6ca386eeaa3105f7c54f2d1dfedb0fc4a4a2657903775133eacc3ca5ce799c00a3f674f19f507ed05ca4571790326e92c5538c3886e5ecba00303718d33a22a751c153a7c86ebf4ef4c72644ccd1ad188eeb6ce57cfb991a408d7e3b0e21a15b1a7836ca62c180194523c8ad473521c54892e9ac3f748df2e911813d8f65cc34f4e1453eab209294347bcc3e7bb04401b675c65df9817d16000ed85860a950a285bfebd80c90c9be7046b8223d1d5fffa4201bfa96de1e53c3b8c4ab526e8484b0328a30001e706236da15dae518d3d1b0cd5724e822727664b834b20a22b5686550730c9a87ad8702058204d38a9706613a6bcc44647b0f717bcc0422ae91e4a309b842a98640659ee38236839d9f202c858e4244ed0cfc99f5e0b61c0e8137729188a78ab56480de8ba0b8bee51649bf8b6bc09986f07bdf1e04c2dd1f70b729debd421f9431bce3b10f3450e74d23b2a5958e37efa1fd56a1609253a37a25f939ed790cc1308e84f67de41df1f3c1e3ef37e6ec183c3e88bc3817952dbb9a5a5439de97b82639f9bc9d2a9d3b72d433c6bb44af0926a034ac3891a6c52592176ff8064522357793bd0875a139916cc680ade2e99b25f4de9499f7784cb78a007d56e8bcb316ec1eb0068ee00469f97d8"}, @jumbo={0xc2, 0x4, 0x8000}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x88}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0xa}]}}}, @rthdrdstopts={{0x120, 0x29, 0x37, {0xc, 0x21, '\x00', [@ra={0x5, 0x2, 0xb}, @generic={0x8, 0xda, "ea7d270a38f21584f9064d57abf5020568795ae7aefaba391f3329b1726f4f7441aeaf9205ecfddd1ad2aed78c0f6d480802954d26c75eda02f954972bedf401957c8794b6ab3f913b831d36a667423e717afa490d3a00b21a9d739844fbf4de7774c73cf5f6d53781ec86ea2f0e06df51b5ac19c3c5dba0297b868e0c7376ae888e2efc3c85a03c070fde69cb0b48472366a20d57064cfe2d495877e83a36e482b776af0f56343dda47d744574f1ee3c75f511e816975284bbe4fd4b10b469b47b28a731e12caa12001cea19865d3ab5fffdaffd85f4ac496ed"}, @ra={0x5, 0x2, 0x6ed6}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @rthdr={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x1, 0xf0, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x21}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffff9}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x1218}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002fc0)="dfe9aeaa041163da654fed396fb7a5b2163f3b21324298a5e27d6c796e7a290e7dabaea5fab38ac44f63155f769653657a1f3957a3b15a663455b9eccd7fd44a8dd79d6ee6afd5246227cb16c72f5f6088b1478ab2cd43728e0a84d2750ced71ee8346c5456c8b14e8374afbc9ada9ac167707d3595f76e76a55efc0a9a785e2981379598814a42b877ad40731d71af99f16b5c8a727c7d289513acc2da6956bc0af7c2deb60514f9fc15a02267260c0a579f5a809", 0xb5}, {&(0x7f0000003080)="dd7b69d065a46dadc8a82e2f", 0xc}, {&(0x7f00000030c0)="e7c4f1306adf54ed7e16768a44bf49f0a1820f4c1f2220b6713aec658e6429c3ca97634534c1f147", 0x28}], 0x3}}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000007180)}], 0x1}}, {{0x0, 0x0, &(0x7f0000008440)=[{0x0}], 0x1}}], 0x7, 0x40) 6.221901914s ago: executing program 34 (id=3337): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(r0, &(0x7f00000089c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffa}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="cdbff55020c60c94af736f45baa39261d24e7d35ccd03e4f64db0abfd26dbf302ef093e0590dededb9a74c2050efb3abb692e7ba5fcc3eff489921af6f948a5068cb279bbd2c668ba936277e9e6d457aa4eb9f57f2bf2586863e7996560898ded9505899ba906edb6c41437dcdbefb17bb2527c5bdb1991629221556892eff9b", 0x80}, {&(0x7f00000000c0)="5f5aec3c2db90ee2a427387cbf0a8448b8804fdc16327d7d11d881605f10a48c785e47bc11422d0e3d88270b92028234a423e8cc865b7457f6fe7c6c160a2e51168a728fe5e43544287add5323990835d8d7ce47810a3f343ffd0ab7773bcdc8f215c8e64d297029ee1d2214bff49f2349d7ef5cfbee3e", 0x77}, {&(0x7f0000000140)="bdf2ab15e133d94b4e5e23495a483d68a1dc6139fd8f975ad978f0e428a0dc77ff7845ebdd5b3f689d3bd07699e1112bbe9c84a1566b03ac46ed07b19241", 0x3e}], 0x3, &(0x7f0000000200)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x33, 0x6, '\x00', [@jumbo, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x2, [0x5, 0x3]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x78}}, {{&(0x7f0000000280)={0xa, 0x4e20, 0x4, @remote, 0xca6}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000002c0)="99fd9c3a4883487e863684f999cfa702971c649fb58c3691aa447c4c8360c92183062c7c6b6c3b526e549a5ee4fa77de09022b0cc649972144c7e6f107462b1d934077acb395150afa9de6b7fff00cc71dc6a8768071b440632689f049ea92b1ac2ce8ff81807e182e10d1217fef81170972d2705bbcadf5b30ef9da7cf33e35cf9afaec4b2d0d89f3f1c7a213c4a626c9448c9cf06571e017f9449a18587ccde2e1e46b2f5ee6dfdb38ed8739f49a6e529570d78ab3dc72f8023caaaabbaee9ef6b3790f752aaca0e7e09", 0xcb}, {&(0x7f00000003c0)="79a0fe417fadb57391915ee374d62ed5558ede7371500c117da86be4e6fbc5db2e2f1dffda1a89366251fb0ad90322c26a27beee4ffcb010e5484bdf528f4716ce1388c66427e37eaac71df37cfe9e856ffef55742ea26f405cde7b2dc5a25d4b862db137408e8acafb91f2d50b1190a223c9bbb9c4236e95eedab73c682531fbe8b787f7ca465c178b9323319a6c28439c5476ca3bea9fdefc618e486e801ee76", 0xa1}], 0x2, &(0x7f00000004c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hopopts={{0x68, 0x29, 0x36, {0x25, 0x9, '\x00', [@generic={0x96, 0x42, "29dfd180713503d145ea3c1bfa7efd988c0da73099b0de22b1bcd6e5206fe3aac832949f88d4fdfd4cad7bd817e44642f26cc6c99f8fb1b6f5e7bf8cef87353eca5b"}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000540)="b13010fad8ba7091de136e095e5cb9c20c3094f67baf41c7a6f28fd32a806b9d1b4731db63ede2cc1c78f8643a3ba076d4199ebb72a94f17c4cd38366fc6341496f54a85a2cc634a2f22eba8924f03d5f6981131f6ff775d0e8e7cf4b249c7f67598a94f08e3041e1a58cadf779980348569444e98221206cfc5a9b5ea521229caea588815b9c528ae40fef0b62cb3756a87d0e2ac0c594ae08f990b94310948ca0ff9113c6f54667d01fc103bb3015e9be02c2866fe05a263f1586cdb21825710c8d89538eedd75e68a6cd2e98945db49e31745a50e0c7f5b71fcd767", 0xdd}, {&(0x7f0000000640)="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", 0x1000}], 0x2, &(0x7f0000001680)=[@hopopts_2292={{0xa8, 0x29, 0x36, {0x8, 0x11, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x9, [0x3, 0xf, 0x7, 0x7fffffffffffffff]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @pad1, @generic={0x40, 0x35, "5a0168185feef689ee668c6d572ed3dfd54bb2ba98615473d6da130ff5103602ea0ad09f4d22e8630a36bd7a34ab7d2709bd1f62aa"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0xe, [0x80000001]}}, @enc_lim={0x4, 0x1, 0x28}]}}}, @hopopts={{0x48, 0x29, 0x36, {0x29, 0x5, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x20, {0x1, 0x6, 0x6, 0x5, [0x8, 0x8, 0x7]}}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0xb}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x88, 0x8, 0x1, 0x8, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback]}}}], 0x148}}, {{&(0x7f0000001800)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001840)="96e0f39f5aa940d11b2dc9192c62a8a59cd04a5d57912667f01b8629059cb66de0e7ec107aed986f839204542e8368ed137a940b7c83960ed68c22f4e50d8cabb05653b1d2754326d411f35b3b4eb039405c5f0a14bb26d4177e9fcf2eb3922846e4f3dbc03e29de89820a2f26e8be476678ee8a4d562b665ce8a35f4b6ae8c16484d47213f6f49df06891fefe6c3cc5597fb7ae85c57dc6d873e3a573f91a7623312543bc47ded7ada9767741c881d3dc3cd08d2fe6642b2a0b9d67fd2ade610c2b96a3696c2c9456b1980adb0b", 0xce}, {&(0x7f0000001940)="61d59a6a5a040c74fe5231ed398009ffeda176115fda2166e6b51c417074976fda24f36741ff70c14ea3daa8ef5fade499e7ccbea09c8024257f95eeaf9c0c60f057f53da45719753d44cc9f02323e88f46c70b45e4fa5bbdc94", 0x5a}, {&(0x7f00000019c0)="acc22b8b2c771e2096e7c4b26dd7d8db2924bd6a31bf2965ef03a541e19dcdd76207f25d9a520797f9cd", 0x2a}, {&(0x7f0000001a00)="e59bed089319f86ab4b545327fd38cffce4fb53b003ea1a5361409ffe483750b54f80f9dd546bcc533f497400348bb6415585b65c636e1cecfc04950f50508c77ff587", 0x43}, {&(0x7f0000001a80)="c7d6e582659bc878930b44fae7cff48a33273679be32e8a74df79860a4d2b89157717b0b57f0214b8cb667a002708d7b2162c06d7a3a224a04d69e82f12a4f97395eac674e8fb756a5eb794e47a1c29c5a", 0x51}, {&(0x7f0000001b00)="8fc3fe642cf9279f0f82b266bfb1a2ca6b8b47306ac26c9c08fd23a37fbee234d56c9466e2cb3ba27a2cff22f43a6890c4c3189d8fc1e05da98beca0bd055ad57313bf56223e09aabc53f5fa955ee838adca6468f2d7b40601903489f88ec6539f41ef463d2cbb0900a5f9e7e5fdf4fc486915fa0ac870484393a4636456c145dbac239a59b6056b06231ce82ab21f24ac798376", 0x94}, {&(0x7f0000001bc0)="d861fcb150dbc842b78ba5168f6ab04923e506151d8992a045046f2507f86403cda5c09bffb0d1eba0a839b34718623af78c0f16d97d0ee875", 0x39}], 0x7, &(0x7f0000001d40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xa}}, @dstopts_2292={{0x1038, 0x29, 0x4, {0x2c, 0x203, '\x00', [@pad1, @generic={0x5, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x8000}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x88}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0xa}]}}}, @rthdrdstopts={{0x120, 0x29, 0x37, {0xc, 0x21, '\x00', [@ra={0x5, 0x2, 0xb}, @generic={0x8, 0xda, "ea7d270a38f21584f9064d57abf5020568795ae7aefaba391f3329b1726f4f7441aeaf9205ecfddd1ad2aed78c0f6d480802954d26c75eda02f954972bedf401957c8794b6ab3f913b831d36a667423e717afa490d3a00b21a9d739844fbf4de7774c73cf5f6d53781ec86ea2f0e06df51b5ac19c3c5dba0297b868e0c7376ae888e2efc3c85a03c070fde69cb0b48472366a20d57064cfe2d495877e83a36e482b776af0f56343dda47d744574f1ee3c75f511e816975284bbe4fd4b10b469b47b28a731e12caa12001cea19865d3ab5fffdaffd85f4ac496ed"}, @ra={0x5, 0x2, 0x6ed6}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @rthdr={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x1, 0xf0, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x21}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffff9}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x1218}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002fc0)="dfe9aeaa041163da654fed396fb7a5b2163f3b21324298a5e27d6c796e7a290e7dabaea5fab38ac44f63155f769653657a1f3957a3b15a663455b9eccd7fd44a8dd79d6ee6afd5246227cb16c72f5f6088b1478ab2cd43728e0a84d2750ced71ee8346c5456c8b14e8374afbc9ada9ac167707d3595f76e76a55efc0a9a785e2981379598814a42b877ad40731d71af99f16b5c8a727c7d289513acc2da6956bc0af7c2deb60514f9fc15a02267260c0a579f5a809", 0xb5}, {&(0x7f0000003080)="dd7b69d065a46dadc8a82e2f", 0xc}, {&(0x7f00000030c0)="e7c4f1306adf54ed7e16768a44bf49f0a1820f4c1f2220b6713aec658e6429c3ca97634534c1f147", 0x28}], 0x3}}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000007180)}], 0x1}}, {{0x0, 0x0, &(0x7f0000008440)=[{0x0}], 0x1}}], 0x7, 0x40) 4.908314818s ago: executing program 4 (id=3364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000002040)='pagemap\x00') (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYRES64], 0x14}}, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x8, 0x3b, 0x7f, 0x3, 0x6, 0x50, 0xffff}, {0x800, 0x443a, 0xcd, 0x4, 0xf9, 0x1, 0x6, 0x1, 0x0, 0xd, 0xe1, 0x81, 0x6}, {0x80000001, 0x7, 0x4, 0x8, 0x5, 0x4a, 0x0, 0x6, 0x5, 0x7, 0x6, 0x7f, 0x5}], 0xffffffff}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.784978931s ago: executing program 4 (id=3365): openat$rnullb(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000700)="b80500000053530200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209089a0e00000038010f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x5d}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000940)='\xa8\xabo\x82L\xe4\x920\vA\xfd\xe5\xcaxd\xd4\xf3\x8e\xe9y\x9a\f$p\xe6\xd0I_\xd7s`\xa6\xa4\xff\xbc@d>\xf1l\xc7}\xde8\xf1\xcb.G\x1dj\x03\xb9p\xc6!`\xd5\x15\xe1\xb9\xd3R\xa7\xeb\xbeD\xdb\xddk_\x8a\x00\xd1\xa8rH\x14\xb4\x90P\"\x7f\xed\xc6\xac-3`unuE\x8fv6V\x04\x8e', 0x0) read(r3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.582880134s ago: executing program 6 (id=3367): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x3f00, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@msize={'msize', 0x3d, 0x358fd74c}}]}}) 4.512100276s ago: executing program 6 (id=3368): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x1000, 0xd, 0x200, 0x5e, 0xcd, 0x73, 0x1, 0xfb, 0x6, 0x8, 0x4, 0x3ff, 0x9, 0x4, 0x6e, [0x7, 0x1]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x6, 0xfd, 0x0, 0x7fffffff, 0x7e, 0xcb, 0x10, 0x7, 0x9, 0xb, 0x8, 0x0, 0x10003, 0x3f, 0xf7, 0x4, 0x2, 0x12, '\x00', 0xb}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)=@arm64) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r6, 0x45809000) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000000105000d0000000000000002000008240002801400018008000100e0000094c8540108000200e00000010c00028005000100000000001c001080080001400000000108000340000000070800024000"], 0x54}}, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) 4.511584506s ago: executing program 4 (id=3370): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}, 0x5c}}, 0x0) (async) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000086666028800000000000109022d0001000040090904000002030002000921000406012205000905810300000004fd09058203"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00') readv(r3, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x4, 0x1}, 0xc) (async) getsockname$packet(r4, 0x0, &(0x7f00000006c0)) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x4, &(0x7f0000000000)=0x4, 0x4) (async) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80000c, 0x10012, r0, 0x0) read(r0, 0x0, 0x0) 4.240086451s ago: executing program 6 (id=3378): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x100000000) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x44) unshare(0x64000600) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 4.145077202s ago: executing program 6 (id=3380): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_clone(0x60000000, &(0x7f0000000080)="97bb8c05f58b7b061954fcefa5e5ee76fa147fb52c11ef0f3945f0ae7f6736b72f7b8b71a42c7adc2ad51c833e6383ecc1a89ea17fd470ac1361e387c30779a0c2f03a9ab34d0176576753b4d25d28ee9d14b3367d6c58f5203516bbba9603c1617a397131a80bd842fb8ba7ab1f77042c1d9640e0700b12d65272a1ba3abe246618657e2c8be39ecc8de5bbe82093337133272d3857de2942661f648652f26fa0d7ea16fc", 0xa5, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="fd88cf49") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc8e4) ptrace$peek(0x1, r2, &(0x7f0000000340)) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x1, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x40, 0x10, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xc, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x5, 0x99}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x9, 0x6, 0x4, 0x20, 0xa}, 0x44, &(0x7f0000000400)={0x5, 0xf, 0x44, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0xa, 0x0, 0x6, [0x3f00, 0xc071, 0x0, 0x3f0f, 0xffc0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x5, 0xa}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x7, 0x2, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x9e, 0x3ba}]}, 0x8, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x83e}}, {0x87, &(0x7f00000004c0)=@string={0x87, 0x3, "55f18898e81de5715dfd7d27368a5188eb34e016d093760856186184f3be9ee1afd1af75e7da13c69505736b2a1c0a2c5e9e325c847b0747c24470dd0a26f159fb8969d0df42cb609185c85e40f99fce52fc69d989aee50ee669e81c041b8ecf14954c63eeb65a1cbeafd273dd82b8c362254f0b58af66c141fa797a3e3b46d70bc3953fe0"}}, {0xc9, &(0x7f0000000580)=@string={0xc9, 0x3, "0d8f67fd5a10b2d61511503b0d62f7cd26fab26d938b65171762cae654fb8a6e0d9846c7af099ed65231bf9e6f396185f0ed2d472ae21f691587346115c0026a2d8eee9862e27ed4f1fb472b03d1450cb4f1ff67b969a78d79cb2719acbc112662e78abcecb657e7407308510823ca1c0a8d73a32ee37104a9555748681896a6062830b475b5a2d4b0054bbef63b19bfbf0055133a8af7d427ccf0afb2a6b52b3155d19bfee6fbd9b9dfc2acb4bea79266f72fdc942dd959d66471b461bebcffc07c88498d3dfc"}}, {0xf7, &(0x7f0000000680)=@string={0xf7, 0x3, "ea9ccbc9ac1a69d73654473215cdd505935843ef807ce5ca46221b069064cd16a9e0bbb82ddb1c265992ee4408082264d8f6e41e8e48044483fde3b3b33af78d7d89147464e6fa1f949be3889e627b25af45a208f9fe8ef6da7db85001a19f5063225df238b9fe97881a1eea0a9b7e1b613d27f8265fa51f960656cb15c6d5c4a2f576b3a9e882dfe6b2a49db58b31be0dd3ba85623c7f8c440037682d8115bb55da13dffa66dff8d5dde5af8688768c9a32acf1d9a959cacd5c4b3ac69a74dada3b4eb7816f8db9f524df78ce25d26e8008d84f564a33a098c8ecb9fae8d608a1c7b90b651d09b1d62b7842123add1603b5ecb432"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x407}}, {0x5, &(0x7f0000000840)=@string={0x5, 0x3, "3ce3aa"}}]}) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000900)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x8, 0x30, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "a1"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x5, 0x13}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4, 0x24, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xc, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x40, 0xcf, 0x9}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x300, 0x60, 0x6, 0x0, 0x40, 0x8}, 0x6f, &(0x7f00000009c0)={0x5, 0xf, 0x6f, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "e5e8f8173c28b8e08a88a1a0c15c0759"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4, 0x6, 0xffff}, @ssp_cap={0x24, 0x10, 0xa, 0xf6, 0x6, 0x2, 0xf000, 0x94bc, [0xff0000, 0xffc0f0, 0xc000, 0xc000, 0x0, 0x3f]}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x2, 0xf000, 0x40, [0xff00, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x4, 0x8, 0x3}]}, 0x7, [{0xeb, &(0x7f0000000a40)=@string={0xeb, 0x3, "64c94feda34011ad5ca4d55ea9fa4c77c8c0e2f6ed40a882e79ade575dd891e882d2e7afd34ddd99412da82518e6bfaba19b719e2bf52813d83e37d6d1a9bf74e073a1ee3c1ca086065df722a899ac5ea47de78ea73211f199ca4136dbabce7bbf03f7e565e3eae2e8875428a88c390379c718b0d4e89f18bab355b23153255140740b67e06320606584aaa7aff902ca9f9cf7db39775d62927c823c8f2a1cf9a3428f735633ac711ba862e340c058fe5603a88e4d7a6cd0d5fa4272bd1616bd5f586d489d7028d810a3c67176f16d58184ad71d621021824f2d8b5e0b334d3397f92bd173a2d5ad09"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x140c}}, {0xb2, &(0x7f0000000b80)=@string={0xb2, 0x3, "a0e98d541f1d443e2c5b8e684398701d2953f0c3d211f03bae8f95d3604aa63f862cf9c0b222e3f6634adbcc8c72d3fa9f068f73794e039437a6f80a29af61e9238684bedf68136e22d1839eb2911f1e8bf156eb0ed3c8d2b3772506e4e7643d6234ec139c573337e9bc26edb3556af1cefd9896149b4d06e9c9c7c16b99f95f14789ca0fd736e8ef67a847baa4a96c19e22256976b649b0ba24c40b3a388b48909843abe907246c04b7534c11957b3d"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x405}}, {0x101, &(0x7f0000000c80)=@string={0x101, 0x3, "173fb27cfa1b25e156b0409c0268110c80518a90fcba5f81f2e217df2bdb5712e8414154a0e4c1f202fc740b262a50ad64959461c5537cbd3cb97dd144d69162543e5f5a6ab269463f2e0f493fdec75c4fbbd3ab757ecf32036ce6402000ee2277e0eeb75af87ed117c55578d1cc3402ff1090c61f13a85415eadd9968b971e4bbdb97f663cb991f7fddc2198fa90927d28002650b098244571d41f0375c17af8023d919aa2243cd7e83ce7147e343c789cf33d5077d74e148b871b6dc323534efae964c5731777f7f30f2f3aadf7bb24a935248ccacf212ddcda5998775b62625171be9c1b7c735fda7ae8d1b597a99a47fdb26c864301f4a08e02acd06b0"}}, {0x93, &(0x7f0000000dc0)=@string={0x93, 0x3, "236f4522c11cdd5e6b20cd208c1a3698e2dd0508c9de0468458ea2158547693b65e45a783ba638ca117f01a9535c4da9340404215887a71cba1f2d1a4d008c709b3cb0de4fb83cb9606ef38b0596cdd3b09e5eda61e791f38a0036c5b2526462f8efea9f08feaf59fd3717ac81cf4d3654ca2156e1ba8cc7efc2398c1b4ae7ae292f352aa342753ca59b07a47cb5076869"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x457}}]}) r4 = getpgid(r2) ptrace$poke(0x5, r4, &(0x7f0000000f40), 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000f80)={'\x00', 0xe7, 0x40, 0x1, 0x9, 0x0, r4}) ptrace(0xffffffffffffffff, r5) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001000)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001240)={0x74, 0x0, &(0x7f0000001140)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001080)={@flat=@weak_handle, @ptr={0x70742a85, 0x1, &(0x7f0000001040)=""/57, 0x39, 0x1, 0x1e}, @fda={0x66646185, 0xa, 0x0, 0x24}}, &(0x7f0000001100)={0x0, 0x18, 0x40}}, 0x40}, @register_looper], 0x58, 0x0, &(0x7f00000011c0)="70dc8220dedb34554affedc324ed1a15bc245356c5b2f13f709d21afabad01a5ec71e42114b91336fd5be3dc0f721ad24cdf7538118255ce483cfc939222b4d4289b434bb582810bb5625fe1cfeeefc1cf29ccf50845d654"}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000001280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x50, 0xf, [{{0x9, 0x4, 0x0, 0x62, 0x1, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xff, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x200, 0x9, 0x40, 0x3, 0x40, 0x89}, 0x57, &(0x7f0000001300)={0x5, 0xf, 0x57, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x3, 0x8, 0x4, 0x10}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x4, 0x3, 0xef, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "1079adaec7072b9b828c94fb8f60f68b"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x3, 0xf, 0x3, [0xff00cf, 0xff00cf]}, @generic={0x11, 0x10, 0xb, "30b453ab5a52fc910ca913df6ebe"}, @ptm_cap={0x3}]}, 0x1, [{0xf7, &(0x7f0000001380)=@string={0xf7, 0x3, "9c81dcc525be1e0d32730598967340574a7e7dcdf085e9dd549a5541af7a639b49c32c181bda34724f609c55be922b016bc0f06d142e53f05201d9da1ebf9dc17f4d7370d93cad4caea834f4029d03466e52b8760efac042c42483883a1feabb15b3ed3a95fd511f9ae487df236a89361c7163ddad52ce503cc09f72a370269d43e32945d2a6263acf4274570d93f3459886a01978c4134fb4fdb473d3947b63128bbb06789f97902e38504b9b87388e43ac3872c114e4837bf65177ced9080498a5fa569a333a75356b06aa0aad3878ac02a56ebd6769b22e144ce44ec1e09d8513648d56da9337db42de1a8d88bdf95a72ca24d5"}}]}) syz_genetlink_get_family_id$l2tp(&(0x7f00000014c0), r0) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000037c0)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000003800)={0x2180, &(0x7f0000001500)=0xffffffffffffffff, &(0x7f0000001540), &(0x7f0000001580), {0x1}, &(0x7f00000015c0)=""/76, 0x4c, &(0x7f0000001640)=""/214, &(0x7f0000003780)=[r7, r5, r4], 0x3, {r8}}, 0x58) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) fchdir(r9) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, 0xffffffffffffffff, &(0x7f0000003880)={0xc000001d}) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000038c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xfaadaa677546745a, 0x6, [{{0x9, 0x4, 0x0, 0xf8, 0x2, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x40, 0x2, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x4, 0xf0}}]}}}]}}]}}, &(0x7f00000039c0)={0xa, &(0x7f0000003900)={0xa, 0x6, 0x200, 0x81, 0x2, 0x81, 0x0, 0x4}, 0x2e, &(0x7f0000003940)={0x5, 0xf, 0x2e, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x90, 0x8, 0x5, 0x400, 0xca}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x1, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "ec305fbf604bd080458d32827dde1aa7"}]}, 0x1, [{0x22, &(0x7f0000003980)=@string={0x22, 0x3, "a419bfba007c2f9cd46ed2cd6951baa37af57225f85a8eaa116131551972200a"}}]}) r11 = openat$cgroup(r8, &(0x7f0000003a00)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r11, &(0x7f0000003a40)='devices.allow\x00', 0x2, 0x0) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000003a80)={{r8}, 0x80000000, 0x6, 0x3}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000003b80)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}, @NFULA_CFG_QTHRESH={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.454257046s ago: executing program 3 (id=3397): openat$rnullb(0xffffffffffffff9c, 0x0, 0x20002, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000700)="b80500000053530200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209089a0e00000038010f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x5c}], 0x0, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.017926864s ago: executing program 3 (id=3398): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) syz_clone3(&(0x7f0000003440)={0x88000000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffa000) 3.004124084s ago: executing program 3 (id=3399): lsetxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffc, 0x2ffffdff5}, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) fgetxattr(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="e65b61734000"/17], 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@rnullb, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000100)=0xcc9, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x980}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r3, 0xe1748000) 2.923875745s ago: executing program 3 (id=3400): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f23d50f07f283f9c7410f068fc918017571c462a59a110f013866baa0008f4978d1812e4b00006466460f78c7f08a", 0x2f}], 0x1, 0x6c, 0x0, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r2) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast1, 0xa, r6}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x20, 0x2, 0x100, {{0xd, 0x4, 0x2, 0x8, 0x34, 0x65, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2, {[@ssrr={0x89, 0xf, 0x53, [@local, @multicast2, @empty]}, @timestamp={0x44, 0x10, 0xad, 0x0, 0x8, [0x1, 0x4, 0x4]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0xfe, 0xfff, 0x2, @mcast1, @private0, 0x10, 0x40, 0xffff4093, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x6, 0x3, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x7, 0x700, 0x916, 0xc}}) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r10, &(0x7f00000001c0)={0x2c, 0x8, r12}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x10, 0x2, 0x1, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7800, 0x40, 0x6, 0xb5e}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000500)={0x0, @remote, @multicast2}, &(0x7f0000000540)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x2f, 0x5a, 0xf, 0x8, 0x0, @empty, @empty, 0x0, 0x700, 0x3, 0x3ff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x10, 0x700, 0x9, 0xffffffff, {{0x16, 0x4, 0x1, 0x9, 0x58, 0x65, 0x0, 0x4, 0x2f, 0x0, @empty, @local, {[@timestamp={0x44, 0x14, 0x83, 0x0, 0xf, [0x2, 0x6, 0x6, 0x1c000000]}, @noop, @generic={0x86, 0xd, "d8060b80370b7167587cec"}, @lsrr={0x83, 0xf, 0x91, [@broadcast, @loopback, @rand_addr=0x64010100]}, @end, @ssrr={0x89, 0xb, 0x6a, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1d}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000e40)={0x624, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0xb8}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @enabled}]}}, {{0x8, 0x1, r8}, {0x188, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x2, 0x42, 0x101}, {0x2, 0x5, 0xfa, 0x6}, {0x3, 0x4, 0x9, 0x20000001}, {0xd16, 0x40, 0x7, 0x5}, {0xc00a, 0x2, 0x0, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x103}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4f36}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0xfffffffffffffd58, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3670, 0xb6, 0xb, 0x3}, {0x8, 0x3, 0x6, 0x5}, {0x3, 0x22, 0x2, 0x8003}]}}}]}}, {{0x8, 0x1, r14}, {0xb8, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf4}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x624}, 0x1, 0x0, 0x0, 0x4004054}, 0x40080) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.921745985s ago: executing program 3 (id=3401): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000740)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000400)="1b", 0x1}], 0x1}, 0x20008040) recvmmsg(r0, &(0x7f0000009a80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000002600)=""/4115, 0x1013}], 0x1, &(0x7f0000000380)=""/61, 0x3d}, 0x9}], 0x1, 0x40, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) pipe2$9p(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000004a00)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getpid() r4 = getpid() getpriority(0x2, r4) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, 0x0) r5 = socket$packet(0x11, 0xa02f114910e5e83e, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000980)={0x7, 0x0, [{0xeeee0000, 0xff0, &(0x7f0000001600)=""/4080}, {0x1000, 0x61, &(0x7f0000000300)=""/97}, {0xeeee8000, 0x3, &(0x7f0000000140)=""/3}, {0x10000, 0x71, &(0x7f0000000580)=""/113}, {0xf000, 0x13, &(0x7f0000000180)=""/19}, {0x8000000, 0xbd, &(0x7f0000000640)=""/189}, {0xeeef0000, 0xd1, &(0x7f0000000780)=""/209}]}) r8 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000df38572004009000"/27], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="0031040b0000b7012fffcc67e9ac86030e10f63629"], 0x0, 0x0}) syz_usb_disconnect(r8) 2.758491818s ago: executing program 4 (id=3402): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="00114f"], 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x82880, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f00000000c0)=0x4) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000100)={0xe8000000, [0x4a, 0x7fffffff], 0x8000}, 0x10) 2.233964118s ago: executing program 3 (id=3409): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) syz_clone3(&(0x7f0000000300)={0x2800000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x11}, &(0x7f0000000580)=""/106, 0x6a, &(0x7f00000001c0)=""/235, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x800, &(0x7f0000000400)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b3c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x53) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file1/file0\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x1085408, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r7, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r7, 0x1) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000001004100000000e400000000000000"]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002c41d3b403f1b022057fc000000010902a200017ffd007f09043600000e0100000824020106015b0408240601"], 0x0) fcntl$setstatus(r8, 0x4, 0x0) write$UHID_CREATE2(r8, 0x0, 0x1118) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xda98, r1, 0x0, 0x0, 0x1, 0x0, 0x3}]) sched_setattr(r0, &(0x7f0000000380)={0x38, 0x3, 0x5a, 0x8, 0xea34, 0xf64, 0xfffffffffffffffe, 0x7, 0x0, 0x1}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40082104, &(0x7f0000000240)={0x0, 0x1, r9, 0x6}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) 1.07202321s ago: executing program 6 (id=3419): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 1.044205221s ago: executing program 5 (id=3420): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x200) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0xfffffffc, &(0x7f0000000200)=0x4) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000400), 0x4940, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x3, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6, &(0x7f00000002c0)=[{0x1, 0x5, 0x9}, {0x7fffffffffffffff, 0xfff}, {0x100000000, 0x3, 0xf}, {0x10000, 0x8, 0xffffffffffffff7f}, {0x9, 0x7}, {0x1, 0x2d81, 0xae}, {0x0, 0x5, 0x4}], 0x7, 0x1, 0x10, 0xa, 0x2, 0x31}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) rt_sigqueueinfo(0x0, 0x37, &(0x7f0000000000)={0x41f, 0x21, 0x1}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000440)={0x7fff}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 990.973272ms ago: executing program 5 (id=3421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24008844, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000001dc0)={0x7, 'vlan0\x00', {0x1}}) r4 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x4dd99000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 896.126513ms ago: executing program 6 (id=3422): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e000503"], 0x14}, 0x1, 0x8000000}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYRES16=r1], 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4, 0x0, 0x0, 0x8, 0x40, 0x15, 0x4d}) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000004c0)=ANY=[@ANYBLOB='uyd=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) accept(r4, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 862.164644ms ago: executing program 4 (id=3423): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="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", 0x1000) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000001000)=@name, &(0x7f0000001040)=0x10, 0x80800) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000001080), &(0x7f00000010c0)=0x4) pipe2$9p(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r3, &(0x7f0000001140)={0x5a, 0x75, 0x1, {0x4f, "ab38a3943e59f9c5e5eda6996cfc3a58fbd4d09e018c3da8c7ee729312c8b462f9fc757f82be55a872d4cb881849855ef27c512b3d73973e148bed6fe1ee45ee856efa3b246269c4acfa32efca945e"}}, 0x5a) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x39}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x80000}, 0x44880) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0xa95d16011f572fa0, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000001300)) io_setup(0x5, &(0x7f0000001340)=0x0) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) io_pgetevents(r5, 0xa4, 0x9, &(0x7f0000001380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001500)={r6, r7+10000000}, &(0x7f0000001580)={&(0x7f0000001540)={[0x401]}, 0x8}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000016c0)={&(0x7f00000015c0), 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14, r8, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x5) write$P9_RREMOVE(r3, &(0x7f0000001700)={0x7, 0x7b, 0x2}, 0x7) r9 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r9, &(0x7f0000001740)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r10 = syz_open_dev$evdev(&(0x7f0000001780), 0x7, 0x404180) write$evdev(r10, &(0x7f00000017c0)=[{{0x0, 0x2710}, 0x16, 0x4, 0x401}], 0x18) r11 = accept(r0, &(0x7f0000001800)=@rc, &(0x7f0000001880)=0x80) sendmsg$tipc(r11, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0), 0x0, &(0x7f0000001900)="11b2051be24ec8b3b0cbc0349536cb478195893b1ec950e774092e2be0114a92f374ed5acb65", 0x26}, 0x2000c010) r12 = accept$inet(r11, &(0x7f0000001980), &(0x7f00000019c0)=0x10) io_setup(0x9, &(0x7f0000001a00)) geteuid() lsetxattr(&(0x7f0000001a40)='./file1\x00', &(0x7f0000001a80)=@random={'system.', '/dev/input/event#\x00'}, &(0x7f0000001ac0)='/dev/input/event#\x00', 0x12, 0x2) setxattr$incfs_metadata(&(0x7f0000001b00)='./file1\x00', &(0x7f0000001b40), &(0x7f0000001b80)="839e9da6ff4166acd6c37c32af64f3114fae9abb2b9711040a71543c6ae1a6806afb0d3964fc2920c949f5034f259ec60a93", 0x32, 0x2) setsockopt$MRT_TABLE(r12, 0x0, 0xcf, &(0x7f0000001bc0)=0x1, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001c00), r11) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000001c40), &(0x7f0000001c80)=0x10) 789.255746ms ago: executing program 4 (id=3424): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000640)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000680), 0x11d800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x44da2000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES16=r4, @ANYBLOB="000325bd7000fedbdf250f0000000a000900aaaaaaaaaabb002d000000000005003300"/50], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20044004) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40046305, 0x5}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) r5 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc08d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xc0, 0xc, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0xce, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x9db}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x6, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x5, 0x6d, 0x2e}}]}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x310, 0x9, 0x1, 0x6, 0x40, 0x3}, 0x8, &(0x7f0000000740)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0xf4, &(0x7f0000000780)=@string={0xf4, 0x3, "57df3b7f6989df4323f4879cfb1e2645fa1845525d0cb75118435d0e0e0e31e8f2628ddd6608a486a4ff260333da5ba4ab2e858c9a1a52cbd1d1025903220662dd05d6e2fcd6736f5f2dced5d198c4ee507af7cc1f47cb32c734cada8fae218b1fb0f2a91b372ffc17ab925ada7e88317afa082c844506546411c94b968b85ab1c5e07c1d0204ed94b502a09251f0f1e7551ad66858ec49efcd3e32cd779d2f43b56cf98d1a3702ce0e8061137f1cd35bf09118391078302ac49c6fc65c121369f37640b3e1776a36e7bd393326599cc8da813c07244f93383d04344d4b8a67f582865ee32a30c9924eb72d77a22b989c933"}}, {0x96, &(0x7f0000000880)=@string={0x96, 0x3, "d779517a8859221883b92eff405805989f99ff4287d49f0df97b1030c0f11fb0164dfe45efa49bcdc1b4cfa6ba3ece7190825aaebf610ab0505db362b89d1ce57dc5aa4c0ad0368be80e5209e96d8cba4a5f9bdae95a4c89324357c6698a3fa442dceceee69fd0e6be5e0a78eb1ab2958e0cde3e04d7584681dab9e9448c59542c71244ad7fdce7cb57db1866438acf6a2f04af3"}}, {0x7a, &(0x7f0000000980)=@string={0x7a, 0x3, "f1ae71814db6e9c550a8e813a797e007e35a5640fa03c170000c52baa9c05aebe021e5428938627eeba51320b91135ca355240d0b24ec712f41757dae74150cf01af6090d3308c3c80eb1f3bc8b972ba6e62b81de30897682238e8af803a758aa780f2eb38c6e793996619e3ac347381a523be6f9c760f7e"}}, {0x7c, &(0x7f0000000a00)=@string={0x7c, 0x3, "f1d6527582b3e8d5786ccd43968bd5bceb5cc833e17a4f1b605be94cf17a40de7403cbd9985044eee6e8ed66ba2356257eefc07a9edd962450e0abb1b6ab62b227f7932c06ad0234060af355551122d4837998f35a89229245d2131ee866d0748ae1bdf72bb9764fca49276ae7a64f3c4d12e58a2e743d47c6ab"}}, {0x26, &(0x7f0000000a80)=@string={0x26, 0x3, "704b4d0bd82a2161ab3712fe52fec273c24c4d909bb99aceb347634a8d5d34b0d5b7e978"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000dc0)={0x24, &(0x7f0000000b40)={0x40, 0x8, 0xee, {0xee, 0x31, "76ffd1d7eca570927a0351a57b938fbefcaf4d48fc3693cd67592821267ecdd57b1d0e6752a351db16cb3b4945edd881d9e3b4658468975c061e0cccdc57b4487ee2d6c2840a6a58c07a4f20f5e42641b7642cd0f22e7d9380a92b7f7f569773ac21ea4ce1b68443e70406a8501dc262006e2362dbd29fe27f744b832349bb7159f179aadc198cfaffde0ec8fdf81179046711cca1e23a822a0726eb0b4a0f17e534ad428d0ca292ef5553aaa92286916f6ab9e38465822a6ce6abc01825af7facfa5f318e99bab7ec41550f9d57c236e7e1d6f6e4e39012c3851d7b1b8496c039736b95a49eb99d5e5d4eac"}}, &(0x7f0000000c40)={0x0, 0x3, 0xee, @string={0xee, 0x3, "f2951dd1a3efcf39209fbb57ba5fef0300adc068bfafd899810545f4ee7ff05630e9156446f99c039f4d28a34910443bad35b181a92c36beb24cb59ad9b5be84ec9e5c1e3c68a184ffdfe3e125f5bbdc2f23af6846d9976859d9b68c36439569642560fae68855fed49b09312bae5b94f834df1eba4071aad78413c0d02699230cb2bd7c6ef3052f0640cf61c2d830c4b88c066a733bc21b6824ccbe99d462f24bdcb270c4ad266119c2bbfd717ab69dc3d7ad42b1603865e28b17c15ebf91cbcd0a25af5a50391dc4113f077156670bbe851a3e6db173a5adc51fc3e3ff48d0f1e9461a7cff74db4267d3fe"}}, &(0x7f0000000d40)={0x0, 0x22, 0x10, {[@local=@item_4={0x3, 0x2, 0x9, "be263845"}, @main=@item_012={0x0, 0x0, 0xcfa91c9d01584a80}, @main=@item_4={0x3, 0x0, 0x9, "c2d7350a"}, @local=@item_4={0x3, 0x2, 0x7, "77098f2a"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x31a}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000e00)={0x40, 0x17, 0x2, "ab99"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000ec0)={0x20, 0x1, 0xa9, "7c5ea9766feffbb2ba953b3c12056a7903584f79169cc0e9ab0be1403115b288a8cad3f9aa928ea6a1b731740560cd4909d16b5085bd3944b214791d106e02cf41e12734002372e15345c80e60bcda1d6da0b139b7a023b2311bc994cadbc044e0e290620a6e59d16cb3b519ebdc349d373d246d625cc9d356d52e2061edde5031e8f130e9687e555939499bc65fa676ff53e90b64cc10d7d6c8244aa7091112bf4fe411448f82c696"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x37}}) recvmsg$can_bcm(r2, &(0x7f0000000600)={&(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000380)=""/9, 0x9}, {&(0x7f00000003c0)=""/243, 0xf3}], 0x3, &(0x7f0000000500)=""/244, 0xf4}, 0x3) 112.093248ms ago: executing program 5 (id=3425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x1, 0x11, r0, 0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) fcntl$setpipe(r1, 0x407, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) 111.734328ms ago: executing program 5 (id=3426): socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000006d0001", @ANYRESHEX], 0x28}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000001c0)={[{0x2, 0x3ff, 0x1, 0x80, 0xcd, 0x7, 0x1, 0x7, 0x4, 0x3, 0x7, 0x8, 0x4}, {0x5, 0x80, 0x6, 0x51, 0x6, 0x1, 0x1c, 0x40, 0x4, 0x82, 0x0, 0x9, 0x7fe1}, {0x2, 0xbfa7, 0xd0, 0x8, 0x57, 0xb, 0x7, 0x4, 0xa4, 0xfc, 0x49, 0x8, 0x8}], 0x4}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20642, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) setuid(0xee00) ioctl$TIOCCONS(r4, 0x541d) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000100)="430fc73f0f2390b9800000c0c744240074000000c744240200e8ffffc7442406000000000f011c2435010000000f30c744240000604f8cc74424020c000000c7442406000000000f011c2440dca41f000000000f22d866baf80cb83879e487ef66bafc0cec66b88e0042c02d1aa80000460f1c460041ae", 0x77}], 0x1, 0x74, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040c01}, 0x800) ioctl$KVM_RUN(r6, 0xae80, 0x0) 65.924559ms ago: executing program 5 (id=3427): connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8040, &(0x7f0000000240)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}}, 0x14) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendto(r0, &(0x7f0000000640)="58aec98de911dc26c316a922a60e1bf35eb5857e49f64cafff8b32a4ad00e55514e6d4fef1598141248c0fa453f98240c3a568f76e3a7aa6fcba4f4522540783b71b0e931ddef0004b303511aa503bad4c519a0ebaff661cdc4c63a6a158b91031df767d529adc21db156ac74bc234518a64dc888205f9d1be28c0c86e47df78cef369dc5c9ae1bb889892aaf8f02ad4cd48a0cdaa1e51dfd4ec3c14f0997bdafef886266f3e387a44eb832be2819f", 0xaf, 0x20040084, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000000)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x2e, 0x74, 0x0, 0x0) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 5 (id=3428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1101, 0x2}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0xc, 0x2, 0x24}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES8=r2, @ANYRES8=r3], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24050081) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1381, 0x3}) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$binfmt_script(r6, &(0x7f00000109c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x2, 0x2, "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"}) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x1) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000280)="f08157ccff2e3e67260f01c9d2cb66b80500000066b9ee0000000f01d926d9ed66b9760800000f3266660f2c2bbad00466b81340000066ef36640f01c2b85e000f00d8", 0x43}], 0x1, 0x8, &(0x7f0000000200)=[@flags={0x3, 0x183d05}, @cr4={0x1, 0x1260bc}], 0x2) utimensat(r6, 0xfffffffffffffffd, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000740)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0xc, 0x4040004, 0x0, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r9, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/248, 0xf8}], 0x1}, 0xa}], 0x1, 0x40002100, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000160013"], 0x158}, 0x1, 0x0, 0x0, 0x4048010}, 0x24040014) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r11 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) rt_sigqueueinfo(0x0, 0x37, &(0x7f0000000300)={0x41e, 0x9, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r11}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 1901'. [ 195.962958][ T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 195.986511][ T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 196.001394][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 196.016740][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.021722][ T36] audit: type=1400 audit(16777640.873:562): avc: denied { accept } for pid=5974 comm="syz.5.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.036686][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.075170][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 196.105985][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 196.124673][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.136098][ T31] usb 3-1: config 0 descriptor?? [ 196.242397][ T5987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.242458][ T5987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 196.262137][ T5986] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.271867][ T5986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 196.306795][ T5990] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 196.344373][ T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 196.368978][ T31] usb 3-1: USB disconnect, device number 55 [ 196.377418][ T31] usblp0: removed [ 196.621781][ T481] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 196.773636][ T481] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 32 [ 196.783684][ T481] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 16 [ 196.794090][ T481] usb 4-1: config 1 interface 0 has no altsetting 0 [ 196.802376][ T481] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 196.811865][ T481] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.819991][ T481] usb 4-1: Product: О [ 196.824444][ T481] usb 4-1: SerialNumber: ј [ 196.831487][ T5992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.839856][ T5992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.861745][ T31] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 196.955356][ T6018] fuse: Bad value for 'user_id' [ 196.960398][ T6018] fuse: Bad value for 'user_id' [ 196.965942][ T6018] overlayfs: failed to clone upperpath [ 197.011801][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 197.022746][ T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 197.031201][ T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 197.040757][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 197.050515][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.068380][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 197.078216][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 197.095308][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 197.104602][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.116466][ T31] usb 3-1: config 0 descriptor?? [ 197.140641][ T6033] 9pnet_fd: Insufficient options for proto=fd [ 197.147614][ T36] audit: type=1400 audit(16777642.003:563): avc: denied { connect } for pid=6032 comm="syz.5.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.266195][ T481] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 9 proto 2 vid 0x04B8 pid 0x0202 [ 197.280095][ T481] usb 4-1: USB disconnect, device number 30 [ 197.289843][ T6020] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 197.298148][ T481] usblp0: removed [ 197.527095][ T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 197.735606][ T9] usb 3-1: USB disconnect, device number 56 [ 197.746834][ T9] usblp0: removed [ 197.786239][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1932'. [ 198.521777][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 198.701704][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 198.713349][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 198.721860][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 198.741749][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 198.755569][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 198.767241][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 198.785087][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 198.798617][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 198.810104][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.825359][ T9] usb 3-1: config 0 descriptor?? [ 198.879215][ T6107] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2064 sclass=netlink_xfrm_socket pid=6107 comm=syz.5.1950 [ 199.032751][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 199.045511][ T9] usb 3-1: USB disconnect, device number 57 [ 199.052424][ T9] usblp0: removed [ 199.156185][ T6117] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 199.261791][ T987] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 199.413034][ T987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.424712][ T987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.434687][ T987] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 199.443996][ T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.452908][ T987] usb 4-1: config 0 descriptor?? [ 199.471774][ T31] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 199.621739][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 199.628335][ T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 199.636961][ T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 199.645814][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 199.654894][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.664667][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 199.674366][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 199.687491][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 199.696726][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.705625][ T31] usb 3-1: config 0 descriptor?? [ 199.867758][ T987] isku 0003:1E7D:319C.000D: item fetching failed at offset 3/7 [ 199.875634][ T987] isku 0003:1E7D:319C.000D: parse failed [ 199.881431][ T987] isku 0003:1E7D:319C.000D: probe with driver isku failed with error -22 [ 199.911870][ T36] audit: type=1400 audit(16777644.773:564): avc: denied { write } for pid=6083 comm="syz.2.1942" name="/" dev="configfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.069130][ T6114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 200.069171][ T6114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:150 [ 200.079220][ T481] usb 4-1: USB disconnect, device number 31 [ 200.114955][ T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 200.127235][ T31] usb 3-1: USB disconnect, device number 58 [ 200.134402][ T31] usblp0: removed [ 200.537695][ T6144] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 200.607915][ T6160] fuse: Unknown parameter 'rotmode' [ 200.684387][ T6178] 9pnet_fd: Insufficient options for proto=fd [ 200.724358][ T6184] netlink: 'syz.5.1977': attribute type 11 has an invalid length. [ 200.760458][ T36] audit: type=1400 audit(16777645.613:565): avc: denied { map } for pid=6185 comm="syz.5.1978" path="socket:[39109]" dev="sockfs" ino=39109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 200.913277][ T6211] tipc: Started in network mode [ 200.918223][ T6211] tipc: Node identity 66723a939ef, cluster identity 4711 [ 200.926151][ T6211] tipc: Enabled bearer , priority 0 [ 200.952710][ T6219] rust_binder: 163: no such ref 5 [ 200.957844][ T6219] rust_binder: Write failure EINVAL in pid:163 [ 200.991081][ T6228] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1991'. [ 201.079177][ T6214] tipc: Disabling bearer [ 201.233430][ T6253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 201.233474][ T6253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:177 [ 201.353227][ T36] audit: type=1400 audit(16777646.213:566): avc: denied { setattr } for pid=6267 comm="syz.5.2005" name="secretmem" dev="secretmem" ino=39439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 201.550867][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 201.936855][ T6279] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 201.971033][ T6285] netlink: 'syz.4.2011': attribute type 27 has an invalid length. [ 202.017718][ T6296] netlink: 'syz.4.2014': attribute type 27 has an invalid length. [ 202.079362][ T6305] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 202.148595][ T6309] rust_binder: Error in use_page_slow: ESRCH [ 202.148616][ T6309] rust_binder: use_range failure ESRCH [ 202.154915][ T6309] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 202.160525][ T6309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 202.168668][ T6309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:182 [ 202.510326][ T6323] rust_binder: Read failure Err(EAGAIN) in pid:195 [ 202.693733][ T6330] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 202.826678][ T6340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2032'. [ 202.958237][ T6343] netlink: 'syz.3.2033': attribute type 11 has an invalid length. [ 203.611765][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.611765][ T366] Bluetooth: hci0: command 0x1003 tx timeout [ 203.925739][ T6360] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 203.964609][ T6362] 9pnet_fd: Insufficient options for proto=fd [ 204.182857][ T6372] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer. [ 204.422691][ T6381] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 204.492004][ T31] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 204.641752][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 204.649588][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 204.658716][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.666768][ T31] usb 3-1: Product: syz [ 204.670932][ T31] usb 3-1: Manufacturer: syz [ 204.675618][ T31] usb 3-1: SerialNumber: syz [ 204.682880][ T31] r8152-cfgselector 3-1: Unknown version 0x0000 [ 204.689179][ T31] r8152-cfgselector 3-1: config 0 descriptor?? [ 205.103873][ T6377] binder: Unknown parameter '9rldirsylc8' [ 205.135408][ T6395] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 205.153525][ T6399] overlayfs: failed to clone upperpath [ 205.155325][ T31] r8152-cfgselector 3-1: USB disconnect, device number 59 [ 205.202226][ T6407] cgroup: Unknown subsys name 'fsuuid' [ 205.222779][ T6410] netlink: 'syz.3.2060': attribute type 63 has an invalid length. [ 205.230724][ T6410] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2060'. [ 205.241061][ T6411] netlink: 'syz.3.2060': attribute type 63 has an invalid length. [ 205.261090][ T6411] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2060'. [ 205.345505][ T6423] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 205.420610][ T36] audit: type=1326 audit(16777650.273:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6431 comm="syz.3.2068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faebc38ebe9 code=0x0 [ 205.669138][ T6435] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 205.869479][ T6448] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 205.892939][ T6450] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 205.981740][ T987] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 206.053470][ T6485] cgroup: Invalid name [ 206.143203][ T987] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.155517][ T987] usb 3-1: not running at top speed; connect to a high speed hub [ 206.172494][ T987] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 206.186797][ T987] usb 3-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 206.204980][ T987] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.219846][ T987] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.229267][ T987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.240752][ T987] usb 3-1: Product: syz [ 206.247279][ T987] usb 3-1: Manufacturer: syz [ 206.261763][ T987] usb 3-1: SerialNumber: syz [ 206.486735][ T987] usb 3-1: 0:6 : does not exist [ 206.501545][ T987] usb 3-1: 0:36 : does not exist [ 206.519476][ T987] usb 3-1: USB disconnect, device number 60 [ 206.542028][ T4316] udevd[4316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 206.576011][ T36] audit: type=1400 audit(16777651.433:568): avc: denied { create } for pid=6500 comm="syz.4.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 206.628292][ T6507] veth1: entered allmulticast mode [ 206.633987][ T6506] veth1: left allmulticast mode [ 206.674900][ T6511] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 206.898329][ T6524] __vm_enough_memory: pid: 6524, comm: syz.3.2105, bytes: 21199728693248 not enough memory for the allocation [ 206.910754][ T6524] fuseblk: Bad value for 'fd' [ 206.960314][ T6540] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 206.987867][ T6542] fuse: Unknown parameter '~' [ 207.010410][ T36] audit: type=1400 audit(16777651.863:569): avc: denied { watch watch_reads } for pid=6545 comm="syz.3.2112" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 207.112322][ T36] audit: type=1400 audit(16777651.973:570): avc: denied { ioctl } for pid=6549 comm="syz.2.2114" path="socket:[39931]" dev="sockfs" ino=39931 ioctlcmd=0xaea2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 207.164875][ T6562] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 207.176619][ T6560] FAULT_INJECTION: forcing a failure. [ 207.176619][ T6560] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 207.190375][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz.2.2117 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 207.190411][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.190431][ T6560] Call Trace: [ 207.190439][ T6560] [ 207.190449][ T6560] __dump_stack+0x21/0x30 [ 207.190496][ T6560] dump_stack_lvl+0x10c/0x190 [ 207.190525][ T6560] ? __cfi_dump_stack_lvl+0x10/0x10 [ 207.190558][ T6560] dump_stack+0x19/0x20 [ 207.190587][ T6560] should_fail_ex+0x3d9/0x530 [ 207.190622][ T6560] should_fail_alloc_page+0xeb/0x110 [ 207.190648][ T6560] __alloc_pages_noprof+0x19b/0x7b0 [ 207.190679][ T6560] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 207.190712][ T6560] __folio_alloc_noprof+0x14/0x80 [ 207.190741][ T6560] folio_prealloc+0x46/0x240 [ 207.190766][ T6560] do_pte_missing+0x164c/0x4240 [ 207.190795][ T6560] ? pte_marker_clear+0x1b0/0x1b0 [ 207.190822][ T6560] ? __pte_offset_map+0x1b0/0x230 [ 207.190854][ T6560] ? pte_offset_map_rw_nolock+0xba/0x110 [ 207.190886][ T6560] handle_mm_fault+0x1166/0x1b90 [ 207.190908][ T6560] ? __kasan_check_write+0x18/0x20 [ 207.190954][ T6560] ? __cfi_handle_mm_fault+0x10/0x10 [ 207.190978][ T6560] ? follow_page_pte+0x4a3/0xb90 [ 207.191007][ T6560] ? gup_must_unshare+0x1e0/0x1e0 [ 207.191035][ T6560] ? try_grab_folio_fast+0x155/0x500 [ 207.191062][ T6560] ? vma_is_secretmem+0x11/0x50 [ 207.191093][ T6560] __get_user_pages+0x1169/0x22d0 [ 207.191119][ T6560] ? __reset_page_owner+0x450/0x450 [ 207.191149][ T6560] ? populate_vma_page_range+0x230/0x230 [ 207.191175][ T6560] ? down_read_killable+0x79/0xf0 [ 207.191201][ T6560] ? __cfi_down_read_killable+0x10/0x10 [ 207.191227][ T6560] ? get_user_pages_fast_only+0xc0/0xc0 [ 207.191255][ T6560] get_user_pages_unlocked+0x1b7/0x6e0 [ 207.191285][ T6560] hva_to_pfn+0x25f/0xa60 [ 207.191305][ T6560] ? kvm_fetch_guest_virt+0x154/0x190 [ 207.191338][ T6560] ? __cfi_hva_to_pfn+0x10/0x10 [ 207.191370][ T6560] ? handle_changed_spte+0x70e/0x12b0 [ 207.191403][ T6560] ? mmu_try_to_unsync_pages+0xa3/0x7a0 [ 207.191429][ T6560] ? kvm_tdp_mmu_fast_pf_get_last_sptep+0x290/0x290 [ 207.191461][ T6560] __gfn_to_pfn_memslot+0x29f/0x330 [ 207.191482][ T6560] kvm_faultin_pfn+0x5db/0x1510 [ 207.191517][ T6560] ? fast_page_fault+0x1160/0x1160 [ 207.191548][ T6560] ? __kvm_mmu_topup_memory_cache+0x49a/0x860 [ 207.191579][ T6560] ? get_guest_cr3+0xc0/0xc0 [ 207.191613][ T6560] kvm_tdp_page_fault+0x204/0x320 [ 207.191638][ T6560] kvm_mmu_do_page_fault+0x29d/0x5f0 [ 207.191664][ T6560] ? kvm_arch_async_page_ready+0x480/0x480 [ 207.191690][ T6560] ? kvm_multiple_exception+0x6d8/0xad0 [ 207.191715][ T6560] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 207.191744][ T6560] kvm_mmu_page_fault+0x143/0x970 [ 207.191770][ T6560] handle_ept_violation+0x21c/0x440 [ 207.191794][ T6560] ? vmx_vcpu_run+0xfbd/0x1e40 [ 207.191825][ T6560] ? __cfi_handle_ept_violation+0x10/0x10 [ 207.191847][ T6560] vmx_handle_exit+0x12c5/0x1b40 [ 207.191876][ T6560] ? kvm_deliver_exception_payload+0xd7/0x200 [ 207.191903][ T6560] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 207.191934][ T6560] ? vmx_handle_exit_irqoff+0xe9/0x7a0 [ 207.191976][ T6560] vcpu_run+0x481a/0x7260 [ 207.192002][ T6560] ? proc_pident_lookup+0x1c7/0x270 [ 207.192026][ T6560] ? proc_tid_base_lookup+0x2f/0x40 [ 207.192068][ T6560] ? __cfi_selinux_file_open+0x10/0x10 [ 207.192098][ T6560] ? signal_pending+0xc0/0xc0 [ 207.192125][ T6560] ? __kasan_check_write+0x18/0x20 [ 207.192156][ T6560] ? xfd_validate_state+0x68/0x150 [ 207.192186][ T6560] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 207.192209][ T6560] ? __kasan_check_write+0x18/0x20 [ 207.192241][ T6560] ? fpregs_mark_activate+0x69/0x160 [ 207.192266][ T6560] ? fpu_swap_kvm_fpstate+0x44d/0x5f0 [ 207.192290][ T6560] ? fpu_swap_kvm_fpstate+0x93/0x5f0 [ 207.192316][ T6560] kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0 [ 207.192346][ T6560] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 207.192376][ T6560] ? kstrtoull+0x13b/0x1e0 [ 207.192406][ T6560] ? kstrtouint+0x78/0xf0 [ 207.192436][ T6560] ? ioctl_has_perm+0x1aa/0x4d0 [ 207.192463][ T6560] ? __asan_memcpy+0x5a/0x80 [ 207.192494][ T6560] ? ioctl_has_perm+0x3e0/0x4d0 [ 207.192520][ T6560] ? has_cap_mac_admin+0xd0/0xd0 [ 207.192546][ T6560] ? __kasan_check_write+0x18/0x20 [ 207.192576][ T6560] ? mutex_lock_killable+0x92/0x1c0 [ 207.192599][ T6560] ? __cfi_mutex_lock_killable+0x10/0x10 [ 207.192620][ T6560] ? proc_fail_nth_write+0x17e/0x210 [ 207.192648][ T6560] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 207.192677][ T6560] kvm_vcpu_ioctl+0x96f/0xee0 [ 207.192709][ T6560] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 207.192740][ T6560] ? __cfi_vfs_write+0x10/0x10 [ 207.192760][ T6560] ? __kasan_check_write+0x18/0x20 [ 207.192792][ T6560] ? mutex_unlock+0x8b/0x240 [ 207.192813][ T6560] ? __cfi_mutex_unlock+0x10/0x10 [ 207.192835][ T6560] ? __fget_files+0x2c5/0x340 [ 207.192860][ T6560] ? __fget_files+0x2c5/0x340 [ 207.192884][ T6560] ? bpf_lsm_file_ioctl+0xd/0x20 [ 207.192914][ T6560] ? security_file_ioctl+0x34/0xd0 [ 207.192939][ T6560] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 207.192982][ T6560] __se_sys_ioctl+0x135/0x1b0 [ 207.193006][ T6560] __x64_sys_ioctl+0x7f/0xa0 [ 207.193029][ T6560] x64_sys_call+0x1878/0x2ee0 [ 207.193060][ T6560] do_syscall_64+0x58/0xf0 [ 207.193092][ T6560] ? clear_bhb_loop+0x50/0xa0 [ 207.193118][ T6560] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 207.193142][ T6560] RIP: 0033:0x7f0f1778ebe9 [ 207.193169][ T6560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.193188][ T6560] RSP: 002b:00007f0f161f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.193217][ T6560] RAX: ffffffffffffffda RBX: 00007f0f179c5fa0 RCX: 00007f0f1778ebe9 [ 207.193233][ T6560] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 207.193247][ T6560] RBP: 00007f0f161f7090 R08: 0000000000000000 R09: 0000000000000000 [ 207.193261][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.193276][ T6560] R13: 00007f0f179c6038 R14: 00007f0f179c5fa0 R15: 00007ffc0dbecb68 [ 207.193294][ T6560] [ 208.073106][ T6601] netlink: 'syz.2.2131': attribute type 4 has an invalid length. [ 208.081027][ T6601] netlink: 'syz.2.2131': attribute type 21 has an invalid length. [ 208.089535][ T6601] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2131'. [ 208.147346][ T36] audit: type=1400 audit(16777653.003:571): avc: denied { setattr } for pid=6606 comm="syz.2.2134" name="XDP" dev="sockfs" ino=41192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.192897][ T6637] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 209.252257][ T6641] overlay: Unknown parameter '/' [ 209.916214][ T6676] ./file0: Can't lookup blockdev [ 209.964548][ T36] audit: type=1326 audit(16777655.816:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6679 comm="syz.2.2164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f1778ebe9 code=0x0 [ 210.012469][ T6691] batadv_slave_0: entered promiscuous mode [ 210.019802][ T6690] batadv_slave_0: left promiscuous mode [ 210.036656][ T6694] netlink: 'syz.5.2169': attribute type 28 has an invalid length. [ 210.274257][ T6710] overlayfs: failed to clone lowerpath [ 210.281178][ T6710] overlayfs: missing 'workdir' [ 210.481200][ T36] audit: type=1326 audit(16777656.326:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cb78ebe9 code=0x50000 [ 210.504309][ T36] audit: type=1326 audit(16777656.326:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cb78ebe9 code=0x50000 [ 210.527270][ T36] audit: type=1326 audit(16777656.326:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cb78ebe9 code=0x50000 [ 210.550283][ T36] audit: type=1326 audit(16777656.326:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cb78ebe9 code=0x50000 [ 210.573548][ T36] audit: type=1326 audit(16777656.326:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cb78ebe9 code=0x50000 [ 210.596454][ T36] audit: type=1326 audit(16777656.326:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cb78ebe9 code=0x50000 [ 210.619350][ T36] audit: type=1326 audit(16777656.326:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cb78ebe9 code=0x50000 [ 210.642259][ T36] audit: type=1326 audit(16777656.326:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cb78ebe9 code=0x50000 [ 210.665206][ T36] audit: type=1326 audit(16777656.336:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cb78ebe9 code=0x50000 [ 210.688099][ T36] audit: type=1326 audit(16777656.336:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.4.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12cb78ebe9 code=0x50000 [ 211.010434][ T6744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1132 [ 211.817008][ T6770] netlink: 'syz.2.2196': attribute type 4 has an invalid length. [ 212.171742][ T31] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 212.321693][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 212.328007][ T31] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.340103][ T31] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.361745][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.369081][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 212.378374][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.391948][ T31] usb 3-1: config 0 descriptor?? [ 212.470644][ T6777] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 212.798283][ T6775] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 212.805560][ T6775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1139 [ 212.865263][ T6792] veth1: entered allmulticast mode [ 212.888591][ T6791] veth1: left allmulticast mode [ 213.007842][ T6775] tmpfs: Bad value for 'nr_blocks' [ 213.022868][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 213.028893][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 213.043245][ T31] usb 3-1: USB disconnect, device number 61 [ 213.947318][ T6800] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 214.139317][ T6818] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 214.570663][ T6837] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 214.649644][ T6844] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 214.695953][ T6846] ./file0: Can't lookup blockdev [ 214.760658][ T6864] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 214.817715][ T6868] netlink: 'syz.5.2236': attribute type 4 has an invalid length. [ 214.836740][ T6872] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 214.915025][ T6876] tipc: Enabling of bearer rejected, failed to enable media [ 214.977721][ T6891] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 215.076145][ T6898] netlink: 'syz.3.2246': attribute type 13 has an invalid length. [ 215.113131][ T6904] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 215.225433][ T6932] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 215.797001][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2259'. [ 215.808579][ T6954] tipc: Enabled bearer , priority 26 [ 215.830162][ T6956] rust_binder: Write failure EFAULT in pid:1149 [ 215.920459][ T6968] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 215.924636][ T6966] overlayfs: failed to resolve './file1': -2 [ 216.065023][ T36] kauditd_printk_skb: 29026 callbacks suppressed [ 216.065044][ T36] audit: type=1326 audit(16777661.916:29609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6972 comm="syz.2.2267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f1778ebe9 code=0x0 [ 216.206481][ T6992] netlink: 'syz.2.2272': attribute type 11 has an invalid length. [ 216.451748][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 216.591818][ T10] usb 3-1: device descriptor read/64, error -71 [ 216.655676][ T6997] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 216.693396][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2276'. [ 216.717764][ T7006] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 216.736834][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2280'. [ 216.831755][ T10] usb 3-1: device descriptor read/64, error -71 [ 216.891026][ T36] audit: type=1326 audit(16777662.736:29610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.4.2285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12cb78ebe9 code=0x0 [ 216.931784][ T9] tipc: Node number set to 2458454451 [ 217.060712][ T7024] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 217.071918][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 217.211742][ T10] usb 3-1: device descriptor read/64, error -71 [ 217.342108][ T7044] x_tables: unsorted underflow at hook 2 [ 217.418044][ T7046] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 217.452127][ T10] usb 3-1: device descriptor read/64, error -71 [ 217.573960][ T10] usb usb3-port1: attempt power cycle [ 217.781803][ T7069] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 217.931928][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 217.964509][ T10] usb 3-1: device descriptor read/8, error -71 [ 218.112731][ T10] usb 3-1: device descriptor read/8, error -71 [ 218.381732][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 218.432903][ T10] usb 3-1: device descriptor read/8, error -71 [ 218.563287][ T7089] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 218.583546][ T10] usb 3-1: device descriptor read/8, error -71 [ 218.592307][ T7092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7092 comm=syz.3.2314 [ 218.608672][ T7092] 9pnet: Could not find request transport: Gth7n=0x0000000000000004 [ 218.663093][ T36] audit: type=1400 audit(16777664.516:29611): avc: denied { accept } for pid=7098 comm="syz.3.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.663599][ T7100] /dev/loop0: Can't lookup blockdev [ 218.701850][ T10] usb usb3-port1: unable to enumerate USB device [ 218.779508][ T7120] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 219.113267][ T7134] devpts: called with bogus options [ 219.230580][ T7138] rust_binder: 1173: no such ref 5 [ 219.236044][ T7138] rust_binder: Write failure EINVAL in pid:1173 [ 219.657453][ T7146] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 219.769254][ T7151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.769286][ T7151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.782195][ T7151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.788704][ T7151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.810124][ T7151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.821760][ T7151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.962428][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2345'. [ 219.965201][ T7172] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 220.050231][ T7175] tmpfs: Unknown parameter 'noinode32' [ 220.172671][ T7178] loop7: detected capacity change from 0 to 7 [ 220.223755][ T60] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.233226][ T60] Buffer I/O error on dev loop7, logical block 0, async page read [ 220.241179][ T7178] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.252214][ T7178] Buffer I/O error on dev loop7, logical block 0, async page read [ 220.260368][ T7178] loop7: unable to read partition table [ 220.262450][ T7179] binfmt_misc: register: failed to install interpreter file ./cgroup [ 220.266398][ T7178] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 220.391460][ T7187] 9pnet_fd: Insufficient options for proto=fd [ 220.449870][ T7197] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2355'. [ 220.459551][ T7197] fuse: Invalid gid '00000000000037777777777' [ 220.502684][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2358'. [ 220.725289][ T7230] veth0: entered promiscuous mode [ 220.731377][ T7230] veth0: left promiscuous mode [ 221.066611][ T36] audit: type=1400 audit(16777666.916:29612): avc: denied { create } for pid=7239 comm="syz.4.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 221.227268][ T7253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2376'. [ 221.237269][ T7253] __vm_enough_memory: pid: 7253, comm: syz.2.2376, bytes: 18014402804453376 not enough memory for the allocation [ 221.270593][ T7259] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2377'. [ 221.309894][ T7267] __vm_enough_memory: pid: 7267, comm: syz.2.2380, bytes: 18014402804453376 not enough memory for the allocation [ 221.395233][ T7285] tipc: Enabling of bearer rejected, failed to enable media [ 221.651706][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 221.652732][ T7294] netlink: 'syz.4.2393': attribute type 4 has an invalid length. [ 221.669142][ T7294] netlink: 'syz.4.2393': attribute type 4 has an invalid length. [ 221.791793][ T9] usb 3-1: device descriptor read/64, error -71 [ 221.914575][ T7301] incfs: Options parsing error. -22 [ 221.919922][ T7301] incfs: mount failed -22 [ 221.952586][ T7301] incfs: Options parsing error. -22 [ 221.958344][ T7301] incfs: mount failed -22 [ 222.031801][ T9] usb 3-1: device descriptor read/64, error -71 [ 222.210232][ T7315] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2401'. [ 222.271801][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 222.401876][ T9] usb 3-1: device descriptor read/64, error -71 [ 222.524845][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2404'. [ 222.641900][ T9] usb 3-1: device descriptor read/64, error -71 [ 222.752228][ T9] usb usb3-port1: attempt power cycle [ 223.091806][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 223.113013][ T9] usb 3-1: device descriptor read/8, error -71 [ 223.242883][ T9] usb 3-1: device descriptor read/8, error -71 [ 223.481771][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 223.493634][ T36] audit: type=1326 audit(16777669.346:29613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.4.2413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12cb78ebe9 code=0x0 [ 223.502977][ T9] usb 3-1: device descriptor read/8, error -71 [ 223.653153][ T9] usb 3-1: device descriptor read/8, error -71 [ 223.704250][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 223.761859][ T9] usb usb3-port1: unable to enumerate USB device [ 223.835815][ T7362] overlayfs: failed to clone upperpath [ 223.964119][ T7373] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 223.971976][ T7373] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2423'. [ 223.993580][ T7376] 9pnet_fd: p9_fd_create_unix (7376): problem connecting socket: ./file0: -111 [ 224.350159][ T7404] overlayfs: failed to clone upperpath [ 224.368945][ T7406] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 238.424769][ T7444] netlink: 'syz.4.2448': attribute type 4 has an invalid length. [ 238.432759][ T7444] netlink: 'syz.4.2448': attribute type 6 has an invalid length. [ 238.440585][ T7444] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2448'. [ 238.494306][ T7459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7459 comm=syz.4.2454 [ 238.526923][ T7459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7459 comm=syz.4.2454 [ 238.556448][ T7459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7459 comm=syz.4.2454 [ 238.575583][ T7459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7459 comm=syz.4.2454 [ 238.580598][ T7470] overlayfs: failed to clone upperpath [ 238.588722][ T7459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7459 comm=syz.4.2454 [ 238.608799][ T7459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7459 comm=syz.4.2454 [ 238.621874][ T7459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7459 comm=syz.4.2454 [ 238.667922][ T7478] bridge0: entered promiscuous mode [ 238.673264][ T7478] bridge0: entered allmulticast mode [ 239.067492][ T7532] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true [ 239.067529][ T7532] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 239.075573][ T7532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1239 [ 239.186510][ T7540] netlink: 428 bytes leftover after parsing attributes in process `syz.5.2485'. [ 239.193938][ T7542] fuseblk: Bad value for 'fd' [ 239.226444][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2488'. [ 239.324196][ T36] audit: type=1400 audit(16777685.176:29614): avc: denied { getattr } for pid=7549 comm="syz.5.2488" name="[userfaultfd]" dev="anon_inodefs" ino=43698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 239.761220][ T7572] netlink: 'syz.3.2497': attribute type 29 has an invalid length. [ 239.839737][ T7589] /dev/loop0: Can't lookup blockdev [ 239.849696][ T7592] /dev/loop0: Can't lookup blockdev [ 239.880734][ T7597] netlink: 'syz.3.2505': attribute type 4 has an invalid length. [ 239.906423][ T7605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=7605 comm=syz.2.2503 [ 239.919044][ T7605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7605 comm=syz.2.2503 [ 239.932322][ T7605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=7605 comm=syz.2.2503 [ 239.945595][ T7605] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2503'. [ 240.028129][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2510'. [ 240.636818][ T7654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.644123][ T7654] IPv6: NLM_F_CREATE should be set when creating new route [ 240.651463][ T7654] IPv6: NLM_F_CREATE should be set when creating new route [ 240.716898][ T7659] pim6reg1: entered promiscuous mode [ 240.722578][ T7659] pim6reg1: entered allmulticast mode [ 240.778224][ T7663] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 240.890051][ T7676] syz.2.2530: attempt to access beyond end of device [ 240.890051][ T7676] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 240.903621][ T7676] EXT4-fs (loop2): unable to read superblock [ 241.049758][ T7693] 9pnet: Unknown protocol version 9 [ 241.055431][ T7693] fuse: Bad value for 'rootmode' [ 241.092627][ T7695] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 241.775909][ T7777] 9pnet_fd: Insufficient options for proto=fd [ 241.825326][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'. [ 242.413218][ T7814] fuse: Bad value for 'fd' [ 242.458550][ T7824] loop7: detected capacity change from 0 to 7 [ 242.574697][ T36] audit: type=1400 audit(16777688.426:29615): avc: denied { getopt } for pid=7845 comm="syz.4.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.801742][ T36] audit: type=1326 audit(16777688.646:29616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.5.2604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feedbf8ebe9 code=0x0 [ 242.872510][ T7881] /dev/rnullb0: Can't open blockdev [ 243.018343][ T7891] rust_binder: inc_ref_done called when no active inc_refs [ 243.031228][ T36] audit: type=1400 audit(16777688.876:29617): avc: denied { read write } for pid=7892 comm="syz.2.2610" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 243.062093][ T36] audit: type=1400 audit(16777688.876:29618): avc: denied { open } for pid=7892 comm="syz.2.2610" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 243.232383][ T7902] binder: Bad value for 'max' [ 243.250581][ T7904] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 243.306826][ T36] audit: type=1400 audit(16777689.156:29619): avc: denied { map } for pid=7905 comm="syz.2.2616" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 243.438487][ T7927] fuse: Unknown parameter 'gr' [ 243.454834][ T7931] overlayfs: failed to clone upperpath [ 243.466088][ T36] audit: type=1400 audit(16777689.316:29620): avc: denied { accept } for pid=7932 comm="syz.3.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.009965][ T7944] overlayfs: failed to clone upperpath [ 244.028573][ T36] audit: type=1326 audit(16777689.876:29621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.3.2631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faebc38ebe9 code=0x0 [ 244.265105][ T7955] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 7 [ 244.272525][ T7955] rust_binder: Write failure EINVAL in pid:1305 [ 244.286730][ T7962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.293144][ T7961] rust_binder: Write failure EINVAL in pid:1310 [ 244.300148][ T36] audit: type=1400 audit(16777690.146:29622): avc: denied { nlmsg_write } for pid=7960 comm="syz.2.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 245.123660][ T7979] overlayfs: failed to clone upperpath [ 245.187454][ T7985] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 245.346902][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2647'. [ 245.401329][ T8002] 9pnet_fd: Insufficient options for proto=fd [ 245.482293][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.489770][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.497085][ T987] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 245.502851][ T8013] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.511934][ T8013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.519305][ T8013] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.526407][ T8013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.662748][ T987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.673400][ T36] audit: type=1400 audit(16777691.526:29623): avc: denied { sys_module } for pid=8018 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 245.677453][ T987] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 245.732177][ T987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.745383][ T987] usb 3-1: config 0 descriptor?? [ 245.752623][ T987] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 245.759671][ T987] usb 3-1: No valid video chain found. [ 245.776154][ T8018] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.783558][ T8018] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.790843][ T8018] bridge_slave_0: entered allmulticast mode [ 245.797401][ T8018] bridge_slave_0: entered promiscuous mode [ 245.804122][ T8018] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.811561][ T8018] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.813256][ T8023] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2656'. [ 245.818756][ T8018] bridge_slave_1: entered allmulticast mode [ 245.835059][ T8018] bridge_slave_1: entered promiscuous mode [ 245.911102][ T8018] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.915764][ T8039] 9pnet_fd: Insufficient options for proto=fd [ 245.918264][ T8018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.931737][ T8018] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.938852][ T8018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.954516][ T7992] rust_binder: Failed copying remainder into alloc: EFAULT [ 245.954548][ T7992] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 245.966417][ T7992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 245.977900][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.979384][ T7992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1321 [ 245.994717][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.997476][ T987] usb 3-1: USB disconnect, device number 70 [ 246.024416][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.031529][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.039382][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.046525][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.074556][ T8018] veth0_vlan: entered promiscuous mode [ 246.086763][ T8018] veth1_macvtap: entered promiscuous mode [ 246.118128][ T36] audit: type=1400 audit(16777691.966:29624): avc: denied { audit_write } for pid=8045 comm="syz.4.2655" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 246.324771][ T36] audit: type=1400 audit(16777692.176:29625): avc: granted { setsecparam } for pid=8051 comm="syz.4.2664" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 246.530314][ T8059] tipc: Enabling of bearer rejected, failed to enable media [ 246.556964][ T8063] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 246.561733][ T36] audit: type=1400 audit(16777692.406:29626): avc: denied { listen } for pid=8062 comm="syz.5.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 246.621865][ T8070] selinux_netlink_send: 2 callbacks suppressed [ 246.621886][ T8070] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8070 comm=syz.2.2673 [ 246.642254][ T8070] rust_binder: Write failure EFAULT in pid:1329 [ 247.164026][ T8097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2684'. [ 247.296070][ T8101] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 247.386926][ T8103] binder: Bad value for 'stats' [ 247.441505][ T8114] fuse: Bad value for 'fd' [ 247.632804][ T36] audit: type=1400 audit(16777693.486:29627): avc: denied { execute } for pid=8118 comm="syz.4.2691" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 247.752311][ T8132] ptm ptm7: ldisc open failed (-12), clearing slot 7 [ 247.781587][ T8137] rust_binder: Write failure EINVAL in pid:1356 [ 247.809644][ T8139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1358 [ 247.950222][ T8150] overlay: Bad value for 'redirect_dir' [ 248.477486][ T36] audit: type=1400 audit(16777694.326:29628): avc: denied { ioctl } for pid=8174 comm="syz.2.2708" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.526587][ T8183] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2711'. [ 248.548202][ T8187] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 248.573724][ T8191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44 [ 248.654099][ T8197] rust_binder: 1401: no such ref 5 [ 248.668623][ T8197] rust_binder: Write failure EINVAL in pid:1401 [ 249.031750][ T1442] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 249.171751][ T1442] usb 3-1: device descriptor read/64, error -71 [ 249.194185][ T8218] overlayfs: failed to clone upperpath [ 249.411796][ T1442] usb 3-1: device descriptor read/64, error -71 [ 249.444691][ T8221] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 249.651738][ T1442] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 249.681775][ T987] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 249.791748][ T1442] usb 3-1: device descriptor read/64, error -71 [ 249.831752][ T987] usb 5-1: Using ep0 maxpacket: 8 [ 249.838124][ T987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.848285][ T987] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 249.857654][ T987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.866444][ T987] usb 5-1: config 0 descriptor?? [ 250.031756][ T1442] usb 3-1: device descriptor read/64, error -71 [ 250.142134][ T1442] usb usb3-port1: attempt power cycle [ 250.239631][ T8252] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 250.239902][ T36] audit: type=1400 audit(16777696.086:29629): avc: denied { relabelfrom } for pid=8251 comm="syz.5.2733" name="TCPv6" dev="sockfs" ino=49188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 250.283747][ T36] audit: type=1400 audit(16777696.126:29630): avc: denied { relabelto } for pid=8251 comm="syz.5.2733" name="TCPv6" dev="sockfs" ino=49188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:dhcpd_exec_t:s0" [ 250.481858][ T1442] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 250.502693][ T1442] usb 3-1: device descriptor read/8, error -71 [ 250.513161][ T987] usbhid 5-1:0.0: can't add hid device: -71 [ 250.522783][ T987] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 250.539804][ T987] usb 5-1: USB disconnect, device number 55 [ 250.632707][ T1442] usb 3-1: device descriptor read/8, error -71 [ 250.871748][ T1442] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 250.893116][ T1442] usb 3-1: device descriptor read/8, error -71 [ 251.022814][ T1442] usb 3-1: device descriptor read/8, error -71 [ 251.081925][ T8308] rust_binder: Error in use_page_slow: ESRCH [ 251.081957][ T8308] rust_binder: use_range failure ESRCH [ 251.088267][ T8308] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 251.094545][ T8308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 251.102878][ T8308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:50 [ 251.133723][ T1442] usb usb3-port1: unable to enumerate USB device [ 251.796380][ T36] audit: type=1400 audit(16777697.646:29631): avc: denied { setattr } for pid=8376 comm="syz.4.2774" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 251.796908][ T8377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 251.819275][ T8377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:79 [ 251.919419][ T36] audit: type=1400 audit(16777697.766:29632): avc: denied { map } for pid=8383 comm="syz.4.2775" path="socket:[48493]" dev="sockfs" ino=48493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.944079][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2777'. [ 251.955365][ T36] audit: type=1400 audit(16777697.766:29633): avc: denied { accept } for pid=8383 comm="syz.4.2775" path="socket:[48493]" dev="sockfs" ino=48493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.966528][ T987] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 251.996449][ T987] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 252.086567][ T8398] binder: Unknown parameter 'defcontextix_acl_default' [ 252.094644][ T36] audit: type=1400 audit(16777697.946:29634): avc: denied { remount } for pid=8395 comm="syz.2.2780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 252.412533][ T8415] tmpfs: Bad value for 'nr_blocks' [ 252.418279][ T8415] 9pnet_fd: Insufficient options for proto=fd [ 252.707696][ T8431] overlay: Bad value for 'metacopy' [ 252.906622][ T8456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1430 [ 252.951831][ T8458] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 252.980814][ T8458] rust_binder: 1434: no such ref 1 [ 253.061372][ T8471] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 253.081894][ T8471] rust_binder: Write failure EINVAL in pid:1438 [ 253.438996][ T8497] loop2: detected capacity change from 0 to 7 [ 253.453106][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.462395][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 253.470479][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.479784][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 253.487718][ T8497] loop2: unable to read partition table [ 253.494891][ T8497] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 253.501268][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 253.518010][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.527218][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 253.539094][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.548370][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 253.561472][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.570764][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 253.580217][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.589552][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 253.598712][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.608130][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 253.792980][ T8509] rust_binder: Write failure EFAULT in pid:1453 [ 253.942053][ T8523] fuse: Bad value for 'group_id' [ 253.962935][ T8523] fuse: Bad value for 'group_id' [ 253.995279][ T8532] rust_binder: Failed copying into alloc: EFAULT [ 253.995309][ T8532] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 254.002087][ T8532] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 254.010954][ T8532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1462 [ 254.093297][ T8545] binder: Bad value for 'max' [ 254.163985][ T8554] /dev/rnullb0: Can't open blockdev [ 254.214934][ T8556] netlink: 'syz.3.2838': attribute type 1 has an invalid length. [ 254.228216][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2838'. [ 254.387695][ T8588] binder: Bad value for 'stats' [ 254.694254][ T987] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 254.822706][ T8609] rust_binder: inc_ref_done called when no active inc_refs [ 254.822763][ T8609] rust_binder: Error while translating object. [ 254.830653][ T8609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 254.837403][ T8609] rust_binder: Failure BR_FAILED_REPLY { source: ENOENT } during reply - delivering BR_FAILED_REPLY to sender. [ 254.846980][ T8609] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:112 [ 254.859235][ T987] usb 3-1: Using ep0 maxpacket: 32 [ 254.887222][ T987] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 254.889942][ T36] audit: type=1326 audit(16777700.736:29635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz.3.2860" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faebc38ebe9 code=0x0 [ 254.898311][ T8619] rust_binder: 115: no such ref 2 [ 254.924461][ T987] usb 3-1: config 0 has no interface number 0 [ 254.928248][ T8619] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 254.931458][ T987] usb 3-1: config 0 interface 184 has no altsetting 0 [ 254.940106][ T8619] rust_binder: 115: no such ref 3 [ 254.948787][ T987] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 254.951559][ T8619] rust_binder: Write failure EFAULT in pid:115 [ 254.960761][ T987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.975442][ T987] usb 3-1: Product: syz [ 254.979878][ T987] usb 3-1: Manufacturer: syz [ 254.985133][ T987] usb 3-1: SerialNumber: syz [ 254.990465][ T987] usb 3-1: config 0 descriptor?? [ 254.996546][ T987] smsc75xx v1.0.0 [ 255.399292][ T8591] rust_binder: Error while translating object. [ 255.399331][ T8591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 255.405609][ T8591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1491 [ 255.415907][ T987] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 255.436451][ T987] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 255.446153][ T987] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 255.456596][ T987] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 255.466217][ T987] usb 3-1: USB disconnect, device number 75 [ 255.848973][ T8632] ip6_vti0: mtu less than device minimum [ 255.878511][ T8634] fuse: Bad value for 'group_id' [ 255.891683][ T8634] fuse: Bad value for 'group_id' [ 255.917098][ T8636] syz.4.2868: attempt to access beyond end of device [ 255.917098][ T8636] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 255.937301][ T1442] rust_binder: 8589: removing orphan mapping 0:24 [ 255.944037][ T8636] EXT4-fs (loop4): unable to read superblock [ 256.083364][ T8652] rust_binder: Error while translating object. [ 256.083453][ T8652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 256.090022][ T8652] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 256.100172][ T8652] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:138 [ 256.118016][ T987] rust_binder: 8651: removing orphan mapping 0:24 [ 256.160983][ T8671] kvm: kvm [8670]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 256.277255][ T8674] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2878'. [ 256.354298][ T8676] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 256.679820][ T8690] fuse: blksize only supported for fuseblk [ 256.778702][ T8701] netlink: 'syz.3.2890': attribute type 16 has an invalid length. [ 256.844967][ T8716] overlayfs: failed to clone upperpath [ 256.988683][ T36] audit: type=1400 audit(16777702.836:29636): avc: denied { module_load } for pid=8743 comm="syz.3.2906" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=51261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 257.034725][ T8754] tmpfs: Unknown parameter 'usrquota' [ 257.154596][ T8781] 9pnet_fd: Insufficient options for proto=fd [ 257.171723][ T1442] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 257.323631][ T1442] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.336937][ T1442] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.347442][ T1442] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.359919][ T1442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.368415][ T1442] usb 3-1: SerialNumber: syz [ 257.457028][ T8830] 9pnet_fd: Insufficient options for proto=fd [ 257.575979][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.584697][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.603146][ T1442] usb 3-1: 0:2 : does not exist [ 257.616296][ T1442] usb 3-1: unit 5: unexpected type 0x0b [ 257.624091][ T1442] usb 3-1: USB disconnect, device number 76 [ 257.632689][ T8044] udevd[8044]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 257.651724][ T10] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 257.740074][ T31] rust_binder: 8850: removing orphan mapping 0:4208 [ 257.750671][ T8856] netlink: 'syz.2.2943': attribute type 13 has an invalid length. [ 257.758702][ T8857] netlink: 'syz.2.2943': attribute type 13 has an invalid length. [ 257.790704][ T8864] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 257.802848][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.819625][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.829946][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.839167][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 257.850604][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.854122][ T8874] pim6reg1: entered promiscuous mode [ 257.863120][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.866445][ T8874] pim6reg1: entered allmulticast mode [ 257.876031][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.889061][ T10] usb 5-1: Product: syz [ 257.896565][ T10] usb 5-1: Manufacturer: syz [ 257.903683][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 257.909172][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 257.915494][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 257.921467][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 257.987703][ T8877] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 257.994968][ T8877] rust_binder: Write failure EINVAL in pid:1533 [ 258.075275][ T8886] rust_binder: Write failure EFAULT in pid:1542 [ 258.158240][ T10] usb 5-1: USB disconnect, device number 57 [ 258.187213][ T8905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2957'. [ 258.196470][ T8905] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2957'. [ 258.277761][ T36] audit: type=1400 audit(16777704.126:29637): avc: denied { create } for pid=8910 comm="syz.5.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 258.981404][ T8918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.981442][ T8918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.999926][ T8922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.015144][ T8922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.241775][ T987] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 259.391741][ T987] usb 3-1: Using ep0 maxpacket: 8 [ 259.398160][ T987] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 259.409200][ T987] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1919, setting to 1024 [ 259.422276][ T987] usb 3-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.40 [ 259.431459][ T987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.439538][ T987] usb 3-1: Product: ࡠ [ 259.443757][ T987] usb 3-1: Manufacturer: Ѝ [ 259.448289][ T987] usb 3-1: SerialNumber: syz [ 259.454988][ T8923] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 259.540172][ T8928] SELinux: failed to load policy [ 259.623802][ T8933] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2969'. [ 259.633123][ T8933] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2969'. [ 259.642286][ T8933] netlink: 'syz.4.2969': attribute type 6 has an invalid length. [ 259.650335][ T8933] netlink: 'syz.4.2969': attribute type 5 has an invalid length. [ 259.658295][ T8933] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2969'. [ 259.673130][ T987] usbhid 3-1:1.0: can't add hid device: -71 [ 259.679420][ T987] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 259.687113][ T8936] rust_binder: 177: no such ref 0 [ 259.691804][ T987] usb 3-1: USB disconnect, device number 77 [ 259.695954][ T8938] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2970'. [ 259.708311][ T8936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.708457][ T8936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:177 [ 259.922041][ T8967] rust_binder: Write failure EFAULT in pid:208 [ 259.948406][ T36] audit: type=1326 audit(16777705.796:29638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.4.2980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa47af8ebe9 code=0x0 [ 260.809357][ T8985] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2986'. [ 260.821523][ T8985] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2986'. [ 260.867739][ T8991] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2988'. [ 260.967095][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 261.154311][ T36] audit: type=1326 audit(16777707.006:29639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.3.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebc38ebe9 code=0x7ffc0000 [ 261.178174][ T36] audit: type=1326 audit(16777707.006:29640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.3.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebc38ebe9 code=0x7ffc0000 [ 261.201980][ T36] audit: type=1326 audit(16777707.006:29641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.3.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7faebc38ebe9 code=0x7ffc0000 [ 261.226045][ T36] audit: type=1326 audit(16777707.006:29642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.3.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebc38ebe9 code=0x7ffc0000 [ 261.249752][ T36] audit: type=1326 audit(16777707.006:29643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.3.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faebc38ebe9 code=0x7ffc0000 [ 261.274515][ T36] audit: type=1326 audit(16777707.006:29644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.3.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebc38ebe9 code=0x7ffc0000 [ 261.298115][ T36] audit: type=1326 audit(16777707.006:29645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9015 comm="syz.3.2997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7faebc38ebe9 code=0x7ffc0000 [ 261.891765][ T987] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 262.043024][ T987] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 262.051376][ T987] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 262.059595][ T987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 262.068543][ T987] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 262.079401][ T987] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.091027][ T987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 262.102496][ T987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 262.113937][ T987] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 262.129566][ T987] usb 3-1: string descriptor 0 read error: -22 [ 262.135940][ T987] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 262.145171][ T987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.155629][ T987] usb 3-1: config 0 descriptor?? [ 262.163410][ T9022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.174826][ T987] hub 3-1:0.0: bad descriptor, ignoring hub [ 262.180804][ T987] hub 3-1:0.0: probe with driver hub failed with error -5 [ 262.191754][ T987] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 262.227261][ C1] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -1 [ 262.367036][ T9059] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3012'. [ 262.379743][ T9059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9059 comm=syz.5.3012 [ 262.382429][ T987] usb 3-1: USB disconnect, device number 78 [ 262.452946][ T9066] netlink: 'syz.5.3015': attribute type 1 has an invalid length. [ 262.524640][ T9073] tipc: Enabling of bearer rejected, failed to enable media [ 262.564341][ T9079] overlayfs: failed to clone upperpath [ 262.753588][ T9083] fuse: Bad value for 'fd' [ 262.790434][ T9087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9087 comm=syz.3.3024 [ 262.893879][ T9090] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 262.923907][ T9092] /dev/rnullb0: Can't open blockdev [ 262.991776][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 263.016822][ T366] Bluetooth: hci0: command 0x1003 tx timeout [ 263.348956][ T9113] netlink: 'syz.3.3033': attribute type 4 has an invalid length. [ 263.357270][ T9113] __nla_validate_parse: 1 callbacks suppressed [ 263.357291][ T9113] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3033'. [ 263.526138][ T9121] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3036'. [ 263.951704][ T987] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 264.103346][ T987] usb 3-1: unable to get BOS descriptor or descriptor too short [ 264.112324][ T987] usb 3-1: config 7 has an invalid interface number: 188 but max is 0 [ 264.120785][ T987] usb 3-1: config 7 has no interface number 0 [ 264.127438][ T987] usb 3-1: config 7 interface 188 altsetting 7 endpoint 0x1 has invalid maxpacket 5095, setting to 64 [ 264.138499][ T987] usb 3-1: config 7 interface 188 has no altsetting 0 [ 264.146614][ T987] usb 3-1: New USB device found, idVendor=054c, idProduct=0010, bcdDevice= 5.06 [ 264.155846][ T987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.163926][ T987] usb 3-1: Product: syz [ 264.168146][ T987] usb 3-1: Manufacturer: syz [ 264.172786][ T987] usb 3-1: SerialNumber: syz [ 264.745201][ T9161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:254 [ 265.860449][ T9240] veth1: entered allmulticast mode [ 265.877017][ T9239] veth1: left allmulticast mode [ 266.413395][ T9254] rust_binder: Error while translating object. [ 266.413393][ T9253] rust_binder: Error while translating object. [ 266.413427][ T9254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 266.419841][ T9253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 266.425931][ T9254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:259 [ 266.436306][ T9253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:259 [ 266.462450][ T9256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3089'. [ 266.727978][ T987] usb-storage 3-1:7.188: USB Mass Storage device detected [ 266.737410][ T987] usb-storage 3-1:7.188: Quirks match for vid 054c pid 0010: 1 [ 266.739079][ T9268] /dev/rnullb0: Can't open blockdev [ 266.769308][ T987] usb 3-1: USB disconnect, device number 79 [ 266.774445][ T9270] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27413 sclass=netlink_xfrm_socket pid=9270 comm=syz.2.3094 [ 266.804661][ T9272] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 267.299443][ T9306] x_tables: duplicate underflow at hook 4 [ 267.382976][ T9317] /dev/rnullb0: Can't open blockdev [ 267.442446][ T9320] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3109'. [ 267.471730][ T9324] veth1_macvtap: left promiscuous mode [ 267.477342][ T9324] macsec0: entered allmulticast mode [ 267.484119][ T9324] veth1_macvtap: entered promiscuous mode [ 267.490089][ T9324] veth1_macvtap: entered allmulticast mode [ 267.496371][ T9324] macsec0: left allmulticast mode [ 267.501593][ T9324] veth1_macvtap: left allmulticast mode [ 267.556834][ T9332] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 267.651940][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 267.651959][ T36] audit: type=1400 audit(16777713.506:29652): avc: denied { read } for pid=9340 comm="syz.2.3116" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 267.680787][ T36] audit: type=1400 audit(16777713.506:29653): avc: denied { open } for pid=9340 comm="syz.2.3116" path="/565/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 267.838063][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3118'. [ 267.861021][ T36] audit: type=1400 audit(16777713.706:29654): avc: denied { execute } for pid=9349 comm="syz.5.3119" path="/memory.events.local" dev="ramfs" ino=53821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 268.037918][ T9361] veth1: entered allmulticast mode [ 268.043407][ T9360] veth1: left allmulticast mode [ 268.313091][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.320859][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.329292][ T9367] bridge_slave_0: entered allmulticast mode [ 268.335883][ T9367] bridge_slave_0: entered promiscuous mode [ 268.342699][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.343117][ T9379] tipc: Can't bind to reserved service type 2 [ 268.350387][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.350469][ T9367] bridge_slave_1: entered allmulticast mode [ 268.358677][ T9379] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 268.364347][ T9367] bridge_slave_1: entered promiscuous mode [ 268.453400][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.460724][ T9367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.468543][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.475645][ T9367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.492110][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.499730][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.527011][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.534159][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.550681][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.557920][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.572725][ T987] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 268.607768][ T9367] veth0_vlan: entered promiscuous mode [ 268.631222][ T9367] veth1_macvtap: entered promiscuous mode [ 268.712380][ T36] audit: type=1326 audit(16777714.566:29655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.4.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47af8ebe9 code=0x7ffc0000 [ 268.743300][ T987] usb 3-1: Invalid ep0 maxpacket: 64 [ 268.743407][ T36] audit: type=1326 audit(16777714.566:29656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.4.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47af8ebe9 code=0x7ffc0000 [ 268.776596][ T36] audit: type=1326 audit(16777714.566:29657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.4.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa47af8ebe9 code=0x7ffc0000 [ 268.800608][ T36] audit: type=1326 audit(16777714.566:29658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.4.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47af8ebe9 code=0x7ffc0000 [ 268.826033][ T9402] kvm_intel: kvm [9401]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 268.826061][ T36] audit: type=1326 audit(16777714.566:29659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.4.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47af8ebe9 code=0x7ffc0000 [ 268.836028][ T9402] pim6reg1: entered promiscuous mode [ 268.859381][ T36] audit: type=1326 audit(16777714.596:29660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.4.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa47af90b07 code=0x7ffc0000 [ 268.864882][ T9402] pim6reg1: entered allmulticast mode [ 268.891691][ T987] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 268.901584][ T36] audit: type=1326 audit(16777714.596:29661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.4.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa47af90a7c code=0x7ffc0000 [ 269.071843][ T987] usb 3-1: Invalid ep0 maxpacket: 64 [ 269.077476][ T987] usb usb3-port1: attempt power cycle [ 269.083569][ T9409] rust_binder: Write failure EFAULT in pid:289 [ 269.136759][ T9413] __vm_enough_memory: pid: 9413, comm: syz.4.3141, bytes: 18014402804453376 not enough memory for the allocation [ 269.180829][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.180863][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.187938][ T9420] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 269.188035][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.194994][ T9420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 269.203856][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.210105][ T9420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:298 [ 269.219666][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.236522][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.243331][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.250069][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.256860][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.259196][ T9422] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3144'. [ 269.263744][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.279097][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.285673][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.292657][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.299331][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.306326][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.313023][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.319587][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.326233][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.332849][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.339652][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.346328][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.352902][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.359625][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.366310][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.372944][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.379595][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.386222][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.392887][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.399327][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.405888][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.412405][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.424397][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.431266][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.441738][ T987] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 269.444867][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.456291][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.462838][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.469538][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.478036][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.485164][ T987] usb 3-1: Invalid ep0 maxpacket: 64 [ 269.485459][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.498667][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.505338][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.512113][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.518741][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.525459][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.532646][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.539187][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.546285][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.553049][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.559770][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.566802][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.573666][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.580426][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.587289][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.594279][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.601113][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.607808][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.614662][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.621359][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.628040][ T987] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 269.629588][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.642424][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.649028][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.652328][ T987] usb 3-1: Invalid ep0 maxpacket: 64 [ 269.655602][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.662457][ T987] usb usb3-port1: unable to enumerate USB device [ 269.667416][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.680152][ T9418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.716472][ T9434] netlink: 'syz.5.3149': attribute type 27 has an invalid length. [ 269.991778][ T65] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 270.142916][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.153309][ T65] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 270.167153][ T65] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.176395][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 270.184775][ T65] usb 6-1: SerialNumber: syz [ 270.192263][ T65] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 270.386429][ T9458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 270.386459][ T9458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:308 [ 270.857533][ T9480] netlink: 'syz.3.3165': attribute type 4 has an invalid length. [ 270.876916][ T9480] netlink: 'syz.3.3165': attribute type 4 has an invalid length. [ 271.103682][ T987] usb 6-1: USB disconnect, device number 9 [ 271.116786][ T9486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 271.116824][ T9486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 271.127718][ T9487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.150052][ T9490] /dev/rnullb0: Can't open blockdev [ 271.237002][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 271.441554][ T9507] tmpfs: Unknown parameter 'h, priority 0 [ 278.451878][ T987] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 278.472736][ T987] usb 6-1: device descriptor read/8, error -71 [ 278.602785][ T987] usb 6-1: device descriptor read/8, error -71 [ 278.841770][ T987] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 278.862760][ T987] usb 6-1: device descriptor read/8, error -71 [ 278.992774][ T987] usb 6-1: device descriptor read/8, error -71 [ 279.101863][ T987] usb usb6-port1: unable to enumerate USB device [ 279.230978][ T9698] tipc: Disabling bearer [ 279.297428][ T986] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 279.304068][ T986] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 279.314393][ T986] usbhid 3-1:0.0: can't add hid device: -32 [ 279.322200][ T986] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 279.346341][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3249'. [ 279.357804][ T986] usb 3-1: USB disconnect, device number 85 [ 279.434678][ T36] audit: type=1400 audit(16777725.286:29695): avc: denied { mounton } for pid=9719 comm="syz.4.3250" path="/dev/binderfs/binder0" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.494324][ T9728] rust_binder: Error while translating object. [ 279.494353][ T9728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 279.500549][ T9728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1688 [ 279.578196][ T9731] rust_binder: Error in use_page_slow: ESRCH [ 279.587578][ T9731] rust_binder: use_range failure ESRCH [ 279.594101][ T9731] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 279.599873][ T9731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 279.608144][ T9731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1691 [ 280.125430][ T9749] /dev/sr0: Can't lookup blockdev [ 280.241444][ T9757] 9pnet_fd: Insufficient options for proto=fd [ 280.500502][ T9762] netlink: 'syz.3.3269': attribute type 32 has an invalid length. [ 280.523401][ T65] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 280.550924][ T9769] rust_binder: 1701: no such ref 5 [ 280.556297][ T9769] rust_binder: Write failure EINVAL in pid:1701 [ 280.683009][ T65] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 280.691146][ T65] usb 5-1: config 0 has no interface number 0 [ 280.697463][ T65] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 280.708224][ T65] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 280.719307][ T65] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 280.730172][ T65] usb 5-1: config 0 interface 2 has no altsetting 0 [ 280.739584][ T65] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 280.749371][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.757467][ T65] usb 5-1: Product: syz [ 280.761865][ T65] usb 5-1: Manufacturer: syz [ 280.766764][ T65] usb 5-1: SerialNumber: syz [ 280.772675][ T9801] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 280.776661][ T65] usb 5-1: config 0 descriptor?? [ 280.780458][ T9801] rust_binder: Write failure EINVAL in pid:1727 [ 280.785766][ T9759] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 280.799610][ T9759] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 280.858594][ T9803] cgroup: Invalid name [ 280.863131][ T9803] rust_binder: Write failure EFAULT in pid:1729 [ 281.027192][ T65] usb 5-1: USB disconnect, device number 60 [ 281.179294][ T9810] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.191668][ T9810] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.201727][ T9810] bridge_slave_0: entered allmulticast mode [ 281.208181][ T9810] bridge_slave_0: entered promiscuous mode [ 281.214937][ T9810] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.222415][ T9810] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.230713][ T9810] bridge_slave_1: entered allmulticast mode [ 281.242214][ T9810] bridge_slave_1: entered promiscuous mode [ 281.298678][ T9824] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3290'. [ 281.353660][ T9810] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.360965][ T9810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.368513][ T9810] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.375604][ T9810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.403776][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.411609][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.422248][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.429353][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.439440][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.446777][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.478055][ T9810] veth0_vlan: entered promiscuous mode [ 281.491252][ T9810] veth1_macvtap: entered promiscuous mode [ 281.551723][ T65] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 281.563498][ T36] audit: type=1400 audit(16777727.416:29696): avc: denied { map } for pid=9843 comm="syz.4.3294" path="socket:[57537]" dev="sockfs" ino=57537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 281.702865][ T65] usb 6-1: config 0 has an invalid interface number: 58 but max is 0 [ 281.712204][ T65] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.722832][ T65] usb 6-1: config 0 has no interface number 0 [ 281.729186][ T65] usb 6-1: config 0 interface 58 has no altsetting 0 [ 281.736143][ T65] usb 6-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice= 0.21 [ 281.745527][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.761805][ T65] usb 6-1: config 0 descriptor?? [ 281.767936][ T65] ums-cypress 6-1:0.58: USB Mass Storage device detected [ 281.846100][ T9862] exFAT-fs (rnullb0): invalid boot record signature [ 281.852860][ T9862] exFAT-fs (rnullb0): failed to read boot sector [ 281.859483][ T9862] exFAT-fs (rnullb0): failed to recognize exfat type [ 281.900174][ T36] audit: type=1400 audit(16777727.746:29697): avc: denied { append } for pid=9872 comm="syz.2.3303" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 281.953276][ T9882] netlink: 'syz.2.3306': attribute type 4 has an invalid length. [ 281.977298][ T486] usb 6-1: USB disconnect, device number 15 [ 281.979471][ T9885] fuseblk: Unknown parameter '' [ 282.018525][ T9891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3311'. [ 282.071771][ T481] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 282.091549][ T9895] fuse: blksize only supported for fuseblk [ 282.149229][ T36] audit: type=1107 audit(16777727.996:29698): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=' }]՚QT  0a Ԩh2䢔IO^$1!x{;+KM߰h6#2NoeJ:^IgIF={%Dp>ِ'{ږk.9Sk4=dJX4hx] QvF 0U0K7>]}rMYuDlMUBp듧W*.#J [ 284.237604][ T12] tipc: Disabling bearer [ 284.294096][T10021] tipc: MTU too low for tipc bearer [ 284.302469][ T36] audit: type=1400 audit(16777730.156:29699): avc: denied { create } for pid=10020 comm="syz.5.3352" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 284.307335][ T9980] veth1_macvtap: entered promiscuous mode [ 284.340953][ T36] audit: type=1400 audit(16777730.176:29700): avc: denied { link } for pid=10020 comm="syz.5.3352" name="file1" dev="overlay" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 284.376564][ T12] tipc: Left network mode [ 284.380517][ T36] audit: type=1400 audit(16777730.176:29701): avc: denied { setattr } for pid=10020 comm="syz.5.3352" name="#15" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 284.404924][ T12] veth1_macvtap: left promiscuous mode [ 284.413007][ T36] audit: type=1400 audit(16777730.176:29702): avc: denied { rename } for pid=10020 comm="syz.5.3352" name="#15" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 284.414240][ T12] veth0_vlan: left promiscuous mode [ 284.448322][ T481] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 284.487748][ T481] usb 5-1: device descriptor read/8, error -71 [ 284.631226][ T481] usb 5-1: device descriptor read/8, error -71 [ 284.721931][T10037] tipc: Enabling of bearer rejected, failed to enable media [ 284.842550][T10043] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 284.857484][T10043] rust_binder: Write failure EINVAL in pid:134 [ 284.871708][ T481] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 285.331676][ T481] usb 5-1: device not accepting address 65, error -71 [ 285.345189][ T481] usb usb5-port1: unable to enumerate USB device [ 285.464889][T10090] netlink: 'syz.5.3372': attribute type 12 has an invalid length. [ 285.473871][T10078] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3368'. [ 285.492878][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3368'. [ 285.519417][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3368'. [ 285.700246][ T36] audit: type=1326 audit(16777731.546:29703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.3.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebc38ebe9 code=0x7fc00000 [ 285.713295][T10110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 285.737193][T10110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 285.751743][ T481] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 285.942354][T10117] usb usb8: usbfs: process 10117 (syz.5.3381) did not claim interface 0 before use [ 285.943570][ T481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.981728][ T481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.001720][ T481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 286.013514][ T481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 286.023803][ T481] usb 5-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 286.033233][ T481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.042545][ T481] usb 5-1: config 0 descriptor?? [ 286.287549][ T36] audit: type=1400 audit(16777732.136:29704): avc: denied { append } for pid=10137 comm="syz.5.3390" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 286.651473][ T481] usbhid 5-1:0.0: can't add hid device: -71 [ 286.658026][ T481] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 286.667288][ T481] usb 5-1: USB disconnect, device number 66 [ 286.924644][ T36] audit: type=1400 audit(16777732.776:29705): avc: denied { accept } for pid=10163 comm="syz.3.3399" path="socket:[59193]" dev="sockfs" ino=59193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 287.258575][T10176] bridge0: port 3(veth1_macvtap) entered blocking state [ 287.265720][T10176] bridge0: port 3(veth1_macvtap) entered disabled state [ 287.272884][T10176] veth1_macvtap: entered allmulticast mode [ 287.279322][T10176] veth1_macvtap: left allmulticast mode [ 287.421912][ T481] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 287.565934][T10187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:209 [ 287.566192][ T36] audit: type=1400 audit(16777733.416:29706): avc: denied { ioctl } for pid=10185 comm="syz.5.3408" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 287.581775][ T481] usb 5-1: Using ep0 maxpacket: 32 [ 287.608676][ T481] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 287.616968][ T481] usb 5-1: config 0 has no interface number 0 [ 287.624944][ T481] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 287.634269][ T481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.642494][ T481] usb 5-1: Product: syz [ 287.646800][ T481] usb 5-1: Manufacturer: syz [ 287.651415][ T481] usb 5-1: SerialNumber: syz [ 287.656915][ T481] usb 5-1: config 0 descriptor?? [ 287.662727][ T481] smsc95xx v2.0.0 [ 287.708050][T10190] overlayfs: failed to clone upperpath [ 288.394739][T10197] netlink: 'syz.5.3412': attribute type 58 has an invalid length. [ 288.457145][T10204] overlay: Unknown parameter 'smackfsdef' [ 288.465948][ T481] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 288.478990][ T481] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 288.493122][ T481] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 288.504078][ T481] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 288.515209][ T481] usb 5-1: USB disconnect, device number 67 [ 288.646497][ T36] audit: type=1400 audit(16777734.496:29707): avc: denied { add_name } for pid=10213 comm="syz.5.3418" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 288.646733][ T36] audit: type=1400 audit(16777734.496:29708): avc: denied { create } for pid=10213 comm="syz.5.3418" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 288.655991][T10214] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607) [ 288.831709][T10214] rust_binder: Error while translating object. [ 288.844622][T10214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 288.850842][T10214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:234 [ 288.876261][ T36] audit: type=1400 audit(16777734.726:29709): avc: denied { unmount } for pid=9367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 289.381702][ T987] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 289.532040][ T987] usb 5-1: Using ep0 maxpacket: 16 [ 289.539210][ T987] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 289.550547][ T987] usb 5-1: config 1 interface 0 has no altsetting 0 [ 289.558841][ T987] usb 5-1: New USB device found, idVendor=046d, idProduct=c08d, bcdDevice= 0.40 [ 289.568193][ T987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.576678][ T987] usb 5-1: Product: 껱腱뙍엩ꡐᏨ鞧ߠ嫣䁖Ϻ烁ఀ멒삩⇠䋥㢉繢ꗫ–ᆹ쨵刵큀亲዇៴䇧콐꼁遠ビ㲌㬟마멲扮ᶸࣣ梗㠢꿨㪀詵肧옸鏧暙㒬腳⎥澾皜縏 [ 289.596079][ T987] usb 5-1: Manufacturer: 秗穑妈ᠢ릃N塀項馟䋿풇ඟ篹【뀟䴖䗾ꓯ춛듁ꛏ㺺燎芐깚憿뀊嵐抳鶸약䲪퀊謶໨॒淩몌彊嫩襌䌲왗詩ꐿ鿦庾砊᫫閲ಎ㻞휄䙘豄呙焬䨤﷗糎綵蚱㡤 [ 289.620027][ T987] usb 5-1: SerialNumber: 훱畒뎂헨汸䏍讖볕峫㏈竡᭏孠䳩竱ʹ傘曭⎺╖竀⒖놫ꮶ뉢ⲓ괆㐂ਆ嗳ᅕ퐢禃襚鈢퉅ḓ曨瓐뤫佶䧊樧ꛧ㱏ቍ諥琮䜽ꯆ [ 289.927113][T10238] rust_binder: Error while translating object. [ 289.927157][T10238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.933589][T10238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:250 [ 289.944649][T10238] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.007094][T10239] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3428'. [ 290.023328][T10239] ------------[ cut here ]------------ [ 290.028851][T10239] WARNING: CPU: 1 PID: 10239 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 290.038811][T10239] Modules linked in: [ 290.042790][T10239] CPU: 1 UID: 0 PID: 10239 Comm: syz.5.3428 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 290.048726][ T987] usbhid 5-1:1.0: can't add hid device: -71 [ 290.054496][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.054518][T10239] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 290.061272][ T987] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 290.070717][T10239] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 19 40 ee 05 00 0f 85 be 00 00 00 c6 05 0c 40 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 290.080769][ T987] usb 5-1: USB disconnect, device number 68 [ 290.084659][T10239] RSP: 0018:ffffc9000dbb7560 EFLAGS: 00010246 [ 290.116792][T10239] RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000000 [ 290.117476][T10240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 290.124935][T10239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000dbb7618 [ 290.125351][T10240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:250 [ 290.134378][T10239] RBP: ffffc9000dbb76a0 R08: ffffc9000dbb7617 R09: 0000000000000000 [ 290.134407][T10239] R10: ffffc9000dbb7600 R11: fffff52001b76ec3 R12: ffffc9000dbb75a0 [ 290.167975][T10239] R13: dffffc0000000000 R14: 1ffff92001b76eb0 R15: 0000000000000000 [ 290.176035][T10239] FS: 00007f3ee05626c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 290.185415][T10239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.192176][T10239] CR2: 00007f3ee0561f98 CR3: 0000000109fb2000 CR4: 00000000003526b0 [ 290.200351][T10239] Call Trace: [ 290.203873][T10239] [ 290.206835][T10239] ? vfs_write+0x3c0/0xe80 [ 290.211372][T10239] ? ksys_write+0x141/0x250 [ 290.216001][T10239] ? x64_sys_call+0x271c/0x2ee0 [ 290.221046][T10239] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 290.227415][T10239] ? hashtab_init+0xdb/0x1f0 [ 290.232192][T10239] ___kmalloc_large_node+0xb5/0x250 [ 290.237777][T10239] ? hashtab_init+0xdb/0x1f0 [ 290.242511][T10239] __kmalloc_large_node_noprof+0x1e/0xe0 [ 290.248370][T10239] ? hashtab_init+0xdb/0x1f0 [ 290.253123][T10239] __kmalloc_noprof+0x26d/0x450 [ 290.258240][T10239] hashtab_init+0xdb/0x1f0 [ 290.262883][T10239] ? class_read+0x162/0x8a0 [ 290.267620][T10239] symtab_init+0x44/0x70 [ 290.272059][T10239] class_read+0x1df/0x8a0 [ 290.276693][T10239] ? __cfi_class_read+0x10/0x10 [ 290.282024][T10239] ? hashtab_init+0x105/0x1f0 [ 290.286830][T10239] policydb_read+0xaa8/0x28c0 [ 290.291707][T10239] ? kasan_save_alloc_info+0x40/0x50 [ 290.297043][T10239] ? __cfi_policydb_read+0x10/0x10 [ 290.302405][T10239] ? security_load_policy+0x128/0x12f0 [ 290.308265][T10239] security_load_policy+0x162/0x12f0 [ 290.313757][T10239] ? avc_has_perm_noaudit+0x286/0x360 [ 290.319262][T10239] ? _raw_spin_unlock+0x45/0x60 [ 290.324296][T10239] ? __check_object_size+0x50a/0x810 [ 290.329943][T10239] ? __cfi_security_load_policy+0x10/0x10 [ 290.335772][T10239] ? __kasan_check_write+0x18/0x20 [ 290.340951][T10239] sel_write_load+0x298/0x5e0 [ 290.345704][T10239] ? futex_wait+0x29a/0x7a0 [ 290.350361][T10239] ? __cfi_sel_write_load+0x10/0x10 [ 290.355624][T10239] ? __cfi_futex_wait+0x10/0x10 [ 290.360681][T10239] ? bpf_lsm_file_permission+0xd/0x20 [ 290.366289][T10239] ? __cfi_sel_write_load+0x10/0x10 [ 290.371612][T10239] vfs_write+0x3c0/0xe80 [ 290.376051][T10239] ? __cfi_vfs_write+0x10/0x10 [ 290.380884][T10239] ? __kasan_check_write+0x18/0x20 [ 290.386078][T10239] ? mutex_lock+0x92/0x1c0 [ 290.390539][T10239] ? __cfi_mutex_lock+0x10/0x10 [ 290.395442][T10239] ? __fget_files+0x2c5/0x340 [ 290.400156][T10239] ksys_write+0x141/0x250 [ 290.404635][T10239] ? __cfi_ksys_write+0x10/0x10 [ 290.409521][T10239] ? __kasan_check_write+0x18/0x20 [ 290.414865][T10239] ? fpregs_restore_userregs+0x11d/0x260 [ 290.420584][T10239] __x64_sys_write+0x7f/0x90 [ 290.425334][T10239] x64_sys_call+0x271c/0x2ee0 [ 290.430066][T10239] do_syscall_64+0x58/0xf0 [ 290.434593][T10239] ? clear_bhb_loop+0x50/0xa0 [ 290.439324][T10239] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 290.445490][T10239] RIP: 0033:0x7f3edf78ebe9 [ 290.449982][T10239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.469693][T10239] RSP: 002b:00007f3ee0562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 290.478171][T10239] RAX: ffffffffffffffda RBX: 00007f3edf9c6090 RCX: 00007f3edf78ebe9 [ 290.486296][T10239] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000009 [ 290.494507][T10239] RBP: 00007f3edf811e19 R08: 0000000000000000 R09: 0000000000000000 [ 290.502546][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.510542][T10239] R13: 00007f3edf9c6128 R14: 00007f3edf9c6090 R15: 00007fff46ca5828 [ 290.518634][T10239] [ 290.521755][T10239] ---[ end trace 0000000000000000 ]--- [ 290.527419][T10239] SELinux: failed to load policy [ 290.697625][ T36] audit: type=1326 audit(16777736.546:29710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10189 comm="syz.3.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faebc38ebe9 code=0x7fc00000