last executing test programs: 46.970584608s ago: executing program 0 (id=121): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000700000/0x4000)=nil, 0x4000, 0x92112e1fb62f26bb, 0x100010, r0, 0x9108f000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000880)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x8eW\v\x8b=\xe7\x1c\xcb\xfa\xc2\xb5\xf7\x83\xa1\xb1\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xd6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc0\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x96=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\x84\xf2\tA\xfcI\xe6>\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\xf1\x91c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5\x00\x00\x00\x00\x00\x00\x00\x04\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1dd\xf4\xba\xd1<[\x10\xc1\xec\xa2\x9c3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf!\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaf\x9b\x9a\xc1\x01\xe8\xf9RF\xfdJW\xd5\x9a,\xd8\x15\xd8\x94>L1\xf6\xd2\xc2a-\xc2\\m\x88\xdcK\x94\xd3\x994\xdb;\xa6\xce\xbf\xd4\xe6\xc8\t\xaf\x82\xdfe\x85\xcc(\x1e\xbf9\x94\xed.\x19O\xf4W+\xd9\xe6\x1boz\v<\xf5\xea[\xa5A\x97\xaf\xbf^\x1a') syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x85, 0x7, 0x6, 0x80, 0x5}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 46.960415378s ago: executing program 0 (id=122): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) 46.861066989s ago: executing program 0 (id=123): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x84000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x206e) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x3) 46.859513549s ago: executing program 0 (id=124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) unshare(0x62040200) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/rt6_stats\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip6_tables_matches\x00') pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x7f) read$FUSE(r1, &(0x7f0000002b80)={0x2020}, 0x2020) unshare(0x400) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, 0xffffffffffffffff, 0x0) 46.858250979s ago: executing program 0 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x8203b, 0x0) fcntl$setown(r0, 0x8, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0xd7b463f9eeb1723e}, 0x4800) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000080)=0x6, 0x4) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f00000000c0)='/dev/ashmem\x00') r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b02010208240701050007"], 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r11, 0xae80, 0x0) read$FUSE(r8, &(0x7f0000005fc0)={0x2020}, 0x2020) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, 0x0) r12 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) 46.80366251s ago: executing program 0 (id=126): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9cc6d000) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/199, 0xc7}], 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xb8H\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&`<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6#M\"\x87\x05W\f0b(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\xfe\x8c\x87\x0f\x99\xc3E\xcfc\x8cX\xa3\xf5&}\a\xbf\xf8N\"C!\x1f\x96\xd7\xe9\xa5tw\'\x8f,_\xa0\xea\x90\"\x19i\f\xd5\x02\xe2+\xc1\x8e\xfb@\xc56\xb5\xe4\x91\xbc\xbf\xf7\xea\x01]\xd8\xf8.\x99\x82\x89\x9a\x97\x8b\xdd\xcf\xe6\xb4\xad\xda\x7f\xc8\xd0(Q\x8dP\xd9\xd8(){\xca\x84\xd3(\xb6\xd5\xd4\x94\xdf\xde\x05B\"\xa3L\xc9t\xd4]\x95.\x02\x97\xb5\xc5E\xc7H\x84d\xe6I\xd8\\&\xc6\x81t\xa38u\xc0\xa3\x9b\b,4-\x8a\x9fo:\x86J?\xac\xd1\xa8\x02\xb6\xc5m\x85,\x97\xbe\xba\x0eWnW\xdd,\x1eT\x9c\xde\x9e{;\xb2X\x89\xdc\xcfO6\xba\xcbK\xb5\xfbD\xc9\xc4D\x04BT\xe1\xe9]s\x18$F\x9b\xe9<\xdb\x03\b\xfc\xe9\x19E\x8b\x83\xa6\x84Y\xab\x85\xea\x1f^K\xd6I\x10G<@n\x9e\x81\xc6\x1d\xbc\x1a\xc1G') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 46.77773473s ago: executing program 32 (id=126): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9cc6d000) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/199, 0xc7}], 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xb8H\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&`<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6#M\"\x87\x05W\f0b(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\xfe\x8c\x87\x0f\x99\xc3E\xcfc\x8cX\xa3\xf5&}\a\xbf\xf8N\"C!\x1f\x96\xd7\xe9\xa5tw\'\x8f,_\xa0\xea\x90\"\x19i\f\xd5\x02\xe2+\xc1\x8e\xfb@\xc56\xb5\xe4\x91\xbc\xbf\xf7\xea\x01]\xd8\xf8.\x99\x82\x89\x9a\x97\x8b\xdd\xcf\xe6\xb4\xad\xda\x7f\xc8\xd0(Q\x8dP\xd9\xd8(){\xca\x84\xd3(\xb6\xd5\xd4\x94\xdf\xde\x05B\"\xa3L\xc9t\xd4]\x95.\x02\x97\xb5\xc5E\xc7H\x84d\xe6I\xd8\\&\xc6\x81t\xa38u\xc0\xa3\x9b\b,4-\x8a\x9fo:\x86J?\xac\xd1\xa8\x02\xb6\xc5m\x85,\x97\xbe\xba\x0eWnW\xdd,\x1eT\x9c\xde\x9e{;\xb2X\x89\xdc\xcfO6\xba\xcbK\xb5\xfbD\xc9\xc4D\x04BT\xe1\xe9]s\x18$F\x9b\xe9<\xdb\x03\b\xfc\xe9\x19E\x8b\x83\xa6\x84Y\xab\x85\xea\x1f^K\xd6I\x10G<@n\x9e\x81\xc6\x1d\xbc\x1a\xc1G') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 4.80033424s ago: executing program 2 (id=869): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x800, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r4, &(0x7f0000011480)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x2, 0x100005) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/272], 0x110) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents64(r5, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) 4.79758484s ago: executing program 2 (id=870): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x2000, 0x1000, 0x6, 0x2}, 0x20) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x3, 0x2, {0x2, 0x1}}, 0x0}, &(0x7f0000000580)={0x34, &(0x7f0000000280)={0x0, 0xf, 0x5b, "0f3c33f49c12e159dd1d07abcfbc6edc36c004447c95b560fba327a205c0522de0493a36c8289d2aeb9ccbca7607c7ba1489c871e010f517b847128d7f7d3e84d1be3b2a83e318d1b456da566bb172880fc2cded7452db205512d5"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x2}, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000180)=ANY=[@ANYBLOB="2875b667653d616c776979732c75691c1da3643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 3.863754353s ago: executing program 2 (id=892): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'erspan0\x00', {0x300}, 0x4b5d}) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r8 = dup(r5) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x14, 0x2, 0x0, 0x0, 0x0}) openat$cgroup_ro(r8, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x5, 0x231, 0x7, {}, {0x0, 0xea60}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 3.747664155s ago: executing program 2 (id=894): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x12}]}, 0x24}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x89, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x6, {0x6, 0x11, "3c545be5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 2.09146957s ago: executing program 3 (id=918): r0 = syz_open_dev$evdev(&(0x7f0000001380), 0x0, 0xc01) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r3 = socket(0xa, 0x3, 0x3a) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x67]}}]}) write$binfmt_misc(r5, &(0x7f00000002c0), 0x15) splice(r4, 0x0, r6, 0x0, 0x19404, 0x0) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) copy_file_range(r7, 0x0, r7, 0x0, 0xd, 0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) 2.07662033s ago: executing program 3 (id=919): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 2.004385061s ago: executing program 3 (id=921): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) ptrace(0x4208, r2) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x4, 0x53, '^N~C', "6b15ab11"}}, 0x0}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x6) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000600)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x670) 1.37068118s ago: executing program 1 (id=934): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000080)=0x5) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) (async) pselect6(0x40, &(0x7f0000002140)={0x6, 0x81, 0x63b4, 0x862, 0x2, 0x2, 0x9, 0xbbf8}, &(0x7f0000002180)={0x1, 0x7fffffff, 0x3, 0xffffffff, 0x8000000000000000, 0x351, 0xee84, 0x7}, &(0x7f00000021c0)={0x4, 0x6, 0x1, 0x3cba3feb, 0x4f37, 0x1ef6, 0x9, 0x80000001}, &(0x7f0000002200)={0x0, 0x989680}, &(0x7f0000002280)={&(0x7f0000002240)={[0x7fffffffffffffff]}, 0x8}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x801, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000002300)=0x6) (async) socketpair(0x11, 0x1, 0x100, &(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x3, &(0x7f0000002380)) (async) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f00000023c0)) (async, rerun: 32) epoll_create(0x5) (async, rerun: 32) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f00000027c0)) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000002800)={0x6, 0x1, 0xbb13, 0x608}, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002880), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000028c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000003c40)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003c00)={&(0x7f0000002900)={0x12d8, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x1150, 0x8, 0x0, 0x1, [{0x3c4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c56c1ea01d4b145674bcd3d3a50e14fadc5baf147454f1f525345ab94b777ea4"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x344, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x348, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2d8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @remote, 0x2b}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010102}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0xb2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f0685b1cc6750d3530ad4a099bf0e615de778621b6c0d8f0b24f8cc8ef729332"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xa564, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xa}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}]}, {0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}]}, {0x7c4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x628, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "24fd5599461c310da17373d85f0fe1f8aef3c12787944753f78c88a022d93af8"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}]}, @WGDEVICE_A_PEERS={0x15c, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "45dbb2fa25b1ab2d265a4bf9b785e3fc97e9b0f6924fc9e46401950280cfc48e"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @mcast1, 0x1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "644f075f1d80dbb67e16adde12b9d14db392cf7af0139bc9cba2982e0c89ba67"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @mcast2, 0x4}}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @local, 0x7}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x12d8}, 0x1, 0x0, 0x0, 0x4048000}, 0x24005) (async) recvfrom$inet(r0, &(0x7f0000003c80)=""/83, 0x53, 0x40000002, &(0x7f0000003d00)={0x2, 0x4e22, @multicast1}, 0x10) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000003d40), &(0x7f0000003d80)=0x4) (async) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000003dc0), 0x802, 0x0) write$UHID_DESTROY(r8, &(0x7f0000003e00), 0x4) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000003e40)={0x2, 'veth1_to_bond\x00', {0xaa}, 0xaa3}) (async, rerun: 64) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000003e80)=0x9, 0x4) (rerun: 64) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000003ec0), &(0x7f0000003f00)=0x8) (async) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000003f40)={0x8, 0x4, 0x3, 0x1, 0xc}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003f80)={'batadv0\x00', 0x0}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000004040)={'syztnl2\x00', &(0x7f0000003fc0)={'ip6tnl0\x00', r9, 0x0, 0xe, 0x3, 0xf, 0x19, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80e0, 0x3, 0x9}}) (async) bind$packet(r5, &(0x7f0000004080)={0x11, 0x1c, r9, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async, rerun: 64) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)={0x54, 0xf, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (rerun: 64) 1.317076751s ago: executing program 1 (id=935): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(r1, 0x4068aea3, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x9280, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) ioctl$TCGETS(r3, 0x5401, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x10a, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1.313193171s ago: executing program 1 (id=937): syz_usb_connect$uac1(0x3, 0xa5, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x9, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x7}, [@selector_unit={0x8, 0x24, 0x5, 0x6, 0x40, "00d366"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x1, 0x9, 0x0, 0x5, 0xe}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x10, "e72c25001c4e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x4, 0x7f, 0xd, "764d559c1055"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5d, 0xb8, 0x3, {0x7, 0x25, 0x1, 0x183, 0xa9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x16, 0x4, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x52, 0x2, 0x5, {0x7, 0x25, 0x1, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x0, 0xf7, 0x2, 0x20, 0x7f}, 0x121, &(0x7f0000000100)={0x5, 0xf, 0x121, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0x7, 0x4, 0x5, 0x5}, @generic={0xfd, 0x10, 0x2, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "7d519adf02f7d4236299674cdbe7f73a"}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41d}}, {0xf2, &(0x7f0000000280)=@string={0xf2, 0x3, "2964f65aa75876e7c59227f316b2260d1b49e693a64177aafbe42799efa8b1d35afa80a5b1591296b41952f19e6727570bc566ec7cb89affbc300c3160cfc84d9503eb68c5f01cd950f4f5d705122349b617f773d9de04b44ccdc531ef172dfe8398b8e10f4107516acc747537b95000929356b7dc803f6146b2b6def5514f05107b85297ec82af98cd2f48cde7e96ff5c723454c58b123a71d689ab0a3ea28863cc8cc065f411e3c0c0430a8b5ba467cebd62abe1f1a4cc3b38813099b9c2519f7f13e007f936a0e5dc19ed2e5a6e067c425ce6e38f1e97cf231857a13a6391452f21fb0ef772dfac3699a456e4100c"}}]}) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000003c0), &(0x7f0000000400)=0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000004c0)={0xfffffffffffffe8b, {0x10, 0x8, 0x100000001, 0x0, 0x6}}) r1 = accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @remote}, &(0x7f0000000540)=0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000580)={@dev={0xac, 0x14, 0x14, 0x20}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\\-^\'),@-!#}/\x00', 0x0, r1) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000600)=0x2, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0xc, 0xfffffffd, {{0x2b, 0x4, 0x0, 0x2, 0xac, 0x67, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x1f, 0x63, [@private=0xa010100, @broadcast, @private=0xa010102, @broadcast, @rand_addr=0x64010100, @multicast2, @local]}, @ssrr={0x89, 0x1b, 0x15, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @multicast2, @multicast2, @private=0xa010102]}, @ssrr={0x89, 0x1b, 0xec, [@multicast2, @loopback, @empty, @multicast2, @private=0xa010102, @broadcast]}, @end, @timestamp_prespec={0x44, 0x2c, 0x87, 0x3, 0x8, [{@empty, 0x3}, {@empty, 0xffffffff}, {@loopback, 0x4}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp={0x44, 0x10, 0x7, 0x0, 0x7, [0x8, 0x9, 0x1]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'ip_vti0\x00', r2, 0x10, 0x10, 0x86, 0x0, {{0xb, 0x4, 0x3, 0x32, 0x2c, 0x68, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @loopback, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0xf, "2582e9ba1499035924b4487008"}]}}}}}) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000840)={0xb90, 0x48, 0x2}, 0xc) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000880)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x803100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0x100, 0x2, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0xa0, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000001}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000a80)=0xd, 0x4) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000ac0)={0x3b, 0x14, 0xd, 0x2, 0x6, 0x100, 0x3, 0xbc, 0x1}) getpeername$inet(r1, &(0x7f0000000b00)={0x2, 0x0, @dev}, &(0x7f0000000b40)=0x10) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000b80)={0x0, 0x7fffffff}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001b80)={'veth1\x00', {0x2, 0x4e21, @local}}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001bc0)={0x21, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4, 'wrr\x00', 0x7, 0x7f, 0xe}, 0x2c) r4 = syz_open_dev$hiddev(&(0x7f0000001c00), 0x9, 0x2) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000001c40)={0x2, 0x3, 0xe, 0x9, 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x5) openat$uhid(0xffffffffffffff9c, &(0x7f0000001c80), 0x802, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x20, 0x8, 0x6, 0xb05, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x4814) 1.224971272s ago: executing program 4 (id=940): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x2000004) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0) write(r4, &(0x7f00000001c0)="b40ab29f61", 0x5) splice(r0, 0x0, r4, 0x0, 0x25a5, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 1.207992752s ago: executing program 4 (id=941): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x2, &(0x7f0000f2e000/0x3000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x400200) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000040)=""/106) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 1.198243113s ago: executing program 4 (id=942): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001e00010026bc0000000000000000000000000000000004"], 0x40}}, 0x90) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0xeef, 0xc002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x628, 0xff, 0x1, {0x22, 0x6db}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x27, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x6, 0x6}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x9, 0x10, 0x5, 0x20, 0x6}, 0x1b, &(0x7f0000000080)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x2, 0x4, 0x7, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x5, 0x9, 0x5, 0xffff, 0x1}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x14, &(0x7f0000000280)=@string={0x14, 0x3, "a7719a6a4272d8bcec0f167e73c37cde89e6"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000600)={0x24, &(0x7f0000000480)={0x20, 0x4, 0xd7, {0xd7, 0x6, "7e3494b2f6eaa706b2f433cbcadfe8e8548fa7ab7625e412b274446101ef9967dbd7547dbe86450ca1a70eeca074804de0aba1fdc8cde78258ddece169998cbf1d99fc64f2c2359f5fa22fe212543124dca4b446a983f88ca8de7090ee7b723c8e386b42646f87c69a2ccafa9a2c48d55476f277141f1d30ade2b60973e5cd13893a2fd5d23ad3f621c988dfb85a2eff7f674e86bde342378da99499bc7e658ee4eb7c0f41d13c7333fc4f2aed865273004d053d19b5e09fb8895933b19cd0fa4908169d333011b0fbd6df8d0d8c283ca1f7c293b1"}}, &(0x7f00000003c0)={0x0, 0x3, 0x22, @string={0x22, 0x3, "8d12f13720a20fc4952beb742038c6fedbf59d058f9e91a6e3041a2fd2a4aca8"}}, &(0x7f0000000580)={0x0, 0x22, 0x23, {[@main=@item_4={0x3, 0x0, 0x9, "6674ff8e"}, @main=@item_4={0x3, 0x0, 0xc, "f1c2d284"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_012={0x1, 0x2, 0x1, "ec"}, @local=@item_4={0x3, 0x2, 0x1, "6296a634"}, @local=@item_012={0x2, 0x2, 0xe, "c52f"}, @global=@item_012={0x2, 0x1, 0x6, "8d9d"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x4, "5debeb30"}, @main=@item_4={0x3, 0x0, 0x9, "f7ca5800"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x7, 0x1, {0x22, 0xaa8}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x40, 0xd, 0xe2, "2040b8d44eb99e3d490290cd7bdfc130bb1e62b73041c9e344f19a3ad641d95a320db5371bc104e69536ff08fb0991d5a49817f7f18f5c0d41f3916d701aa8f01a1e05e960885c6a91478dccc7eeeb4f7bee6cf5b23d12f002e72bce92d1ee787495294a73504f9a721b0cef12ac0def042e02c932ee3b700ba66f5524dc6f3f83800d479474c2def82e2f3662c41f2f258672bdf43fa6012b8e945344e34562e695defa9d10790a65671e8d625d3ad264cd4ea5bdb35ac484cadccab08747f24a15a11b0eee2fa74caa708dc7371df8214fd3c5155c11a6394c10d1c960807ef1bd"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x2a}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000007c0)={0x20, 0x1, 0xcb, "461523ff56cbf83bcc0e8e9787f916138a6e4c224761dc4558dac8359385327b09ed18406d2b14e4ff9fbb65e501c7e6b0bceaa754d5e016ad13cf11c6747125bfe15b31b08fd02c50d05d07c71cad3714223c3ec34a66763a84a3e320f0f13fbc56a926f271ffe7fbc76d529e01ac5038e9cbbb859ca3aa3420b6daf583d7fb86e6844bea9d09934186ad5af44247b7a9d1a6c5ca3e570b261e25775621b43e58447098bd853cbc5e9f6517f2b938b6b9f27b718f3d80cb73e6f20af81281521bd6d677e55a04241c01ef"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x2}}) 677.05451ms ago: executing program 2 (id=943): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = getuid() mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200840c, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303032303030302c757365725f444319", @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x00000000000000e1,default_permissions,max_read=0x0000000000000008,allow_other,blksize=0x0000000000000000,blksize=0x0000000000001000,\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x4) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r2, &(0x7f0000000c40)={0x2020}, 0x2020) 675.00288ms ago: executing program 2 (id=944): r0 = geteuid() chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4008004) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf2500"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x40, 0x10, 0xa, {0xa, 0x4, "c46c32155d690f22"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000140)=0x0) r7 = syz_usb_connect(0x5, 0xf0, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x7d, 0xdf, 0x98, 0x10, 0x12d1, 0x2f42, 0x2ae7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x2, 0x2, 0xff, 0x5, 0x48, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x2, 0xffff}, @generic={0xb3, 0x7, "c47ce04b989777a6fd908ef5f4a74744d0393cc802e9c25f33a06b7c271f84547bf55a43596b69c780b3e2629fffcc2095a09b5a9b0b90cc8d203db18bcedd3b80cb28229527513fbe5984d3e55397832dc686514c8e9c1ab290d8cd128dfac2317e3258cea2b294321c7e7aad5348e0820abb097f2983b0999434d7bebc13b47178882d3a287b8a233ab8f62118409f15b264822809a73802814fafac6166f7efe4af7540802a0e8b1c3be8d2ea2c9a97"}]}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x20, 0x5, 0x6, "f747391d8cbc"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00220c000600000047889bf030fbfc158f5a"], &(0x7f0000000180)={0x0, 0x3, 0x56, @string={0x56, 0x3, "60bb212054973ad8eb16d84f524f2d4a19e130e3b5c42da11ef9517869fd75e4b0d0c29bc6e2a3906865187dbc617c408cbeb86941dbe6efc5e21c74d958b82a5cbe44fd597fba1df3b47220db59c5ef15855188"}}, &(0x7f0000000280)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0xc6, 0x9, "2eddb19c", "3443cd43"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x18, 0x8, 0x4, 0x40, 0x5, 0x9f}}}, &(0x7f0000000940)={0x84, &(0x7f0000000400)={0x40, 0x14, 0xb1, "f1197cebac4d53c9914a1b4b151b4175b99ddca38d222b6e67cc6e4354f0deefbc70f79d2ebc7fb68ea9aca00cdcd01907ae5e5093c18eefc62f51dc76617790223874899f1cc385d0c70ad51790119b4620ef32f6f060b6abfcb2703e8d9537315caa554229f95a42c312de68d10194a4d07a59f09dfb1b42f2295035a6f658539662fb0f7d1220403c2717a22dcfb7f8853ca42b8e205092878a572e6d7a56269a060f5dddc093c9c77d59cd2b2a8008"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0xe0, 0x2, [0xff]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000640)={0x40, 0xb, 0x2, "1614"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x17, 0x6, @local}, &(0x7f0000000740)={0x40, 0x19, 0x2, "611d"}, &(0x7f0000000780)={0x40, 0x1a, 0x2}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x6f}}) ioprio_get$pid(0x2, r6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) creat(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) 674.68558ms ago: executing program 4 (id=945): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x3) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 674.33114ms ago: executing program 4 (id=946): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x1, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x7fff, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0xfffffe00, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x9, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80400000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904000000"], 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) setregid(0x0, r0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee01) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x34) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeee0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc018aec0, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) write$tcp_congestion(r1, 0x0, 0xee00) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}]}, 0x18}}, 0x0) socket$key(0xf, 0x3, 0x2) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r4) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000000c0)={0x2710, 0x0, &(0x7f0000ffc000/0x4000)=nil}) prctl$PR_CAPBSET_DROP(0x18, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0xf8, 0x9, 0xfff, 0x23, @private0, @mcast2, 0x7800, 0x8, 0x3, 0xd4}}) r7 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@mcast2, 0x4e21, 0x0, 0x4e22, 0x1, 0x0, 0x0, 0x20, 0x6c, r6, r7}, {0x2, 0x8, 0x4, 0x7, 0xb59, 0xffffffff, 0xffffffffffffff80, 0x9}, {0x100, 0x6, 0x9, 0x80000000}, 0x9, 0x6e6bbf, 0x2, 0x1, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x4d5, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x3500, 0x0, 0x0, 0x7, 0x10000, 0x400, 0x50000000}}, 0xe8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 295.686655ms ago: executing program 3 (id=947): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x20}, {@in6=@remote, 0x0, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5}, {0x0, 0xa, 0x0, 0x7fffffe}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x10) 276.476576ms ago: executing program 3 (id=948): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x18, r2, 0x503, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x400d800) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x10, r0, 0x2000) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x18, r2, 0x503, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x400d800) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x10, r0, 0x2000) (async) 220.797996ms ago: executing program 3 (id=949): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xf0, 0x9f, 0xa3, 0x10, 0xb95, 0x1720, 0x23b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe1, 0x6, 0x0, 0x7c, 0xbe, 0x9d}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x1222080, 0x0, 0xfffffffffffffdd5, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r3, &(0x7f0000002780)=[{&(0x7f00000005c0)="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", 0x9c1}], 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000040)=""/53, 0x0, 0x3000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)={0x1, 0x0, [{0x848e46974103754b, 0x97, &(0x7f00000001c0)=""/151}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000500)=0x304000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x26, 0xa6, 0x9, 0x8, 0x7a6, 0x7c2, 0x3712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xf9, 0x10, 0x4, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x6f, 0xaa, 0xd}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x16, &(0x7f0000001080)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x80, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xf, 0x5aec}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) fsetxattr$security_ima(r5, 0x0, &(0x7f0000000140)=@v2={0x3, 0x1, 0xc, 0x66b7, 0x2d, "cd5dd39c760bfe14430096d73df1ab49794c983ee1ee9870c024d91428c5d2230fb18ed939277a90227daee307"}, 0x36, 0x2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 163.412257ms ago: executing program 4 (id=950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r1, r3, r4}, 0xc) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20028000}, 0x1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x98, r7, 0x4, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff801}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4a, 0x5, "cf5b3b8c582dffc7d6c4cf6bbc737d506b23e4680a98a18042aaa2e69b0efd933fe1888e0771281f0c78a9a0700a411643b218390e9cc2bb080188ac76819654e1ceb61f4461"}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')$#,@-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x804}, 0x80) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5) r8 = openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x2000, 0xa) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000680)={0x60, 0x3, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000600)=[{0x235, 0x9, 0x7}, {0x4, 0x3ff, 0x2}, {0x0, 0x3, 0x80000000}], 0x3, 0x0, 0x50, 0x0, 0x1, 0x6c}) r9 = syz_usb_connect$uac1(0x0, 0xd9, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x2, 0xd0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x4}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x302, 0x6, 0x5, 0xb}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x4, 0x6, 0x7, 0x7, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x2, 0x7, 0xe2, 0xf8, 0xf4}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x6, 0x7f, 0x7, 0x0, 0x6}, @extension_unit={0xd, 0x24, 0x8, 0x2, 0x6, 0x2, "ccef9af9232d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb, 0x2, 0x7f, 0x1, "1a2b", "188c"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x14}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x4, 0xd2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x30, 0x1, 0x9, 0x7f, {0x7, 0x25, 0x1, 0x1, 0x9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x1002}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x1, 0xe, "143738"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3af, 0xf6, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x9, 0x9}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0xf8, 0x5, 0x8, 0x10, 0xd}, 0x192, &(0x7f0000000840)={0x5, 0xf, 0x192, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x6, 0xfe, 0x9, 0x9}, @generic={0x98, 0x10, 0x2, "56275688318873f293e7e0ee3afd2abe67b9f7e39f6c2804da220e89d3b31c5867acbe00efb1da80b5b1704d16733ed5cf788f947e029df9a41adfa068d20b8cac275f062c05308aca6406d652b3be82ead63d3dd891c6ec101ec42a7e11c8cf97b407bda91a056db90b35ddb5d1e72070f7c50806d5a31ebbc0e5f9f234b220b22c8a8dad9571ae8d6f10ef513f9672c37738fcb0"}, @ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x2, 0xf000, 0x1, [0x3f, 0x0, 0x0, 0x18f, 0x0]}, @generic={0xbf, 0x10, 0x2, "5ca8245d6f286fe211ce2a09a1c8c945ba513c7ca09dbd2cfad41daaab162f4e32a4da5ea24b175cce57c8ef563c5f322a002d01225bbe5395e7e4430bacded4f74deba6ddc6eff8ad10bbc10e282205f37d0b7a37b21f40dc72d06024db0c4c7f7a1caf2e2d4c188cb82587dbbeb9f5aab291f00d3a7bccdb4e5287728a20ca3d290a6e6eaf4e81c1883a2ebeffbbe8345655ebd1dc6dfd08ac7de28d1d22ee6490ae5cd8d1cbb61d8b25b4c4fe6af14794154efacfe322bc0140b6"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x32, 0x4, 0x7, 0x0, 0xc0}]}, 0x3, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x2078}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4}}]}) syz_usb_control_io(r9, &(0x7f0000000d00)={0x2c, &(0x7f0000000b00)={0x40, 0x9, 0x2d, {0x2d, 0xe, "2034c705fc53afc3fbcff4f6aa310d6877ee1e338d584ce0a04ce7aae1ff572cefe05a9a4eee415fba28a6"}}, &(0x7f0000000b40)={0x0, 0x3, 0xae, @string={0xae, 0x3, "4b90cd700c949808665a340f7fba8a44fc455f9c4032f80370921fc1676ef170f56304690c0d6c3c2446fda5c5df5093921c671308add6c6b045d27891334b01dae7793fc2efbf6f363276ac884a89a5e302520d1c77859bab48b891b3d7409b0314ecc08e487ebd5dee2fa49060c433093ef056d468afc1a504552dd0767ef4bb755527d414ac8766478c5ea909ce1958f3af1681a709e481498ec4127e33d6a6f2582948accb4498c47608"}}, &(0x7f0000000c00)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "dd684b71038c40db4444ceea925f3ef1"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0xd, 0x7, 0x81}, @wireless={0xb, 0x10, 0x1, 0x8, 0x3a, 0x2, 0xeb, 0xc, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "01c29506e189e6cf5d2df3f8842af134"}]}}, &(0x7f0000000c80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0xb8, 0x6, "df54817f", "c0c84106"}}, &(0x7f0000000cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb6, 0x8, 0x18, 0x0, 0x0, 0x2, 0x101}}}, &(0x7f0000001180)={0x84, &(0x7f0000000d40)={0x20, 0x31, 0x4c, "e733d988c6a2fd97423043133f494aac46d588c277cfc6275059492626e199f7bb035044b04ffa7701478997a166b5634a20562a3e14b20c4e617ea7697b775d36c01b649087e84100265b77"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000e80)={0x20, 0x0, 0x8, {0x0, 0x10, [0xee0f]}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0xb}, &(0x7f0000000f00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000f40)={0x40, 0xb, 0x2, "8937"}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0x87}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001000)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000001040)={0x40, 0x19, 0x2, "6db2"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0x34}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0xf}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r10, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x2c, r11, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xf8}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x2c}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000001380)={0x30, 0x5, 0x0, {0x0, 0x5, 0x1, 0x2}}, 0x30) syz_usb_control_io$uac1(r9, &(0x7f0000001480)={0x14, &(0x7f00000013c0)={0x20, 0x9, 0x6d, {0x6d, 0x8, "57c0bda945e6c3eb0b50f01629f0a1db9d3061c215d99d9dd9c4113e690d11fd0dfe1a388b789a76e1d9136228fe85175e7ceb3541cb9ea1f6baf16090c536a0d780e4a8a989c85a88725490be9fb4781926aaf1e4b37433ba8d81b35b62b43972bb66002979dc5b7520da"}}, &(0x7f0000001440)={0x0, 0x3, 0x14, @string={0x14, 0x3, "09b605e0b2dd39dafaf68eaef34a1b889f6b"}}}, &(0x7f00000016c0)={0x44, &(0x7f00000014c0)={0x20, 0xb, 0x1c, "80003b969bc99756d3da11d907d98f29d8d8a41cda88fc5e3a94fda6"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001580)={0x20, 0x81, 0x3, "82d59c"}, &(0x7f00000015c0)={0x20, 0x82, 0x1, 'v'}, &(0x7f0000001600)={0x20, 0x83, 0x1, 'n'}, &(0x7f0000001640)={0x20, 0x84, 0x4, "54f123a4"}, &(0x7f0000001680)={0x20, 0x85, 0x3, "2ab8e4"}}) r12 = socket$inet_udp(0x2, 0x2, 0x0) accept4(r12, 0x0, &(0x7f0000001740), 0x800) setuid(r3) setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000001780)={0x0, @broadcast, @broadcast}, 0xc) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r8, 0x4004e502, &(0x7f00000017c0)=0xffffff01) r13 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_FIOSETOWN(r13, 0x8901, &(0x7f0000001800)=r1) syz_usb_connect$uac1(0x3, 0xac, &(0x7f0000001840)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x7, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xf4}, [@extension_unit={0x8, 0x24, 0x8, 0x1, 0x1, 0xa, "e1"}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x0, 0x2, "62c629d554bb"}, @processing_unit={0xd, 0x24, 0x7, 0x3, 0x0, 0x3, "bbc2ea13b638"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x8, 0x2, {0x7, 0x25, 0x1, 0x80, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x400, 0x2df, 0x7f, "1d7db52e80"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x0, 0x8, "", "98528d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x4, 0x4, {0x7, 0x25, 0x1, 0x80}}}}}}}]}}, &(0x7f0000001dc0)={0xa, &(0x7f0000001900)={0xa, 0x6, 0x110, 0xfd, 0x4b, 0xfd, 0x20, 0x7}, 0xf8, &(0x7f0000001940)={0x5, 0xf, 0xf8, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x8, 0xf000, 0x9, [0x0, 0x3f00, 0xc030, 0x0, 0xffffc0, 0xf]}, @generic={0xa5, 0x10, 0xb, "91cff8a7c0a39cf0f012ce9cfe5780927c1a4e67bbe4fce34eb94ba28d30b3760cb5b347b058241748b7a8628c9efc432eca69ce71a484cf8ef982ba6330196b218eeafdf3736783eb83f0a0b645bd09dde823aabd8afbc6fa73a279c29cd15c6e18a82f5cbff6babc41e865cbb5e70e14c2d87e00937ab8d79d4ef57d52c79279e8dafa06d3915eafc42ba3669b362c108e560d75539e843c24b92aec89487fcfb8"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x7fff, 0xf00, 0x7ff, [0xff0000, 0xc000, 0xff0060, 0xc030]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x7, 0x3, 0xb, 0x9}]}, 0x7, [{0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x41b}}, {0x6d, &(0x7f0000001b00)=@string={0x6d, 0x3, "bd3afb51c8ad9414d42da93801c6af7a0ee17db647c96b2c41688db3f5da3161674e77eb1a40ef5b1249ade706299f5791f4992cfea64fb7d90f6643d81b6a22b622f991eb04769ace480017dd6be4cbc8faac5035dcd8e7ba5ba45fb347eb3e33c6e911420bb2053ce33b"}}, {0xd5, &(0x7f0000001b80)=@string={0xd5, 0x3, "5a4e375fdcbe9c7b1e7b9b0dcbd68ca1b9dae7aa4e06acd30df19e5d32374bf26794833a9b5a795eecca86f45e72a2d4bb218b9e675147d2a212a0a991b393db509f5df0daa8b244f2672d0de95be90ce4588f5d0f9fa7c43259c472193b307721d73f08eb2e34ff2346caff6abb49f04af219d0ae499e8dab89037e971fa0ad1801004c47e5addc763bc0af8eae93c0d7e28726c57ce1855aca5a1dfe088d89d89f103bbea3dfeecbc250900d05a86e98628c066665a91588106eb1c2f3ec3b67607e784a35d1be54ba0a5083f719b2252ef2"}}, {0x4e, &(0x7f0000001c80)=@string={0x4e, 0x3, "0641cb4a3fbc6a246e59af2a4462102c4d16f9583cf5b39b742a874a4d780ba35089cd49e383d5e4c0ed2a1a2bae2c40f039d6ae665370cf76fa057d1de59c849ec838250991d00043339d84"}}, {0xb6, &(0x7f0000001d00)=@string={0xb6, 0x3, "3c4d5d53edf48cdbcd603922a96f3c366bcb1a6e17493f22b19ede65faca30ac9d19743bef635807f406f92707b8419bffdd80ab6d970ec60f4518a58e6f5f48152299164cf6dee60c4777cb27a0d7d14ffda44eb110e7110f17c8472e57c5d320d30bc89c50fac8c603ea6e6c3bc032af5a3667225b74741a9bb40f467a5e72e7a8ceb253c8edeab1f11aa5865303cfc5e4d3daa2c0b152ef2e80110643dfded87d4446658d08b6e06d8a8cdccefa108e35dc9c"}}]}) accept$packet(r8, &(0x7f0000001e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001e80)=0x14) 105.010538ms ago: executing program 1 (id=951): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000100)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000002c0)={0x60, 0x3, &(0x7f0000559000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4, &(0x7f0000000200)=[{0x5, 0x0, 0x4}, {0x0, 0x1ff, 0x5}, {0x8, 0x5}, {0x8, 0x6, 0x6}, {0x38d7, 0xd379}, {0x2, 0x7, 0x6}, {0xfffffffffffffffb, 0x40, 0x1f86}, {0x3, 0x8, 0x7}], 0x8, 0x5, 0xa, 0x1, 0x1e, 0x44}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x6, &(0x7f0000000480)=[{0x0, 0xbe63, 0x9}, {0x5, 0x75b2d368, 0x8}], 0xaaaabbc, 0x8000e5}) r2 = fsopen(&(0x7f00000001c0)='tmpfs\x00', 0x0) r3 = dup2(r2, r2) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='source', 0x0, r2) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='read_timeout_ms=000040000000000']) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknodat(r3, &(0x7f0000000180)='./file0\x00', 0x400, 0x1e) fchdir(r1) 847.4µs ago: executing program 1 (id=952): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_int(r1, 0x0, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r3, 0x0, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) setfsgid(0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)={[{@huge_advise}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 0s ago: executing program 1 (id=953): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x141702, 0x0) (async) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="3900000006"], 0x39) (async, rerun: 64) write$cgroup_subtree(r1, 0x0, 0x0) (rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f00007f2000/0x400000)=nil) (async, rerun: 32) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async, rerun: 32) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) listen(r6, 0x0) (rerun: 32) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x8) accept4(r6, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r5, 0x99b33000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) kernel console output (not intermixed with test programs): device descriptor read/64, error -71 [ 31.602367][ T9] usb 3-1: device descriptor read/8, error -71 [ 31.641368][ T338] usb usb2-port1: attempt power cycle [ 31.648460][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 31.648478][ T36] audit: type=1400 audit(1751402112.970:252): avc: denied { read } for pid=585 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.817664][ T36] audit: type=1400 audit(1751402113.140:253): avc: denied { ioctl } for pid=596 comm="syz.3.89" path="socket:[6260]" dev="sockfs" ino=6260 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.841980][ T36] audit: type=1400 audit(1751402113.170:254): avc: denied { accept } for pid=596 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.864194][ T36] audit: type=1400 audit(1751402113.170:255): avc: denied { write } for pid=596 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.886620][ T9] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 31.896747][ T36] audit: type=1400 audit(1751402113.230:256): avc: denied { checkpoint_restore } for pid=602 comm="syz.3.90" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.912238][ T9] usb 3-1: device descriptor read/8, error -71 [ 31.936245][ T36] audit: type=1400 audit(1751402113.260:257): avc: denied { write } for pid=604 comm="syz.3.91" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.981297][ T338] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 32.002967][ T338] usb 2-1: device descriptor read/8, error -71 [ 32.041560][ T36] audit: type=1400 audit(1751402113.370:258): avc: denied { execute } for pid=608 comm="syz.3.92" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.073520][ T9] usb 3-1: device descriptor read/8, error -71 [ 32.107727][ T36] audit: type=1400 audit(1751402113.430:259): avc: denied { create } for pid=610 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 32.128569][ T36] audit: type=1400 audit(1751402113.460:260): avc: denied { map } for pid=610 comm="syz.3.93" path="/proc/148/net/pfkey" dev="proc" ino=4026532614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 32.162327][ T338] usb 2-1: device descriptor read/8, error -71 [ 32.181349][ T9] usb usb3-port1: unable to enumerate USB device [ 32.203491][ T36] audit: type=1400 audit(1751402113.530:261): avc: denied { connect } for pid=613 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 32.238332][ T304] tipc: Subscription rejected, illegal request [ 32.401288][ T338] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 32.422275][ T338] usb 2-1: device descriptor read/8, error -71 [ 32.511286][ T31] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 32.552318][ T338] usb 2-1: device descriptor read/8, error -71 [ 32.643556][ T628] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.653064][ T335] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 32.659184][ T630] rust_binder: 630: no such ref 3 [ 32.666125][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.670819][ T338] usb usb2-port1: unable to enumerate USB device [ 32.678163][ T335] usb 1-1: Product: syz [ 32.685353][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 32.690654][ T632] batadv_slave_1: entered promiscuous mode [ 32.699014][ T31] usb 4-1: config 0 has an invalid interface number: 254 but max is 3 [ 32.714542][ T31] usb 4-1: config 0 has an invalid interface number: 161 but max is 3 [ 32.715498][ T335] usb 1-1: can't set config #1, error -71 [ 32.722823][ T31] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 32.739922][ T335] usb 1-1: USB disconnect, device number 4 [ 32.742119][ T31] usb 4-1: config 0 has an invalid interface number: 225 but max is 3 [ 32.754530][ T31] usb 4-1: config 0 has an invalid interface number: 33 but max is 3 [ 32.766260][ T31] usb 4-1: config 0 has an invalid interface number: 33 but max is 3 [ 32.768829][ T638] rust_binder: Error in use_page_slow: ESRCH [ 32.774384][ T31] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 32.774411][ T31] usb 4-1: config 0 has an invalid interface number: 242 but max is 3 [ 32.780715][ T639] rust_binder: Error in use_page_slow: ESRCH [ 32.789134][ T638] rust_binder: use_range failure ESRCH [ 32.797349][ T639] rust_binder: use_range failure ESRCH [ 32.803424][ T638] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 32.809107][ T639] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 32.814345][ T31] usb 4-1: config 0 has 6 interfaces, different from the descriptor's value: 4 [ 32.822705][ T639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.830055][ T638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.839210][ T639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:67 [ 32.848350][ T31] usb 4-1: config 0 has no interface number 0 [ 32.858350][ T638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:67 [ 32.866852][ T31] usb 4-1: config 0 has no interface number 1 [ 32.887848][ T31] usb 4-1: config 0 has no interface number 3 [ 32.893974][ T31] usb 4-1: config 0 has no interface number 4 [ 32.900074][ T31] usb 4-1: config 0 has no interface number 5 [ 32.906235][ T31] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 32.917057][ T31] usb 4-1: config 0 interface 2 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 32.927818][ T31] usb 4-1: config 0 interface 2 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 32.941442][ T31] usb 4-1: too many endpoints for config 0 interface 254 altsetting 207: 115, using maximum allowed: 30 [ 32.952595][ T31] usb 4-1: config 0 interface 254 altsetting 207 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 32.963843][ T31] usb 4-1: config 0 interface 254 altsetting 207 has an invalid descriptor for endpoint zero, skipping [ 32.975064][ T31] usb 4-1: config 0 interface 254 altsetting 207 has 2 endpoint descriptors, different from the interface descriptor's value: 115 [ 32.988589][ T31] usb 4-1: config 0 interface 161 altsetting 9 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 32.999741][ T31] usb 4-1: config 0 interface 161 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 33.010717][ T31] usb 4-1: config 0 interface 161 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 33.022158][ T31] usb 4-1: config 0 interface 161 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 33.035643][ T31] usb 4-1: too many endpoints for config 0 interface 225 altsetting 132: 50, using maximum allowed: 30 [ 33.046874][ T31] usb 4-1: config 0 interface 225 altsetting 132 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 33.058192][ T31] usb 4-1: config 0 interface 225 altsetting 132 has a duplicate endpoint with address 0x3, skipping [ 33.069271][ T31] usb 4-1: config 0 interface 225 altsetting 132 has an endpoint descriptor with address 0x4F, changing to 0xF [ 33.081281][ T31] usb 4-1: config 0 interface 225 altsetting 132 has a duplicate endpoint with address 0xF, skipping [ 33.092287][ T31] usb 4-1: config 0 interface 225 altsetting 132 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 33.103657][ T31] usb 4-1: config 0 interface 225 altsetting 132 has 6 endpoint descriptors, different from the interface descriptor's value: 50 [ 33.117152][ T31] usb 4-1: too many endpoints for config 0 interface 33 altsetting 171: 91, using maximum allowed: 30 [ 33.128346][ T31] usb 4-1: config 0 interface 33 altsetting 171 has a duplicate endpoint with address 0xF, skipping [ 33.139300][ T31] usb 4-1: config 0 interface 33 altsetting 171 has a duplicate endpoint with address 0xE, skipping [ 33.150762][ T31] usb 4-1: config 0 interface 33 altsetting 171 has a duplicate endpoint with address 0xE, skipping [ 33.161919][ T31] usb 4-1: config 0 interface 33 altsetting 171 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 33.173281][ T31] usb 4-1: config 0 interface 33 altsetting 171 has a duplicate endpoint with address 0xF, skipping [ 33.187774][ T31] usb 4-1: config 0 interface 33 altsetting 171 has a duplicate endpoint with address 0xD, skipping [ 33.198769][ T31] usb 4-1: config 0 interface 33 altsetting 171 has 7 endpoint descriptors, different from the interface descriptor's value: 91 [ 33.212005][ T31] usb 4-1: config 0 interface 33 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 33.222617][ T31] usb 4-1: config 0 interface 33 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 33.233253][ T31] usb 4-1: config 0 interface 33 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 33.243872][ T31] usb 4-1: config 0 interface 33 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 33.254494][ T31] usb 4-1: config 0 interface 33 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 33.265269][ T31] usb 4-1: config 0 interface 33 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 33.275894][ T31] usb 4-1: config 0 interface 33 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 33.286662][ T31] usb 4-1: config 0 interface 33 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 33.297623][ T31] usb 4-1: config 0 interface 33 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 33.308413][ T31] usb 4-1: config 0 interface 33 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 33.319032][ T31] usb 4-1: config 0 interface 33 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 33.330494][ T31] usb 4-1: config 0 interface 33 altsetting 3 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 33.342161][ T31] usb 4-1: config 0 interface 33 altsetting 3 endpoint 0x85 has invalid maxpacket 9996, setting to 64 [ 33.353147][ T31] usb 4-1: config 0 interface 33 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 33.363776][ T31] usb 4-1: config 0 interface 33 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 33.374433][ T31] usb 4-1: config 0 interface 33 altsetting 3 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 33.387572][ T31] usb 4-1: config 0 interface 242 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 33.398377][ T31] usb 4-1: config 0 interface 242 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 33.409352][ T31] usb 4-1: config 0 interface 242 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 33.420087][ T31] usb 4-1: config 0 interface 242 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 33.431239][ T31] usb 4-1: config 0 interface 242 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 33.441979][ T31] usb 4-1: config 0 interface 242 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 33.452977][ T31] usb 4-1: config 0 interface 242 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 33.463673][ T31] usb 4-1: config 0 interface 2 has no altsetting 0 [ 33.470266][ T31] usb 4-1: config 0 interface 254 has no altsetting 0 [ 33.477076][ T31] usb 4-1: config 0 interface 161 has no altsetting 0 [ 33.484169][ T31] usb 4-1: config 0 interface 225 has no altsetting 0 [ 33.491110][ T31] usb 4-1: config 0 interface 33 has no altsetting 0 [ 33.498125][ T31] usb 4-1: config 0 interface 33 has no altsetting 1 [ 33.504847][ T31] usb 4-1: config 0 interface 242 has no altsetting 0 [ 33.513367][ T31] usb 4-1: New USB device found, idVendor=1514, idProduct=2008, bcdDevice=fa.62 [ 33.522481][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.522755][ T631] batadv_slave_1: left promiscuous mode [ 33.530457][ T31] usb 4-1: Product: 뺲馠堎딲澬솩⮸諢霛≴שּቈ믔텃䘊嗃瑦ố쁑迩璟嗛奣ꡪ잵鹃鷭婴ୡڪ뗗㣷䰂疽忛轹鹂㧖꤬ବᎂ믄奄盾萫襷㥉艑軐㨡됎龜蟼全垴輬錧ᚑ⋬အ綻ჯ⁎쾽璊╀횻ꆊࡒ䰰㵖뒑䢛吳ꢄ⩾ጫ旸救齫䘞遦춬᠋쮝盦둚獏諂怱믑฻旐띲쥭돢씀뒛䆀鷱ꀤཀྵ춨ꕏ [ 33.530487][ T31] usb 4-1: Manufacturer: ࠇ [ 33.530498][ T31] usb 4-1: SerialNumber: 颖鄆菍툲驦﷘ៈ뉯﹑诞⨋줏몪ᶃꦙ役懴䱇擗౮堕跧⫔࿜烙䌮혢饳鴂봠況誨脽㬽뎺ㅣ㷼້흎蕨䧷띑ጔ睋ꔜ紅퉓灅겊앙仁ᄡಢ鲤룇 [ 33.552185][ T31] usb 4-1: config 0 descriptor?? [ 33.741323][ T335] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 33.892366][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.903364][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.913119][ T335] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 33.922205][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.931317][ T335] usb 2-1: config 0 descriptor?? [ 33.998598][ T672] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.312707][ T31] ftdi_sio 4-1:0.2: FTDI USB Serial Device converter detected [ 34.329740][ T31] ftdi_sio ttyUSB0: unknown device type: 0xfa62 [ 34.344773][ T31] usb 4-1: USB disconnect, device number 4 [ 34.345805][ T335] belkin 0003:1020:0006.0004: unknown main item tag 0x3 [ 34.351141][ T31] ftdi_sio 4-1:0.2: device disconnected [ 34.359401][ T335] belkin 0003:1020:0006.0004: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 34.610600][ T692] kvm: pic: level sensitive irq not supported [ 34.610671][ T692] kvm: pic: non byte read [ 34.621460][ T692] kvm: pic: level sensitive irq not supported [ 34.621496][ T692] kvm: pic: non byte read [ 34.632095][ T692] kvm: pic: level sensitive irq not supported [ 34.632131][ T692] kvm: pic: non byte read [ 34.643251][ T692] kvm: pic: level sensitive irq not supported [ 34.643297][ T692] kvm: pic: non byte read [ 34.653869][ T692] kvm: pic: level sensitive irq not supported [ 34.653915][ T692] kvm: pic: non byte read [ 34.851333][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.952617][ T46] bridge_slave_1: left allmulticast mode [ 34.958300][ T46] bridge_slave_1: left promiscuous mode [ 34.964039][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.971852][ T46] bridge_slave_0: left allmulticast mode [ 34.977582][ T46] bridge_slave_0: left promiscuous mode [ 34.983280][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.011309][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 35.017672][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.026019][ T31] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 35.034196][ T31] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 35.044313][ T31] usb 4-1: config 4 has no interface number 0 [ 35.051738][ T31] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 35.060758][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.068870][ T31] usb 4-1: Product: syz [ 35.073046][ T31] usb 4-1: Manufacturer: syz [ 35.077617][ T31] usb 4-1: SerialNumber: syz [ 35.118426][ T708] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.125550][ T708] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.132920][ T708] bridge_slave_0: entered allmulticast mode [ 35.139341][ T708] bridge_slave_0: entered promiscuous mode [ 35.146383][ T46] veth1_macvtap: left promiscuous mode [ 35.152138][ T46] veth0_vlan: left promiscuous mode [ 35.197097][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.204212][ T708] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.211643][ T708] bridge_slave_1: entered allmulticast mode [ 35.217926][ T708] bridge_slave_1: entered promiscuous mode [ 35.272686][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.279746][ T708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.287075][ T708] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.294128][ T708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.300349][ T31] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 35.310091][ T31] usb 4-1: No streaming interface found for terminal 6. [ 35.318911][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.326269][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.335597][ T31] usb 4-1: USB disconnect, device number 5 [ 35.343046][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.350079][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.360199][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.367359][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.390605][ T708] veth0_vlan: entered promiscuous mode [ 35.403238][ T708] veth1_macvtap: entered promiscuous mode [ 35.856952][ T719] 9pnet_fd: Insufficient options for proto=fd [ 35.879974][ T721] rust_binder: Write failure EFAULT in pid:177 [ 36.212897][ T731] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 36.227866][ T731] overlayfs: missing 'lowerdir' [ 36.280272][ T740] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 36.295003][ T740] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 36.323738][ T745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=745 comm=syz.4.136 [ 36.336041][ T9] usb 2-1: USB disconnect, device number 9 [ 36.432398][ T749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.138'. [ 36.455365][ T751] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.489656][ T758] capability: warning: `syz.4.141' uses 32-bit capabilities (legacy support in use) [ 36.491281][ T556] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.517367][ T760] 9pnet_fd: p9_fd_create_tcp (760): problem connecting socket to 127.0.0.1 [ 36.662351][ T556] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.673346][ T556] usb 4-1: config 0 interface 0 has no altsetting 0 [ 36.679965][ T556] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 36.690199][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 36.697810][ T556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.706710][ T556] usb 4-1: config 0 descriptor?? [ 36.852347][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.862663][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 36.872360][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.886585][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 36.895690][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.903745][ T9] usb 2-1: Product: syz [ 36.907992][ T9] usb 2-1: Manufacturer: syz [ 36.912616][ T9] usb 2-1: SerialNumber: syz [ 36.917896][ T9] usb 2-1: config 0 descriptor?? [ 37.118301][ T556] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 37.126095][ T556] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 37.133620][ T556] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 37.143703][ T556] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 37.152129][ T556] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 37.159292][ T556] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 37.167959][ T556] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 37.175202][ T556] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 37.183966][ T556] elecom 0003:056E:00FE.0005: hidraw0: USB HID v0.01 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 37.201907][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 37.201922][ T36] audit: type=1400 audit(1751402118.530:292): avc: denied { mount } for pid=767 comm="syz.2.145" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 37.230249][ T36] audit: type=1400 audit(1751402118.540:293): avc: denied { mounton } for pid=767 comm="syz.2.145" path="/30/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 37.252802][ T36] audit: type=1400 audit(1751402118.540:294): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 37.270934][ T776] rust_binder: Write failure EINVAL in pid:108 [ 37.273245][ T36] audit: type=1400 audit(1751402118.580:295): avc: denied { connect } for pid=775 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.299849][ T36] audit: type=1400 audit(1751402118.610:296): avc: denied { read } for pid=780 comm="syz.2.148" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 37.333635][ T36] audit: type=1400 audit(1751402118.660:297): avc: denied { ioctl } for pid=780 comm="syz.2.148" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 37.335162][ T338] usb 2-1: USB disconnect, device number 10 [ 37.399953][ T36] audit: type=1400 audit(1751402118.720:298): avc: denied { getopt } for pid=788 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.462613][ T796] overlayfs: failed to resolve './file0': -2 [ 37.463250][ T798] rust_binder: Write failure EINVAL in pid:79 [ 37.533723][ T9] usb 4-1: USB disconnect, device number 6 [ 37.606599][ T805] binder: Unknown parameter '' [ 37.662136][ T36] audit: type=1400 audit(1751402118.990:299): avc: denied { getopt } for pid=808 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.057355][ T36] audit: type=1400 audit(1751402119.380:300): avc: denied { shutdown } for pid=832 comm="syz.3.165" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.146962][ T36] audit: type=1400 audit(1751402119.470:301): avc: denied { mount } for pid=843 comm="syz.3.167" name="/" dev="ramfs" ino=6940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 38.258062][ T867] rust_binder: Got transaction with invalid offset. [ 38.258101][ T867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.265940][ T867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 38.301861][ T876] overlayfs: failed to resolve './file0': -2 [ 38.334965][ T883] No source specified [ 38.467226][ T890] binder: Bad value for 'max' [ 38.486623][ T892] rust_binder: Got transaction with invalid offset. [ 38.486665][ T892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.493742][ T892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 38.587334][ T903] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.609553][ T903] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.609576][ T903] rust_binder: Read failure Err(EFAULT) in pid:136 [ 38.617899][ T903] rust_binder: Write failure EFAULT in pid:136 [ 38.748898][ T922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.021334][ T338] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 39.036920][ T954] rust_binder: Write failure EINVAL in pid:236 [ 39.112614][ T962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=962 comm=syz.3.208 [ 39.131410][ T962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=962 comm=syz.3.208 [ 39.144194][ T962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=962 comm=syz.3.208 [ 39.171405][ T338] usb 2-1: Using ep0 maxpacket: 16 [ 39.177806][ T338] usb 2-1: config 0 has no interfaces? [ 39.184736][ T338] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.193825][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.201848][ T338] usb 2-1: Product: syz [ 39.206009][ T338] usb 2-1: Manufacturer: syz [ 39.210581][ T338] usb 2-1: SerialNumber: syz [ 39.215842][ T338] usb 2-1: config 0 descriptor?? [ 39.231311][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 39.381300][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 39.387828][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 39.396594][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 39.401272][ T556] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.404271][ T31] usb 3-1: can't read configurations, error -61 [ 39.423694][ T45] usb 2-1: USB disconnect, device number 11 [ 39.541350][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 39.572379][ T556] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.582648][ T556] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 39.593203][ T556] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 39.602482][ T556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.610571][ T556] usb 4-1: Product: syz [ 39.614773][ T556] usb 4-1: Manufacturer: syz [ 39.619465][ T556] usb 4-1: SerialNumber: syz [ 39.624677][ T556] usb 4-1: config 0 descriptor?? [ 39.691296][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 39.694069][ T976] mmap: syz.4.213 (976) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.698155][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 39.717056][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 39.724998][ T31] usb 3-1: can't read configurations, error -61 [ 39.731508][ T31] usb usb3-port1: attempt power cycle [ 39.839445][ T556] usb 4-1: USB disconnect, device number 7 [ 39.861456][ T998] netlink: 36 bytes leftover after parsing attributes in process `syz.4.220'. [ 39.904203][ T1006] tmpfs: Bad value for 'uid' [ 39.908811][ T1006] tmpfs: Bad value for 'uid' [ 40.071309][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 40.091692][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 40.098371][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.107157][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 40.114775][ T31] usb 3-1: can't read configurations, error -61 [ 40.191314][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 40.251379][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 40.271740][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 40.278294][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.287199][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 40.294851][ T31] usb 3-1: can't read configurations, error -61 [ 40.301429][ T31] usb usb3-port1: unable to enumerate USB device [ 40.321292][ T45] usb 2-1: device descriptor read/64, error -71 [ 40.561294][ T45] usb 2-1: device descriptor read/64, error -71 [ 40.585685][ T1047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.635181][ T1051] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 40.769505][ T1065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.769538][ T1065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 40.788874][ T1067] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1067 comm=syz.3.243 [ 40.810684][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 40.911384][ T1081] rust_binder: Error while translating object. [ 40.911404][ T1081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 40.917593][ T1081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:284 [ 40.943064][ T45] usb 2-1: device descriptor read/64, error -71 [ 41.007273][ T1084] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 41.014716][ T1084] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.190434][ T1089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43346 sclass=netlink_route_socket pid=1089 comm=syz.4.250 [ 41.203184][ T45] usb 2-1: device descriptor read/64, error -71 [ 41.311362][ T45] usb usb2-port1: attempt power cycle [ 41.651276][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 41.672288][ T45] usb 2-1: device descriptor read/8, error -71 [ 41.802508][ T45] usb 2-1: device descriptor read/8, error -71 [ 41.842583][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.850655][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.858796][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.866879][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.875041][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.883096][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.891117][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.899253][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.907342][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.915527][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.923911][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.932092][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.940251][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.948390][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.956545][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.964621][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.972661][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.980681][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.988731][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.996921][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.005154][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.013360][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.021923][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.030154][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.038281][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.046420][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.054540][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.061245][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 42.062656][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.078566][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.086667][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.094862][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.100852][ T45] usb 2-1: device descriptor read/8, error -71 [ 42.102997][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.117281][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.125599][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.133751][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.141916][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.150080][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.152370][ T1099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.158157][ T1099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:170 [ 42.168018][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.186175][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.196184][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.205130][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.213415][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.221636][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.229883][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.238141][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.242251][ T45] usb 2-1: device descriptor read/8, error -71 [ 42.246618][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.261283][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.269478][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.278200][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.286551][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.294928][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.303417][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.311693][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.319914][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.341713][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.351673][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.360443][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.369350][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.379833][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.381423][ T45] usb usb2-port1: unable to enumerate USB device [ 42.389180][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.403310][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.411495][ T1110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.411870][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.427253][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.436894][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.445524][ T1091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 42.455064][ T1110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.691318][ T45] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 42.852325][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 55958, setting to 64 [ 42.863504][ T45] usb 3-1: New USB device found, idVendor=257e, idProduct=200e, bcdDevice= 0.00 [ 42.872570][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.881196][ T45] usb 3-1: config 0 descriptor?? [ 42.886470][ T1110] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 42.981416][ T1122] rust_binder: Write failure EINVAL in pid:122 [ 42.981921][ T1122] rust_binder: Write failure EINVAL in pid:122 [ 43.001287][ T1126] incfs: Can't find or create .index dir in ./file0 [ 43.014337][ T1126] incfs: mount failed -22 [ 43.020394][ T1126] incfs: Can't find or create .incomplete dir in ./file0 [ 43.027843][ T1126] incfs: mount failed -22 [ 43.053590][ T1130] netlink: 1 bytes leftover after parsing attributes in process `syz.1.262'. [ 43.097490][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 43.097510][ T36] audit: type=1400 audit(1751402124.420:317): avc: denied { ioctl } for pid=1135 comm="syz.1.265" path="socket:[8504]" dev="sockfs" ino=8504 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.295903][ T45] hid-generic 0003:257E:200E.0006: item fetching failed at offset 0/7 [ 43.304267][ T45] hid-generic 0003:257E:200E.0006: probe with driver hid-generic failed with error -22 [ 43.341289][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 43.355036][ T36] audit: type=1400 audit(1751402124.680:318): avc: denied { bind } for pid=1141 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.357733][ T1142] futex_wake_op: syz.3.267 tries to shift op by -1; fix this program [ 43.374397][ T36] audit: type=1400 audit(1751402124.680:319): avc: denied { name_bind } for pid=1141 comm="syz.3.267" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 43.384690][ T1144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.404330][ T36] audit: type=1400 audit(1751402124.680:320): avc: denied { node_bind } for pid=1141 comm="syz.3.267" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 43.412821][ T1144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.434733][ T36] audit: type=1400 audit(1751402124.680:321): avc: denied { ioctl } for pid=1141 comm="syz.3.267" path="socket:[8177]" dev="sockfs" ino=8177 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.492382][ T31] usb 2-1: config 0 has an invalid interface number: 229 but max is 1 [ 43.504893][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.515031][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 43.523933][ T31] usb 2-1: config 0 has no interface number 0 [ 43.530045][ T31] usb 2-1: config 0 interface 229 altsetting 244 has a duplicate endpoint with address 0x6, skipping [ 43.540978][ T31] usb 2-1: config 0 interface 229 altsetting 244 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 43.548412][ T36] audit: type=1400 audit(1751402124.860:322): avc: denied { map } for pid=1148 comm="syz.3.269" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.554344][ T31] usb 2-1: config 0 interface 229 has no altsetting 0 [ 43.581376][ T1150] rust_binder: 1150: no such ref 4 [ 43.586516][ T31] usb 2-1: New USB device found, idVendor=12d1, idProduct=2df3, bcdDevice=b5.bc [ 43.590327][ T1150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 43.605209][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.623421][ T31] usb 2-1: Product: syz [ 43.627602][ T31] usb 2-1: Manufacturer: 㐁 [ 43.631917][ T1152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 43.632249][ T31] usb 2-1: SerialNumber: syz [ 43.648973][ T31] usb 2-1: config 0 descriptor?? [ 43.659570][ T1154] syz.3.271 (1154) used obsolete PPPIOCDETACH ioctl [ 43.860092][ T36] audit: type=1400 audit(1751402125.180:323): avc: denied { shutdown } for pid=1135 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.074715][ T31] usb 2-1: USB disconnect, device number 16 [ 44.203001][ T1169] overlayfs: failed to clone upperpath [ 44.331378][ T556] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 44.481276][ T556] usb 4-1: Using ep0 maxpacket: 16 [ 44.487984][ T556] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.496443][ T556] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.506654][ T556] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 44.515808][ T556] usb 4-1: too many endpoints for config 1 interface 1 altsetting 71: 240, using maximum allowed: 30 [ 44.527017][ T556] usb 4-1: config 1 interface 1 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 240 [ 44.540267][ T556] usb 4-1: config 1 interface 1 has no altsetting 0 [ 44.548962][ T556] usb 4-1: string descriptor 0 read error: -22 [ 44.555294][ T556] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.564359][ T556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.576652][ T556] usb 4-1: 0:2 : does not exist [ 44.584092][ T556] hub 4-1:1.1: Invalid hub with more than one config or interface [ 44.592015][ T556] hub 4-1:1.1: probe with driver hub failed with error -22 [ 44.607009][ T36] audit: type=1400 audit(1751402125.930:324): avc: denied { mount } for pid=1200 comm="syz.1.288" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 44.628683][ T36] audit: type=1400 audit(1751402125.930:325): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 44.641539][ T1203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.650025][ T1203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.665014][ T36] audit: type=1400 audit(1751402125.990:326): avc: denied { mount } for pid=1207 comm="syz.1.290" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 44.776183][ T335] usb 4-1: USB disconnect, device number 8 [ 44.981311][ T556] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 45.131314][ T556] usb 2-1: Using ep0 maxpacket: 16 [ 45.137582][ T556] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.147970][ T556] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.158270][ T556] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 45.167495][ T556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.175524][ T556] usb 2-1: Product: syz [ 45.179709][ T556] usb 2-1: Manufacturer: syz [ 45.184420][ T556] usb 2-1: SerialNumber: syz [ 45.330597][ T1246] input: syz1 as /devices/virtual/input/input6 [ 45.436566][ T31] usb 3-1: USB disconnect, device number 13 [ 45.497202][ T1262] fuseblk: Unknown parameter 'smackfsroot' [ 45.601285][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 45.752647][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 45.761053][ T45] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 45.769456][ T45] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 45.777656][ T45] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 45.786821][ T45] usb 4-1: config 129 has no interface number 0 [ 45.793107][ T45] usb 4-1: config 129 has no interface number 1 [ 45.799374][ T45] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 45.813073][ T45] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 45.824579][ T31] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 45.832270][ T45] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 45.845550][ T45] usb 4-1: config 129 interface 135 has no altsetting 0 [ 45.852612][ T45] usb 4-1: config 129 interface 5 has no altsetting 0 [ 45.861448][ T45] usb 4-1: string descriptor 0 read error: -22 [ 45.867634][ T45] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice= 0.06 [ 45.876723][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 45.964869][ T1283] overlayfs: failed to clone upperpath [ 45.981128][ T1286] overlayfs: failed to clone upperpath [ 45.986707][ T31] usb 3-1: device descriptor read/64, error -71 [ 46.087781][ T1252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.096381][ T1252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.127151][ T1294] capability: warning: `syz.3.317' uses deprecated v2 capabilities in a way that may be insecure [ 46.251320][ T31] usb 3-1: device descriptor read/64, error -71 [ 46.491296][ T31] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 46.621287][ T31] usb 3-1: device descriptor read/64, error -71 [ 46.861283][ T31] usb 3-1: device descriptor read/64, error -71 [ 46.971399][ T31] usb usb3-port1: attempt power cycle [ 47.311269][ T31] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 47.342260][ T31] usb 3-1: device descriptor read/8, error -71 [ 47.482323][ T31] usb 3-1: device descriptor read/8, error -71 [ 47.741303][ T31] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 47.763222][ T31] usb 3-1: device descriptor read/8, error -71 [ 47.816495][ T556] usb 2-1: 0:2 : does not exist [ 47.826998][ T45] usb 4-1: MIDIStreaming interface descriptor not found [ 47.829710][ T556] usb 2-1: USB disconnect, device number 17 [ 47.864352][ T45] usb 4-1: USB disconnect, device number 9 [ 47.903714][ T31] usb 3-1: device descriptor read/8, error -71 [ 47.988574][ T1384] rust_binder: Write failure EINVAL in pid:157 [ 47.988682][ T1384] rust_binder: Read failure Err(EAGAIN) in pid:157 [ 48.011648][ T31] usb usb3-port1: unable to enumerate USB device [ 48.552726][ T1396] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.559964][ T1396] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.612304][ T1400] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 48.690985][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 48.691001][ T36] audit: type=1400 audit(1751402130.010:337): avc: denied { connect } for pid=1406 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.735206][ T36] audit: type=1400 audit(1751402130.060:338): avc: denied { bind } for pid=1410 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.791881][ T1419] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 48.812074][ T1426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.829838][ T36] audit: type=1326 audit(1751402130.150:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1427 comm="syz.4.360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4f718e929 code=0x0 [ 48.854767][ T1430] tmpfs: Unknown parameter 'indo64' [ 48.895227][ T36] audit: type=1400 audit(1751402130.220:340): avc: denied { watch } for pid=1427 comm="syz.4.360" path="/111/control" dev="tmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.951380][ T36] audit: type=1400 audit(1751402130.270:341): avc: denied { append } for pid=1442 comm="syz.3.365" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.978681][ T1443] tipc: Invalid UDP bearer configuration [ 48.978697][ T1443] tipc: Enabling of bearer rejected, failed to enable media [ 49.016558][ T1451] process 'syz.2.367' launched './file0' with NULL argv: empty string added [ 49.025668][ T36] audit: type=1400 audit(1751402130.350:342): avc: denied { execute_no_trans } for pid=1450 comm="syz.2.367" path="/64/file0" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.039251][ T1451] rust_binder: Failed copying into alloc: EFAULT [ 49.049422][ T1451] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 49.056044][ T1451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 49.064343][ T1451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:219 [ 49.086228][ T1453] rust_binder: Failed copying remainder into alloc: EFAULT [ 49.095441][ T1453] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 49.103224][ T1453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 49.112451][ T1453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:221 [ 49.121936][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 49.322342][ T45] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.334062][ T45] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 49.345141][ T45] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 49.356507][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 49.365668][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.374617][ T1432] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.401311][ T335] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 49.501316][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 49.551284][ T335] usb 4-1: Using ep0 maxpacket: 16 [ 49.557574][ T335] usb 4-1: config 7 has an invalid interface number: 64 but max is 0 [ 49.566144][ T335] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 49.574932][ T335] usb 4-1: config 7 has an invalid descriptor of length 217, skipping remainder of the config [ 49.585267][ T335] usb 4-1: config 7 has no interface number 0 [ 49.591509][ T335] usb 4-1: config 7 interface 64 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 49.604492][ T335] usb 4-1: config 7 interface 64 has no altsetting 0 [ 49.612753][ T335] usb 4-1: New USB device found, idVendor=19d2, idProduct=1476, bcdDevice=c8.53 [ 49.621874][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.629847][ T335] usb 4-1: Product: ࠝ [ 49.634058][ T335] usb 4-1: Manufacturer: ា䐁Ԍ뻖ꀂ䅺峹ⅉ䒺䬣᫇呦㱞㖱ﾬ硁덵ૈ⼣蠇䷄繕浐狝贐ᡲ䙜腘觷Ꝓ듓꟟倖Ả뼸➓蚿㍚−ጎᨺ㍇㥒총䗻ઍ솧㭁먴ꊜ텓篫䣕퀓⍳沃慷ᚚｗ畵휎ń厂朤乭㝥쌝መ子구龋䚿驑ⲳ嘿⬞뮿圍 [ 49.661988][ T335] usb 4-1: SerialNumber: 㰊 [ 49.673096][ T31] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.684268][ T31] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.694217][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 49.700889][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 49.710521][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.719380][ T31] usb 3-1: config 0 descriptor?? [ 49.873287][ T335] usb 4-1: USB disconnect, device number 10 [ 50.128943][ T1469] random: crng reseeded on system resumption [ 50.218332][ T36] audit: type=1400 audit(1751402131.540:343): avc: denied { load_policy } for pid=1485 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.218414][ T1486] SELinux: failed to load policy [ 50.252349][ T1486] rust_binder: Got transaction with invalid offset. [ 50.252388][ T1486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.259200][ T1486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 50.296201][ T1492] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.345814][ T36] audit: type=1400 audit(1751402131.670:344): avc: denied { append } for pid=1496 comm="syz.2.382" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.348896][ T1497] rust_binder: Error while translating object. [ 50.404346][ T1497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.421317][ T45] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 50.444990][ T1497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257 [ 50.460604][ T45] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input7 [ 50.467806][ T1508] overlayfs: failed to clone upperpath [ 50.486988][ T45] usb 2-1: USB disconnect, device number 18 [ 50.492987][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 50.599417][ T1524] /dev/loop0: Can't lookup blockdev [ 50.767134][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 50.785654][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 50.808567][ T31] usb 3-1: USB disconnect, device number 18 [ 51.031979][ T36] audit: type=1400 audit(1751402132.360:345): avc: denied { read } for pid=1550 comm="syz.3.399" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.055877][ T36] audit: type=1400 audit(1751402132.370:346): avc: denied { ioctl } for pid=1550 comm="syz.3.399" path="/dev/usbmon8" dev="devtmpfs" ino=115 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.074437][ T1553] input: syz0 as /devices/virtual/input/input8 [ 51.115833][ T1561] rust_binder: Failed copying into alloc: EFAULT [ 51.115851][ T1561] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 51.122323][ T1561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 51.130725][ T1561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:377 [ 51.194069][ T1568] binder: Bad value for 'max' [ 51.220201][ T1570] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 51.385358][ T1581] rust_binder: Error in use_page_slow: ESRCH [ 51.385375][ T1581] rust_binder: use_range failure ESRCH [ 51.396907][ T1581] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 51.396930][ T1581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 51.405814][ T1581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:395 [ 51.502554][ T1593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.502589][ T1593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.547036][ T1607] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.850162][ T1615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.874765][ T1620] overlayfs: failed to clone lowerpath [ 52.281273][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 52.431278][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 52.438191][ T31] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 52.446811][ T31] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 52.455515][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 52.465125][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 52.474859][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 52.484952][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 52.498866][ T1652] /dev/rnullb0: Can't lookup blockdev [ 52.505420][ T1652] /dev/rnullb0: Can't lookup blockdev [ 52.510861][ T31] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 52.538591][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.557324][ T31] usb 2-1: config 0 descriptor?? [ 52.599238][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 52.727916][ T1686] rust_binder: Write failure EFAULT in pid:306 [ 52.766463][ T31] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 52.965799][ T335] usb 2-1: USB disconnect, device number 19 [ 52.972488][ T335] usblp0: removed [ 53.001312][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 53.151301][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 53.157556][ T10] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 53.166815][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.176636][ T10] usb 3-1: config 0 descriptor?? [ 53.450106][ T10] usb 3-1: USB disconnect, device number 19 [ 53.510078][ T1705] 9pnet_fd: Insufficient options for proto=fd [ 53.660900][ T1718] netlink: 88 bytes leftover after parsing attributes in process `syz.4.459'. [ 53.669876][ T1718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 53.700180][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 53.700224][ T36] audit: type=1400 audit(1751402135.020:364): avc: denied { ioctl } for pid=1721 comm="syz.4.461" path="socket:[10777]" dev="sockfs" ino=10777 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.793199][ T1738] fuse: Bad value for 'rootmode' [ 53.860257][ T1757] fuse: Invalid gid '00000000000037777777777' [ 53.886579][ T1762] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 53.895605][ T1762] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 54.037890][ T1778] netlink: 'syz.3.481': attribute type 4 has an invalid length. [ 54.046956][ T36] audit: type=1400 audit(1751402135.380:365): avc: denied { append } for pid=1777 comm="syz.3.481" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.171323][ T10] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 54.323640][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.332827][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.340831][ T10] usb 2-1: Product: syz [ 54.345076][ T10] usb 2-1: Manufacturer: syz [ 54.349671][ T10] usb 2-1: SerialNumber: syz [ 54.493838][ T1276] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 54.557069][ T10] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 54.572295][ T10] cdc_ncm 2-1:1.0: bind() failure [ 54.578120][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 54.590347][ T10] cdc_ncm 2-1:1.1: bind() failure [ 54.604716][ T10] usb 2-1: USB disconnect, device number 20 [ 54.611088][ T1796] SELinux: security_context_str_to_sid () failed with errno=-22 [ 54.654529][ T1276] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.665369][ T1276] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 54.673347][ T1276] usb 3-1: can't read configurations, error -71 [ 54.991244][ T36] audit: type=1400 audit(1751402136.310:366): avc: denied { read } for pid=1804 comm="syz.3.490" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 55.013163][ T36] audit: type=1400 audit(1751402136.310:367): avc: denied { open } for pid=1804 comm="syz.3.490" path="/147/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 55.221527][ T36] audit: type=1400 audit(1751402136.540:368): avc: denied { map } for pid=1817 comm="syz.2.493" path="socket:[10959]" dev="sockfs" ino=10959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.263885][ T36] audit: type=1400 audit(1751402136.550:369): avc: denied { read } for pid=1817 comm="syz.2.493" path="socket:[10959]" dev="sockfs" ino=10959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.378399][ T36] audit: type=1400 audit(1751402136.700:370): avc: denied { bind } for pid=1824 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.454441][ T1827] netlink: 88 bytes leftover after parsing attributes in process `syz.2.497'. [ 55.487033][ T36] audit: type=1400 audit(1751402136.810:371): avc: denied { create } for pid=1829 comm="syz.2.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 55.519215][ T36] audit: type=1400 audit(1751402136.840:372): avc: denied { mounton } for pid=1831 comm="syz.2.499" path="/102/file0" dev="ramfs" ino=11009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 55.879829][ T1836] netlink: 'syz.3.500': attribute type 63 has an invalid length. [ 55.887884][ T1836] netlink: 5 bytes leftover after parsing attributes in process `syz.3.500'. [ 55.897059][ T1836] gretap0: entered allmulticast mode [ 55.908703][ T1836] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 55.952370][ T36] audit: type=1400 audit(1751402137.280:373): avc: denied { map } for pid=1835 comm="syz.3.500" path="socket:[11081]" dev="sockfs" ino=11081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 56.092315][ T1867] incfs: Error accessing: ./file0. [ 56.093675][ T1869] rust_binder: Error while translating object. [ 56.097477][ T1867] incfs: mount failed -20 [ 56.097552][ T1869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.108502][ T1869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:463 [ 56.196247][ T1877] batadv_slave_1: entered promiscuous mode [ 56.218494][ T1877] batadv_slave_1: left promiscuous mode [ 56.226960][ T1877] batadv_slave_1: entered promiscuous mode [ 56.238784][ T1877] batadv_slave_1: left promiscuous mode [ 56.761279][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 56.921404][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 56.927896][ T31] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 56.936713][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.947928][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 56.957051][ T31] usb 3-1: config 1 has no interface number 1 [ 56.963257][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 56.976200][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 56.987539][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.996790][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.005305][ T31] usb 3-1: Product: syz [ 57.009612][ T31] usb 3-1: Manufacturer: syz [ 57.014277][ T31] usb 3-1: SerialNumber: syz [ 57.220700][ T1911] rust_binder: Write failure EINVAL in pid:367 [ 57.228243][ T31] usb 3-1: USB disconnect, device number 22 [ 57.249654][ T685] udevd[685]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.668390][ T1935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 57.744252][ T1957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 57.755982][ T1960] 9pnet_fd: Insufficient options for proto=fd [ 57.833179][ T1966] rust_binder: Error in use_page_slow: ESRCH [ 57.833201][ T1966] rust_binder: use_range failure ESRCH [ 57.849568][ T1966] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 57.861109][ T1966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 57.874753][ T1966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:501 [ 57.998730][ T1985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 58.001300][ T335] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 58.008334][ T1985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:508 [ 58.026237][ T1985] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 58.038297][ T1985] rust_binder: Read failure Err(EFAULT) in pid:508 [ 58.106461][ T2003] rust_binder: Error while translating object. [ 58.113098][ T2003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.120556][ T2003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:380 [ 58.140462][ T2005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.149752][ T2005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:382 [ 58.160138][ T2006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.161272][ T335] usb 2-1: Using ep0 maxpacket: 32 [ 58.190697][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.201825][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.212058][ T335] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 58.221090][ T2014] rust_binder: Write failure EFAULT in pid:389 [ 58.221531][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.225193][ T2016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:389 [ 58.228969][ T335] usb 2-1: config 0 descriptor?? [ 58.251440][ T335] hub 2-1:0.0: USB hub found [ 58.257809][ T2018] rust_binder: Write failure EINVAL in pid:393 [ 58.258877][ T2018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:393 [ 58.290517][ T2020] netlink: 37 bytes leftover after parsing attributes in process `syz.2.560'. [ 58.415223][ T2030] fuseblk: Unknown parameter 'roomodg' [ 58.432917][ T2033] rust_binder: Error while translating object. [ 58.432946][ T2033] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 58.439129][ T2033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:408 [ 58.450335][ T2034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.459447][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 58.460977][ T335] hub 2-1:0.0: 1 port detected [ 58.484206][ T2037] batadv_slave_1: entered promiscuous mode [ 58.513249][ T2036] batadv_slave_1: left promiscuous mode [ 58.621521][ T45] usb 4-1: config 192 has an invalid interface number: 162 but max is 0 [ 58.637813][ T45] usb 4-1: config 192 has no interface number 0 [ 58.644577][ T45] usb 4-1: config 192 interface 162 has no altsetting 0 [ 58.652756][ T2049] overlayfs: failed to clone upperpath [ 58.659857][ T45] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 58.679156][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.697538][ T45] usb 4-1: Product: syz [ 58.709886][ T45] usb 4-1: Manufacturer: syz [ 58.716197][ T1957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 58.717833][ T45] usb 4-1: SerialNumber: syz [ 58.738246][ T1957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.738302][ T1957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225 [ 58.759040][ T335] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 58.782996][ T2059] syz.2.571 uses obsolete (PF_INET,SOCK_PACKET) [ 58.789538][ T335] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 58.798978][ T335] usbhid 2-1:0.0: can't add hid device: -71 [ 58.799585][ T2060] overlayfs: failed to clone upperpath [ 58.810631][ T2061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.811339][ T335] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 58.851406][ T335] usb 2-1: USB disconnect, device number 21 [ 58.887365][ T2064] rust_binder: got new transaction with bad transaction stack [ 58.887394][ T2064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:430 [ 58.949957][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 58.949979][ T36] audit: type=1400 audit(1751402140.276:380): avc: denied { add_name } for pid=2009 comm="syz.3.557" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.987009][ T2066] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 59.012507][ T45] usb-storage 4-1:192.162: USB Mass Storage device detected [ 59.030197][ T45] usb-storage 4-1:192.162: device ignored [ 59.036619][ T36] audit: type=1400 audit(1751402140.276:381): avc: denied { create } for pid=2009 comm="syz.3.557" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.072552][ T36] audit: type=1400 audit(1751402140.276:382): avc: denied { associate } for pid=2009 comm="syz.3.557" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.114311][ T45] usb 4-1: USB disconnect, device number 11 [ 59.141262][ T36] audit: type=1400 audit(1751402140.316:383): avc: denied { remount } for pid=2065 comm="syz.2.574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.526870][ T2102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.583983][ T2105] binder: Unknown parameter 'defcontext01777777777777777777777' [ 59.638658][ T2113] devtmpfs: Unknown parameter '^ *(' [ 59.678701][ T36] audit: type=1400 audit(1751402141.006:384): avc: denied { getopt } for pid=2116 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.791320][ T10] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 59.839838][ T36] audit: type=1400 audit(1751402141.166:385): avc: denied { watch watch_reads } for pid=2133 comm="syz.3.596" path="/172/file0" dev="tmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.942540][ T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.948926][ T36] audit: type=1400 audit(1751402141.276:386): avc: denied { shutdown } for pid=2135 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.959770][ T10] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 59.974513][ T2136] netlink: 'syz.3.597': attribute type 1 has an invalid length. [ 59.984377][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 59.995885][ T2136] random: crng reseeded on system resumption [ 60.004583][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 60.014003][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.026207][ T10] usb 2-1: config 0 descriptor?? [ 60.031638][ T2088] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 60.048933][ T10] usbhid 2-1:0.0: can't add hid device: -22 [ 60.052198][ T2138] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.054963][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 60.069557][ T2138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.069594][ T2138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:470 [ 60.079455][ T36] audit: type=1400 audit(1751402141.396:387): avc: denied { name_bind } for pid=2135 comm="syz.3.597" src=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=tcp_socket permissive=1 [ 60.117429][ T36] audit: type=1326 audit(1751402141.446:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2141 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeddb8e929 code=0x7ffc0000 [ 60.144946][ T36] audit: type=1326 audit(1751402141.466:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2141 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeddb8e929 code=0x7ffc0000 [ 60.166894][ T2149] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 60.225351][ T2142] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.342430][ T2172] fuse: Bad value for 'fd' [ 60.480589][ T2190] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=2190 comm=syz.3.615 [ 60.495527][ T2190] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=2190 comm=syz.3.615 [ 60.604404][ T2098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.604441][ T2098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 60.644029][ T2212] binder: Bad value for 'stats' [ 60.941330][ T31] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 61.087016][ T2230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.098072][ T2232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.102429][ T31] usb 4-1: config 9 has an invalid interface number: 51 but max is 0 [ 61.119019][ T31] usb 4-1: config 9 has no interface number 0 [ 61.128437][ T31] usb 4-1: string descriptor 0 read error: -22 [ 61.134670][ T31] usb 4-1: New USB device found, idVendor=07a6, idProduct=07c2, bcdDevice=37.12 [ 61.143909][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.362000][ T31] usb 4-1: USB disconnect, device number 12 [ 61.379079][ T2240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.633'. [ 61.967506][ T2255] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 62.281627][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 62.434049][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 62.444268][ T556] usb 2-1: USB disconnect, device number 22 [ 62.455425][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.478163][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.499456][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 62.515563][ T2284] overlayfs: failed to clone upperpath [ 62.522824][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.545088][ T10] usb 4-1: config 0 descriptor?? [ 62.561419][ T2292] netlink: 'syz.4.654': attribute type 4 has an invalid length. [ 62.565611][ T10] hub 4-1:0.0: USB hub found [ 62.578005][ T2292] netlink: 'syz.4.654': attribute type 4 has an invalid length. [ 62.653825][ T2305] rust_binder: Write failure EINVAL in pid:241 [ 62.755044][ T10] hub 4-1:0.0: 1 port detected [ 62.971267][ T556] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 63.063660][ T2329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.131269][ T556] usb 2-1: Invalid ep0 maxpacket: 64 [ 63.281302][ T556] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 63.441252][ T556] usb 2-1: Invalid ep0 maxpacket: 64 [ 63.447995][ T556] usb usb2-port1: attempt power cycle [ 63.453462][ T61] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 63.468172][ T10] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 63.491296][ T10] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 63.510359][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 63.519076][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 63.631761][ T61] usb 3-1: device descriptor read/64, error -71 [ 63.701502][ T10] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 63.709775][ T10] usb 4-1: device reset changed ep0 maxpacket size! [ 63.716621][ T10] usb 4-1: USB disconnect, device number 13 [ 63.801311][ T556] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 63.821666][ T556] usb 2-1: Invalid ep0 maxpacket: 64 [ 63.871327][ T61] usb 3-1: device descriptor read/64, error -71 [ 63.951417][ T556] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 63.971639][ T556] usb 2-1: Invalid ep0 maxpacket: 64 [ 63.977083][ T556] usb usb2-port1: unable to enumerate USB device [ 64.011303][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 64.111288][ T61] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 64.162425][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.173425][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.183312][ T10] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 64.192598][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.201129][ T10] usb 4-1: config 0 descriptor?? [ 64.251292][ T61] usb 3-1: device descriptor read/64, error -71 [ 64.491309][ T61] usb 3-1: device descriptor read/64, error -71 [ 64.603645][ T61] usb usb3-port1: attempt power cycle [ 64.619584][ T10] belkin 0003:1020:0006.0007: unknown main item tag 0x3 [ 64.634154][ T10] belkin 0003:1020:0006.0007: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.3-1/input0 [ 64.941321][ T61] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 64.962372][ T61] usb 3-1: device descriptor read/8, error -71 [ 65.092296][ T61] usb 3-1: device descriptor read/8, error -71 [ 65.331322][ T61] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 65.352397][ T61] usb 3-1: device descriptor read/8, error -71 [ 65.491644][ T61] usb 3-1: device descriptor read/8, error -71 [ 65.535416][ T2400] overlay: Unknown parameter 'fsuuid' [ 65.540980][ T2401] overlay: Unknown parameter 'fsuuid' [ 65.601368][ T61] usb usb3-port1: unable to enumerate USB device [ 65.774704][ T2420] rust_binder: Write failure EFAULT in pid:257 [ 65.830299][ T2422] rust_binder: 2422: no such ref 0 [ 65.841663][ T2422] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 65.841676][ T2422] rust_binder: Read failure Err(EFAULT) in pid:259 [ 65.849698][ T2422] rust_binder: Write failure EINVAL in pid:259 [ 65.875697][ T2427] rust_binder: Error while translating object. [ 65.881935][ T2427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.888084][ T2427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:264 [ 66.225465][ T2434] binder: Bad value for 'defcontext' [ 66.350827][ T2448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2448 comm=syz.2.709 [ 66.457478][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 66.457495][ T36] audit: type=1400 audit(1751402147.786:418): avc: denied { audit_read } for pid=2457 comm="syz.2.712" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.485665][ T36] audit: type=1400 audit(1751402147.786:419): avc: denied { view } for pid=2457 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 66.510190][ T45] usb 4-1: USB disconnect, device number 14 [ 66.591609][ T2477] syz.2.717: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 66.606622][ T2477] CPU: 0 UID: 0 PID: 2477 Comm: syz.2.717 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 66.606652][ T2477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.606667][ T2477] Call Trace: [ 66.606674][ T2477] [ 66.606681][ T2477] __dump_stack+0x21/0x30 [ 66.606710][ T2477] dump_stack_lvl+0x10c/0x190 [ 66.606735][ T2477] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.606756][ T2477] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 66.606777][ T2477] dump_stack+0x19/0x20 [ 66.606798][ T2477] warn_alloc+0x1bc/0x2a0 [ 66.606818][ T2477] ? stack_depot_save_flags+0x38/0x800 [ 66.606843][ T2477] ? __cfi_warn_alloc+0x10/0x10 [ 66.606860][ T2477] ? kasan_save_track+0x4f/0x80 [ 66.606886][ T2477] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 66.606911][ T2477] ? xskq_create+0x68/0x2a0 [ 66.606934][ T2477] ? xsk_init_queue+0xb6/0x120 [ 66.606954][ T2477] ? xsk_setsockopt+0x43f/0x6f0 [ 66.606972][ T2477] ? do_sock_setsockopt+0x26d/0x400 [ 66.606994][ T2477] ? __x64_sys_setsockopt+0x1b8/0x250 [ 66.607014][ T2477] ? x64_sys_call+0x2adc/0x2ee0 [ 66.607037][ T2477] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.607060][ T2477] __vmalloc_node_range_noprof+0x135/0x1420 [ 66.607084][ T2477] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 66.607105][ T2477] ? avc_has_perm+0x144/0x220 [ 66.607127][ T2477] ? kasan_save_alloc_info+0x40/0x50 [ 66.607148][ T2477] ? __kasan_kmalloc+0x96/0xb0 [ 66.607173][ T2477] vmalloc_user_noprof+0x77/0x90 [ 66.607193][ T2477] ? xskq_create+0xdb/0x2a0 [ 66.607212][ T2477] xskq_create+0xdb/0x2a0 [ 66.607232][ T2477] xsk_init_queue+0xb6/0x120 [ 66.607251][ T2477] xsk_setsockopt+0x43f/0x6f0 [ 66.607270][ T2477] ? __cfi_xsk_setsockopt+0x10/0x10 [ 66.607288][ T2477] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 66.607309][ T2477] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 66.607337][ T2477] ? security_socket_setsockopt+0x33/0xd0 [ 66.607361][ T2477] ? __cfi_xsk_setsockopt+0x10/0x10 [ 66.607380][ T2477] do_sock_setsockopt+0x26d/0x400 [ 66.607399][ T2477] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 66.607421][ T2477] __x64_sys_setsockopt+0x1b8/0x250 [ 66.607441][ T2477] x64_sys_call+0x2adc/0x2ee0 [ 66.607465][ T2477] do_syscall_64+0x58/0xf0 [ 66.607482][ T2477] ? clear_bhb_loop+0x50/0xa0 [ 66.607502][ T2477] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.607522][ T2477] RIP: 0033:0x7f1020f8e929 [ 66.607544][ T2477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.607560][ T2477] RSP: 002b:00007f1020dca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.607581][ T2477] RAX: ffffffffffffffda RBX: 00007f10211b6080 RCX: 00007f1020f8e929 [ 66.607595][ T2477] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 66.607608][ T2477] RBP: 00007f1021010b39 R08: 0000000000000004 R09: 0000000000000000 [ 66.607621][ T2477] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 66.607639][ T2477] R13: 0000000000000000 R14: 00007f10211b6080 R15: 00007ffd9f01c098 [ 66.607657][ T2477] [ 66.607696][ T2477] Mem-Info: [ 66.914393][ T2477] active_anon:7459 inactive_anon:5 isolated_anon:0 [ 66.914393][ T2477] active_file:21130 inactive_file:2210 isolated_file:0 [ 66.914393][ T2477] unevictable:0 dirty:45 writeback:0 [ 66.914393][ T2477] slab_reclaimable:5501 slab_unreclaimable:71041 [ 66.914393][ T2477] mapped:24507 shmem:227 pagetables:1085 [ 66.914393][ T2477] sec_pagetables:0 bounce:0 [ 66.914393][ T2477] kernel_misc_reclaimable:0 [ 66.914393][ T2477] free:1522400 free_pcp:2539 free_cma:0 [ 66.959786][ T2477] Node 0 active_anon:29836kB inactive_anon:20kB active_file:84520kB inactive_file:8840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98028kB dirty:180kB writeback:0kB shmem:908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4788kB pagetables:4340kB sec_pagetables:0kB all_unreclaimable? no [ 66.992077][ T2477] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966000kB mlocked:0kB bounce:0kB free_pcp:5788kB local_pcp:68kB free_cma:0kB [ 67.022088][ T2477] lowmem_reserve[]: 0 3921 3921 [ 67.027016][ T2477] Normal free:3131948kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29968kB inactive_anon:20kB active_file:84520kB inactive_file:8840kB unevictable:0kB writepending:180kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1948kB local_pcp:224kB free_cma:0kB [ 67.058154][ T2477] lowmem_reserve[]: 0 0 0 [ 67.062565][ T2477] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 67.078030][ T2477] Normal: 341*4kB (UME) 347*8kB (UME) 840*16kB (UME) 538*32kB (UME) 534*64kB (UME) 126*128kB (UME) 70*256kB (UME) 36*512kB (UME) 28*1024kB (UME) 14*2048kB (ME) 721*4096kB (UM) = 3132012kB [ 67.096989][ T2477] 23543 total pagecache pages [ 67.101796][ T2477] 7 pages in swap cache [ 67.105947][ T2477] Free swap = 124440kB [ 67.110102][ T2477] Total swap = 124996kB [ 67.114296][ T2477] 2097051 pages RAM [ 67.118094][ T2477] 0 pages HighMem/MovableOnly [ 67.122775][ T2477] 351521 pages reserved [ 67.126919][ T2477] 0 pages cma reserved [ 67.132424][ T2477] Memory allocations: [ 67.136409][ T2477] 0 B 0 init/main.c:1370 func:do_initcalls [ 67.143620][ T2477] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 67.151711][ T2477] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 67.159352][ T2477] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 67.167287][ T2477] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 67.175218][ T2477] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 67.183819][ T2477] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 67.191726][ T2477] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 67.199688][ T2477] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 67.201263][ T61] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 67.207606][ T2477] 0 B 0 init/initramfs.c:101 func:find_link [ 67.255517][ T2487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:559 [ 67.255642][ T2487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:559 [ 67.306464][ T2500] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.317411][ T2501] rust_binder: Error while translating object. [ 67.323967][ T2501] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 67.330220][ T2501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:566 [ 67.361297][ T61] usb 2-1: Using ep0 maxpacket: 32 [ 67.381681][ T2506] binder: Bad value for 'max' [ 67.388045][ T2506] binder: Bad value for 'max' [ 67.393054][ T61] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 67.408184][ T61] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 67.421358][ T61] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 67.432841][ T61] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.443172][ T61] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 67.452985][ T2515] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.453241][ T61] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 67.472755][ T2515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.472785][ T2515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:574 [ 67.482561][ T61] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 67.506516][ T61] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.516717][ T2518] FAULT_INJECTION: forcing a failure. [ 67.516717][ T2518] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.530683][ T2518] CPU: 0 UID: 0 PID: 2518 Comm: syz.2.731 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 67.530715][ T2518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.530727][ T2518] Call Trace: [ 67.530734][ T2518] [ 67.530743][ T2518] __dump_stack+0x21/0x30 [ 67.530773][ T2518] dump_stack_lvl+0x10c/0x190 [ 67.530795][ T2518] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.530820][ T2518] ? vfs_write+0x8ba/0xe80 [ 67.530846][ T2518] dump_stack+0x19/0x20 [ 67.530867][ T2518] should_fail_ex+0x3d9/0x530 [ 67.530892][ T2518] should_fail+0xf/0x20 [ 67.530912][ T2518] should_fail_usercopy+0x1e/0x30 [ 67.530936][ T2518] _copy_from_user+0x22/0xb0 [ 67.530964][ T2518] do_sock_getsockopt+0x1d7/0x6d0 [ 67.530985][ T2518] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 67.531007][ T2518] ? __fget_files+0x2c5/0x340 [ 67.531037][ T2518] __x64_sys_getsockopt+0x1d5/0x280 [ 67.531059][ T2518] x64_sys_call+0x10db/0x2ee0 [ 67.531084][ T2518] do_syscall_64+0x58/0xf0 [ 67.531102][ T2518] ? clear_bhb_loop+0x50/0xa0 [ 67.531125][ T2518] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.531146][ T2518] RIP: 0033:0x7f1020f8e929 [ 67.531163][ T2518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.531181][ T2518] RSP: 002b:00007f1020deb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 67.531204][ T2518] RAX: ffffffffffffffda RBX: 00007f10211b5fa0 RCX: 00007f1020f8e929 [ 67.531230][ T2518] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 67.531243][ T2518] RBP: 00007f1020deb090 R08: 0000200000001300 R09: 0000000000000000 [ 67.531258][ T2518] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 67.531272][ T2518] R13: 0000000000000000 R14: 00007f10211b5fa0 R15: 00007ffd9f01c098 [ 67.531290][ T2518] [ 67.718476][ T61] usb 2-1: config 0 descriptor?? [ 67.876575][ T36] audit: type=1400 audit(1751402149.206:420): avc: denied { getopt } for pid=2542 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.933140][ T61] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 68.111279][ T556] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 68.173160][ T61] usb 2-1: USB disconnect, device number 27 [ 68.180244][ T61] usblp0: removed [ 68.241304][ T556] usb 3-1: device descriptor read/64, error -71 [ 68.481332][ T556] usb 3-1: device descriptor read/64, error -71 [ 68.664697][ T2562] FAULT_INJECTION: forcing a failure. [ 68.664697][ T2562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.677910][ T2562] CPU: 0 UID: 0 PID: 2562 Comm: syz.3.745 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 68.677934][ T2562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.677942][ T2562] Call Trace: [ 68.677946][ T2562] [ 68.677952][ T2562] __dump_stack+0x21/0x30 [ 68.677969][ T2562] dump_stack_lvl+0x10c/0x190 [ 68.677981][ T2562] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.677994][ T2562] dump_stack+0x19/0x20 [ 68.678005][ T2562] should_fail_ex+0x3d9/0x530 [ 68.678018][ T2562] should_fail+0xf/0x20 [ 68.678029][ T2562] should_fail_usercopy+0x1e/0x30 [ 68.678041][ T2562] _copy_from_user+0x22/0xb0 [ 68.678055][ T2562] do_tcp_getsockopt+0x1ec/0x26b0 [ 68.678069][ T2562] ? kernel_text_address+0xa9/0xe0 [ 68.678082][ T2562] ? __cfi_do_tcp_getsockopt+0x10/0x10 [ 68.678094][ T2562] ? _parse_integer_limit+0x195/0x1e0 [ 68.678108][ T2562] ? _parse_integer+0x2e/0x40 [ 68.678119][ T2562] ? avc_has_perm_noaudit+0x268/0x360 [ 68.678130][ T2562] ? __asan_memcpy+0x5a/0x80 [ 68.678142][ T2562] ? avc_has_perm_noaudit+0x286/0x360 [ 68.678154][ T2562] ? avc_has_perm+0x144/0x220 [ 68.678165][ T2562] ? __cfi_avc_has_perm+0x10/0x10 [ 68.678190][ T2562] ? selinux_socket_getsockopt+0x284/0x380 [ 68.678214][ T2562] ? __cfi_selinux_socket_getsockopt+0x10/0x10 [ 68.678235][ T2562] ? bpf_lsm_file_permission+0xd/0x20 [ 68.678249][ T2562] ? vfs_write+0x8ba/0xe80 [ 68.678263][ T2562] tcp_getsockopt+0x77/0x130 [ 68.678275][ T2562] sock_common_getsockopt+0xaf/0xd0 [ 68.678290][ T2562] ? __cfi_sock_common_getsockopt+0x10/0x10 [ 68.678303][ T2562] do_sock_getsockopt+0x3a6/0x6d0 [ 68.678315][ T2562] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 68.678326][ T2562] ? __fget_files+0x2c5/0x340 [ 68.678342][ T2562] __x64_sys_getsockopt+0x1d5/0x280 [ 68.678353][ T2562] x64_sys_call+0x10db/0x2ee0 [ 68.678367][ T2562] do_syscall_64+0x58/0xf0 [ 68.678376][ T2562] ? clear_bhb_loop+0x50/0xa0 [ 68.678388][ T2562] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.678399][ T2562] RIP: 0033:0x7fdeddb8e929 [ 68.678409][ T2562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.678419][ T2562] RSP: 002b:00007fdedc1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 68.678432][ T2562] RAX: ffffffffffffffda RBX: 00007fdedddb6080 RCX: 00007fdeddb8e929 [ 68.678441][ T2562] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 68.678449][ T2562] RBP: 00007fdedc1d6090 R08: 0000200000001300 R09: 0000000000000000 [ 68.678456][ T2562] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 68.678463][ T2562] R13: 0000000000000001 R14: 00007fdedddb6080 R15: 00007ffe55509498 [ 68.678472][ T2562] [ 68.804977][ T36] audit: type=1326 audit(1751402150.086:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2563 comm="syz.4.746" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4f718e929 code=0x0 [ 68.812103][ T556] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 68.989243][ T2567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.747'. [ 68.999345][ T2567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 69.008329][ T2569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 69.151275][ T556] usb 3-1: device descriptor read/64, error -71 [ 69.391277][ T556] usb 3-1: device descriptor read/64, error -71 [ 69.419642][ T2589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.419965][ T2590] rust_binder: Error in use_page_slow: ESRCH [ 69.426471][ T2590] rust_binder: use_range failure ESRCH [ 69.441250][ T2590] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 69.451242][ T2590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 69.465200][ T2592] rust_binder: 2592: no such ref 0 [ 69.469912][ T2590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:294 [ 69.474722][ T2592] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 69.489207][ T2592] rust_binder: Read failure Err(EFAULT) in pid:640 [ 69.501353][ T556] usb usb3-port1: attempt power cycle [ 69.587747][ T36] audit: type=1400 audit(1751402150.916:422): avc: denied { shutdown } for pid=2599 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.702070][ T2611] netlink: 'syz.3.759': attribute type 11 has an invalid length. [ 69.861294][ T556] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 69.892192][ T556] usb 3-1: device descriptor read/8, error -71 [ 70.010840][ T2618] FAULT_INJECTION: forcing a failure. [ 70.010840][ T2618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.024213][ T2618] CPU: 1 UID: 0 PID: 2618 Comm: syz.3.761 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 70.024253][ T2618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.024266][ T2618] Call Trace: [ 70.024271][ T2618] [ 70.024278][ T2618] __dump_stack+0x21/0x30 [ 70.024307][ T2618] dump_stack_lvl+0x10c/0x190 [ 70.024327][ T2618] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.024349][ T2618] ? selinux_file_open+0x457/0x610 [ 70.024380][ T2618] ? __cfi_selinux_file_open+0x10/0x10 [ 70.024408][ T2618] dump_stack+0x19/0x20 [ 70.024429][ T2618] should_fail_ex+0x3d9/0x530 [ 70.024452][ T2618] should_fail+0xf/0x20 [ 70.024471][ T2618] should_fail_usercopy+0x1e/0x30 [ 70.024494][ T2618] _copy_from_user+0x22/0xb0 [ 70.024520][ T2618] copy_from_sockptr_offset+0x77/0xb0 [ 70.024545][ T2618] do_tcp_getsockopt+0xc06/0x26b0 [ 70.024568][ T2618] ? __cfi_do_tcp_getsockopt+0x10/0x10 [ 70.024590][ T2618] ? _parse_integer_limit+0x195/0x1e0 [ 70.024612][ T2618] ? _parse_integer+0x2e/0x40 [ 70.024631][ T2618] ? avc_has_perm_noaudit+0x268/0x360 [ 70.024698][ T2618] ? __asan_memcpy+0x5a/0x80 [ 70.024721][ T2618] ? avc_has_perm_noaudit+0x286/0x360 [ 70.024741][ T2618] ? avc_has_perm+0x144/0x220 [ 70.024761][ T2618] ? __cfi_avc_has_perm+0x10/0x10 [ 70.024782][ T2618] ? selinux_socket_getsockopt+0x284/0x380 [ 70.024807][ T2618] ? vfs_write+0x8ba/0xe80 [ 70.024830][ T2618] tcp_getsockopt+0x77/0x130 [ 70.024853][ T2618] sock_common_getsockopt+0xaf/0xd0 [ 70.024878][ T2618] ? __cfi_sock_common_getsockopt+0x10/0x10 [ 70.024902][ T2618] do_sock_getsockopt+0x3a6/0x6d0 [ 70.024924][ T2618] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 70.024944][ T2618] ? __fget_files+0x2c5/0x340 [ 70.024971][ T2618] __x64_sys_getsockopt+0x1d5/0x280 [ 70.024993][ T2618] x64_sys_call+0x10db/0x2ee0 [ 70.025016][ T2618] do_syscall_64+0x58/0xf0 [ 70.025034][ T2618] ? clear_bhb_loop+0x50/0xa0 [ 70.025055][ T2618] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.025076][ T2618] RIP: 0033:0x7fdeddb8e929 [ 70.025094][ T2618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.025111][ T2618] RSP: 002b:00007fdedc1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 70.025134][ T2618] RAX: ffffffffffffffda RBX: 00007fdedddb6080 RCX: 00007fdeddb8e929 [ 70.025149][ T2618] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 70.025162][ T2618] RBP: 00007fdedc1d6090 R08: 0000200000001300 R09: 0000000000000000 [ 70.025175][ T2618] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 70.025187][ T2618] R13: 0000000000000001 R14: 00007fdedddb6080 R15: 00007ffe55509498 [ 70.025204][ T2618] [ 70.025610][ T556] usb 3-1: device descriptor read/8, error -71 [ 70.410623][ T36] audit: type=1400 audit(1751402151.736:423): avc: denied { accept } for pid=2633 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.432691][ T36] audit: type=1400 audit(1751402151.756:424): avc: denied { listen } for pid=2633 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.931287][ T556] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 71.051756][ T45] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 71.090979][ T2659] overlayfs: failed to resolve './file1': -2 [ 71.126320][ T2661] fuseblk: Bad value for 'fd' [ 71.183365][ T36] audit: type=1400 audit(1751402153.504:425): avc: denied { create } for pid=2667 comm="syz.4.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.211319][ T45] usb 4-1: device descriptor read/64, error -71 [ 71.231692][ T36] audit: type=1400 audit(1751402153.564:426): avc: denied { mounton } for pid=2670 comm="syz.2.779" path="/189/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 71.305253][ T2681] netlink: 184 bytes leftover after parsing attributes in process `syz.4.783'. [ 71.314698][ T2683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.315155][ T2683] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 71.323718][ T2683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 71.331873][ T2683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:613 [ 71.357994][ T36] audit: type=1400 audit(1751402153.684:427): avc: denied { read } for pid=2686 comm="syz.2.785" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.362977][ T556] usb 3-1: device not accepting address 30, error -71 [ 71.461525][ T556] usb usb3-port1: unable to enumerate USB device [ 71.461522][ T45] usb 4-1: device descriptor read/64, error -71 [ 71.701294][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 71.809525][ T2694] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 71.831278][ T45] usb 4-1: device descriptor read/64, error -71 [ 71.909698][ T2708] overlayfs: failed to clone upperpath [ 71.980400][ T2719] /dev/loop0: Can't lookup blockdev [ 72.071317][ T45] usb 4-1: device descriptor read/64, error -71 [ 72.191407][ T45] usb usb4-port1: attempt power cycle [ 72.481493][ T31] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 72.541459][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 72.572273][ T45] usb 4-1: device descriptor read/8, error -71 [ 72.611313][ T31] usb 3-1: device descriptor read/64, error -71 [ 72.700425][ T2737] kvm: pic: non byte write [ 72.712327][ T45] usb 4-1: device descriptor read/8, error -71 [ 72.839049][ T2743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.840317][ T2743] rust_binder: Write failure EFAULT in pid:313 [ 72.851290][ T31] usb 3-1: device descriptor read/64, error -71 [ 72.951281][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 72.972400][ T45] usb 4-1: device descriptor read/8, error -71 [ 73.101327][ T31] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 73.110173][ T45] usb 4-1: device descriptor read/8, error -71 [ 73.191275][ T556] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 73.221379][ T45] usb usb4-port1: unable to enumerate USB device [ 73.231389][ T31] usb 3-1: device descriptor read/64, error -71 [ 73.342522][ T556] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.353706][ T556] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.363620][ T556] usb 2-1: config 0 interface 0 has no altsetting 0 [ 73.370255][ T556] usb 2-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 73.379306][ T556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.387981][ T556] usb 2-1: config 0 descriptor?? [ 73.471320][ T31] usb 3-1: device descriptor read/64, error -71 [ 73.529073][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 73.529090][ T36] audit: type=1400 audit(1751402155.854:429): avc: denied { map } for pid=2762 comm="syz.4.812" path="/262/file0" dev="tmpfs" ino=1477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.544194][ T2765] x_tables: duplicate underflow at hook 2 [ 73.581748][ T31] usb usb3-port1: attempt power cycle [ 73.636580][ T2768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.814'. [ 73.664514][ T2774] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 73.920890][ T556] usbhid 2-1:0.0: can't add hid device: -71 [ 73.931284][ T31] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 73.933040][ T556] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 73.949252][ T2782] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.951144][ T36] audit: type=1400 audit(1751402156.274:430): avc: denied { append } for pid=2781 comm="syz.1.819" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.982903][ T31] usb 3-1: device descriptor read/8, error -71 [ 73.985137][ T556] usb 2-1: USB disconnect, device number 28 [ 73.989495][ T2784] rust_binder: Write failure EINVAL in pid:667 [ 74.071048][ T2793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=2793 comm=syz.1.822 [ 74.102559][ T2796] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 74.215882][ T31] usb 3-1: device descriptor read/8, error -71 [ 74.241445][ T36] audit: type=1326 audit(1751402156.574:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2812 comm="syz.4.829" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4f718e929 code=0x0 [ 74.349310][ T36] audit: type=1400 audit(1751402156.674:432): avc: denied { remount } for pid=2815 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 74.349728][ T2816] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.380651][ T2816] incfs: Can't find or create .index dir in ./file0 [ 74.387666][ T2816] incfs: mount failed -1 [ 74.401833][ T2818] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.402373][ T2818] netlink: 'syz.1.831': attribute type 4 has an invalid length. [ 74.419785][ T2818] netlink: 'syz.1.831': attribute type 4 has an invalid length. [ 74.431421][ T2818] rust_binder: Error in use_page_slow: ESRCH [ 74.431447][ T2818] rust_binder: use_range failure ESRCH [ 74.437495][ T2818] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 74.443174][ T2818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 74.451492][ T2818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:347 [ 74.461282][ T556] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 74.461419][ T31] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 74.502693][ T31] usb 3-1: device descriptor read/8, error -71 [ 74.573463][ T2820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.583984][ T36] audit: type=1400 audit(1751402156.914:433): avc: denied { read } for pid=2819 comm="syz.1.832" path="socket:[17346]" dev="sockfs" ino=17346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.622502][ T556] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.632367][ T31] usb 3-1: device descriptor read/8, error -71 [ 74.634035][ T556] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 74.648199][ T556] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 74.656708][ T556] usb 4-1: Manufacturer: syz [ 74.661396][ T556] usb 4-1: SerialNumber: syz [ 74.666739][ T556] usb 4-1: config 0 descriptor?? [ 74.673172][ T556] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 74.680089][ T556] usb 4-1: No valid video chain found. [ 74.741447][ T31] usb usb3-port1: unable to enumerate USB device [ 74.880468][ T2809] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 74.890180][ T2809] SELinux: failed to load policy [ 74.900169][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.029567][ T2829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=2829 comm=syz.2.833 [ 75.087676][ T2838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.836'. [ 75.096607][ T2838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 75.145586][ T36] audit: type=1400 audit(1751402157.474:434): avc: denied { create } for pid=2839 comm="syz.4.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 75.183704][ T2848] binder: Unknown parameter 'se' [ 75.305380][ T2871] /dev/rnullb0: Can't lookup blockdev [ 75.470154][ T2876] tmpfs: Unknown parameter 'eid' [ 75.491305][ T31] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 75.500579][ T2878] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.500668][ T2878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.507171][ T2878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:356 [ 75.636106][ T36] audit: type=1400 audit(1751402157.964:435): avc: denied { append } for pid=2882 comm="syz.1.854" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.669041][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 75.674296][ T36] audit: type=1400 audit(1751402157.964:436): avc: denied { map } for pid=2882 comm="syz.1.854" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.698023][ T36] audit: type=1400 audit(1751402157.964:437): avc: denied { execute } for pid=2882 comm="syz.1.854" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.722887][ T31] usb 3-1: config 1 has an invalid interface number: 4 but max is 2 [ 75.730915][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.741082][ T31] usb 3-1: config 1 has no interface number 1 [ 75.747395][ T31] usb 3-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 75.758227][ T31] usb 3-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 102 [ 75.773660][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 75.782744][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.790728][ T31] usb 3-1: Product: syz [ 75.794923][ T31] usb 3-1: Manufacturer: syz [ 75.799506][ T31] usb 3-1: SerialNumber: syz [ 75.821859][ T2890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.833632][ T2890] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3145363489 (3145363489 ns) > initial count (1442714936 ns). Using initial count to start timer. [ 76.058633][ T2895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.067338][ T2895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.193023][ T31] usb 3-1: USB disconnect, device number 35 [ 76.201430][ T685] udevd[685]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.419193][ T2904] fuse: Bad value for 'rootmode' [ 76.717917][ T36] audit: type=1400 audit(1751402159.044:438): avc: denied { search } for pid=2914 comm="syz.2.864" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 76.931312][ T2826] Bluetooth: hci0: command 0x1003 tx timeout [ 76.931320][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.945422][ T31] usb 4-1: USB disconnect, device number 19 [ 77.090469][ T2954] 9pnet_fd: Insufficient options for proto=fd [ 77.101286][ T45] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 77.147748][ T2957] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 77.156222][ T2957] rust_binder: Write failure EINVAL in pid:394 [ 77.262394][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 77.278382][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 77.289699][ T45] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 77.298867][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.306885][ T45] usb 3-1: Product: syz [ 77.311057][ T45] usb 3-1: Manufacturer: syz [ 77.315673][ T45] usb 3-1: SerialNumber: syz [ 77.320866][ T45] usb 3-1: config 0 descriptor?? [ 77.326639][ T2929] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 77.333803][ T2929] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 77.401306][ T556] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 77.513319][ T2963] rust_binder: Error while translating object. [ 77.513377][ T2963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 77.519688][ T2963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:679 [ 77.541469][ T2929] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 77.567517][ T556] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.569582][ T2929] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 77.582688][ T556] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 77.596988][ T556] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.631260][ T2980] netlink: 88 bytes leftover after parsing attributes in process `syz.3.886'. [ 77.640546][ T556] usb 2-1: config 0 interface 0 has no altsetting 0 [ 77.647767][ T556] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 77.658016][ T2980] rtc_cmos 00:00: Alarms can be up to one day in the future [ 77.665381][ T556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.677524][ T556] usb 2-1: config 0 descriptor?? [ 77.684570][ T2959] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 77.812746][ T45] Error reading MAC address [ 77.820715][ T335] usb 3-1: USB disconnect, device number 36 [ 77.858656][ T2995] tap0: tun_chr_ioctl cmd 1074025677 [ 77.867149][ T2995] tap0: linktype set to 774 [ 78.101239][ T556] usbhid 2-1:0.0: can't add hid device: -71 [ 78.107291][ T556] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 78.122391][ T556] usb 2-1: USB disconnect, device number 29 [ 78.191298][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 78.291292][ T335] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 78.361396][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 78.368318][ T45] usb 4-1: config 240 has an invalid interface number: 27 but max is 1 [ 78.376643][ T45] usb 4-1: config 240 has an invalid interface number: 47 but max is 1 [ 78.384928][ T45] usb 4-1: config 240 has an invalid interface number: 58 but max is 1 [ 78.393209][ T45] usb 4-1: config 240 has an invalid interface number: 135 but max is 1 [ 78.401680][ T45] usb 4-1: config 240 contains an unexpected descriptor of type 0x2, skipping [ 78.410526][ T45] usb 4-1: config 240 has 4 interfaces, different from the descriptor's value: 2 [ 78.419680][ T45] usb 4-1: config 240 has no interface number 0 [ 78.425972][ T45] usb 4-1: config 240 has no interface number 1 [ 78.432231][ T45] usb 4-1: config 240 has no interface number 2 [ 78.438827][ T45] usb 4-1: config 240 has no interface number 3 [ 78.445338][ T45] usb 4-1: config 240 interface 27 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 78.456333][ T45] usb 4-1: config 240 interface 27 altsetting 3 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 78.462440][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 78.467406][ T45] usb 4-1: config 240 interface 27 altsetting 3 endpoint 0x5 has invalid maxpacket 1064, setting to 1024 [ 78.479011][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.489997][ T45] usb 4-1: config 240 interface 47 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 78.500119][ T335] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 78.514987][ T45] usb 4-1: too many endpoints for config 240 interface 58 altsetting 47: 153, using maximum allowed: 30 [ 78.522400][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.533428][ T45] usb 4-1: config 240 interface 58 altsetting 47 has 1 endpoint descriptor, different from the interface descriptor's value: 153 [ 78.545279][ T335] usb 3-1: config 0 descriptor?? [ 78.554783][ T45] usb 4-1: config 240 interface 135 altsetting 134 has a duplicate endpoint with address 0x6, skipping [ 78.570663][ T45] usb 4-1: config 240 interface 135 altsetting 134 has a duplicate endpoint with address 0x5, skipping [ 78.581777][ T45] usb 4-1: config 240 interface 135 altsetting 134 bulk endpoint 0x9 has invalid maxpacket 1023 [ 78.592257][ T45] usb 4-1: config 240 interface 135 altsetting 134 has an invalid descriptor for endpoint zero, skipping [ 78.603522][ T45] usb 4-1: config 240 interface 135 altsetting 134 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 78.617019][ T45] usb 4-1: config 240 interface 27 has no altsetting 0 [ 78.623911][ T45] usb 4-1: config 240 interface 47 has no altsetting 0 [ 78.631094][ T45] usb 4-1: config 240 interface 58 has no altsetting 0 [ 78.636250][ T3012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 78.638089][ T45] usb 4-1: config 240 interface 135 has no altsetting 0 [ 78.647368][ T3012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.654559][ T3014] rust_binder: Error in use_page_slow: ESRCH [ 78.655536][ T45] usb 4-1: New USB device found, idVendor=0403, idProduct=e88e, bcdDevice=84.c3 [ 78.661360][ T3014] rust_binder: use_range failure ESRCH [ 78.667320][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.676317][ T3014] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 78.681835][ T45] usb 4-1: Manufacturer: 、 [ 78.689792][ T3014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 78.697774][ T45] usb 4-1: SerialNumber: 碍눛词ੋ蕟㉠㿕퇘麑ꁻ㾤㛔ꭳ㼳ꇅ鞁籢ྡྷヅ줏袌鳓㬟騩焬☌䣡익撞㢺芴괡쉥ꥳ쫁䠥榸㫎狦ꫨ੠쪀ⱗұ㬱꤇宲힚ⅻ쎩ꯜ趞㫆ﺎ荴瀧읂ﲎⵕƈꄂ⚱빹㻏⪀텲柨─Y껥ꚱ럏轩垏䩺䆕宎뇌編厘ꩀƒ [ 78.703539][ T3014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:400 [ 78.722939][ T2997] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 78.850929][ T3022] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3022 comm=syz.4.901 [ 78.863709][ T3022] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3022 comm=syz.4.901 [ 78.892454][ T3027] tmpfs: Unknown parameter 'pcr' [ 78.925922][ T3030] tap0: tun_chr_ioctl cmd 1074025677 [ 78.931623][ T3030] tap0: linktype set to 776 [ 78.965740][ T335] elo 0003:04E7:0030.0008: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input0 [ 78.967840][ T45] ftdi_sio 4-1:240.27: FTDI USB Serial Device converter detected [ 78.989322][ T3039] netlink: 'syz.4.906': attribute type 13 has an invalid length. [ 79.000183][ T45] ftdi_sio ttyUSB0: unknown device type: 0x84c3 [ 79.013558][ T45] ftdi_sio 4-1:240.47: FTDI USB Serial Device converter detected [ 79.029596][ T45] ftdi_sio ttyUSB1: unknown device type: 0x84c3 [ 79.038000][ T45] ftdi_sio 4-1:240.58: FTDI USB Serial Device converter detected [ 79.047038][ T45] ftdi_sio ttyUSB2: unknown device type: 0x84c3 [ 79.055382][ T45] ftdi_sio 4-1:240.135: FTDI USB Serial Device converter detected [ 79.069134][ T45] ftdi_sio ttyUSB3: unknown device type: 0x84c3 [ 79.084239][ T45] usb 4-1: USB disconnect, device number 20 [ 79.093584][ T45] ftdi_sio 4-1:240.27: device disconnected [ 79.115674][ T45] ftdi_sio 4-1:240.47: device disconnected [ 79.122884][ T45] ftdi_sio 4-1:240.58: device disconnected [ 79.130397][ T45] ftdi_sio 4-1:240.135: device disconnected [ 79.160892][ T3051] overlay: Unknown parameter 'subj_role' [ 79.509859][ T3060] 9pnet_fd: Insufficient options for proto=fd [ 79.538873][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 79.538904][ T36] audit: type=1400 audit(1751402161.864:442): avc: denied { accept } for pid=3062 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 79.624812][ T3077] tipc: Started in network mode [ 79.629770][ T3077] tipc: Node identity ac14140f, cluster identity 4711 [ 79.637089][ T3077] tipc: New replicast peer: 0.0.255.255 [ 79.643238][ T3077] tipc: Enabled bearer , priority 10 [ 79.695184][ T3085] tap0: tun_chr_ioctl cmd 1074025677 [ 79.700795][ T3085] tap0: linktype set to 776 [ 79.707864][ T36] audit: type=1400 audit(1751402162.034:443): avc: denied { create } for pid=3091 comm="syz.4.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.721499][ T3094] overlayfs: failed to clone upperpath [ 79.961332][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 80.111306][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 80.117722][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.128689][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.138469][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 80.147626][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.156413][ T45] usb 4-1: config 0 descriptor?? [ 80.163040][ T45] hub 4-1:0.0: USB hub found [ 80.314360][ T3115] batadv_slave_1: entered promiscuous mode [ 80.320699][ T3113] batadv_slave_1: left promiscuous mode [ 80.363115][ T45] hub 4-1:0.0: 2 ports detected [ 80.611293][ T335] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 80.761426][ T10] tipc: Node number set to 2886997007 [ 80.766332][ T45] usb 4-1: USB disconnect, device number 21 [ 80.766847][ T335] usb 2-1: Using ep0 maxpacket: 8 [ 80.780049][ T335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.790408][ T335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.799324][ T335] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 80.813588][ T335] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.822720][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.830775][ T335] usb 2-1: Product: syz [ 80.835023][ T335] usb 2-1: Manufacturer: 搩嫶墧鋅눖ദ䤛鏦䆦꩷餧꣯펱署ꖀ妱阒ᦴ枞圧씋롼ﾚゼㄌ콠䷈Ε棫ퟵህ䤣ា珷됄쵌㇅៯︭颃䄏儇챪畴뤷P鎒띖胜愿뉆凵Տ笐⦅졾浪튌賴绞ﾖ牜吴诅㨒홱ꮉ㸊袢챣삌샀੃宋枤뷎ꭢ첤㠻め릙凂羟龜ꀶ娮ٮ䉼迣霞⏏團㪡酣⽅ﬡ㚬꒙ఐ [ 80.869802][ T335] usb 2-1: SerialNumber: syz [ 80.967109][ T45] usb 3-1: USB disconnect, device number 37 [ 80.982244][ T3139] fuseblk: Unknown parameter 'user_DC00000000000000000000' [ 81.080254][ T335] usb 2-1: 0:2 : does not exist [ 81.087354][ T335] usb 2-1: USB disconnect, device number 30 [ 81.301301][ T45] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 81.452583][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.463838][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.474016][ T45] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 81.483671][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.492610][ T45] usb 3-1: config 0 descriptor?? [ 81.701325][ T335] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 81.712791][ T10] ================================================================== [ 81.720862][ T10] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 81.727639][ T10] Write of size 8 at addr 0000000000000098 by task kworker/0:1/10 [ 81.735428][ T10] [ 81.737753][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 81.737783][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.737791][ T10] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 81.737836][ T10] Call Trace: [ 81.737841][ T10] [ 81.737848][ T10] __dump_stack+0x21/0x30 [ 81.737873][ T10] dump_stack_lvl+0x10c/0x190 [ 81.737894][ T10] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.737917][ T10] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x3aa/0x810 [ 81.737938][ T10] print_report+0x3d/0x70 [ 81.737948][ T10] kasan_report+0x163/0x1a0 [ 81.737967][ T10] ? down_write+0x83/0x2a0 [ 81.737981][ T10] ? down_write+0x83/0x2a0 [ 81.737996][ T10] kasan_check_range+0x299/0x2a0 [ 81.738024][ T10] __kasan_check_write+0x18/0x20 [ 81.738046][ T10] down_write+0x83/0x2a0 [ 81.738068][ T10] ? __cfi_down_write+0x10/0x10 [ 81.738081][ T10] ? _raw_spin_lock+0x8c/0x120 [ 81.738096][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 81.738110][ T10] ? mutex_unlock+0x8b/0x240 [ 81.738121][ T10] ? __cfi_mutex_unlock+0x10/0x10 [ 81.738133][ T10] rust_binderfs_remove_file+0x6c/0x110 [ 81.738156][ T10] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 81.738190][ T10] ? update_curr_dl_se+0x10c/0xb20 [ 81.738214][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 81.738225][ T10] ? update_curr+0x60d/0xc60 [ 81.738239][ T10] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 81.738257][ T10] ? update_load_avg+0x506/0x19a0 [ 81.738268][ T10] ? detach_entity_load_avg+0x7b0/0x7b0 [ 81.738287][ T10] ? dequeue_entity+0xa9c/0x1750 [ 81.738309][ T10] ? tg_unthrottle_up+0x980/0x980 [ 81.738328][ T10] ? kfree+0x156/0x400 [ 81.738349][ T10] ? vfree+0x471/0x580 [ 81.738363][ T10] ? delayed_vfree_work+0x59/0x80 [ 81.738374][ T10] ? process_scheduled_works+0x7d2/0x1020 [ 81.738389][ T10] ? worker_thread+0xc58/0x1250 [ 81.738401][ T10] ? ret_from_fork+0x64/0xa0 [ 81.738414][ T10] ? calibrate_delay_converge+0x2e0/0x2e0 [ 81.738436][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 81.738460][ T10] ? sched_clock_noinstr+0xd/0x30 [ 81.738481][ T10] ? sched_clock+0x44/0x60 [ 81.738500][ T10] ? sched_clock_cpu+0x75/0x400 [ 81.738512][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 81.738523][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 81.738536][ T10] ? __cfi_sched_clock_cpu+0x10/0x10 [ 81.738548][ T10] ? __kasan_check_write+0x18/0x20 [ 81.738559][ T10] ? __switch_to+0xc7b/0x1310 [ 81.738578][ T10] ? psi_group_change+0xb44/0x1130 [ 81.738600][ T10] ? __cfi___switch_to+0x10/0x10 [ 81.738623][ T10] ? _raw_spin_unlock+0x45/0x60 [ 81.738641][ T10] ? __switch_to_asm+0x3d/0x70 [ 81.738655][ T10] ? __schedule+0x1463/0x1f10 [ 81.738665][ T10] ? kick_pool+0xad/0x550 [ 81.738675][ T10] process_scheduled_works+0x7d2/0x1020 [ 81.738690][ T10] worker_thread+0xc58/0x1250 [ 81.738705][ T10] kthread+0x2ca/0x370 [ 81.738735][ T10] ? __cfi_worker_thread+0x10/0x10 [ 81.738760][ T10] ? __cfi_kthread+0x10/0x10 [ 81.738786][ T10] ret_from_fork+0x64/0xa0 [ 81.738798][ T10] ? __cfi_kthread+0x10/0x10 [ 81.738812][ T10] ret_from_fork_asm+0x1a/0x30 [ 81.738826][ T10] [ 81.738830][ T10] ================================================================== [ 81.908268][ T45] belkin 0003:1020:0006.0009: unknown main item tag 0x3 [ 81.913073][ T10] Disabling lock debugging due to kernel taint [ 81.928468][ T45] belkin 0003:1020:0006.0009: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 81.928733][ T10] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 81.943533][ T36] audit: type=1400 audit(1751402164.254:444): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 81.946904][ T10] #PF: supervisor write access in kernel mode [ 81.946916][ T10] #PF: error_code(0x0002) - not-present page [ 81.946927][ T10] PGD 0 [ 81.966159][ T36] audit: type=1400 audit(1751402164.254:445): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.967820][ T10] P4D 0 [ 81.976622][ T36] audit: type=1400 audit(1751402164.254:446): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.978041][ T10] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 81.982813][ T36] audit: type=1400 audit(1751402164.254:447): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.987282][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G B 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 81.987321][ T10] Tainted: [B]=BAD_PAGE [ 81.987327][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.987340][ T10] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 81.993918][ T36] audit: type=1400 audit(1751402164.254:448): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.998584][ T10] [ 81.998594][ T10] RIP: 0010:down_write+0x9a/0x2a0 [ 82.004317][ T36] audit: type=1400 audit(1751402164.254:449): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.009067][ T10] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 82.009087][ T10] RSP: 0018:ffffc900000a7500 EFLAGS: 00010256 [ 82.013958][ T36] audit: type=1400 audit(1751402164.254:450): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.018912][ T10] [ 82.018919][ T10] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 82.018933][ T10] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900000a7520 [ 82.018946][ T10] RBP: ffffc900000a7598 R08: ffffc900000a7527 R09: 1ffff92000014ea4 [ 82.402627][ T10] R10: dffffc0000000000 R11: fffff52000014ea5 R12: dffffc0000000000 [ 82.410597][ T10] R13: 1ffff92000014ea0 R14: ffffc900000a7520 R15: 0000000000000000 [ 82.418568][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 82.427490][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.434142][ T10] CR2: 0000000000000098 CR3: 000000010bfe0000 CR4: 00000000003526b0 [ 82.442211][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000a330 [ 82.450176][ T10] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 82.458131][ T10] Call Trace: [ 82.461400][ T10] [ 82.461602][ T3164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.464330][ T10] ? __cfi_down_write+0x10/0x10 [ 82.472961][ T3164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.477594][ T10] ? _raw_spin_lock+0x8c/0x120 [ 82.490045][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 82.490489][ T36] audit: type=1326 audit(1751402164.784:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3140 comm="syz.2.944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1020f8e929 code=0x0 [ 82.495264][ T10] ? mutex_unlock+0x8b/0x240 [ 82.495294][ T10] ? __cfi_mutex_unlock+0x10/0x10 [ 82.495316][ T10] rust_binderfs_remove_file+0x6c/0x110 [ 82.533207][ T10] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 82.545963][ T10] ? update_curr_dl_se+0x10c/0xb20 [ 82.551156][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 82.557232][ T10] ? update_curr+0x60d/0xc60 [ 82.561837][ T10] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 82.575021][ T10] ? update_load_avg+0x506/0x19a0 [ 82.580066][ T10] ? detach_entity_load_avg+0x7b0/0x7b0 [ 82.585601][ T10] ? dequeue_entity+0xa9c/0x1750 [ 82.590530][ T10] ? tg_unthrottle_up+0x980/0x980 [ 82.595556][ T10] ? kfree+0x156/0x400 [ 82.599648][ T10] ? vfree+0x471/0x580 [ 82.603699][ T10] ? delayed_vfree_work+0x59/0x80 [ 82.608713][ T10] ? process_scheduled_works+0x7d2/0x1020 [ 82.614424][ T10] ? worker_thread+0xc58/0x1250 [ 82.619276][ T10] ? ret_from_fork+0x64/0xa0 [ 82.623848][ T10] ? calibrate_delay_converge+0x2e0/0x2e0 [ 82.629553][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 82.634736][ T10] ? sched_clock_noinstr+0xd/0x30 [ 82.639741][ T10] ? sched_clock+0x44/0x60 [ 82.644137][ T10] ? sched_clock_cpu+0x75/0x400 [ 82.648991][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 82.655050][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 82.660338][ T10] ? __cfi_sched_clock_cpu+0x10/0x10 [ 82.665627][ T10] ? __kasan_check_write+0x18/0x20 [ 82.670904][ T10] ? __switch_to+0xc7b/0x1310 [ 82.675664][ T10] ? psi_group_change+0xb44/0x1130 [ 82.680878][ T10] ? __cfi___switch_to+0x10/0x10 [ 82.685901][ T10] ? _raw_spin_unlock+0x45/0x60 [ 82.690838][ T10] ? __switch_to_asm+0x3d/0x70 [ 82.695601][ T10] ? __schedule+0x1463/0x1f10 [ 82.700295][ T10] ? kick_pool+0xad/0x550 [ 82.704628][ T10] process_scheduled_works+0x7d2/0x1020 [ 82.710173][ T10] worker_thread+0xc58/0x1250 [ 82.714842][ T10] kthread+0x2ca/0x370 [ 82.718899][ T10] ? __cfi_worker_thread+0x10/0x10 [ 82.723998][ T10] ? __cfi_kthread+0x10/0x10 [ 82.728583][ T10] ret_from_fork+0x64/0xa0 [ 82.732993][ T10] ? __cfi_kthread+0x10/0x10 [ 82.737574][ T10] ret_from_fork_asm+0x1a/0x30 [ 82.742324][ T10] [ 82.745321][ T10] Modules linked in: [ 82.749207][ T10] CR2: 0000000000000098 [ 82.753355][ T10] ---[ end trace 0000000000000000 ]--- [ 82.758794][ T10] RIP: 0010:down_write+0x9a/0x2a0 [ 82.763894][ T10] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 82.783570][ T10] RSP: 0018:ffffc900000a7500 EFLAGS: 00010256 [ 82.789624][ T10] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 82.797581][ T10] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900000a7520 [ 82.805805][ T10] RBP: ffffc900000a7598 R08: ffffc900000a7527 R09: 1ffff92000014ea4 [ 82.813794][ T10] R10: dffffc0000000000 R11: fffff52000014ea5 R12: dffffc0000000000 [ 82.821756][ T10] R13: 1ffff92000014ea0 R14: ffffc900000a7520 R15: 0000000000000000 [ 82.829732][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 82.838699][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.845282][ T10] CR2: 0000000000000098 CR3: 000000010bfe0000 CR4: 00000000003526b0 [ 82.853431][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000a330 [ 82.861457][ T10] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 82.869475][ T10] Kernel panic - not syncing: Fatal exception [ 82.875889][ T10] Kernel Offset: disabled [ 82.880203][ T10] Rebooting in 86400 seconds..