last executing test programs: 10m37.224517892s ago: executing program 32 (id=16): r0 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x0) keyctl$search(0xa, r0, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='@\x00', r0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10000, 0x81) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="14bc815ef171fcc8910ce27e55995a8c6063495e10b3ce26e8e9d00b33c3c5932006677dd3af801888d87b9e566cc280", 0x30, r1) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x2000008, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@msize}, {@mmap}, {@afid={'afid', 0x3d, 0x6}}, {@privport}], [{@obj_type}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20200020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x3f7, 0x900, 0x70bd27, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x8000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x6, &(0x7f0000000540)=[{0x1, 0x7, 0x2, 0x4}, {0xc, 0xfd, 0x9, 0x80}, {0x4, 0xef, 0x7, 0x2}, {0x9, 0x3, 0x1, 0x3}, {0x2, 0x0, 0x2}, {0x2551, 0x3, 0xb2, 0x6}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockname$unix(r4, &(0x7f0000000600)=@abs, &(0x7f0000000680)=0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000006c0)=0x0) ptrace(0xd85fc00830cf305d, r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x103002, 0x0) write$P9_RCLUNK(r6, &(0x7f0000000740)={0x7, 0x79, 0x2}, 0x7) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r7 = socket$netlink(0x10, 0x3, 0xe) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x440040, 0xb71ce29beb9dea33) keyctl$session_to_parent(0x12) ioctl$TIOCNOTTY(r6, 0x5422) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r7) quotactl_fd$Q_GETINFO(r7, 0xffffffff80000502, 0xffffffffffffffff, &(0x7f0000000800)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000880), &(0x7f00000008c0)=0x4) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000900)) keyctl$instantiate(0xc, r1, &(0x7f0000000980)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'dns_resolver\x00'}, 0x23, r1) 10m16.902094921s ago: executing program 33 (id=139): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000cc0)={0x0, [{0x1, 0x208, 0x1, &(0x7f0000000000)="42624be620d5bce86ff590ecac1758e7b1a14df0d874cb1be898c8baab5d9c3ce0368f5143c3ab1e0d276813545c9f550727dcbcb607b6c3f886538d4b4a083914"}, {0x2, 0x230, 0x2, &(0x7f0000000080)="67c876e90f3942d611de60d4f1e4701a1f37244905d28c5730b9838e08b2277ab904ecc44f17912930e332cc783db92f2e29e6a8d35077d02199685fd58579322c550f817f1e"}, {0x1, 0x328, 0x9, &(0x7f00000001c0)="8c0c95ca04fd1ed5fdd3fb748a549bcd2d0f9d552fd549aa63f7aedfaf3f5d6d51773e02da36f1c4ab6c09fa04c8c0aa08d3b16587ea529dea1c591abfa467db3a26b981306371b73df823a1e0df593f159eaee507046527dbb61534379151b2767f1a2a64"}, {0x1, 0x670, 0x0, &(0x7f0000000380)="f45da7b74d644c27e95bb2670f7a4cf95bb52334c5324fed6ffc3770581b31512080956e4dafa97af73ccd8a0edc1985085b814c6c19e7186f1e8c73df693a8f6548f6df26899aeca92bfd5f7d8bba8156b401f591f43a5a82f7d85ba68a5e6b836ce78e9ae0d9157d636523604eb0b49d81f05292ce2cf2f54fa03fb774951bf57cd9650cdbb2bdcbd9e4ad8650cbcbeb3cece0276d27dea42f232b60f7fec04d5b456aef85b6e0d386e93078d6574523009e616e76e63fed082e66aed0cc365e267b40e1a38d1f7bd54de0b231"}, {0x3, 0x320, 0x162, &(0x7f0000000480)="9b3349efc7b560ea3ae1fe3e7525087ac833b91912710a300474c80b5642323eb7cd28f49ac3acd27b78c95b42772b3e16de43afb82a8c03ebdc311eec0d8874e965d5949f1dd1fcf866910115eb1487e0b82424298cb67af143197cc7a17e30ac0ffb05"}, {0x1, 0x288, 0x1, &(0x7f0000000500)="f40e380e3b3b3a9903722a98745349115f5e92ced570ead43a9c07c59885d396c1432eefe801f23a196dd9234637082bcd3a5acbe3e13b6b5ae9e120b466fef62d20ccd5529bcc051bbabe64b1a0bdd0ad"}, {0x0, 0x2e0, 0x6, &(0x7f0000000580)="197a8cc90083c024f4717b30eb1713605c0823be61bacd8f975c8e123d80ff8848392b0be4a0ad6c36b20f9f9aa0e1516c29f1ec0e5145cdd943899ec596e7aba0b0e79b6010bd9e8a95e370879011d38820890028a8e3f8777fc382"}, {0x3, 0x408, 0x1301, &(0x7f0000000600)="988b45b5edde3270aadd6d95663dc7ca9d15f0b576dc0336951ba80014b438a6f659db5db582ead1ca6ceb0a2095cd8dc609427384352597ed0113ec7792cf086d452591e1bb456d214593b73916b80568040ff3d769e03dc0c42749f3a94e9289773a5441e452ffc8de39531cb01aaff5d654a967c2fbc6c964994679e50855be"}, {0x3, 0x580, 0x7, &(0x7f00000006c0)="8e1da1fd0aefde950e78611011a6a4aeb34d9cbc8a52deb27d38731d632fa7e54aad891ef47ee9834827321d38152dd8ee78b2f5b8e7b8c2f0f6deaa61fe43e0cbff43556a686959b708e72ace448a9e89165adfb66cccb1d5b51ecb3379141a8793757ed4bfa0cd64933074b76c32f78e857be5a9c430966aeee8805708e7b4e27a0d6b4ec86d51a81be2bb6fb790fe562e0227800d07aa5d27fe4347f2ef741e4e75216155664993c82d824cd3e36c"}, {0x2, 0x468, 0xfffffff8, &(0x7f0000000780)="2938808de3d181d941efea71d9fba2847de9b18b48a83e2a0e002b4ccf6ca4040e62e5a3fd95ca3c8f31bacc2f19b51c580dd1aaa3e9a359db289d3f5894baf4bc0d89fefc29f702e89ca84819d171e90d187f9dc6be389c5f5828846225d5051783dbbac083053e078ce4bdf5e6dadfeed744679c5f753d4d0f59362afec7a1eff4b5d09b53816c1764f04e8c"}, {0x2, 0x7b8, 0x7fff, &(0x7f0000000980)="3f5eb4c7f4ca278e735a41aeb5005a65a37b833c5c5fbf6e4889c67d158f9968f269f7728105a24ebe4ffd627ca303446fe038e14fa682eb037b0ef85c241931e63aa0460f03baede1d9474847760de4956c140af1d08f02c4f47d7fb4afa345819f44b3f8c7a2e123621b4047ace76a183baeae429f1583c379ed29d956a32218d0557ee2326b9c5c12152a342f96f8d99575e67793970b3aea96de2806c489d59c5fdaad3ac91717c42e3610143e5645c199cae89376693cbcee1f4cdb45f7dba249ac3e4ffcd29d8e9d72ef7b08423457fc29af7e45d6818ae89e848072ec12b4ad19db289059cf5a32d84207945730db8ce542edfe"}, {0x2, 0x288, 0x9, &(0x7f00000008c0)="13bea577f7a269e1d2396f927b6afbef5117a6270a7abd5cbff197acd335f7b6d6700ab71807064aa77147ce0d694f3c2e5deeb7b451c3172858924500c134bb8ed7798daf3ddb79bb2e7a168cfa9986d6"}, {0x0, 0x1a8, 0x400, &(0x7f0000000100)="81bec163156a4f740a3623031b9ffa1792ddb06a20228b6dd614281d9e96118deea3f40393c002a6a6de58b77b6adc469f2ee115a4"}, {0x3, 0x4b0, 0x6, &(0x7f0000000a80)="2f0e364d1ff37d27c695efda457bdbb8ab731ac7d8aed95c0b8b9422426c4bc677d03e4da106c8d00627acd2334273b30e00e047edebebd048f2cbecfacea5334a9577718f68642367ab8772ffc7841787de4b00c2ad7429c0e52ccd7f297c35a9f5c5902f566d5b58d334b8b4069c48c7ccb5f61c95737424eb6ba60b5e38841f6b3af5feed137982fdf39c26990564afc06f2097f1"}, {0x3, 0x648, 0x7f, &(0x7f0000000b40)="57f84545c3dcf9d874fc019df91524a802c463b1d3ba4dd787da26478b7f32f9e1833255239d9a663339414e84d0b2d3fea6aef0759a4aefed55659b10d6f05091ff711769c49a2dbe668169876b86f6d700413e11e36f2bbf20c71e7b179fb1916117ece5d327e87086b25966ef48fc0af8008b37589106edda0913a16e24bfd39e23a05c2d0329ef7d94c8223e65a27e40f0c3eaf870a9c4223e378cae84b5b9dc693429b6bcc57f25db6e4c32b21061b6a75a0f8e64f60602e78e351aa99dd93e2a034e0a111aba"}, {0x2, 0x308, 0x4, &(0x7f0000000c40)="0c27f82158b612e910553cc0325348e0d1e83846a6815836fce8a1c18a882b21f7bfbb9a5c19c9bd88944276383fc51543b34d6095b8a810ec6dce56b63534ed9849cc4b1b5ed8346e69ebc253212e4c6d1698e9813510e1210dd8ef5d7d5c91d4"}]}) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$rtc(0xffffffffffffff9c, 0x0, 0x4680, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x17) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x6475, @none, 0x10, 0x2}, 0xe) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/187, 0xbb, 0x4, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 7m51.277326489s ago: executing program 0 (id=2494): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b1e09058103ff03c9ff"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x78) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 7m50.037999791s ago: executing program 0 (id=2503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000b40)=0x100c, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r4, &(0x7f0000000340)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x26, 0xd8, 0x68, 0x0, 0x4d, 0x2f, 0x0, @multicast1, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x19, 0x0, [], "1c794c5fcd565649050022835ac3ac97cb9fb274d4d9998212"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "7fb5875c8cb1e5103810f3514c5859085f8bcd044121d872d527be9db6ccba47166b45027b4ebb9222f071ff96f3443ec4461c325c516f1698e1f011fa3bfab0dedf7bd62f68af"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0xfff9]}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x4}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0xe, 0x3, 0x1, 0x3, 0x7, 0x3}, 0x2, {0x8, 0x8, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "a33ce789860dc984c201b1e28a9fe3cd0d2bcc93a01e37ac14a0f11b"}}}}, 0xe6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000b40)=0x100c, 0x4) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) write$tun(r4, &(0x7f0000000340)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x26, 0xd8, 0x68, 0x0, 0x4d, 0x2f, 0x0, @multicast1, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x19, 0x0, [], "1c794c5fcd565649050022835ac3ac97cb9fb274d4d9998212"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "7fb5875c8cb1e5103810f3514c5859085f8bcd044121d872d527be9db6ccba47166b45027b4ebb9222f071ff96f3443ec4461c325c516f1698e1f011fa3bfab0dedf7bd62f68af"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0xfff9]}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x4}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0xe, 0x3, 0x1, 0x3, 0x7, 0x3}, 0x2, {0x8, 0x8, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "a33ce789860dc984c201b1e28a9fe3cd0d2bcc93a01e37ac14a0f11b"}}}}, 0xe6) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}}, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) (async) 7m49.924418242s ago: executing program 0 (id=2506): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x40) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) syz_clone(0x40000200, 0x0, 0xfffffffffffffe13, 0x0, 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000300)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) clock_getres(0xfffffffffffffffb, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@nullb, r5, &(0x7f0000000280)='./file0\x00') r6 = open(&(0x7f0000000000)='./file1\x00', 0x1f9cc2, 0x223) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='1-6:5/'], 0x31) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 7m49.02319237s ago: executing program 0 (id=2515): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x65a800, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) umount2(&(0x7f0000001180)='./file0\x00', 0x0) setuid(0xee00) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000400000000000000000d001d000500070012000000050019"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a0000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = getpgrp(r3) kcmp(r5, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000005c0)={0x1, 0x0, @pic={0x80, 0xc, 0x7, 0x8, 0x26, 0x5f, 0x1, 0x1, 0x5, 0x7, 0x7f, 0x3, 0x9d, 0x4, 0x8, 0xbc}}) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f00000000c0)={0x9, 0x6}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='/dev/ashmem\x00') ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 7m48.810011651s ago: executing program 0 (id=2517): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x200840d, &(0x7f0000001780)=ANY=[]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001740)={0x7e9e, {0x28e6, 0x8001, 0x0, 0x6, 0x3, 0x5}}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x86dd, r7, 0x1, 0x20, 0x6, @broadcast}, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRES32=r4], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="8c0200001a0010002cbd7000fedbdf25fe880000000000000000000000000001640101010000000000000000000000004e2200004e2100030200200021000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="fe8000000000000000000000000000aa000004d3ff0000000000000000000000000000000000000107000000000000000100000000000000050000000000000000000000000000000101000000000000090000000000000005000000000000000600000000000000010000000000000005000000000000000100000001000000090000000000000009000000050000007a08000027bd70000000000002005905bb0000000000000008001f00020000000c001c00", @ANYRES32=r3, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x8004}, 0x40) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x7fffffff, 0x7ff, 0xf83, 0x10203}, 0x1c) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000440)="924bdb674612a774e330948fa70f090400000000000000969e6666e5b2788e1fb4afc278f40ac5c50f369c0976cb242312f61782a06bc1398700079fa085d54c404181116358bab63ac4353b3c194cb9b87f8aef9422c85d182dd4720587fd1ff252adcc0a94170a530f2b5474fdd71cb281dcf4d5cacbb669d26381845e0bd8b2160c28596d1021156a23", 0x8b, 0xa8fe26e0d1c6da55, &(0x7f00000002c0)={0x11, 0x11, r12, 0x1, 0xe2}, 0x14) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r13, 0x10e, 0x5, 0x0, 0x0) 7m48.646228207s ago: executing program 0 (id=2521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="2f5067d8", 0x4}], 0x1, 0x8) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7m48.6151622s ago: executing program 34 (id=2521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="2f5067d8", 0x4}], 0x1, 0x8) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m14.244569029s ago: executing program 1 (id=3480): stat(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="0e467322486b39401fd0a7124e07df074eb9b8595051805c9a14a0648cf8055d5b27ba56d6233ac7f68816fcc30f0ffcac320d1854ff36139c7a0ee5de2eeb6abfd3ee768dc032d68b4bf547a3fb272c2d83a4556a099f041e17a7dd129642b1d21c0568fa1da52a5a28a89de92ce576f566946b2c5142f60649075e44fc653b46840e6accbff932a6d21dc29c4d82", 0x8f}], 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc8000, &(0x7f0000000200)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0x4}}], [{@audit}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs/binder1\x00'}}, {@fsname={'fsname', 0x3d, '['}}, {@seclabel}, {@hash}, {@appraise_type}]}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x2d, 0x0, &(0x7f0000002680), 0x0, 0x0, 0x0}) 6m14.225374711s ago: executing program 1 (id=3482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x400006) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000300)=[@dead_binder_done], 0x0, 0x0, 0x0}) 6m14.169263107s ago: executing program 1 (id=3484): syz_usb_connect$uac1(0x1, 0xfb, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00'}) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x80, 0x9, 0x6b}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x6, 0x54}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x4, 0x5, 0xcc, 0x10, 0x8}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x3, [{0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="4403fc6fbfbcfd1124750d1b00000000f117ee4eebfc18206bd4ed68458f01d881234272574d0909b155bb804d935d4ec73caaf228d8761feb61e5c83c5bf0b6e76de934de7193f4f5d0da9771ac081df4706cc5f968a56bd6707f906362a7fcf93c28a7baed78c8ad0e4eee9453419ac082b95679f3f0eb75c55016a2ed664f6dad73530be8ccc40914c860adfd17542cc63551fb236bd874efa51ebaadc365670295e970b65cf88f194287fe42f61910c14daa081642ef0527ae95c3c877d43068cc36221869dd1df9dfdb2883b063a716932957da7e704af0d0b96299be"]}, {0xca, &(0x7f0000000380)=@string={0xca, 0x3, "ee358f2a3b921cee34ef03485d0d87cc4a0788edffa8b705c4ee3e7ca9292352440872e51cd4d85b77f8d24c42a07487bf6027591abeb61798ce4fb7bd3edadcca069ffaaa648b0d6d56631105b9a040c4cbfbffbf19f35f0868bd8b5fedb8e3ecfaf6677a180a3b202fb52b4de3b7ba01b24b296d6affc35c66ab1de91ba87fa1e69220ff9343b61eaa99bd307c5f80323f8e1dd2db21f4480c2088f26c56e56fac161167b03863878bfa316eca9d0f41b16bb862710492ebb577badbd58deb875f0e3dd523a96f"}}, {0x89, &(0x7f0000000480)=@string={0x89, 0x3, "bcca8df12edeb37e0fd1fe329361658f97ad81a7f582be82b4db8956b69f5758e8496953dffa2693b6afa0c7f17aaf5c830707b9f7cf3e28d7b19c4f531bbf2a74bbd18fe6a1f8d5b59e1d441ec2bc85e3a5e72a82cf72aa47480c72ec0f9cd362ffdb7bcbd05430f0716061cfe04e187afab632ef500afd97a9ac765faedf3538aa0384b0b642"}}]}) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x80, 0x9, 0x6b}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x6, 0x54}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x4, 0x5, 0xcc, 0x10, 0x8}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x3, [{0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="4403fc6fbfbcfd1124750d1b00000000f117ee4eebfc18206bd4ed68458f01d881234272574d0909b155bb804d935d4ec73caaf228d8761feb61e5c83c5bf0b6e76de934de7193f4f5d0da9771ac081df4706cc5f968a56bd6707f906362a7fcf93c28a7baed78c8ad0e4eee9453419ac082b95679f3f0eb75c55016a2ed664f6dad73530be8ccc40914c860adfd17542cc63551fb236bd874efa51ebaadc365670295e970b65cf88f194287fe42f61910c14daa081642ef0527ae95c3c877d43068cc36221869dd1df9dfdb2883b063a716932957da7e704af0d0b96299be"]}, {0xca, &(0x7f0000000380)=@string={0xca, 0x3, "ee358f2a3b921cee34ef03485d0d87cc4a0788edffa8b705c4ee3e7ca9292352440872e51cd4d85b77f8d24c42a07487bf6027591abeb61798ce4fb7bd3edadcca069ffaaa648b0d6d56631105b9a040c4cbfbffbf19f35f0868bd8b5fedb8e3ecfaf6677a180a3b202fb52b4de3b7ba01b24b296d6affc35c66ab1de91ba87fa1e69220ff9343b61eaa99bd307c5f80323f8e1dd2db21f4480c2088f26c56e56fac161167b03863878bfa316eca9d0f41b16bb862710492ebb577badbd58deb875f0e3dd523a96f"}}, {0x89, &(0x7f0000000480)=@string={0x89, 0x3, "bcca8df12edeb37e0fd1fe329361658f97ad81a7f582be82b4db8956b69f5758e8496953dffa2693b6afa0c7f17aaf5c830707b9f7cf3e28d7b19c4f531bbf2a74bbd18fe6a1f8d5b59e1d441ec2bc85e3a5e72a82cf72aa47480c72ec0f9cd362ffdb7bcbd05430f0716061cfe04e187afab632ef500afd97a9ac765faedf3538aa0384b0b642"}}]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) 6m11.134275824s ago: executing program 1 (id=3526): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="15000000217a07597d3665ffff0010000008003950"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616a21bea192ddc252733d6664", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',k']) move_mount(r1, &(0x7f00000005c0)='./file0\x00', r4, &(0x7f0000000600)='./file1/file0\x00', 0x230) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = getpgrp(0x0) process_vm_readv(r5, &(0x7f0000002e40), 0x0, &(0x7f0000003380)=[{&(0x7f0000002e80)=""/39, 0x27}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000540)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000580)={0x300, 0x0, 0x4000000081, 0xfffffffffffffff9}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x4000)=nil) socket$packet(0x11, 0x2, 0x300) ioctl$TCSBRKP(r7, 0x5425, 0x100000000) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000140)={{'\x00', 0x82}, {0x81}, 0x8, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000a00)="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", 0x200, 0x0, &(0x7f0000000800)=ANY=[@ANYRES16=r2], 0x1ee}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x9, 0xffffffffffffffff}) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000500, r8, &(0x7f0000000380)) r9 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0x1a, r10, 0x800000be, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r9}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000003c0)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 6m11.133724764s ago: executing program 1 (id=3527): getrandom(&(0x7f0000000000)=""/76, 0xfffffe55, 0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000480)=@ethtool_stats}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x10001) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x2000) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x2000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r2, 0xd3c59000) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r2, 0xd3c59000) 6m11.082517389s ago: executing program 1 (id=3528): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000)="c072a47e9fec9c6a5169ca9858cbb8b40feac21a5476ee6afe8dd0c78c3da619bc38dadae17d300268f1b2690e902a76edf73e2c2b461583436ce835d452d5311679d9c7e9e92359b9e5474bb0705dea62e290fc813f0b85b34f43ff21fbbf15b3b372fb65b689526a6e9640c94f27b2211a0d3740ffa771b740b6e961cdeb38241b7e01aacdf0bf205bce0a906d08956a778e046ddd1bd7d3837ea57f60f3", 0x9f, 0x4, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) fcntl$setsig(r0, 0xa, 0x1) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xb3c]}, &(0x7f0000000140), 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f00000001c0)=""/183) splice(r1, &(0x7f0000000280)=0x4, 0xffffffffffffffff, &(0x7f00000002c0)=0x4d42a5ac, 0x71db, 0x3) timer_create(0x0, &(0x7f0000000440)={0x0, 0x2d, 0x2, @thr={&(0x7f0000000300)="c93e6d6c1bf9e89303c37e46d3b2aa62ca1195d88995d09d06a8bd26784e33a279ff11c5d8cbb12268d8c04814764d2ae84fb811169b6ac7ff0747a3991d2be0404b9dd8dcceb19f41876342e9d68536577505ece2608f73c1875529b8e8bb73f92d4997525c85af77ed780db875ae821c1c0a557d7be2198a904a7d36d2e5585bb6892129f0ddece06de3f6655353b5bfcd2108198212dbd4d6be6bab67a957f2e6287d7f427e9e4b3f0fdf612fcb2fdea761ce8ddee78a86fd1901b5fb822c6b566c6e92ec66a804886efd5d403e87e4263297bed468069e908f54a94faeff2d", &(0x7f0000000400)}}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f00000004c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000500)) r3 = gettid() execveat(r1, &(0x7f0000000540)='./file0\x00', &(0x7f0000000740)={[&(0x7f0000000580)='\x00', &(0x7f00000005c0)='/dev/null\x00', &(0x7f0000000600)='/dev/null\x00', &(0x7f0000000640)='\xc3:{\'\x00', &(0x7f0000000680)='@,-]-+[,%%\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='/dev/null\x00']}, &(0x7f00000008c0)={[&(0x7f0000000780)='/dev/null\x00', &(0x7f00000007c0)='/dev/null\x00', &(0x7f0000000800)=',*.\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='*]\x96#!(\x00']}, 0x100) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xd) execveat(r1, &(0x7f0000000900)='./file0\x00', &(0x7f00000009c0)={[&(0x7f0000000940)='@,-]-+[,%%\x00', &(0x7f0000000980)='\x00']}, &(0x7f0000000b00)={[&(0x7f0000000a00)='k)!.+@.\x00', &(0x7f0000000a40)='\x00', &(0x7f0000000a80)='}}\x00', &(0x7f0000000ac0)='[\x00']}, 0x100) pwritev2(r1, &(0x7f0000000e00)=[{&(0x7f0000000b40)="737d7ee93b7feab4fe91127c50821ee4b9bc6bf6c65042d34b0e702eeeaa84a05a2569cf432658bdfc96eec024b2414571234403cd1f4405157ad317c8fd48df07e9b9460e5b8dd697b4e94c0044633c8148cbc8ef6cd31b0112d74ccd724403f075c8f8ffa292c01cbe77dbbebc81ef212961fe97905de4fd573f6255c14bcbdd6afeb2223b83adb1d104e38acdc2124582de29689c0d84bc30bad63429a46ee15fcf2ebb110ee01dec523e745b7f793ab8590f887b0c5dee3f1a5c8a0e96acbee5", 0xc2}, {&(0x7f0000000c40)="722e9e4a0adb97aae309bb53213ad8432dfbfde9c6cb429d62816f79f8a55efcc4fb84618eef05725054184ffdb034250ef735f7eef001c1c6568b4de1ec7fc05c70d0b2d4b78e730b74bccb8dff91c40f55a820a9f8bbd44269476238ffe9", 0x5f}, {&(0x7f0000000cc0)="52b3ad3e3b5ecc52e56ee703515aca2372bfb29271ed9008adb4040faaacd2a8b30272bb119ead247b77c6bd224caceb1d2a4004984b2d27df4798ef96e4179efdc593629d6f126ce45def8f46e0660bfc402b250d3c85e9d96185d4bfaad61d27385d8c2002338428e0303f82dca1047195c94cf34e7bc3f0e617f123310e4e5402554d86a8c33f0fd110013338a932", 0x90}, {&(0x7f0000000d80)="c3e3e015333930d99fbb068d222d61cbb31269e87fe4b18773fb018edd2cf08431de4727500204abebd03d09c4b36a8d587be7fa7f0872f6924e951c99d36051d761353378f6d6f4bf2c393b599c322898", 0x51}], 0x4, 0x7, 0x3ff0, 0x6) write$binfmt_misc(r1, &(0x7f0000000e40)="f9240f913b864cf8a16565cc0a9d7173", 0x10) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000e80)=0x9, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000f40)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000001040)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$incfs(&(0x7f0000000ec0)='./file0\x00', 0x0, &(0x7f0000000f00), 0x9010, &(0x7f0000001140)={[{@no_bf_cache}], [{@fsmagic={'fsmagic', 0x3d, 0x14}}, {@uid_gt={'uid>', r5}}, {@uid_lt={'uid<', r6}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '!\xc7'}}]}) lsetxattr$security_evm(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240), &(0x7f0000001280)=@ng={0x4, 0x9, "63711f84a12d08d3b4b45c4eaf"}, 0xf, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r1) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x80, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6e92, 0x2d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd87}, @NL80211_ATTR_IE={0x40, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x8}, 0xfc, 0x7, @device_a, 0x80000001, 0x6, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xbc, 0x28, 0x85}}, @rann={0x7e, 0x15, {{0x1, 0x3f}, 0x10, 0x82, @device_b, 0x8001, 0x0, 0x6}}, @ibss={0x6, 0x2, 0x40b}, @ibss={0x6, 0x2, 0xa}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000d0}, 0x80) chdir(&(0x7f0000001440)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000001480)={0xc, {{0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x88) read$FUSE(r1, &(0x7f0000001540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000003580)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x2b, 0x1, 0x9020, 0x6, 0x6, 0x6, 0x7f, 0x0, 0x0, 0x100, 0x6}}, 0x50) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000003600)=r3) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003680), r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000003900)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000038c0)={&(0x7f00000036c0)={0x1f4, r9, 0x13, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6afa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5c47}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb801}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000050) connect$packet(r1, &(0x7f0000003940)={0x11, 0x18, r4, 0x1, 0xa5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 6m11.042569443s ago: executing program 35 (id=3528): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000)="c072a47e9fec9c6a5169ca9858cbb8b40feac21a5476ee6afe8dd0c78c3da619bc38dadae17d300268f1b2690e902a76edf73e2c2b461583436ce835d452d5311679d9c7e9e92359b9e5474bb0705dea62e290fc813f0b85b34f43ff21fbbf15b3b372fb65b689526a6e9640c94f27b2211a0d3740ffa771b740b6e961cdeb38241b7e01aacdf0bf205bce0a906d08956a778e046ddd1bd7d3837ea57f60f3", 0x9f, 0x4, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) fcntl$setsig(r0, 0xa, 0x1) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xb3c]}, &(0x7f0000000140), 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f00000001c0)=""/183) splice(r1, &(0x7f0000000280)=0x4, 0xffffffffffffffff, &(0x7f00000002c0)=0x4d42a5ac, 0x71db, 0x3) timer_create(0x0, &(0x7f0000000440)={0x0, 0x2d, 0x2, @thr={&(0x7f0000000300)="c93e6d6c1bf9e89303c37e46d3b2aa62ca1195d88995d09d06a8bd26784e33a279ff11c5d8cbb12268d8c04814764d2ae84fb811169b6ac7ff0747a3991d2be0404b9dd8dcceb19f41876342e9d68536577505ece2608f73c1875529b8e8bb73f92d4997525c85af77ed780db875ae821c1c0a557d7be2198a904a7d36d2e5585bb6892129f0ddece06de3f6655353b5bfcd2108198212dbd4d6be6bab67a957f2e6287d7f427e9e4b3f0fdf612fcb2fdea761ce8ddee78a86fd1901b5fb822c6b566c6e92ec66a804886efd5d403e87e4263297bed468069e908f54a94faeff2d", &(0x7f0000000400)}}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f00000004c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000500)) r3 = gettid() execveat(r1, &(0x7f0000000540)='./file0\x00', &(0x7f0000000740)={[&(0x7f0000000580)='\x00', &(0x7f00000005c0)='/dev/null\x00', &(0x7f0000000600)='/dev/null\x00', &(0x7f0000000640)='\xc3:{\'\x00', &(0x7f0000000680)='@,-]-+[,%%\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='/dev/null\x00']}, &(0x7f00000008c0)={[&(0x7f0000000780)='/dev/null\x00', &(0x7f00000007c0)='/dev/null\x00', &(0x7f0000000800)=',*.\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='*]\x96#!(\x00']}, 0x100) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xd) execveat(r1, &(0x7f0000000900)='./file0\x00', &(0x7f00000009c0)={[&(0x7f0000000940)='@,-]-+[,%%\x00', &(0x7f0000000980)='\x00']}, &(0x7f0000000b00)={[&(0x7f0000000a00)='k)!.+@.\x00', &(0x7f0000000a40)='\x00', &(0x7f0000000a80)='}}\x00', &(0x7f0000000ac0)='[\x00']}, 0x100) pwritev2(r1, &(0x7f0000000e00)=[{&(0x7f0000000b40)="737d7ee93b7feab4fe91127c50821ee4b9bc6bf6c65042d34b0e702eeeaa84a05a2569cf432658bdfc96eec024b2414571234403cd1f4405157ad317c8fd48df07e9b9460e5b8dd697b4e94c0044633c8148cbc8ef6cd31b0112d74ccd724403f075c8f8ffa292c01cbe77dbbebc81ef212961fe97905de4fd573f6255c14bcbdd6afeb2223b83adb1d104e38acdc2124582de29689c0d84bc30bad63429a46ee15fcf2ebb110ee01dec523e745b7f793ab8590f887b0c5dee3f1a5c8a0e96acbee5", 0xc2}, {&(0x7f0000000c40)="722e9e4a0adb97aae309bb53213ad8432dfbfde9c6cb429d62816f79f8a55efcc4fb84618eef05725054184ffdb034250ef735f7eef001c1c6568b4de1ec7fc05c70d0b2d4b78e730b74bccb8dff91c40f55a820a9f8bbd44269476238ffe9", 0x5f}, {&(0x7f0000000cc0)="52b3ad3e3b5ecc52e56ee703515aca2372bfb29271ed9008adb4040faaacd2a8b30272bb119ead247b77c6bd224caceb1d2a4004984b2d27df4798ef96e4179efdc593629d6f126ce45def8f46e0660bfc402b250d3c85e9d96185d4bfaad61d27385d8c2002338428e0303f82dca1047195c94cf34e7bc3f0e617f123310e4e5402554d86a8c33f0fd110013338a932", 0x90}, {&(0x7f0000000d80)="c3e3e015333930d99fbb068d222d61cbb31269e87fe4b18773fb018edd2cf08431de4727500204abebd03d09c4b36a8d587be7fa7f0872f6924e951c99d36051d761353378f6d6f4bf2c393b599c322898", 0x51}], 0x4, 0x7, 0x3ff0, 0x6) write$binfmt_misc(r1, &(0x7f0000000e40)="f9240f913b864cf8a16565cc0a9d7173", 0x10) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000e80)=0x9, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000f40)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000001040)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$incfs(&(0x7f0000000ec0)='./file0\x00', 0x0, &(0x7f0000000f00), 0x9010, &(0x7f0000001140)={[{@no_bf_cache}], [{@fsmagic={'fsmagic', 0x3d, 0x14}}, {@uid_gt={'uid>', r5}}, {@uid_lt={'uid<', r6}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '!\xc7'}}]}) lsetxattr$security_evm(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240), &(0x7f0000001280)=@ng={0x4, 0x9, "63711f84a12d08d3b4b45c4eaf"}, 0xf, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r1) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x80, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6e92, 0x2d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd87}, @NL80211_ATTR_IE={0x40, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x8}, 0xfc, 0x7, @device_a, 0x80000001, 0x6, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xbc, 0x28, 0x85}}, @rann={0x7e, 0x15, {{0x1, 0x3f}, 0x10, 0x82, @device_b, 0x8001, 0x0, 0x6}}, @ibss={0x6, 0x2, 0x40b}, @ibss={0x6, 0x2, 0xa}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000d0}, 0x80) chdir(&(0x7f0000001440)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000001480)={0xc, {{0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x88) read$FUSE(r1, &(0x7f0000001540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000003580)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x2b, 0x1, 0x9020, 0x6, 0x6, 0x6, 0x7f, 0x0, 0x0, 0x100, 0x6}}, 0x50) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000003600)=r3) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003680), r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000003900)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000038c0)={&(0x7f00000036c0)={0x1f4, r9, 0x13, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6afa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5c47}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb801}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000050) connect$packet(r1, &(0x7f0000003940)={0x11, 0x18, r4, 0x1, 0xa5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 6m3.545026827s ago: executing program 5 (id=3580): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0xa, 0x0, 0x15}, @fda={0x66646185, 0x3, 0x1, 0x15}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 6m3.474301124s ago: executing program 5 (id=3581): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x12}, 0x4000) connect$netlink(r1, &(0x7f0000000340)=@unspec, 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x1100}, @flat, @flat=@weak_binder}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x100, 0x2}, @fda={0x66646185, 0x1, 0x2, 0x25}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/248, 0xf8, 0x1, 0x18}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) open(&(0x7f0000000380)='./file0\x00', 0x400000, 0x2) 6m3.472871584s ago: executing program 5 (id=3582): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x9) 6m3.428825828s ago: executing program 5 (id=3583): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r7}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000698631b152e8b8282c8c789d58ab61974a987d948a786a70d5b99b565a89462ad7ac3d1db1bc38ad8b58b68ff1a38e391caba7f2a7b9297165a09e8afef0c374707e7226f0e9fb728fd2607e9d46ee2710f589e77cfa07df78a6cb3f484fb2c39c0511c3acd5539aa62ba404fe1285af4224ff99868e15415b3559b1e835de38d270b2eb42c160cdedd315c2a91604f9bc7a2d988b4a01945fa43da3fb5bc8df03ceeb465effe8ed7a2bfb4dfa718bd59ed6f1db223272d2fd2aa4bb37bda6313be3e2f1913d6cddf8b0", @ANYRES16=r2, @ANYBLOB="080b25bd7000fbdbdf250300000008000600", @ANYRES32=r4, @ANYBLOB="06002800000000000800340000800400"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0xc0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200006bdba366dfd81d721588dbc347000fbdbdf2504000000080031000000000005002f0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB='huge=advise,']) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x421, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r8) r10 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r10, 0x400, 0x1) r11 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r11, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_clone(0x4088200, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r12, &(0x7f0000000980)={0x2020}, 0x2074) 6m3.379222464s ago: executing program 5 (id=3584): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)=""/155, 0x9b}], 0x1}, 0x4c2003e0) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 6m3.278274873s ago: executing program 5 (id=3585): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000fc0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f", 0xb0}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f", 0x70}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9e", 0x16}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861d", 0xf}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87", 0x31}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 6m3.277636253s ago: executing program 36 (id=3585): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000fc0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f", 0xb0}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f", 0x70}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9e", 0x16}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861d", 0xf}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87", 0x31}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 5m56.822186585s ago: executing program 4 (id=3641): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) read$FUSE(0xffffffffffffffff, &(0x7f0000008280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/sco\x00') r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001380)=ANY=[@ANYRESHEX=0x0], 0x1c}], 0x1}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)=ANY=[@ANYBLOB="74fa7560ab3d02000000000000003d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) read$FUSE(r7, &(0x7f0000006240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000001280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0xa}}]}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r9, {0x7, 0x29, 0xd, 0xffffffff8145adc4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}}, 0x50) write$FUSE_STATFS(r5, &(0x7f0000001200)={0x60, 0x0, r9, {{0x9, 0x81, 0x4, 0x401, 0xe651, 0x4, 0x101, 0x1}}}, 0x60) 5m56.821997535s ago: executing program 4 (id=3642): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000000)=0x80000000) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) 5m56.820371795s ago: executing program 4 (id=3643): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000200)='fdinfo/3\x00') (async) read$eventfd(r4, &(0x7f0000000080), 0x8) (async) write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xe05, 0x3a, '/selinux/access\x00', 0x3a, 'kfree\x00', 0x3a, './file0'}, 0x3d) (async) r5 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) (async) r6 = signalfd(r1, &(0x7f0000000180)={[0x5c1]}, 0x8) sendto$inet6(r6, &(0x7f0000000380)="8a2128572ad3fd20ca1dcf181dab4a77c3825f117564bdaefd9954316f8df32881e90d65cc691b12421716264dc90bbe0b54554e3dfa7459c44d3f7f957b577248f9b4dd978d", 0x46, 0x4004050, &(0x7f0000000400)={0xa, 0x4e22, 0x2, @empty, 0x4}, 0x1c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r11, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0xb0, r12, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x86, 0x80, [@fast_bss_trans={0x37, 0x52, {0x0, 0x0, "a2f0b889637c033f02ea82730d520b7c", "c2be15535ab7fea1330d7852d0f1517a00b6edc7bdef6b52598be755a7254e8d", "45c6d9a2e095fb5011856d3acefe9f1fcab00ab0de223c8a9c12140822b64532"}}, @dsss={0x3, 0x1, 0x5}, @supported_rates={0x1, 0x2, [{0xc, 0x1}, {0xc, 0x1}]}, @gcr_ga={0xbd, 0x6}, @link_id={0x65, 0x12, {@random='N4@4ED', @device_b, @broadcast}}, @mesh_id={0x72, 0xfffffd7e}, @sec_chan_ofs={0x3e, 0x1}]}]]}, 0xb0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) clock_gettime(0x6, &(0x7f0000006980)) 5m56.737474833s ago: executing program 4 (id=3644): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@random="39001e424dd4", @broadcast, @void, {@mpls_mc={0x8848, {[{0xb}, {0x6}, {0x33, 0x0, 0x1}, {0xb7, 0x0, 0x1}, {0x4}, {0x8}], @llc={@snap={0x0, 0xab, "64b9", '.?r', 0x88f7, "d09c93c4f9339ec76342f0986d6349f1552036e85652caae5aaa54dd1cacbf074c879273082ac893ae91f7242bff705c30512ac8727442a5b83b6a6d77"}}}}}}}, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 5m56.588059888s ago: executing program 4 (id=3645): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) (async) statx(r3, 0x0, 0x400, 0x20, &(0x7f0000000200)) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) (async) io_setup(0x7f, 0x0) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000440)={0x81, "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"}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) creat(&(0x7f0000000300)='./file0\x00', 0x1fd) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x442, 0x9c) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (async) r5 = fsmount(0xffffffffffffffff, 0x1, 0xff) (async) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) lsm_list_modules(0x0, &(0x7f0000000040)=0x18, 0x0) (async) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000001300)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000001740)={0x84, &(0x7f0000000280)={0x20, 0x12, 0x65, "e14c0bf3e4ce565c4053ea3231643e81f45ebd38420c77925bc58e41fb978e2a537fd399c41f25b278da6307aedaece13d88f979e55f3b413a803f1265e01ad2d99c5d84df546bfadee657fff5489965db99abd44e4c24f1e26acef523835bf1c22cc92c84"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)={[&(0x7f0000000380)='trans=fd,', &(0x7f0000000400)='***\'-^)()\x00', &(0x7f0000000440)='trans=fd,', &(0x7f0000000480)='#b\xb4\x00', &(0x7f0000000540)='\x00', &(0x7f0000000640)='\x85\xdf%(-\'{\\%}/&/#+}/@/*-#\x00', &(0x7f0000000680)='trans=fd,', &(0x7f00000006c0)='^#.#(\x00', &(0x7f0000000700)='trans=fd,']}, &(0x7f00000009c0)={[&(0x7f0000000840)='trans=fd,', &(0x7f0000000980)='\'@^(!)}\x00']}, 0x1000) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000004c0)={0x20, 0xd, 0x1a, "ad90410b7786309aaa2b9cb172d131fd658ab5dd380e1bb13f88"}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xf}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x19, 0x2, "13e4"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x1ff}, 0x0, 0x0, 0x0}) (async) setsockopt$packet_buf(r5, 0x107, 0x16, &(0x7f0000000000)="d9fa56643b74012f03842ec602184358fd8124cfe9de44978a7c4b9a0ee723cdacfbc228dba503a7aa7bd1fe00752b0a9b456b65d5a984d92f6e62961bbbec", 0x3f) 5m56.446310462s ago: executing program 4 (id=3646): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB='size=M']) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r2}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f00000019c0)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000300)={0x5, 0x2d, 0x80000000000007, 0x3a, 0x8000000000000000, 0x2c}, 0x48) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) 5m56.445739782s ago: executing program 37 (id=3646): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB='size=M']) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r2}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f00000019c0)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000300)={0x5, 0x2d, 0x80000000000007, 0x3a, 0x8000000000000000, 0x2c}, 0x48) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) 5m36.456101109s ago: executing program 7 (id=3813): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f00000001c0)=""/191) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000100)=ANY=[@ANYBLOB="680200002700"], 0x268}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000000)={'geneve0\x00', {0x2, 0x0, @dev}}) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000080)={0x7}) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0xb, &(0x7f0000000000)="baefb796656c181cc6d532", 0x0, 0x0, &(0x7f00000000c0)}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0xca639000) r6 = dup3(r5, r1, 0x0) mmap$IORING_OFF_SQES(&(0x7f000095d000/0x4000)=nil, 0x4000, 0x5, 0x10, r6, 0x10000000) 5m35.649583079s ago: executing program 7 (id=3818): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 5m35.538304359s ago: executing program 7 (id=3819): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdfffffffcde7edd340000000e000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400000}) r4 = fspick(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1f, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x4]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000400)=ANY=[@ANYBLOB="3e000000a03db7be575bc4a67abccc666a93c8f507abcf81528630ea82c5109b6872a3cad7d78aa665ba25ca59293cca120a67b3bca11591af28e2a286a39cab907985b68d21d52c57cbfd39fe6c137c0e2c3a0cd62be28ebc9af8f2a612c24ea6e6db44597864a655b2eea2ec3b9a0991cb12c634224b9b9d9e6a752743bfc09a33661ee8f27b8626732f400d4a0b4a10a13646290e8465cb982ac402"]) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000000), &(0x7f0000000200)={'U+', 0xead}, 0x16, 0x0) r5 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x9) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00008000009dc900"]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0x40087707, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0x106, 0x9, 0x13, 0x4, "37b4d3e0a295c063efbca67058155dae4d051017e2658b6321b6b95afbcccce8383326b28e3bb521f92c100b407e9d2bcf8194cd73c1508ac9b61a086cd48fa5", "4f1f59a6a6c31fa7f80111c2fbf28fa76a849280ba805279b0ded705630b65a2", [0x6]}) 5m35.238751569s ago: executing program 7 (id=3820): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x10a5408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x10a5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') userfaultfd(0xc0001) (async) userfaultfd(0xc0001) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x3}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x9, 0xd1bb, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7800, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000280)={'gre0\x00', r2, 0x1, 0x7800, 0x3, 0x8, {{0xe, 0x4, 0x1, 0x28, 0x38, 0x68, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, {[@ssrr={0x89, 0x13, 0x2f, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2]}, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0xc, 0xa7, 0x0, 0x1, [0xf, 0xf27d]}]}}}}}) 5m35.214334651s ago: executing program 7 (id=3821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) (async) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) (rerun: 32) sendto$inet6(r1, &(0x7f0000000100)="3397681561f0d7a164978b4ae2a03a040874bc92a1f137ba27c9fc81f4c9e7c770a3e8c7810bea2a876723bd73460dc71795b26a4634eb4c051b09631d938b8aa794feadae0ae8bbe9c66a96f6f953b2ced0cf2e3514bee988a697d01427d2a0920b7714bda9e78318c33f180fac35a9a0a854db073a5ad785e1764d6f6ca561acb6169e41c62a1318624b37d0e9fce956a87a204389cf0f60f1582876bdc41a072d8f10a4f371427bccc387beade66c90778fbab9c9eedcee3ee301b03c28c67795d0d10286236672db5246527d25770f8db610c25298cfe6023c6aff9313668e21bf81506f1f16a39dd606bb480632", 0xf0, 0x40000, &(0x7f0000000200)={0xa, 0x4e20, 0x2e, @mcast1, 0x8}, 0x1c) (async) close_range(r0, 0xffffffffffffffff, 0x0) 5m35.128312429s ago: executing program 7 (id=3824): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f00007db000/0x4000)=nil, &(0x7f000028e000/0x1000)=nil, &(0x7f0000abc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x400, 0x1, 0x19e}, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000002c0)={0xfffffffffffffffe, 0x1, 0x1}) futex(0x0, 0x1, 0x4000000, 0x0, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x33c880, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000500)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) r8 = dup(r6) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) creat(&(0x7f0000000580)='./file0\x00', 0x8) (async) r10 = creat(&(0x7f0000000580)='./file0\x00', 0x8) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="49850000", @ANYRES16=r9, @ANYBLOB="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"], 0x148}}, 0x40844) (async) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="49850000", @ANYRES16=r9, @ANYBLOB="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"], 0x148}}, 0x40844) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) (async) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x841}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_INTERRUPT(r10, 0x4004ae86, &(0x7f0000000640)=0x6) 5m35.087581183s ago: executing program 38 (id=3824): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f00007db000/0x4000)=nil, &(0x7f000028e000/0x1000)=nil, &(0x7f0000abc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x400, 0x1, 0x19e}, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000002c0)={0xfffffffffffffffe, 0x1, 0x1}) futex(0x0, 0x1, 0x4000000, 0x0, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x33c880, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000500)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) r8 = dup(r6) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) creat(&(0x7f0000000580)='./file0\x00', 0x8) (async) r10 = creat(&(0x7f0000000580)='./file0\x00', 0x8) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="49850000", @ANYRES16=r9, @ANYBLOB="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"], 0x148}}, 0x40844) (async) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="49850000", @ANYRES16=r9, @ANYBLOB="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"], 0x148}}, 0x40844) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) (async) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x841}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_INTERRUPT(r10, 0x4004ae86, &(0x7f0000000640)=0x6) 59.470377517s ago: executing program 8 (id=6803): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x3, 0xdddd0000, 0x8, r3, 0x5}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x278000003e7, 0x0, 0x1, r3, 0x1}) r4 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0x81007702, 0x2) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00000c6000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 58.774333215s ago: executing program 8 (id=6811): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 58.773981075s ago: executing program 8 (id=6812): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x38, 0x19, 0x1, 0x0, 0x25dfdbfb, {0xa, 0xd601, 0x9}, [@nested={0x10, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}, @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x14, 0x5, 0x0, 0x1, [@nested={0x10, 0xce, 0x0, 0x1, [@nested={0xc, 0x13e, 0x0, 0x1, [@nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0x61}]}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x16, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:_\xa9\xe2\x00\xf7\x8a'}]}, 0x34}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f00)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRESDEC=r9, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r8], 0x80}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20048004) close_range(r0, 0xffffffffffffffff, 0x0) 58.598942693s ago: executing program 8 (id=6816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_udplite(0x2, 0x2, 0x11) flistxattr(r0, &(0x7f0000000000)=""/1, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180)={0x1, 0x24, 0x25}, 0x18) mkdirat(r0, &(0x7f00000001c0)='./file1\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}, {@nfs_export_on}, {@uuid_off}]}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4d41, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socket$inet_udplite(0x2, 0x2, 0x11) (async) flistxattr(r0, &(0x7f0000000000)=""/1, 0x1) (async) getpid() (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180)={0x1, 0x24, 0x25}, 0x18) (async) mkdirat(r0, &(0x7f00000001c0)='./file1\x00', 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}, {@nfs_export_on}, {@uuid_off}]}) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4d41, 0x0) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x1) (async) 58.31636631s ago: executing program 8 (id=6820): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) r2 = getpid() getpgrp(r2) write$vga_arbiter(r1, &(0x7f0000000100)=@other={'trylock', ' ', 'io'}, 0xb) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 58.264659575s ago: executing program 8 (id=6821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = eventfd(0x7) lseek(r1, 0x6, 0x1) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 58.2188519s ago: executing program 39 (id=6821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = eventfd(0x7) lseek(r1, 0x6, 0x1) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.731753875s ago: executing program 2 (id=7368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/103, 0x67}], 0x1, &(0x7f0000000240)=""/182, 0xb6}, 0x3}, {{&(0x7f0000000300)=@nl, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000080)=""/18, 0x12}, {&(0x7f0000000600)=""/220, 0xdc}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000700)=""/83, 0x53}], 0x7, &(0x7f0000000800)=""/168, 0xa8}, 0x1000}], 0x2, 0x40, &(0x7f0000000940)={0x77359400}) 3.549102022s ago: executing program 2 (id=7372): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, r0, 0x12b8b000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0xf3, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$PTP_CLOCK_GETCAPS(r5, 0x40043d14, &(0x7f0000000040)) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000280)={0x6a99, 0xeeef0000, 0x3}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0xce9f, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[], 0x1c}, {&(0x7f00000002c0)={0x134, 0x42, 0x400, 0x72bd27, 0x25dfdbff, "", [@generic="1f116be3c6c729ecbbf15930e8b50093e384cbdcb8437caedd0d5ea5d4bb57336a99535876ae62f8ae9cbb956a644d057d1c7ec9cd69336866da3992810791ccba4f2a71b9c6ba89e7d9bd908d697882cee57230bfe058ced36ee2f6149da8273507b41e25e0949e349a43ace53fdc1c58ae44b2f1906f5010f90df301a6b66ee4367c494e85f517476c9edd7b96ec64dbda16b2ea46f6c771ec4b7de4a445a24760e2d6ff3f9c58d2f56f8f539da44951d5f84fc4e1be4e4a189f33c64ffdf865358e7947c0c7333c083ed6e20eeb22774257f8a51324e7c294fc9c5d84167534399e9e3e32a93716ec85c715e171007c302841d08a8a6498efd10a9a", @generic="1974a0fa727c36805823f08f8d2554fc5b3d2ae2efb5ea03b1", @nested={0xc, 0xae, 0x0, 0x1, [@nested={0x4, 0x121}, @nested={0x4, 0x4a}]}]}, 0x71}], 0x2, 0x0, 0x0, 0x4004000}, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000001c40)=0x1) ioctl$PPPIOCGNPMODE(r9, 0xc008744c, &(0x7f0000000080)={0x21}) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x2, 0x0, 0x6}, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x43, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x78}], 0x1, 0x0, 0x0, 0x4020400}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) mlock(&(0x7f000011e000/0x1000)=nil, 0x1000) 3.285336438s ago: executing program 2 (id=7377): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='cpuset\x00', 0x1000014, 0x0) mprotect(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x1000005) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.220661554s ago: executing program 2 (id=7379): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xd, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x1c, r4, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x30000001c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r6, 0x1, 0x6, @local}, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r10, 0x111, 0x2, 0x0, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="3001000064f9de9c3e9a74a395b5e933616e815143cdffc7bf211059c84ca9906c5146a1c93e65a637ec72966a4b6b57b5e41bd454e0294660c9ef858a8a153240d5aed878e0386d97c56d8b4200bcb57620eb2132fc791a9fa75eb53bbac28c49088aff23a6556afbbb020916d349f533181c6249c4d8", @ANYRES16=r7, @ANYBLOB="000201010000fbdbdf25080000000c00018008000100", @ANYRES32=r6, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000200)={r6, 0x1, 0x6, @local}, 0x10) (async) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x81) (async) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x0, 0xe, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r11) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0xff, 0x9, 0x13, 0x4, "37b4d3e0a295c063efbca67058155dae4d051017e2658b6321b6b95afbcccce8383326b28e3bb521f92c100b407e9d2bcf8194cd73c1508ac9b61a086cd48fa5", "4f1f59a6a6c31fa7f80111c2fbf28fa76a849280ba805279b0ded705630b65a2", [0x6]}) 3.121206614s ago: executing program 2 (id=7381): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) (async) r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000001a40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x6, 0x0, 0x3}}}}}]}}]}}, &(0x7f0000001d80)={0x0, 0x0, 0x5, &(0x7f0000001ac0)={0x5, 0xf, 0x5}}) syz_usb_control_io(r3, &(0x7f00000020c0)={0x2c, 0x0, &(0x7f0000001f00)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000001f40)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7f, 0x80, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x8, 0x2}]}}, 0x0, 0x0}, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) (async) syz_usb_connect(0x3, 0x0, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000003a80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)={0x20, 0x0, 0x4, {0x160, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x12b8b000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) (async) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) (async) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x408c8, 0xe) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0xfffffe3e) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0x145342, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 3.017954625s ago: executing program 2 (id=7383): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000380)={{{@in=@initdev, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000140)=0xe8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.690313357s ago: executing program 6 (id=7388): openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) dup(r0) (async) r1 = dup(r0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pidfd_send_signal(r2, 0x25, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='f2fs\x00', 0x2810009, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008081}, 0x20044000) 2.65715287s ago: executing program 6 (id=7390): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB="800100001200010a28bd7000000000000700000004003700660169802000088004006a800400ac800c00e10003000000000000000400088004005680080041"], 0x180}}, 0x42) (async) read(r0, &(0x7f0000001280)=""/4107, 0x100b) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1) (async) ftruncate(r3, 0x1) (async) creat(&(0x7f0000000300)='./bus\x00', 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) (async) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) (async, rerun: 64) unlink(&(0x7f00000003c0)='./file4\x00') (async, rerun: 32) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0x4006, 0x0, 0x9}) (rerun: 32) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) (async) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000000240)=""/252, 0xfc}], 0x2) (async, rerun: 64) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000140)=""/106) (rerun: 64) 2.617254654s ago: executing program 6 (id=7391): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) (async, rerun: 64) r0 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0xffffd000) socket(0x25, 0x1, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3fc) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write(r1, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 1.190190463s ago: executing program 9 (id=7408): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf0, 0x16, 0x633, 0x0, 0x80000000, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}}, 0xf0}}, 0x0) (async) syz_usb_connect(0x3, 0x16f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x8c, 0x74, 0xb, 0x40, 0x54c, 0x169, 0xab2a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15d, 0x1, 0xf7, 0x10, 0x0, 0x2, [{{0x9, 0x4, 0x51, 0x9, 0x3, 0x60, 0xf4, 0xcf, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x3}}], [{{0x9, 0x5, 0xf, 0x2, 0x30, 0xff, 0x0, 0xaa, [@generic={0x2, 0xf}, @generic={0x102, 0x3, "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"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xe, 0xbd, 0x6, [@generic={0x11, 0x1, "5a3d39425a37276c44792ec01eec67"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5}]}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0xe, 0x9, 0xfb, [@generic={0xb, 0x23, "1b2de1c5329878c70b"}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x3, 0x2, 0x9, 0xff, 0x4}, 0x19, &(0x7f00000008c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "2de65fa2cade0e20f67e6fc0b38f4ffd"}]}, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x25, &(0x7f0000000b00)=@string={0x25, 0x3, "8765afc3ba9639f608b75aa95e40e572d37ef253ea3821f43d22b3350d6014d2706a7c"}}]}) (async) arch_prctl$ARCH_GET_FS(0x1003, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0}) 1.184225144s ago: executing program 3 (id=7409): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000100)={'bridge0\x00', @random="142b243c16b6"}) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r2, r0, 0x0, 0xffffffff) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000100)={'bridge0\x00', @random="142b243c16b6"}) (async) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) sendfile(r2, r0, 0x0, 0xffffffff) (async) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) 1.006157522s ago: executing program 3 (id=7410): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f0000000e40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="028c"]) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) pipe2$9p(&(0x7f0000000140), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x1e) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4200, 0x4) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x241}], 0x1}}], 0x1, 0x4000001) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x5}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x5}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001610016c0c000000000000", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001610016c0c000000000000", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0x8008770b, 0x2) 900.806252ms ago: executing program 3 (id=7411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f00000007c0)={0x65, {{0x29, 0x0, 0x8000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x3}}}, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f1, 0x0, 0xd2}]}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0xf8, 0x40000}, 0x20) getsockopt$inet6_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000000300)) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x12b8b000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000018ff7f000000000000ac14bf70c72aaf7a7f8a3041afa782dcd6b22b6b8c5255b8d94faf7eb00a41fe46ba33389611180c2580825c2da06c2fbe85de8a6533e9ed"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r8, 0x1, 0x34, &(0x7f0000000080)={0x1, 0x6}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 867.713205ms ago: executing program 3 (id=7412): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x1, 0x2, 0x7cbbda779fe004e1, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0xe9db8df3, @local, 0x2}, 0x1c) setrlimit(0x0, &(0x7f0000000100)={0x4, 0x2c}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8000, 0x80000001}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='map_files\x00') prlimit64(0x0, 0x0, 0x0, &(0x7f0000000280)) getdents64(r2, &(0x7f0000000040)=""/27, 0x1b) getdents(r2, &(0x7f0000001f80)=""/4093, 0xffd) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400000, 0x288) r3 = syz_usb_connect$printer(0x1, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x30, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0x4, 0x69}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x40, 0x3d, 0x6}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x80, 0x9, 0xb, 0xff, 0x6}, 0x14f, &(0x7f0000000a80)={0x5, 0xf, 0x14f, 0x6, [@generic={0x61, 0x10, 0x2, "f5a0e2e69fd5d6eb93eac56c49ef1c7c5c3b3e416cbf03682f6dd2d5a689385b01cbb8b114409b022a45ea0782601a622050e90ee6fe9bc36ec148b8f6023d8c4e75dad6b9e4b7bcc4cb8eb39a997374dacf348d0aa43fa5442ca5ba4e75"}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x8000, 0xee0f, 0x1, [0xc00f, 0x3f30, 0xcf, 0xff3f00, 0xcf, 0xff00cf]}, @generic={0x93, 0x10, 0x3, "b5dd31caad24e83426bdf1a7e544b011389b5e3b715e999f558a48a950d97c5ad02b60a8fb74d0705d119d94eea8d633a4fe0e22044209d9755d3bf07d7403d77b1f9168f771a6cb601c821d0a9cc0b72e1eab1270aa761251d24f01a985e7c19db262c5a42cb971652eaa624b6eb304f6b956313283bc9dccf0fe2a9fdfd24623c80a743191fc17c308f255c73036b9"}, @ssp_cap={0x24, 0x10, 0xa, 0xd4, 0x6, 0x6, 0xff0f, 0x26, [0xf, 0x0, 0x3f30, 0xc0, 0x3f, 0xc0c0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x7, 0x8, 0x10, 0xf3}]}, 0x1, [{0xb3, &(0x7f0000000480)=@string={0xb3, 0x3, "92cd428b4dd1dc19e28be4a479ddb6888d6f0c50999cca3cdea269fb99185f3a20d92d129b1253cbfd38869a78e93770f093d3c17d16492112f5e4f949b02ef938cface23914f4e5383ec7f7a26e10009866c0aae6deb27c0e3543a129da325e1ab25340a35a73a21a88980668c01f34f45be03c41fd6d2c73690c6ef70bf5f9979b3dd0075aa731b6b66b738efb4ea35f074ce1f195654630dac8fb506991ba25e1e1d3687bd59ae0bbe922e75fe43437"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x0, 0xc, 0xa2, {0xa2, 0xf, "6b552bc61dc7a98cf0fc992e4668a720eaa8cf7976b397a605711c70f55bf1e60a11fee860069c0573bf4ddabc0f52117556b908075663b89e70ddd980c1aba36956d8c43ef2a682081aa173a08f7afc4dd7da1df6e81e6ed22fa567d7d044855ab2213424d1c374758ecfcba1d7bfa61de97b945f4bd139fa9d4b7617fd171d58a3afe1e01c6eb04efb94f4a1c99615c69681efc545baa57f094d23ee316214"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1811}}}, &(0x7f0000000a40)={0x34, &(0x7f0000000780)={0x20, 0xa, 0xa7, "82c2904b959c57540db15b7fca0758b4442baff407b9a07fd9e1cf056ca733e07765766e34c7febd87bdf681c94de564bc0898b06637518c4a7bcda8eae1656f0aa8fc9697fdb0867727d987a50161b5d7060cd7a5f9304727f3f8b71cf1486bc243bcf751ddd9b2e6bf928169095fd63c2b7599251b1ac6dd8299b943a6224af4d335fd07e709e90ae396d69583639130702ffd6e721d1773aed4df17480aa9c2853ae6336f7f"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000008c0)={0x20, 0x0, 0xf3, {0xf1, "88ccfbbd88ef6b193c902d25c694ae2776a2909870d39d91a281fc28ef8095cc8b8a5906180999a8da0c73ebcd6b876f0b216297729bd250295e1e5dc0d5b15d3eb3ae815c56e312d7b2b59fb17433a7e968bfc42d0fae36715d515cba3380df685dd56b56d26d74ae01a1657325e8c4b49bd994cec60844339ed64e88660fd4f571e59c3a3905b70cef0e3fee67b363ba78f5e6bd1de73083e7cd302addf0f1773af183e5544cf0b16f58c0cd00a373e2c938a2cf24ae6e8765d76711e61bfe9ebfca474c06c35c3104b040cee69a7b07ef8242b21c79742dc909aad8086c0960a5bf5c63de36eddda765a74ebef7fc32"}}, &(0x7f00000009c0)={0x20, 0x1, 0x1, 0xf}, &(0x7f0000000a00)={0x20, 0x0, 0x1, 0x1}}) setsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) 534.260508ms ago: executing program 9 (id=7413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/103, 0x67}], 0x1, &(0x7f0000000240)=""/182, 0xb6}, 0x3}, {{&(0x7f0000000300)=@nl, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000080)=""/18, 0x12}, {&(0x7f0000000600)=""/220, 0xdc}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000700)=""/83, 0x53}], 0x7, &(0x7f0000000800)=""/168, 0xa8}, 0x1000}], 0x2, 0x40, &(0x7f0000000940)={0x77359400}) 432.667947ms ago: executing program 9 (id=7414): prctl$PR_SVE_SET_VL(0x32, 0x34d5) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000300)={0xc1, {{0xa, 0x4e21, 0x400, @mcast2, 0x9}}, {{0xa, 0x4e24, 0xc0a8, @remote, 0xb47}}}, 0x108) r2 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0a012a20", @ANYRES32=r0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) sendfile(r2, r2, 0x0, 0x7ffff000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) eventfd2(0x7, 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000100)=0xfffffff7, 0x4) cachestat(r2, &(0x7f0000000200)={0x5, 0x100000000}, &(0x7f0000000140), 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180)) 311.245449ms ago: executing program 3 (id=7415): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0x6, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000880)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 234.111507ms ago: executing program 3 (id=7416): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980400000309021b00012000ac000904"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0006"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 231.994127ms ago: executing program 9 (id=7417): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet(0x2, 0x6, 0x5) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)='\\Q', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x1}}], 0x2, 0x4000000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) splice(r1, 0x0, r2, 0x0, 0x9, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000923000/0x2000)=nil, 0x2000, 0x2, 0x80010, r0, 0x12b8b000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@ignoreqv}], [{@euid_gt={'euid>', r5}}, {@flag='lazytime'}, {@euid_eq={'euid', 0x3d, r5}}]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x15, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) setitimer(0x2, &(0x7f0000000080)={{0xfffffffffffffff5, 0x8876}, {0x7fffd, 0x8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000080)="2c80fce256052b06f8148e045f9b2dec", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000b80)="d7d42f9134461c21d42a97f0ebd55245", 0x10) socket(0x18, 0x2, 0x0) getsockopt$sock_int(r1, 0xffff, 0x2e, &(0x7f0000000040), &(0x7f0000000140)=0xfffffffffffffcec) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 180.422222ms ago: executing program 6 (id=7418): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1802, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x10000000000007f) keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000000)) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x7777, 0x44840) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x31, 0x4, 0x0, {0x1, 0x6, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) poll(&(0x7f0000000080)=[{r3, 0x20}], 0x1, 0x8) 85.513002ms ago: executing program 9 (id=7419): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x402, 0x0) r2 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f00000003c0)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TCFLSH(r5, 0x400455c8, 0x4) (async) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}, @register_looper], 0x0, 0x0, 0x0}) 26.261557ms ago: executing program 6 (id=7420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x48, 0x0, &(0x7f0000000000)=[@dead_binder_done, @increfs_done, @enter_looper, @dead_binder_done, @exit_looper, @clear_death={0x400c630f, 0x1}, @exit_looper], 0x8f, 0x0, &(0x7f0000000100)="4d96f417b7d87f3491cffffdc74a58dd4ce8f55114f6a18b10ebb72f182cdd9fe0e29952adc70cf6874143ba96f4f980307078cdbecc678b73c7d8f87165837b59f676a5e5f0deab3771fe13c657dc16bc6031a1f9260fd424e33c01cff2e2c11b2a80765374e37fa5604c3357becef8cb931ff1de7e59799aad812959f656ce754d4e23096ac9417f1a25361c63a0"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x48, 0x0, &(0x7f0000000000)=[@dead_binder_done, @increfs_done, @enter_looper, @dead_binder_done, @exit_looper, @clear_death={0x400c630f, 0x1}, @exit_looper], 0x8f, 0x0, &(0x7f0000000100)="4d96f417b7d87f3491cffffdc74a58dd4ce8f55114f6a18b10ebb72f182cdd9fe0e29952adc70cf6874143ba96f4f980307078cdbecc678b73c7d8f87165837b59f676a5e5f0deab3771fe13c657dc16bc6031a1f9260fd424e33c01cff2e2c11b2a80765374e37fa5604c3357becef8cb931ff1de7e59799aad812959f656ce754d4e23096ac9417f1a25361c63a0"}) 13.599229ms ago: executing program 9 (id=7421): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) inotify_add_watch(r0, 0x0, 0x3000004) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x10003fc, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x8000480) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000240)="c96c3a92acdf4d89acf8cd9876db6b00a8a134251ad5749c7aa49521be17079cd3d7548d272cf2e2d307c1c8e01e3becffe6e4bc0e46464bb653bfd075444b3dd700c81a5eb3f053ce4963b662c335b1802b6b46ece5628b6df84354cfc89388adbc07ebef28e2f972ad0328e6300a135fdf083f813984f890a17a6346c1a6294212c7ff7d23f12b6d285d", 0x8b}, {&(0x7f0000000100)="153844c54e0e97446e09c9970da4daec6fa3d1bd48d889f176c7cfa266bb0233", 0x20}, {&(0x7f0000000180)="c42e179e78acb393e8eeeb404017be137f8284a4364896ea3a7c8e7994549d80facb9e5c7c5cf31daeaa2d5281757e21dca94bb51b856a0a70df63c866db505eccd4d6043213b6626c4f3448c594552600b36508f3970b42fff33cb5ddc4f660af8cb1c42fab31af99b92e4daea8c55f14c884b17cb2035b", 0x78}, {&(0x7f0000000300)="aa54615bd8e6529455b272a352e5051dbe64795be2daef1da24fa66a75d784f799fc5c5089", 0x25}, {&(0x7f0000000340)="f56417f843806567c46d7285abeb3c562bac6e8cce551eb294c00ad057da49b45f12fa18856c3199e197afcbe66678dad3304b7cccc4df0f0f3ef2dd628b", 0x3e}, {&(0x7f0000000440)="bdc919934a2729ee060213108ac698932a534ee28918ae867ff173c0ead1252f3a1c5bab1075de2a5bbd627dbde9af2ede7e873c17b73d897e65a7a86f20905c56c756d511bffbf88964f2d94d907f7a8a0cdf25f8e765dfa0144c4c2990bd13264b079cea04ec", 0x67}, {&(0x7f00000003c0)="557a4cdb5a1fce79f0075dc7b1f0b064db5b64f98a00d5869ce508c9ae64915da1daa55afd95f3f66e6b97626d19f4422b43b987f18b911c0f633b400ef72856", 0x40}], 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) timerfd_create(0x8, 0x80000) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="00000018030103000400c4001000459800d8006800004d2f9078e0000001ffffffff0c21880b001900001c794c5fcd5656490500228337c3ac97cb9fb274d4d9998212080009f6d347e5103810f3514c5859085f8bcd044121d872d527be9db6ccba47166b45027b4ebb9222f07eff96f3443ec4461c325c516f1698e1f011fa3bfab0dedf7bd6dd68af010086dd0009fff9080088be000000031a0317040100000000000005080022eb00000003290eff030200000000000008000834120800655800000001a33ce789860dc984c201b1e28a9fe3cd0d2bcc93a01e37ac14a0f11b00000000"], 0xe6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="d2e6725d5a"]) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f00000028c0)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BLKDISCARD(r10, 0x1277, &(0x7f0000000040)=0x7) 0s ago: executing program 6 (id=7422): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1844674,\x00']) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x13, 0x8401) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0xfffffffffffffffc, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001000000040000000400000008400000af000000c22d442cdb492f"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1508, 0x0, 0x5, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x9}, 0x8, 0x4, 0x8, 0x4, 0x1c, 'syz1\x00', "c5b4670784a9ba909c5e993365e5fe2a5ed7c5e0ef90529e4e2fc747ecfa89f5", "8fc49d58ff4799d01e82f5fad265a456b35091dfd769b6262f450e166e2c4b56", [{0x3, 0x7f, {0x2}}, {0x8, 0xffff, {0x1, 0xec}}, {0x9, 0x3, {0x2, 0x5}}, {0xa, 0x6, {0x0, 0x4}}, {0x6, 0x4, {0x2, 0x2}}, {0x0, 0x3, {0x1, 0x5}}, {0x1, 0x5, {0x1, 0x80000001}}, {0x4, 0x1, {0x2, 0x6}}, {0x2c7, 0x6, {0x1, 0x2}}, {0x3, 0xf724, {0x3, 0x2}}, {0x6, 0x1f5, {0x3, 0x1212}}, {0x7b70, 0x6dd, {0x3, 0x4}}, {0x0, 0x7, {0x1, 0x400}}, {0x4, 0x5, {0x2, 0x7}}, {0x4, 0x6, {0x1, 0x9}}, {0xfffe, 0x2, {0x3, 0x3}}, {0xf, 0x40, {0x3, 0x7fff}}, {0x1, 0x3, {0x1, 0xc2}}, {0xfc01, 0x72d, {0x2, 0xb}}, {0xd, 0x7, {0x3, 0x31}}, {0xbc, 0x10, {0x2, 0x1}}, {0x2, 0x38, {0x2, 0x7fff}}, {0x10, 0x4, {0x1, 0x3}}, {0x2, 0x8, {0x2, 0x6}}, {0xd, 0x2, {0x2, 0xcb}}, {0x190, 0x5, {0x3, 0x3}}, {0x5, 0xf, {0x2, 0x7}}, {0x557, 0xb, {0x0, 0x1}}, {0x80, 0x5, {0x5f9e63bac0d64016, 0x9}}, {0x40, 0x5, {0x3, 0x9}}, {0x0, 0x4, {0x3, 0x40}}, {0x7, 0x9, {0x1}}, {0xfff9, 0xcb, {0xcb9be71ca279299, 0xd6}}, {0xee61, 0x61e, {0x3, 0x1}}, {0x5, 0x7fff, {0x0, 0x32bf}}, {0x2, 0x6, {0x2, 0xbb32}}, {0x800, 0x1, {0x1, 0x4}}, {0xdae3, 0x9, {0x1, 0x387}}, {0x1, 0x6, {0x0, 0x5}}, {0x5, 0x66, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x28, 0x40, 0x0, 0xc6, 0x8, 'syz0\x00', "f2ac9b11e83272a782638d312e910a38daa0e2abbdfe9992d5846238286928b4", "812089a34a66aee466dfdd457040f56ae59a1907b50caa20e044c6113e2f8ca3", [{0x1, 0x0, {0x2, 0x9}}, {0xe066, 0xe1, {0x1}}, {0x6, 0x7, {0x0, 0x7}}, {0x7, 0xaeb, {0x1, 0x200}}, {0x8001, 0x2, {0x0, 0x6}}, {0x1, 0x6, {0x2, 0x3afa}}, {0xd, 0x4, {0x0, 0x1ff}}, {0x80, 0x9, {0x2, 0x4}}, {0x0, 0xe, {0x0, 0x8}}, {0xd, 0xff, {0x1, 0x4}}, {0x3, 0x7, {0x3, 0x6130}}, {0x400, 0x6, {0x1, 0x9}}, {0x7, 0x9, {0x1, 0xf28c3324}}, {0xb, 0x4, {0x3, 0x8001}}, {0x2a8, 0xc, {0x3, 0x531f876a}}, {0x8, 0x9, {0x1, 0x8001}}, {0x3, 0x0, {0x1, 0x8}}, {0x9, 0x1, {0x3, 0x4}}, {0x4, 0x9, {0x1, 0xfffffff8}}, {0x0, 0x8, {0x3, 0x5}}, {0xf38e, 0x4, {0x2, 0x9}}, {0x0, 0x80, {0x2}}, {0x3ff, 0x9, {0x2, 0xc9}}, {0x1, 0x4, {0x2, 0x7ff}}, {0xff, 0x7ff, {0x2, 0x6}}, {0xa9, 0xfff8, {0x2}}, {0x9, 0xa3, {0x1, 0xe25}}, {0x3, 0x2, {0x0, 0x1000}}, {0x6, 0x3, {0x3, 0x4}}, {0x0, 0xec, {0x3, 0x200}}, {0xf78, 0x5, {0x0, 0x8}}, {0xfffd, 0x401, {0x0, 0x9}}, {0x6, 0x3, {0x3, 0xffffffff}}, {0x99df, 0x7f, {0x2, 0x4}}, {0xf734, 0x7, {0x0, 0x5}}, {0x3, 0xfff7, {0x0, 0xb7c}}, {0x9, 0xe68, {0x2, 0x6}}, {0x0, 0x1, {0x3, 0x6}}, {0xc787, 0xb, {0x1, 0x7}}, {0x2ca7, 0x5, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x80000000}, 0x6, 0xe4, 0x100, 0x5, 0x22, 'syz0\x00', "89cb54431c5774777d40c666d06df6581ab7815e9fd65435ac027d02eebd7da6", "fa5f5a7b20acd618b803a992a982394e21f53309d2008780595b1857658d06ee", [{0x0, 0x3, {0x3, 0x3}}, {0xd33, 0x8, {0x0, 0xc225}}, {0x7, 0x3, {0x3, 0x1}}, {0xfffb, 0x5, {0x1, 0x7e7}}, {0x5, 0x97c0, {0x2, 0x8}}, {0x0, 0x5, {0x1, 0x8}}, {0x1, 0x5, {0x3}}, {0x99, 0x2, {0x0, 0x7}}, {0x863, 0x10, {0x0, 0xd}}, {0x4, 0x990, {0x3, 0x1ff}}, {0x6, 0x4, {0x2, 0x3}}, {0x6, 0x0, {0x3, 0x80000001}}, {0x7, 0x3, {0x2, 0x7fff}}, {0x5, 0xb, {0x0, 0x3}}, {0x7, 0x3, {0x0, 0xce2}}, {0x7, 0xc0, {0x1}}, {0x6, 0x3ff, {0x0, 0x4}}, {0xe74, 0x2b64, {0x0, 0x9}}, {0x5, 0x2, {0x2, 0xfffffffd}}, {0x800, 0x4800, {0x3, 0x2}}, {0xc10, 0xfff7, {0x0, 0xe}}, {0x0, 0xf, {0x0, 0x3}}, {0x2, 0x6, {0x3, 0x6}}, {0x4, 0x6, {0x0, 0x8}}, {0x4, 0x9, {0x1}}, {0x5, 0xe36, {0x0, 0x3}}, {0xd, 0x9, {0x1, 0xe}}, {0x8, 0x8, {0x2, 0x6}}, {0x81, 0x7, {0x3, 0x7}}, {0x0, 0x6, {0x3, 0xd8}}, {0x9, 0x0, {0x1, 0xffff}}, {0x6, 0x33, {0x0, 0x4}}, {0x200, 0x8d11, {0x1, 0x100}}, {0x0, 0x0, {0x3, 0x5}}, {0x7, 0x92, {0x3, 0x6}}, {0xc, 0x2, {0x2, 0x1}}, {0x3, 0x8, {0x1, 0x8}}, {0x3, 0x528f, {0x0, 0xe}}, {0xfffc, 0x80}, {0x1, 0x6, {0x0, 0x24}}]}}}, {{0x254, 0x1, {{0x0, 0xffffffff}, 0xa, 0x7, 0x7, 0xfff7, 0xb, 'syz1\x00', "a7587a464edd3c6fb5db400d79ecd530076f9d435ca45e01d51a44b15d17ab00", "ed48db116145f9d5e77483aa71238fea0992b456693a8cabe836be010f5f6f64", [{0xfffe, 0x2, {0x1, 0x256}}, {0x300, 0x0, {0x1, 0x5}}, {0x7, 0x3f, {0x2, 0x2}}, {0x8, 0x400, {0x0, 0x5010}}, {0xc, 0x1, {0x1, 0x2}}, {0x4, 0xf85, {0x3, 0x10001}}, {0x6, 0x9, {0x1, 0x6}}, {0x477, 0xf, {0x2, 0x8}}, {0x0, 0x6a8, {0x44a1c33c4194fb86, 0x1ff}}, {0x3, 0x4, {0x0, 0x5}}, {0x8c01, 0x8001, {0x0, 0xb00000}}, {0x800, 0x8, {0x2, 0x5}}, {0x5, 0x0, {0x2, 0xd7d}}, {0x1, 0x78, {0x3, 0x200}}, {0x1, 0xd, {0x2, 0x9}}, {0x200, 0x6, {0x2, 0x5}}, {0x72a, 0x2}, {0x1, 0x9, {0x1, 0x9}}, {0x2, 0x8, {0x1, 0x7}}, {0x0, 0xff7f, {0x3, 0x5}}, {0xfe00, 0x3, {0x5, 0x3}}, {0x0, 0x4, {0x1, 0x50}}, {0x54, 0x8, {0x3, 0xb8}}, {0x9, 0x3ff, {0x1, 0x4}}, {0x4, 0x0, {0x0, 0x7}}, {0x6, 0x0, {0x3, 0x80000001}}, {0x7, 0x7, {0x3, 0x8260}}, {0xb9e, 0xfff8, {0x1, 0x5}}, {0xc4, 0xf6a8, {0x3, 0x101}}, {0x2, 0xfe, {0x1, 0x3}}, {0x2, 0x4, {0x2, 0x8001}}, {0x981d, 0x6, {0x1, 0x9}}, {0xc, 0x483, {0x1, 0xe}}, {0x7fff, 0x6, {0x2, 0xffff}}, {0x7fff, 0x80, {0x1, 0x5}}, {0x1, 0x7, {0x2, 0x6}}, {0x1, 0x1, {0x0, 0xe}}, {0x61, 0x8001, {0x3, 0x6}}, {0xfff7, 0x4, {0x1, 0x1}}, {0x401, 0x6, {0x2, 0x1de000}}]}}}, {{0x254, 0x1, {{0x0, 0x68b}, 0x80, 0x10, 0x1, 0x8, 0x27, 'syz0\x00', "87bcc52bab9e7aabed5776d95fc0c0e284d33dcafd25a26727f41f73cf9246b9", "955efe129036f8168e5e3c7b99ebf1e6d548bde56338f9c9f04da03065e16b61", [{0x2, 0x5, {0x3, 0x5}}, {0x8001, 0x9, {0x1, 0x1}}, {0x7, 0x9c0c, {0x2, 0x75}}, {0x8, 0x6, {0x1, 0x8}}, {0x7, 0x3ac, {0x1, 0x8}}, {0x1, 0x2, {0x1, 0x4}}, {0x1ff, 0x7, {0x1, 0x10}}, {0x4, 0x59d, {0x2}}, {0x5e93, 0x7f, {0x3, 0x3}}, {0x5, 0x2b0, {0x0, 0x71}}, {0x9, 0x7a, {0x0, 0xca9435b9}}, {0x600, 0x8, {0x2, 0x8}}, {0x9, 0x5f, {0x0, 0x87668e98}}, {0xfff, 0xf8, {0x1, 0xffff0000}}, {0x9, 0x2, {0x3, 0x2}}, {0x2bce, 0x81, {0x1, 0x49}}, {0x7, 0x4}, {0xfffe, 0x4, {0x3, 0x5}}, {0x1, 0x4, {0x1, 0x2}}, {0x1, 0x6, {0x1, 0x7}}, {0x4000, 0x10, {0x3, 0x1ff}}, {0x5, 0xfff8, {0x0, 0x1}}, {0x20, 0x40, {0x0, 0x8000}}, {0x7, 0x40, {0x3, 0x3}}, {0x8000, 0x4, {0x3, 0x5}}, {0x9, 0x3, {0x1, 0x100}}, {0x40, 0x3}, {0x8, 0x2, {0x1, 0xa1d0}}, {0x1, 0x1, {0x3, 0x8000}}, {0x6, 0x7ff}, {0x9, 0x7, {0x2, 0x9}}, {0x9, 0x8, {0x1, 0x8}}, {0xe8, 0x2, {0x0, 0x7}}, {0x6, 0x6, {0x2, 0x2}}, {0x4, 0x0, {0x0, 0x800}}, {0x51, 0x8, {0x2, 0x3}}, {0xc, 0x8886, {0x0, 0x80000001}}, {0xff, 0x5}, {0x7, 0x5, {0x0, 0x9}}, {0xff7f, 0xfff1, {0x1, 0xe6}}]}}}, {{0x254, 0x1, {{0x3, 0xffff8001}, 0x7, 0x2, 0x3, 0x80, 0x21, 'syz0\x00', "5eea2b5d3e1003e74d0fc1df7d7c7f7d8810f2c17fe33e3f55e78e3e0d60f2cf", "90f10da9fa526fd0d3066b13256dd180ea38ba30ddaa14e7cc54414af40eb4d4", [{0x7fff, 0x4, {0x0, 0x9}}, {0x8, 0x7}, {0x4, 0x42bd, {0x0, 0x5}}, {0xa, 0x6, {0x0, 0x6}}, {0x6, 0x2, {0x3, 0x5}}, {0x3, 0xfd5c, {0x1, 0x1db}}, {0x2, 0x2, {0x3, 0x800}}, {0x76, 0x4, {0x1, 0xfff}}, {0x7, 0x2, {0x2, 0xebe}}, {0x9, 0xffff, {0x1, 0x61}}, {0xe, 0xfff7, {0x2, 0x101}}, {0x1, 0x1, {0x2, 0x8}}, {0x3ff, 0x1ff, {0x2, 0x7}}, {0x3b, 0x8, {0x2}}, {0x0, 0x0, {0x2, 0xad}}, {0x10, 0x10, {0x2, 0x4}}, {0x80, 0x9, {0x2, 0x9}}, {0x1ff, 0x0, {0x2, 0x5}}, {0x4, 0x7, {0x0, 0x10}}, {0x80, 0x1, {0x0, 0x3}}, {0x401, 0x8, {0x3, 0xa}}, {0x0, 0x800, {0x3, 0x80}}, {0x296, 0x401, {0x1, 0xffffff9f}}, {0x6, 0x6ca0, {0x3, 0xe}}, {0x3, 0x1, {0x2, 0x9}}, {0x4, 0x1, {0x1, 0x1}}, {0x7, 0x6, {0x1, 0x2}}, {0x2a, 0x1, {0x2, 0x6}}, {0xfff9, 0xa4, {0x2, 0x9}}, {0xff, 0xc, {0x3, 0x7ff}}, {0xfff, 0x4, {0x3, 0xe}}, {0x9, 0x8, {0x0, 0x9}}, {0x6, 0x7, {0x0, 0x7f}}, {0x0, 0x78, {0x2, 0xd}}, {0x1, 0x6, {0x0, 0xfffffff8}}, {0x7, 0x8, {0x1, 0x2}}, {0x6, 0x8000, {0x0, 0x5}}, {0x0, 0x8000, {0x2, 0xfffffffc}}, {0xc, 0x5ac6, {0xf172c43f2557e0b5, 0x80000001}}, {0xb, 0x5, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x6, 0x1, 0x2, 0xe2f, 0x1e, 'syz1\x00', "6a6ad864419547111d3996b4cbeb32fdbc9347f73e75b0bd1c6bbb66951fb833", "7e2bcc0a594c20dc6d6d6986afbc7c0b3e114838c52fc27032ce3842c281a0e8", [{0x8000, 0x3, {0x0, 0x8}}, {0x7, 0x9, {0x2, 0x7e1770d4}}, {0x8000, 0x0, {0x0, 0x8}}, {0xff, 0x9, {0x3, 0x9}}, {0x1, 0x0, {0x2, 0x3}}, {0x5, 0xff7f, {0x2, 0x7fff}}, {0x4, 0x0, {0x0, 0xf88}}, {0x6, 0xd, {0x2, 0x4}}, {0x10, 0x4, {0x1, 0x80000000}}, {0x1, 0x3}, {0x8, 0x9, {0x1, 0x10}}, {0x3, 0x800, {0x3}}, {0x69, 0x5, {0x1, 0x9}}, {0x0, 0x3, {0x2, 0x80000000}}, {0x7, 0x7ff, {0x3, 0xcad}}, {0x8, 0x8, {0x2}}, {0x6f, 0xbf8, {0x0, 0x10}}, {0x6, 0x5, {0x0, 0xffff}}, {0x1000, 0x8, {0x2, 0x2}}, {0x1, 0x5, {0x3, 0x80000001}}, {0x9, 0x1ff, {0x1, 0x6}}, {0x4, 0x4, {0x2, 0x1}}, {0x9, 0x0, {0x3, 0x3ff}}, {0x7, 0x3, {0x0, 0x8a}}, {0xfb, 0x1, {0x2, 0x6}}, {0x7, 0x948, {0x0, 0x9}}, {0x9, 0x7ff, {0x2, 0xffff0001}}, {0x8, 0x9, {0x3, 0x9}}, {0x3, 0x2, {0x2}}, {0x3, 0x7, {0x2, 0x6}}, {0x8000, 0x8, {0x3, 0x1}}, {0x4, 0x4, {0x1, 0x6}}, {0x4, 0x7}, {0x8000, 0xb5fa, {0x2, 0x3}}, {0x3, 0x7, {0x0, 0x7}}, {0x6, 0x5, {0x2, 0x2}}, {0x5, 0x0, {0x3, 0x7}}, {0x4, 0x2, {0x2, 0x9}}, {0x9, 0x7fff, {0x3, 0x1}}, {0x2, 0x6b, {0x3, 0xfffffb64}}]}}}, {{0x254, 0x1, {{0x1}, 0x3, 0xb7, 0x5e, 0x4, 0x24, 'syz1\x00', "1da95fa3c86bc7f9bcb3844eb5c32ac4c22d56a56d045013716501098931955b", "b82194b242744dca20b1be5b383a545664f329ef719cc8b6b6a0ee3e8b54048e", [{0x1000, 0x1, {0x3, 0x80000001}}, {0xee, 0x6, {0x1, 0x72}}, {0xfff9, 0x2970, {0x0, 0x2}}, {0x0, 0x7fff, {0x2, 0x101}}, {0x7, 0x40, {0x3, 0x4}}, {0x4, 0x5, {0x1, 0x2e8}}, {0x7, 0x9, {0x2, 0x8}}, {0x2, 0x1, {0x3, 0x7fff}}, {0x7, 0x8, {0x3, 0x6}}, {0x3, 0x3, {0x0, 0xa}}, {0x0, 0x4, {0x0, 0x4}}, {0x9, 0x1, {0x2, 0x2}}, {0x6, 0x1, {0x0, 0x5}}, {0x4, 0x0, {0x1, 0xc}}, {0x4, 0x3, {0x3, 0x4ef1}}, {0x8, 0x2, {0x3, 0x40}}, {0x1, 0x1, {0x3, 0x9}}, {0x3, 0x100, {0x1, 0x2}}, {0xc7e0, 0x86, {0x1, 0x7}}, {0x7, 0x6, {0x1, 0xffffffff}}, {0x1, 0x81, {0x2, 0x5}}, {0x2, 0x4, {0x0, 0x7}}, {0x6, 0x0, {0x1, 0x80000001}}, {0xa958, 0x10, {0xd168a908fcad6db7, 0x8}}, {0x1, 0x7, {0x0, 0x9}}, {0xa, 0x872, {0x0, 0x5}}, {0x4, 0x7, {0x3, 0xcd42}}, {0x3, 0x8, {0x2, 0x8}}, {0x6fed, 0xffff, {0x2, 0x1}}, {0x5, 0x5, {0x1, 0x1000}}, {0x200, 0x8000, {0x1, 0x40}}, {0x4, 0x6, {0x0, 0x9}}, {0xa3, 0x5, {0x2, 0x100}}, {0x6, 0x10, {0x2, 0x800}}, {0x1, 0x81, {0x2, 0x64}}, {0x101, 0x4, {0x2, 0x4}}, {0x8, 0xfffb, {0x0, 0xfffffffd}}, {0x6, 0x1, {0x0, 0x4}}, {0x3, 0x7, {0x2}}, {0x0, 0x7, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x78, 0x6, 0x4, 0x6, 0x27, 'syz1\x00', "78a9fcc2eb99aac34d603cf63f46a22d908dbe364c9b0a55a73eb4e66607ccfb", "72826dfcf25d742836b1b0d7563053be0237b76c77801d1deaf76f2d3a2428c7", [{0x2, 0x43, {0xb414e763613cecd0, 0x4}}, {0x9, 0x400, {0x1, 0x5}}, {0x4, 0x7f, {0x2, 0xf}}, {0x7, 0x800, {0x2}}, {0x4, 0x81, {0x0, 0x950}}, {0x1, 0x6, {0x2, 0x60000000}}, {0x5, 0x4, {0x0, 0x2fd}}, {0x365, 0x6, {0x0, 0xba48}}, {0x800, 0x8b0f, {0x0, 0x30}}, {0xe4, 0xce, {0x2, 0x80}}, {0x9, 0x9, {0x3, 0x2}}, {0x4, 0x3, {0x1, 0x4}}, {0x3, 0x3, {0x3, 0xb11}}, {0xff, 0x4, {0x3, 0x1}}, {0x1, 0x1000, {0x2, 0xae6e}}, {0x1000, 0x7fff, {0x1, 0x1000}}, {0xd, 0xe00, {0x3, 0x5}}, {0x5, 0x9, {0x3, 0x401}}, {0x4, 0x8, {0x0, 0x7}}, {0x0, 0x1, {0x0, 0x6}}, {0x3ff, 0x4, {0x2, 0x9}}, {0x10, 0x7, {0x2, 0xf}}, {0x6, 0x9, {0x3, 0x5}}, {0x2447, 0x1f, {0x3, 0x1}}, {0x4, 0xdf0, {0x2, 0x2}}, {0x0, 0xdc66}, {0x2, 0x3, {0x3}}, {0x2bc7, 0x5, {0x2, 0x1ff}}, {0x9, 0xe, {0x1, 0x3}}, {0x5, 0xffff, {0x1, 0x7}}, {0x8, 0x3, {0x3, 0x2}}, {0x1, 0xa403, {0x0, 0x5}}, {0x1, 0x9, {0x2, 0xf}}, {0x2, 0x0, {0x1, 0x2}}, {0x4, 0x6, {0x0, 0x8}}, {0x1, 0x3, {0x3, 0x62e}}, {0xb, 0x6, {0x1, 0x10}}, {0xae1, 0x6d}, {0x6e, 0x400, {0x1, 0x3}}, {0x80, 0x4, {0x3, 0x1}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x20040840}, 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1844674,\x00']) (async) syz_open_dev$usbfs(&(0x7f0000000340), 0x13, 0x8401) (async) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0xfffffffffffffffc, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001000000040000000400000008400000af000000c22d442cdb492f"]) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1508, 0x0, 0x5, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x9}, 0x8, 0x4, 0x8, 0x4, 0x1c, 'syz1\x00', "c5b4670784a9ba909c5e993365e5fe2a5ed7c5e0ef90529e4e2fc747ecfa89f5", "8fc49d58ff4799d01e82f5fad265a456b35091dfd769b6262f450e166e2c4b56", [{0x3, 0x7f, {0x2}}, {0x8, 0xffff, {0x1, 0xec}}, {0x9, 0x3, {0x2, 0x5}}, {0xa, 0x6, {0x0, 0x4}}, {0x6, 0x4, {0x2, 0x2}}, {0x0, 0x3, {0x1, 0x5}}, {0x1, 0x5, {0x1, 0x80000001}}, {0x4, 0x1, {0x2, 0x6}}, {0x2c7, 0x6, {0x1, 0x2}}, {0x3, 0xf724, {0x3, 0x2}}, {0x6, 0x1f5, {0x3, 0x1212}}, {0x7b70, 0x6dd, {0x3, 0x4}}, {0x0, 0x7, {0x1, 0x400}}, {0x4, 0x5, {0x2, 0x7}}, {0x4, 0x6, {0x1, 0x9}}, {0xfffe, 0x2, {0x3, 0x3}}, {0xf, 0x40, {0x3, 0x7fff}}, {0x1, 0x3, {0x1, 0xc2}}, {0xfc01, 0x72d, {0x2, 0xb}}, {0xd, 0x7, {0x3, 0x31}}, {0xbc, 0x10, {0x2, 0x1}}, {0x2, 0x38, {0x2, 0x7fff}}, {0x10, 0x4, {0x1, 0x3}}, {0x2, 0x8, {0x2, 0x6}}, {0xd, 0x2, {0x2, 0xcb}}, {0x190, 0x5, {0x3, 0x3}}, {0x5, 0xf, {0x2, 0x7}}, {0x557, 0xb, {0x0, 0x1}}, {0x80, 0x5, {0x5f9e63bac0d64016, 0x9}}, {0x40, 0x5, {0x3, 0x9}}, {0x0, 0x4, {0x3, 0x40}}, {0x7, 0x9, {0x1}}, {0xfff9, 0xcb, {0xcb9be71ca279299, 0xd6}}, {0xee61, 0x61e, {0x3, 0x1}}, {0x5, 0x7fff, {0x0, 0x32bf}}, {0x2, 0x6, {0x2, 0xbb32}}, {0x800, 0x1, {0x1, 0x4}}, {0xdae3, 0x9, {0x1, 0x387}}, {0x1, 0x6, {0x0, 0x5}}, {0x5, 0x66, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x28, 0x40, 0x0, 0xc6, 0x8, 'syz0\x00', "f2ac9b11e83272a782638d312e910a38daa0e2abbdfe9992d5846238286928b4", "812089a34a66aee466dfdd457040f56ae59a1907b50caa20e044c6113e2f8ca3", [{0x1, 0x0, {0x2, 0x9}}, {0xe066, 0xe1, {0x1}}, {0x6, 0x7, {0x0, 0x7}}, {0x7, 0xaeb, {0x1, 0x200}}, {0x8001, 0x2, {0x0, 0x6}}, {0x1, 0x6, {0x2, 0x3afa}}, {0xd, 0x4, {0x0, 0x1ff}}, {0x80, 0x9, {0x2, 0x4}}, {0x0, 0xe, {0x0, 0x8}}, {0xd, 0xff, {0x1, 0x4}}, {0x3, 0x7, {0x3, 0x6130}}, {0x400, 0x6, {0x1, 0x9}}, {0x7, 0x9, {0x1, 0xf28c3324}}, {0xb, 0x4, {0x3, 0x8001}}, {0x2a8, 0xc, {0x3, 0x531f876a}}, {0x8, 0x9, {0x1, 0x8001}}, {0x3, 0x0, {0x1, 0x8}}, {0x9, 0x1, {0x3, 0x4}}, {0x4, 0x9, {0x1, 0xfffffff8}}, {0x0, 0x8, {0x3, 0x5}}, {0xf38e, 0x4, {0x2, 0x9}}, {0x0, 0x80, {0x2}}, {0x3ff, 0x9, {0x2, 0xc9}}, {0x1, 0x4, {0x2, 0x7ff}}, {0xff, 0x7ff, {0x2, 0x6}}, {0xa9, 0xfff8, {0x2}}, {0x9, 0xa3, {0x1, 0xe25}}, {0x3, 0x2, {0x0, 0x1000}}, {0x6, 0x3, {0x3, 0x4}}, {0x0, 0xec, {0x3, 0x200}}, {0xf78, 0x5, {0x0, 0x8}}, {0xfffd, 0x401, {0x0, 0x9}}, {0x6, 0x3, {0x3, 0xffffffff}}, {0x99df, 0x7f, {0x2, 0x4}}, {0xf734, 0x7, {0x0, 0x5}}, {0x3, 0xfff7, {0x0, 0xb7c}}, {0x9, 0xe68, {0x2, 0x6}}, {0x0, 0x1, {0x3, 0x6}}, {0xc787, 0xb, {0x1, 0x7}}, {0x2ca7, 0x5, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x80000000}, 0x6, 0xe4, 0x100, 0x5, 0x22, 'syz0\x00', "89cb54431c5774777d40c666d06df6581ab7815e9fd65435ac027d02eebd7da6", "fa5f5a7b20acd618b803a992a982394e21f53309d2008780595b1857658d06ee", [{0x0, 0x3, {0x3, 0x3}}, {0xd33, 0x8, {0x0, 0xc225}}, {0x7, 0x3, {0x3, 0x1}}, {0xfffb, 0x5, {0x1, 0x7e7}}, {0x5, 0x97c0, {0x2, 0x8}}, {0x0, 0x5, {0x1, 0x8}}, {0x1, 0x5, {0x3}}, {0x99, 0x2, {0x0, 0x7}}, {0x863, 0x10, {0x0, 0xd}}, {0x4, 0x990, {0x3, 0x1ff}}, {0x6, 0x4, {0x2, 0x3}}, {0x6, 0x0, {0x3, 0x80000001}}, {0x7, 0x3, {0x2, 0x7fff}}, {0x5, 0xb, {0x0, 0x3}}, {0x7, 0x3, {0x0, 0xce2}}, {0x7, 0xc0, {0x1}}, {0x6, 0x3ff, {0x0, 0x4}}, {0xe74, 0x2b64, {0x0, 0x9}}, {0x5, 0x2, {0x2, 0xfffffffd}}, {0x800, 0x4800, {0x3, 0x2}}, {0xc10, 0xfff7, {0x0, 0xe}}, {0x0, 0xf, {0x0, 0x3}}, {0x2, 0x6, {0x3, 0x6}}, {0x4, 0x6, {0x0, 0x8}}, {0x4, 0x9, {0x1}}, {0x5, 0xe36, {0x0, 0x3}}, {0xd, 0x9, {0x1, 0xe}}, {0x8, 0x8, {0x2, 0x6}}, {0x81, 0x7, {0x3, 0x7}}, {0x0, 0x6, {0x3, 0xd8}}, {0x9, 0x0, {0x1, 0xffff}}, {0x6, 0x33, {0x0, 0x4}}, {0x200, 0x8d11, {0x1, 0x100}}, {0x0, 0x0, {0x3, 0x5}}, {0x7, 0x92, {0x3, 0x6}}, {0xc, 0x2, {0x2, 0x1}}, {0x3, 0x8, {0x1, 0x8}}, {0x3, 0x528f, {0x0, 0xe}}, {0xfffc, 0x80}, {0x1, 0x6, {0x0, 0x24}}]}}}, {{0x254, 0x1, {{0x0, 0xffffffff}, 0xa, 0x7, 0x7, 0xfff7, 0xb, 'syz1\x00', "a7587a464edd3c6fb5db400d79ecd530076f9d435ca45e01d51a44b15d17ab00", "ed48db116145f9d5e77483aa71238fea0992b456693a8cabe836be010f5f6f64", [{0xfffe, 0x2, {0x1, 0x256}}, {0x300, 0x0, {0x1, 0x5}}, {0x7, 0x3f, {0x2, 0x2}}, {0x8, 0x400, {0x0, 0x5010}}, {0xc, 0x1, {0x1, 0x2}}, {0x4, 0xf85, {0x3, 0x10001}}, {0x6, 0x9, {0x1, 0x6}}, {0x477, 0xf, {0x2, 0x8}}, {0x0, 0x6a8, {0x44a1c33c4194fb86, 0x1ff}}, {0x3, 0x4, {0x0, 0x5}}, {0x8c01, 0x8001, {0x0, 0xb00000}}, {0x800, 0x8, {0x2, 0x5}}, {0x5, 0x0, {0x2, 0xd7d}}, {0x1, 0x78, {0x3, 0x200}}, {0x1, 0xd, {0x2, 0x9}}, {0x200, 0x6, {0x2, 0x5}}, {0x72a, 0x2}, {0x1, 0x9, {0x1, 0x9}}, {0x2, 0x8, {0x1, 0x7}}, {0x0, 0xff7f, {0x3, 0x5}}, {0xfe00, 0x3, {0x5, 0x3}}, {0x0, 0x4, {0x1, 0x50}}, {0x54, 0x8, {0x3, 0xb8}}, {0x9, 0x3ff, {0x1, 0x4}}, {0x4, 0x0, {0x0, 0x7}}, {0x6, 0x0, {0x3, 0x80000001}}, {0x7, 0x7, {0x3, 0x8260}}, {0xb9e, 0xfff8, {0x1, 0x5}}, {0xc4, 0xf6a8, {0x3, 0x101}}, {0x2, 0xfe, {0x1, 0x3}}, {0x2, 0x4, {0x2, 0x8001}}, {0x981d, 0x6, {0x1, 0x9}}, {0xc, 0x483, {0x1, 0xe}}, {0x7fff, 0x6, {0x2, 0xffff}}, {0x7fff, 0x80, {0x1, 0x5}}, {0x1, 0x7, {0x2, 0x6}}, {0x1, 0x1, {0x0, 0xe}}, {0x61, 0x8001, {0x3, 0x6}}, {0xfff7, 0x4, {0x1, 0x1}}, {0x401, 0x6, {0x2, 0x1de000}}]}}}, {{0x254, 0x1, {{0x0, 0x68b}, 0x80, 0x10, 0x1, 0x8, 0x27, 'syz0\x00', "87bcc52bab9e7aabed5776d95fc0c0e284d33dcafd25a26727f41f73cf9246b9", "955efe129036f8168e5e3c7b99ebf1e6d548bde56338f9c9f04da03065e16b61", [{0x2, 0x5, {0x3, 0x5}}, {0x8001, 0x9, {0x1, 0x1}}, {0x7, 0x9c0c, {0x2, 0x75}}, {0x8, 0x6, {0x1, 0x8}}, {0x7, 0x3ac, {0x1, 0x8}}, {0x1, 0x2, {0x1, 0x4}}, {0x1ff, 0x7, {0x1, 0x10}}, {0x4, 0x59d, {0x2}}, {0x5e93, 0x7f, {0x3, 0x3}}, {0x5, 0x2b0, {0x0, 0x71}}, {0x9, 0x7a, {0x0, 0xca9435b9}}, {0x600, 0x8, {0x2, 0x8}}, {0x9, 0x5f, {0x0, 0x87668e98}}, {0xfff, 0xf8, {0x1, 0xffff0000}}, {0x9, 0x2, {0x3, 0x2}}, {0x2bce, 0x81, {0x1, 0x49}}, {0x7, 0x4}, {0xfffe, 0x4, {0x3, 0x5}}, {0x1, 0x4, {0x1, 0x2}}, {0x1, 0x6, {0x1, 0x7}}, {0x4000, 0x10, {0x3, 0x1ff}}, {0x5, 0xfff8, {0x0, 0x1}}, {0x20, 0x40, {0x0, 0x8000}}, {0x7, 0x40, {0x3, 0x3}}, {0x8000, 0x4, {0x3, 0x5}}, {0x9, 0x3, {0x1, 0x100}}, {0x40, 0x3}, {0x8, 0x2, {0x1, 0xa1d0}}, {0x1, 0x1, {0x3, 0x8000}}, {0x6, 0x7ff}, {0x9, 0x7, {0x2, 0x9}}, {0x9, 0x8, {0x1, 0x8}}, {0xe8, 0x2, {0x0, 0x7}}, {0x6, 0x6, {0x2, 0x2}}, {0x4, 0x0, {0x0, 0x800}}, {0x51, 0x8, {0x2, 0x3}}, {0xc, 0x8886, {0x0, 0x80000001}}, {0xff, 0x5}, {0x7, 0x5, {0x0, 0x9}}, {0xff7f, 0xfff1, {0x1, 0xe6}}]}}}, {{0x254, 0x1, {{0x3, 0xffff8001}, 0x7, 0x2, 0x3, 0x80, 0x21, 'syz0\x00', "5eea2b5d3e1003e74d0fc1df7d7c7f7d8810f2c17fe33e3f55e78e3e0d60f2cf", "90f10da9fa526fd0d3066b13256dd180ea38ba30ddaa14e7cc54414af40eb4d4", [{0x7fff, 0x4, {0x0, 0x9}}, {0x8, 0x7}, {0x4, 0x42bd, {0x0, 0x5}}, {0xa, 0x6, {0x0, 0x6}}, {0x6, 0x2, {0x3, 0x5}}, {0x3, 0xfd5c, {0x1, 0x1db}}, {0x2, 0x2, {0x3, 0x800}}, {0x76, 0x4, {0x1, 0xfff}}, {0x7, 0x2, {0x2, 0xebe}}, {0x9, 0xffff, {0x1, 0x61}}, {0xe, 0xfff7, {0x2, 0x101}}, {0x1, 0x1, {0x2, 0x8}}, {0x3ff, 0x1ff, {0x2, 0x7}}, {0x3b, 0x8, {0x2}}, {0x0, 0x0, {0x2, 0xad}}, {0x10, 0x10, {0x2, 0x4}}, {0x80, 0x9, {0x2, 0x9}}, {0x1ff, 0x0, {0x2, 0x5}}, {0x4, 0x7, {0x0, 0x10}}, {0x80, 0x1, {0x0, 0x3}}, {0x401, 0x8, {0x3, 0xa}}, {0x0, 0x800, {0x3, 0x80}}, {0x296, 0x401, {0x1, 0xffffff9f}}, {0x6, 0x6ca0, {0x3, 0xe}}, {0x3, 0x1, {0x2, 0x9}}, {0x4, 0x1, {0x1, 0x1}}, {0x7, 0x6, {0x1, 0x2}}, {0x2a, 0x1, {0x2, 0x6}}, {0xfff9, 0xa4, {0x2, 0x9}}, {0xff, 0xc, {0x3, 0x7ff}}, {0xfff, 0x4, {0x3, 0xe}}, {0x9, 0x8, {0x0, 0x9}}, {0x6, 0x7, {0x0, 0x7f}}, {0x0, 0x78, {0x2, 0xd}}, {0x1, 0x6, {0x0, 0xfffffff8}}, {0x7, 0x8, {0x1, 0x2}}, {0x6, 0x8000, {0x0, 0x5}}, {0x0, 0x8000, {0x2, 0xfffffffc}}, {0xc, 0x5ac6, {0xf172c43f2557e0b5, 0x80000001}}, {0xb, 0x5, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x6, 0x1, 0x2, 0xe2f, 0x1e, 'syz1\x00', "6a6ad864419547111d3996b4cbeb32fdbc9347f73e75b0bd1c6bbb66951fb833", "7e2bcc0a594c20dc6d6d6986afbc7c0b3e114838c52fc27032ce3842c281a0e8", [{0x8000, 0x3, {0x0, 0x8}}, {0x7, 0x9, {0x2, 0x7e1770d4}}, {0x8000, 0x0, {0x0, 0x8}}, {0xff, 0x9, {0x3, 0x9}}, {0x1, 0x0, {0x2, 0x3}}, {0x5, 0xff7f, {0x2, 0x7fff}}, {0x4, 0x0, {0x0, 0xf88}}, {0x6, 0xd, {0x2, 0x4}}, {0x10, 0x4, {0x1, 0x80000000}}, {0x1, 0x3}, {0x8, 0x9, {0x1, 0x10}}, {0x3, 0x800, {0x3}}, {0x69, 0x5, {0x1, 0x9}}, {0x0, 0x3, {0x2, 0x80000000}}, {0x7, 0x7ff, {0x3, 0xcad}}, {0x8, 0x8, {0x2}}, {0x6f, 0xbf8, {0x0, 0x10}}, {0x6, 0x5, {0x0, 0xffff}}, {0x1000, 0x8, {0x2, 0x2}}, {0x1, 0x5, {0x3, 0x80000001}}, {0x9, 0x1ff, {0x1, 0x6}}, {0x4, 0x4, {0x2, 0x1}}, {0x9, 0x0, {0x3, 0x3ff}}, {0x7, 0x3, {0x0, 0x8a}}, {0xfb, 0x1, {0x2, 0x6}}, {0x7, 0x948, {0x0, 0x9}}, {0x9, 0x7ff, {0x2, 0xffff0001}}, {0x8, 0x9, {0x3, 0x9}}, {0x3, 0x2, {0x2}}, {0x3, 0x7, {0x2, 0x6}}, {0x8000, 0x8, {0x3, 0x1}}, {0x4, 0x4, {0x1, 0x6}}, {0x4, 0x7}, {0x8000, 0xb5fa, {0x2, 0x3}}, {0x3, 0x7, {0x0, 0x7}}, {0x6, 0x5, {0x2, 0x2}}, {0x5, 0x0, {0x3, 0x7}}, {0x4, 0x2, {0x2, 0x9}}, {0x9, 0x7fff, {0x3, 0x1}}, {0x2, 0x6b, {0x3, 0xfffffb64}}]}}}, {{0x254, 0x1, {{0x1}, 0x3, 0xb7, 0x5e, 0x4, 0x24, 'syz1\x00', "1da95fa3c86bc7f9bcb3844eb5c32ac4c22d56a56d045013716501098931955b", "b82194b242744dca20b1be5b383a545664f329ef719cc8b6b6a0ee3e8b54048e", [{0x1000, 0x1, {0x3, 0x80000001}}, {0xee, 0x6, {0x1, 0x72}}, {0xfff9, 0x2970, {0x0, 0x2}}, {0x0, 0x7fff, {0x2, 0x101}}, {0x7, 0x40, {0x3, 0x4}}, {0x4, 0x5, {0x1, 0x2e8}}, {0x7, 0x9, {0x2, 0x8}}, {0x2, 0x1, {0x3, 0x7fff}}, {0x7, 0x8, {0x3, 0x6}}, {0x3, 0x3, {0x0, 0xa}}, {0x0, 0x4, {0x0, 0x4}}, {0x9, 0x1, {0x2, 0x2}}, {0x6, 0x1, {0x0, 0x5}}, {0x4, 0x0, {0x1, 0xc}}, {0x4, 0x3, {0x3, 0x4ef1}}, {0x8, 0x2, {0x3, 0x40}}, {0x1, 0x1, {0x3, 0x9}}, {0x3, 0x100, {0x1, 0x2}}, {0xc7e0, 0x86, {0x1, 0x7}}, {0x7, 0x6, {0x1, 0xffffffff}}, {0x1, 0x81, {0x2, 0x5}}, {0x2, 0x4, {0x0, 0x7}}, {0x6, 0x0, {0x1, 0x80000001}}, {0xa958, 0x10, {0xd168a908fcad6db7, 0x8}}, {0x1, 0x7, {0x0, 0x9}}, {0xa, 0x872, {0x0, 0x5}}, {0x4, 0x7, {0x3, 0xcd42}}, {0x3, 0x8, {0x2, 0x8}}, {0x6fed, 0xffff, {0x2, 0x1}}, {0x5, 0x5, {0x1, 0x1000}}, {0x200, 0x8000, {0x1, 0x40}}, {0x4, 0x6, {0x0, 0x9}}, {0xa3, 0x5, {0x2, 0x100}}, {0x6, 0x10, {0x2, 0x800}}, {0x1, 0x81, {0x2, 0x64}}, {0x101, 0x4, {0x2, 0x4}}, {0x8, 0xfffb, {0x0, 0xfffffffd}}, {0x6, 0x1, {0x0, 0x4}}, {0x3, 0x7, {0x2}}, {0x0, 0x7, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x78, 0x6, 0x4, 0x6, 0x27, 'syz1\x00', "78a9fcc2eb99aac34d603cf63f46a22d908dbe364c9b0a55a73eb4e66607ccfb", "72826dfcf25d742836b1b0d7563053be0237b76c77801d1deaf76f2d3a2428c7", [{0x2, 0x43, {0xb414e763613cecd0, 0x4}}, {0x9, 0x400, {0x1, 0x5}}, {0x4, 0x7f, {0x2, 0xf}}, {0x7, 0x800, {0x2}}, {0x4, 0x81, {0x0, 0x950}}, {0x1, 0x6, {0x2, 0x60000000}}, {0x5, 0x4, {0x0, 0x2fd}}, {0x365, 0x6, {0x0, 0xba48}}, {0x800, 0x8b0f, {0x0, 0x30}}, {0xe4, 0xce, {0x2, 0x80}}, {0x9, 0x9, {0x3, 0x2}}, {0x4, 0x3, {0x1, 0x4}}, {0x3, 0x3, {0x3, 0xb11}}, {0xff, 0x4, {0x3, 0x1}}, {0x1, 0x1000, {0x2, 0xae6e}}, {0x1000, 0x7fff, {0x1, 0x1000}}, {0xd, 0xe00, {0x3, 0x5}}, {0x5, 0x9, {0x3, 0x401}}, {0x4, 0x8, {0x0, 0x7}}, {0x0, 0x1, {0x0, 0x6}}, {0x3ff, 0x4, {0x2, 0x9}}, {0x10, 0x7, {0x2, 0xf}}, {0x6, 0x9, {0x3, 0x5}}, {0x2447, 0x1f, {0x3, 0x1}}, {0x4, 0xdf0, {0x2, 0x2}}, {0x0, 0xdc66}, {0x2, 0x3, {0x3}}, {0x2bc7, 0x5, {0x2, 0x1ff}}, {0x9, 0xe, {0x1, 0x3}}, {0x5, 0xffff, {0x1, 0x7}}, {0x8, 0x3, {0x3, 0x2}}, {0x1, 0xa403, {0x0, 0x5}}, {0x1, 0x9, {0x2, 0xf}}, {0x2, 0x0, {0x1, 0x2}}, {0x4, 0x6, {0x0, 0x8}}, {0x1, 0x3, {0x3, 0x62e}}, {0xb, 0x6, {0x1, 0x10}}, {0xae1, 0x6d}, {0x6e, 0x400, {0x1, 0x3}}, {0x80, 0x4, {0x3, 0x1}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x20040840}, 0x2) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) mmap$binder(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) kernel console output (not intermixed with test programs): translating object. [ 576.008842][T19756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 576.016685][T19756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:229 [ 576.156791][T19764] /dev/rnullb0: Can't lookup blockdev [ 576.645239][T19794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.665859][T19794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.701691][T19795] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 576.880798][ T8579] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 577.040791][ T8579] usb 3-1: Using ep0 maxpacket: 16 [ 577.048349][ T8579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.060337][ T8579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.070708][ T8579] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 577.079969][ T8579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.089856][ T8579] usb 3-1: config 0 descriptor?? [ 577.608957][T19823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 577.618589][T19823] rust_binder: Error in use_page_slow: ESRCH [ 577.625189][T19823] rust_binder: use_range failure ESRCH [ 577.632127][T19823] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 577.637717][T19823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 577.646651][T19823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:732 [ 577.698215][T19826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 577.760673][T19826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 577.775791][T19826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:735 [ 577.797501][T19829] tmpfs: Unsupported parameter 'mpol' [ 578.046367][T19836] overlayfs: failed to clone upperpath [ 579.234981][T19861] IPv6: Can't replace route, no match found [ 579.241918][ T36] kauditd_printk_skb: 415 callbacks suppressed [ 579.241937][ T36] audit: type=1400 audit(2000000246.251:48925): avc: denied { execmem } for pid=19859 comm="syz.9.6533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 579.631725][ T8579] usbhid 3-1:0.0: can't add hid device: -71 [ 579.648942][ T8579] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 579.649480][ T36] audit: type=1400 audit(2000000246.651:48926): avc: denied { read write } for pid=11839 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 579.659760][ T8579] usb 3-1: USB disconnect, device number 110 [ 579.690865][ T36] audit: type=1400 audit(2000000246.691:48927): avc: denied { read write open } for pid=11839 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 579.718752][ T36] audit: type=1400 audit(2000000246.691:48928): avc: denied { ioctl } for pid=11839 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 579.781905][ T36] audit: type=1400 audit(2000000246.791:48929): avc: denied { read write } for pid=11839 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 579.832577][ T36] audit: type=1400 audit(2000000246.791:48930): avc: denied { read write open } for pid=11839 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 579.873470][ T36] audit: type=1400 audit(2000000246.791:48931): avc: denied { ioctl } for pid=11839 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 579.899363][ T36] audit: type=1400 audit(2000000246.831:48932): avc: denied { read } for pid=19865 comm="syz.2.6535" dev="nsfs" ino=4026532315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 579.920795][ T36] audit: type=1400 audit(2000000246.831:48933): avc: denied { read open } for pid=19865 comm="syz.2.6535" path="net:[4026532315]" dev="nsfs" ino=4026532315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 579.944805][ T36] audit: type=1400 audit(2000000246.831:48934): avc: denied { create } for pid=19865 comm="syz.2.6535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 580.243261][T19883] netlink: 'syz.9.6540': attribute type 14 has an invalid length. [ 580.988058][T19894] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 580.988084][T19894] rust_binder: Read failure Err(EFAULT) in pid:267 [ 581.143253][T19900] 9pnet_fd: Insufficient options for proto=fd [ 581.228555][T19905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 581.229009][T19905] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 581.244193][T19905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:745 [ 581.247588][T19905] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 581.257306][T19905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 581.265725][T19905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:745 [ 582.017510][T19925] fuse: Bad value for 'group_id' [ 582.032586][T19925] fuse: Bad value for 'group_id' [ 582.043532][T19926] /dev/rnullb0: Can't lookup blockdev [ 582.103849][T19929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 582.156932][T19930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:280 [ 582.810830][ T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 582.991391][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.032002][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 583.046524][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.070764][ T9] usb 3-1: Product: syz [ 583.074989][ T9] usb 3-1: Manufacturer: syz [ 583.079614][ T9] usb 3-1: SerialNumber: syz [ 583.339948][T19970] netlink: 'syz.8.6572': attribute type 4 has an invalid length. [ 584.133496][T19944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.143242][T19944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.160828][ T9] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 584.167352][ T9] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 584.175369][ T9] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 584.320380][ T36] kauditd_printk_skb: 396 callbacks suppressed [ 584.320401][ T36] audit: type=1400 audit(2000000251.321:49331): avc: denied { create } for pid=20004 comm="syz.9.6584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 584.348300][ T36] audit: type=1400 audit(2000000251.331:49332): avc: denied { map } for pid=20004 comm="syz.9.6584" path="socket:[111162]" dev="sockfs" ino=111162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 584.362496][ T9] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 584.373044][ T36] audit: type=1400 audit(2000000251.331:49333): avc: denied { read } for pid=20004 comm="syz.9.6584" path="socket:[111162]" dev="sockfs" ino=111162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 584.381789][ T9] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 584.407041][ T36] audit: type=1400 audit(2000000251.331:49334): avc: denied { create } for pid=20004 comm="syz.9.6584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 584.434006][ T36] audit: type=1400 audit(2000000251.331:49335): avc: denied { execmem } for pid=20004 comm="syz.9.6584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 584.464457][ T36] audit: type=1400 audit(2000000251.371:49336): avc: denied { ioctl } for pid=19941 comm="syz.2.6562" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 584.491600][ T36] audit: type=1400 audit(2000000251.371:49337): avc: denied { ioctl } for pid=19941 comm="syz.2.6562" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 584.522164][ T36] audit: type=1400 audit(2000000251.511:49338): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 584.545224][ T36] audit: type=1400 audit(2000000251.521:49339): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.578752][ T9] usb 3-1: USB disconnect, device number 111 [ 584.585261][ T9] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 584.596333][ T36] audit: type=1400 audit(2000000251.531:49340): avc: denied { search } for pid=149 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.343319][T20040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1594 [ 585.460779][T20044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1596 [ 585.525597][T20046] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 585.571082][T20046] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 585.577576][T20046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 585.612473][T20046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:758 [ 585.758113][T20057] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 585.769522][T20057] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 585.777599][T20057] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 585.786590][T20057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:761 [ 585.800390][T20059] binder: Binderfs stats mode cannot be changed during a remount [ 586.044401][T20069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 586.044881][T20069] rust_binder: inc_ref_done called when no active inc_refs [ 586.491210][T20095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 586.705619][T20108] EXT4-fs: dax option not supported [ 586.894182][T20117] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 587.710790][ T541] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 587.717152][T20143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 587.726778][T20143] rust_binder: Error while translating object. [ 587.740822][T20143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 587.747054][T20143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:312 [ 587.871008][ T541] usb 3-1: Using ep0 maxpacket: 32 [ 587.925542][ T541] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.937013][ T541] usb 3-1: config 0 has no interfaces? [ 587.952103][ T541] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 587.966024][ T541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.974199][ T541] usb 3-1: Product: syz [ 587.991108][ T541] usb 3-1: Manufacturer: syz [ 588.000774][ T541] usb 3-1: SerialNumber: syz [ 588.014810][ T541] usb 3-1: config 0 descriptor?? [ 588.297986][T20173] rust_binder: Write failure EFAULT in pid:326 [ 588.772262][T20192] 9pnet_fd: Insufficient options for proto=fd [ 588.962712][T20199] overlayfs: cannot append lower layer [ 589.616709][ T36] kauditd_printk_skb: 863 callbacks suppressed [ 589.616741][ T36] audit: type=1400 audit(2000000256.621:50204): avc: denied { create } for pid=20207 comm="syz.9.6647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.649411][ T36] audit: type=1400 audit(2000000256.621:50205): avc: denied { write } for pid=20207 comm="syz.9.6647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.671943][T20210] incfs: Can't find or create .index dir in ./cgroup [ 589.672019][ T36] audit: type=1400 audit(2000000256.621:50206): avc: denied { create } for pid=20207 comm="syz.9.6647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.679910][T20210] incfs: mount failed -1 [ 589.705661][ T36] audit: type=1400 audit(2000000256.621:50207): avc: denied { ioctl } for pid=20207 comm="syz.9.6647" path="socket:[112905]" dev="sockfs" ino=112905 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.732998][ T36] audit: type=1400 audit(2000000256.621:50208): avc: denied { create } for pid=20207 comm="syz.9.6647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.755317][ T36] audit: type=1400 audit(2000000256.631:50209): avc: denied { create } for pid=20207 comm="syz.9.6647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.778808][ T36] audit: type=1400 audit(2000000256.631:50210): avc: denied { write } for pid=20207 comm="syz.9.6647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.800222][ T36] audit: type=1400 audit(2000000256.631:50211): avc: denied { write } for pid=20207 comm="syz.9.6647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.820999][ T36] audit: type=1400 audit(2000000256.631:50212): avc: denied { write } for pid=20207 comm="syz.9.6647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.842458][ T36] audit: type=1400 audit(2000000256.671:50213): avc: denied { name_bind } for pid=20134 comm="syz.2.6623" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 590.016687][T20221] __vm_enough_memory: pid: 20221, comm: syz.6.6651, bytes: 18014402804453376 not enough memory for the allocation [ 590.131369][T20231] kvm_intel: kvm [20228]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 590.142237][T20231] kvm_intel: kvm [20228]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 590.152993][T20231] kvm_intel: kvm [20228]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 590.163532][T20231] kvm_intel: kvm [20228]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 590.174096][T20231] kvm_intel: kvm [20228]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 590.184645][T20231] kvm_intel: kvm [20228]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 590.195179][T20231] kvm_intel: kvm [20228]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 590.205877][T20231] kvm_intel: kvm [20228]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 590.216989][T20231] kvm_intel: kvm [20228]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 590.227508][T20231] kvm_intel: kvm [20228]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 590.814705][ T9] usb 3-1: USB disconnect, device number 112 [ 591.382228][T20265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 591.384067][T20265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 591.393050][ T9] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 591.411822][T20265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:804 [ 591.428211][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6665'. [ 591.460765][T20267] erspan0: default FDB implementation only supports local addresses [ 591.519633][T20271] rust_binder: Write failure EFAULT in pid:806 [ 591.572118][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 591.608374][ T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 591.623715][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.653166][ T9] usb 3-1: config 0 descriptor?? [ 591.664692][T20251] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 591.785990][T20278] xt_NFQUEUE: number of total queues is 0 [ 591.977547][T20282] netlink: 'syz.8.6671': attribute type 4 has an invalid length. [ 591.985621][T20282] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.6671'. [ 592.058679][T20284] netlink: 'syz.9.6672': attribute type 40 has an invalid length. [ 592.088398][ T9] hid-generic 0003:04F3:0755.0034: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 592.224990][T20297] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 592.253262][T20297] netlink: 'syz.8.6674': attribute type 11 has an invalid length. [ 592.293095][ T65] usb 3-1: USB disconnect, device number 113 [ 593.073068][T20314] netlink: 'syz.8.6679': attribute type 1 has an invalid length. [ 593.183295][T20318] fuse: Bad value for 'group_id' [ 593.197923][T20318] fuse: Bad value for 'group_id' [ 593.365834][T20323] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6683'. [ 593.376667][T20323] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 593.384495][T20323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 593.391089][T20323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:353 [ 593.440965][ T65] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 593.571517][T20328] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 593.634321][ T65] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 593.644335][ T65] usb 3-1: config 1 has no interface number 0 [ 593.650541][ T65] usb 3-1: config 1 interface 105 has no altsetting 0 [ 593.662726][ T65] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 593.671960][ T65] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 593.680600][ T65] usb 3-1: Product: syz [ 593.685395][ T65] usb 3-1: Manufacturer: syz [ 593.693284][ T65] usb 3-1: SerialNumber: syz [ 594.016058][T20340] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 594.244622][T20348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 594.543138][ T65] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 594.635219][ T36] kauditd_printk_skb: 574 callbacks suppressed [ 594.635241][ T36] audit: type=1400 audit(2000000261.641:50788): avc: denied { read write } for pid=15063 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 594.674246][ T36] audit: type=1400 audit(2000000261.641:50789): avc: denied { read write open } for pid=15063 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 594.703018][ T36] audit: type=1400 audit(2000000261.641:50790): avc: denied { ioctl } for pid=15063 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 594.732966][ T36] audit: type=1400 audit(2000000261.671:50791): avc: denied { read } for pid=20355 comm="syz.6.6695" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 594.760199][ T36] audit: type=1400 audit(2000000261.671:50792): avc: denied { read open } for pid=20355 comm="syz.6.6695" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 594.794255][ T36] audit: type=1400 audit(2000000261.671:50793): avc: denied { ioctl } for pid=20355 comm="syz.6.6695" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 594.819185][ T36] audit: type=1400 audit(2000000261.681:50794): avc: denied { read write } for pid=20355 comm="syz.6.6695" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 594.842671][ T36] audit: type=1400 audit(2000000261.681:50795): avc: denied { read write open } for pid=20355 comm="syz.6.6695" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 594.867544][ T36] audit: type=1400 audit(2000000261.681:50796): avc: denied { ioctl } for pid=20355 comm="syz.6.6695" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 594.892954][ T36] audit: type=1400 audit(2000000261.741:50797): avc: denied { read } for pid=20355 comm="syz.6.6695" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 594.954281][T20362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 594.954747][T20362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:816 [ 594.998598][T20364] 9pnet_fd: Insufficient options for proto=fd [ 595.020833][ T65] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 595.056143][ T65] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 44:61:a9:34:73:87 [ 595.092005][T20367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.098991][T20367] rust_binder: 821: no such ref 3 [ 595.099702][ T65] usb 3-1: USB disconnect, device number 114 [ 595.109899][T20367] rust_binder: Error in use_page_slow: ESRCH [ 595.117406][T20367] rust_binder: use_range failure ESRCH [ 595.123654][T20367] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 595.129414][T20367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 595.134955][ T65] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 595.137906][T20367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:821 [ 595.251683][ T65] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 595.269202][T20372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.272353][T20372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.300302][ T65] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 595.330038][ T65] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 595.804929][T20390] rust_binder: Error in use_page_slow: ESRCH [ 595.804954][T20390] rust_binder: use_range failure ESRCH [ 595.811143][T20390] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 595.816740][T20390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 595.824897][T20390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:837 [ 596.681629][T20413] rust_binder: Error in use_page_slow: ESRCH [ 596.691271][T20413] rust_binder: use_range failure ESRCH [ 596.697286][T20413] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 596.702828][T20413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 596.711366][T20413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1666 [ 596.843036][T20422] netlink: 'syz.9.6719': attribute type 14 has an invalid length. [ 596.849706][ T7331] tipc: Subscription rejected, illegal request [ 597.090833][ T65] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 597.163061][T20448] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6728'. [ 597.243739][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 597.252418][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.262386][ T65] usb 3-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 597.271568][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.281172][ T65] usb 3-1: config 0 descriptor?? [ 597.541886][T20459] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 597.546691][T20460] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 597.899209][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 597.911902][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 597.922129][ T65] usb 3-1: USB disconnect, device number 115 [ 598.110400][T20477] netlink: 92 bytes leftover after parsing attributes in process `syz.9.6737'. [ 598.179797][T20481] 9pnet_fd: Insufficient options for proto=fd [ 598.514060][T20493] netlink: 'syz.2.6743': attribute type 46 has an invalid length. [ 598.523380][T20493] SELinux: security_context_str_to_sid () failed with errno=-22 [ 598.841877][T20505] rust_binder: 1688: no such ref 3 [ 598.847145][T20505] rust_binder: 1688: no such ref 1 [ 598.852697][T20505] rust_binder: Write failure EFAULT in pid:1688 [ 599.080294][T20512] binder: Bad value for 'stats' [ 599.146299][T20510] rust_binder: Error in use_page_slow: ESRCH [ 599.146327][T20510] rust_binder: use_range failure ESRCH [ 599.156141][T20510] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 599.161714][T20510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 599.169791][T20510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1690 [ 599.187842][T20515] netlink: 'syz.9.6750': attribute type 19 has an invalid length. [ 599.205772][T20515] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6750'. [ 599.227204][T20515] bridge0: port 3(erspan0) entered blocking state [ 599.233808][T20515] bridge0: port 3(erspan0) entered disabled state [ 599.240559][T20515] erspan0: entered allmulticast mode [ 599.247607][T20515] erspan0: entered promiscuous mode [ 599.262638][T20515] bridge0: port 3(erspan0) entered blocking state [ 599.269672][T20515] bridge0: port 3(erspan0) entered forwarding state [ 599.496797][T20538] kvm_pr_unimpl_wrmsr: 2569 callbacks suppressed [ 599.496819][T20538] kvm_intel: kvm [20537]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 599.521722][T20538] kvm_intel: kvm [20537]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 599.532906][T20538] kvm_intel: kvm [20537]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 599.544584][T20538] kvm_intel: kvm [20537]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 599.556263][T20538] kvm_intel: kvm [20537]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 599.568250][T20538] kvm_intel: kvm [20537]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 599.579836][T20538] kvm_intel: kvm [20537]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 599.591276][T20538] kvm_intel: kvm [20537]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 599.602630][T20538] kvm_intel: kvm [20537]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 599.613971][T20538] kvm_intel: kvm [20537]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x343a302037372033 [ 599.641768][ T36] kauditd_printk_skb: 498 callbacks suppressed [ 599.641789][ T36] audit: type=1400 audit(2000000266.651:51296): avc: denied { read write } for pid=11839 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.690772][ T36] audit: type=1400 audit(2000000266.651:51297): avc: denied { read write open } for pid=11839 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.740775][ T36] audit: type=1400 audit(2000000266.651:51298): avc: denied { ioctl } for pid=11839 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.790774][ T36] audit: type=1400 audit(2000000266.751:51299): avc: denied { read write } for pid=11839 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.844902][ T36] audit: type=1400 audit(2000000266.751:51300): avc: denied { read write open } for pid=11839 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.877529][ T36] audit: type=1400 audit(2000000266.751:51301): avc: denied { ioctl } for pid=11839 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.903336][ T36] audit: type=1400 audit(2000000266.851:51302): avc: denied { create } for pid=20546 comm="syz.2.6759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 599.957883][ T36] audit: type=1400 audit(2000000266.851:51303): avc: denied { write } for pid=20546 comm="syz.2.6759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 599.985326][ T36] audit: type=1400 audit(2000000266.851:51304): avc: denied { read } for pid=20546 comm="syz.2.6759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 600.008317][ T36] audit: type=1400 audit(2000000266.851:51305): avc: denied { read } for pid=20546 comm="syz.2.6759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 600.372424][T20558] rust_binder: Write failure EFAULT in pid:1712 [ 600.553000][T20565] tmpfs: Unknown parameter 'noswap(D@' [ 600.640795][ T541] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 600.790846][ T541] usb 3-1: Using ep0 maxpacket: 8 [ 600.798496][ T541] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 600.809615][ T541] usb 3-1: config 0 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 600.822717][ T541] usb 3-1: config 0 interface 0 has no altsetting 0 [ 600.829562][ T541] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 600.838901][ T541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.849310][ T541] usb 3-1: config 0 descriptor?? [ 600.864680][ T541] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 601.017335][T20581] EXT4-fs: dax option not supported [ 601.159120][T20592] 9pnet_fd: p9_fd_create_tcp (20592): problem connecting socket to 127.0.0.1 [ 601.639060][T20618] 9pnet_fd: Insufficient options for proto=fd [ 603.415440][ T399] usb 3-1: USB disconnect, device number 116 [ 603.516625][T20629] fuse: Unknown parameter '017777777777777777777770x0000000000000006' [ 603.773571][T20632] SELinux: security_context_str_to_sid () failed with errno=-22 [ 603.819842][T20634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 603.852650][T20634] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 603.859156][T20634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 603.867385][T20634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:410 [ 604.008437][T20638] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 604.070243][T20640] netlink: 80 bytes leftover after parsing attributes in process `syz.8.6796'. [ 604.114721][T20640] overlayfs: missing 'lowerdir' [ 604.122934][T20640] overlayfs: overlapping lowerdir path [ 604.366759][T20645] tmpfs: Bad value for 'nr_blocks' [ 604.653174][ T36] kauditd_printk_skb: 499 callbacks suppressed [ 604.653194][ T36] audit: type=1400 audit(2000000271.661:51805): avc: denied { read } for pid=20651 comm="syz.2.6800" name="binder1" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 604.709832][ T36] audit: type=1400 audit(2000000271.671:51806): avc: denied { read write } for pid=15063 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 604.746973][ T36] audit: type=1400 audit(2000000271.671:51807): avc: denied { read write open } for pid=15063 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 604.802632][ T36] audit: type=1400 audit(2000000271.671:51808): avc: denied { ioctl } for pid=15063 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 604.844402][ T36] audit: type=1400 audit(2000000271.691:51809): avc: denied { read } for pid=20663 comm="syz.6.6805" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 604.891076][ T36] audit: type=1400 audit(2000000271.701:51811): avc: denied { read open } for pid=20651 comm="syz.2.6800" path="/dev/binderfs/binder1" dev="binder" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 604.927326][T20666] audit: audit_backlog=65 > audit_backlog_limit=64 [ 604.934680][T20666] audit: audit_lost=84 audit_rate_limit=0 audit_backlog_limit=64 [ 604.948066][T20666] audit: backlog limit exceeded [ 604.954526][T20666] audit: audit_backlog=65 > audit_backlog_limit=64 [ 604.965387][T20666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1727 [ 605.381663][T20687] 9pnet_fd: Insufficient options for proto=fd [ 605.400038][T20691] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6815'. [ 605.542586][T20697] random: crng reseeded on system resumption [ 605.880816][ T541] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 605.902158][ T374] bridge_slave_1: left allmulticast mode [ 605.907910][ T374] bridge_slave_1: left promiscuous mode [ 605.913616][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.921456][ T374] bridge_slave_0: left allmulticast mode [ 605.927202][ T374] bridge_slave_0: left promiscuous mode [ 605.932968][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.033738][ T541] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 606.044838][ T541] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.060013][ T374] veth0_vlan: left promiscuous mode [ 606.068438][ T541] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 606.078388][ T541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.086843][ T541] usb 3-1: Product: syz [ 606.091210][ T541] usb 3-1: Manufacturer: syz [ 606.095851][ T541] usb 3-1: SerialNumber: syz [ 606.111561][ T541] rtl8150 3-1:1.0: couldn't find required endpoints [ 606.122004][ T541] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 606.165711][T20711] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.172865][T20711] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.179970][T20711] bridge_slave_0: entered allmulticast mode [ 606.187830][T20711] bridge_slave_0: entered promiscuous mode [ 606.198608][T20711] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.205805][T20711] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.212931][T20711] bridge_slave_1: entered allmulticast mode [ 606.219637][T20711] bridge_slave_1: entered promiscuous mode [ 606.389331][T20711] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.396437][T20711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.403879][T20711] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.411157][T20711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.487966][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.500811][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.508925][T20731] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6825'. [ 606.529660][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.536771][ T7329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.551043][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.558155][ T7329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.644971][T20711] veth0_vlan: entered promiscuous mode [ 606.681782][T20711] veth1_macvtap: entered promiscuous mode [ 606.850874][T20733] rust_binder: 2: no such ref 0 [ 606.855791][T20733] rust_binder: 2: no such ref 1 [ 607.284913][T20741] 9pnet_fd: Insufficient options for proto=fd [ 608.471876][ T31] usb 3-1: USB disconnect, device number 117 [ 608.647724][T20758] /dev/rnullb0: Can't lookup blockdev [ 608.729507][T20760] rust_binder: Write failure EFAULT in pid:1751 [ 608.740499][T20765] __vm_enough_memory: pid: 20765, comm: syz.3.6835, bytes: 18014402804453376 not enough memory for the allocation [ 609.121815][T20784] vlan0: entered promiscuous mode [ 609.129233][T20784] vlan0: entered allmulticast mode [ 609.156076][T20782] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 609.178890][T20784] veth0_vlan: entered allmulticast mode [ 609.184851][T20782] rust_binder: Write failure EINVAL in pid:21 [ 609.328459][T20795] rust_binder: Got transaction with invalid offset. [ 609.344821][T20795] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 609.360764][T20795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 609.620776][ T31] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 609.668460][ T36] kauditd_printk_skb: 520 callbacks suppressed [ 609.668480][ T36] audit: type=1400 audit(2000000276.671:52323): avc: denied { ioctl } for pid=20815 comm="syz.3.6851" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 609.779788][ T36] audit: type=1400 audit(2000000276.671:52324): avc: denied { ioctl } for pid=20815 comm="syz.3.6851" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 609.846599][ T36] audit: type=1400 audit(2000000276.671:52325): avc: denied { map } for pid=20815 comm="syz.3.6851" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 609.891755][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.920831][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.950809][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 609.980812][ T36] audit: type=1400 audit(2000000276.671:52326): avc: denied { read execute } for pid=20815 comm="syz.3.6851" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 610.020781][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 610.041019][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.061511][ T36] audit: type=1400 audit(2000000276.721:52327): avc: denied { name_bind } for pid=20819 comm="syz.9.6852" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 610.085253][ T31] usb 3-1: config 0 descriptor?? [ 610.140767][ T36] audit: type=1400 audit(2000000276.721:52328): avc: denied { node_bind } for pid=20819 comm="syz.9.6852" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 610.184682][T20846] 9pnet_fd: Insufficient options for proto=fd [ 610.223288][ T36] audit: type=1400 audit(2000000276.731:52329): avc: denied { ioctl } for pid=20798 comm="syz.2.6845" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 610.290774][ T36] audit: type=1400 audit(2000000276.731:52330): avc: denied { ioctl } for pid=20798 comm="syz.2.6845" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 610.341404][T20854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 610.341443][T20854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:894 [ 610.370792][ T36] audit: type=1400 audit(2000000276.731:52331): avc: denied { ioctl } for pid=20798 comm="syz.2.6845" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 610.386436][T15063] audit: audit_backlog=65 > audit_backlog_limit=64 [ 611.110698][T20879] overlayfs: failed to clone lowerpath [ 611.549489][T20908] 9pnet_fd: Insufficient options for proto=fd [ 611.716931][T20910] SELinux: security_context_str_to_sid () failed with errno=-22 [ 611.788745][T20912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 611.789123][T20912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 611.797662][T20912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 611.804589][T20912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 611.810911][T20912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 611.818039][T20912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 611.875348][T20917] binder: Bad value for 'max' [ 612.033408][T20921] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 612.035564][T20922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 612.197711][T20934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 612.204850][T20934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:59 [ 612.270258][T20936] input: syz0 as /devices/virtual/input/input64 [ 612.316580][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 612.322951][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 612.351256][ T31] usb 3-1: USB disconnect, device number 118 [ 612.412937][T20938] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 612.428645][T20940] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 612.479401][T20942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6889'. [ 612.499555][T20942] rust_binder: inc_ref_done called when no active inc_refs [ 612.567725][T20947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58142 sclass=netlink_route_socket pid=20947 comm=syz.3.6890 [ 612.645788][T20950] rust_binder: Write failure EINVAL in pid:69 [ 612.733148][T20954] binder: Unknown parameter 'context[7' [ 612.823258][T20959] rust_binder: 73: no such ref 0 [ 612.828275][T20959] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 612.835486][T20959] rust_binder: 73: no such ref 2 [ 612.841104][T20959] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 612.914182][T20964] fuse: Bad value for 'fd' [ 613.313365][T20978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1781 [ 613.378091][T20984] rust_binder: 87: no such ref 1 [ 613.660055][T20993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6906'. [ 613.757302][T20996] fuse: Bad value for 'fd' [ 613.990035][T21004] rust_binder: Write failure EFAULT in pid:97 [ 614.210224][T21021] fuse: Bad value for 'fd' [ 614.320782][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 614.382081][T21031] fuseblk: Unknown parameter 'fd' [ 614.470817][ T9] usb 4-1: device descriptor read/64, error -71 [ 614.480879][ T65] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 614.637905][ T65] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 614.649408][ T65] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 614.663258][ T65] usb 3-1: config 0 interface 0 has no altsetting 0 [ 614.670624][ T65] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 614.680098][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.690006][ T65] usb 3-1: config 0 descriptor?? [ 614.696942][ T36] kauditd_printk_skb: 579 callbacks suppressed [ 614.696962][ T36] audit: type=1400 audit(2000000281.701:52876): avc: denied { ioctl } for pid=21022 comm="syz.2.6917" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.728642][ T9] usb 4-1: device descriptor read/64, error -71 [ 614.735682][ T36] audit: type=1400 audit(2000000281.701:52877): avc: denied { ioctl } for pid=21022 comm="syz.2.6917" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.761222][ T36] audit: type=1400 audit(2000000281.701:52878): avc: denied { ioctl } for pid=21022 comm="syz.2.6917" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.786389][ T36] audit: type=1400 audit(2000000281.701:52879): avc: denied { ioctl } for pid=21022 comm="syz.2.6917" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.841263][ T36] audit: type=1400 audit(2000000281.851:52880): avc: denied { ioctl } for pid=21013 comm="syz.3.6914" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.866561][ T36] audit: type=1400 audit(2000000281.851:52881): avc: denied { ioctl } for pid=21013 comm="syz.3.6914" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.911307][ T36] audit: type=1400 audit(2000000281.921:52882): avc: denied { ioctl } for pid=21013 comm="syz.3.6914" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.938634][ T36] audit: type=1400 audit(2000000281.941:52883): avc: denied { read write } for pid=21022 comm="syz.2.6917" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.940315][T21023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.973273][T21023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.974049][ T36] audit: type=1400 audit(2000000281.941:52884): avc: denied { read write open } for pid=21022 comm="syz.2.6917" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 614.984950][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 615.010371][ T36] audit: type=1400 audit(2000000281.941:52885): avc: denied { ioctl } for pid=21022 comm="syz.2.6917" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.031895][T21023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.050804][T21023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.140860][ T9] usb 4-1: device descriptor read/64, error -71 [ 615.267669][ T65] sunplus 0003:04FC:05D8.0035: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0 [ 615.380777][ T9] usb 4-1: device descriptor read/64, error -71 [ 615.468083][T21023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 615.471825][T21023] rust_binder: Error in use_page_slow: ESRCH [ 615.478308][T21023] rust_binder: use_range failure ESRCH [ 615.484393][T21023] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 615.490027][T21023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 615.498270][T21023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1790 [ 615.507827][ T9] usb usb4-port1: attempt power cycle [ 615.509801][ T65] usb 3-1: USB disconnect, device number 119 [ 615.870783][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 615.893219][ T9] usb 4-1: device descriptor read/8, error -71 [ 616.023178][ T9] usb 4-1: device descriptor read/8, error -71 [ 616.260787][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 616.283405][ T9] usb 4-1: device descriptor read/8, error -71 [ 616.380830][ T399] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 616.413485][ T9] usb 4-1: device descriptor read/8, error -71 [ 616.520895][ T9] usb usb4-port1: unable to enumerate USB device [ 616.534125][ T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 616.545947][ T399] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 616.559168][ T399] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 616.568305][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.578166][ T399] usb 3-1: config 0 descriptor?? [ 616.584718][T21046] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 616.593464][ T399] usbhid 3-1:0.0: can't add hid device: -22 [ 616.599453][ T399] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 616.834204][ T399] usb 3-1: USB disconnect, device number 120 [ 617.704816][T14384] bridge_slave_1: left allmulticast mode [ 617.725471][T14384] bridge_slave_1: left promiscuous mode [ 617.750793][T14384] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.781625][T14384] bridge_slave_0: left allmulticast mode [ 617.787318][T14384] bridge_slave_0: left promiscuous mode [ 617.806319][T14384] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.913455][T21073] kvm_pr_unimpl_wrmsr: 1182 callbacks suppressed [ 617.913481][T21073] kvm_intel: kvm [21069]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6365732c77722065 [ 618.061742][T14384] tipc: Left network mode [ 618.131786][T14384] veth1_macvtap: left promiscuous mode [ 618.149570][T14384] veth0_vlan: left promiscuous mode [ 618.472684][T21063] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.479776][T21063] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.499988][T21063] bridge_slave_0: entered allmulticast mode [ 618.507439][T21063] bridge_slave_0: entered promiscuous mode [ 618.515507][T21063] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.522607][T21063] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.529881][T21063] bridge_slave_1: entered allmulticast mode [ 618.537400][T21063] bridge_slave_1: entered promiscuous mode [ 618.881529][T14384] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.888669][T14384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.890825][ T65] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 618.904978][T14384] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.912184][T14384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.080770][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 619.101330][ T65] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.129063][ T65] usb 4-1: config 0 has no interfaces? [ 619.144079][T21063] veth0_vlan: entered promiscuous mode [ 619.151934][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 619.179072][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 619.187312][ T65] usb 4-1: SerialNumber: syz [ 619.194647][T21152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 619.194678][T21152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:942 [ 619.206716][ T65] usb 4-1: config 0 descriptor?? [ 619.263733][T21063] veth1_macvtap: entered promiscuous mode [ 619.443205][T21096] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 619.444963][T21096] rust_binder: Failed copying into alloc: EFAULT [ 619.453867][T21097] rust_binder: Failed copying into alloc: EFAULT [ 619.464137][T21097] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 619.470590][T21097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 619.477125][T21096] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 619.489175][T21097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:119 [ 619.499730][T21096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 619.520047][T21096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:119 [ 619.531446][ T31] usb 4-1: USB disconnect, device number 11 [ 619.734184][ T36] kauditd_printk_skb: 705 callbacks suppressed [ 619.734206][ T36] audit: type=1400 audit(2000000286.741:53591): avc: denied { read } for pid=21173 comm="syz.2.6963" name="binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 619.737550][T21175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 619.771382][ T36] audit: type=1400 audit(2000000286.741:53592): avc: denied { read open } for pid=21173 comm="syz.2.6963" path="/dev/binderfs/binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 619.810238][T21175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 619.810744][ T36] audit: type=1400 audit(2000000286.741:53593): avc: denied { ioctl } for pid=21173 comm="syz.2.6963" path="/dev/binderfs/binder1" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 619.853067][ T36] audit: type=1400 audit(2000000286.741:53594): avc: denied { set_context_mgr } for pid=21173 comm="syz.2.6963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 619.904258][ T36] audit: type=1400 audit(2000000286.741:53595): avc: denied { ioctl } for pid=21173 comm="syz.2.6963" path="/dev/binderfs/binder1" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 619.939660][T21177] binder: Bad value for 'max' [ 619.990759][ T36] audit: type=1400 audit(2000000286.741:53596): avc: denied { call } for pid=21173 comm="syz.2.6963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 620.046870][ T36] audit: type=1400 audit(2000000286.811:53597): avc: denied { execmem } for pid=21174 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 620.090756][ T36] audit: type=1400 audit(2000000286.861:53598): avc: denied { read write } for pid=21063 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 620.167140][ T36] audit: type=1400 audit(2000000286.861:53599): avc: denied { read write open } for pid=21063 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 620.229179][ T36] audit: type=1400 audit(2000000286.861:53600): avc: denied { ioctl } for pid=21063 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 620.278561][T21178] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.296771][T21178] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.317463][T21178] bridge_slave_0: entered allmulticast mode [ 620.338129][T21178] bridge_slave_0: entered promiscuous mode [ 620.368340][T21178] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.378391][T21178] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.395998][T21178] bridge_slave_1: entered allmulticast mode [ 620.411272][T21178] bridge_slave_1: entered promiscuous mode [ 620.649371][T21178] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.656502][T21178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.664106][T21178] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.671456][T21178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.723133][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.732392][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.747372][T14382] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.754868][T14382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.768147][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.775437][ T7330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.790911][ T65] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 620.860972][T21178] veth0_vlan: entered promiscuous mode [ 620.880771][ T31] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 620.901851][T21178] veth1_macvtap: entered promiscuous mode [ 620.944559][ T65] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 620.956417][ T65] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 84 [ 620.967746][ T65] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 620.977098][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.991749][T21195] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 621.041782][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 621.079336][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.098423][ T31] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 621.112460][T21208] rust_binder: Write failure EINVAL in pid:2 [ 621.119077][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.150253][ T31] usb 3-1: config 0 descriptor?? [ 621.206147][ T65] usb 4-1: USB disconnect, device number 12 [ 621.373340][T21197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.390943][T21197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.443393][T21197] binder: Bad value for 'max' [ 621.456004][ T31] usb 3-1: USB disconnect, device number 121 [ 621.536353][T21220] SELinux: security_context_str_to_sid () failed with errno=-22 [ 622.020813][ T399] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 622.066093][T21234] /dev/rnullb0: Can't lookup blockdev [ 622.168521][T21241] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 622.168551][T21241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 622.177782][T21241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:30 [ 622.193222][ T399] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 622.212499][ T399] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 622.221638][ T399] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 622.230856][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.526604][T21252] rust_binder: Error while translating object. [ 622.526658][T21252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 622.543127][T21252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:25 [ 622.800767][ T536] usb 3-1: new low-speed USB device number 122 using dummy_hcd [ 622.874804][T21263] syzkaller0: entered promiscuous mode [ 622.888547][T21263] syzkaller0: entered allmulticast mode [ 622.927295][T21268] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 622.983876][ T536] usb 3-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 623.002286][ T536] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 623.011307][ T536] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 623.020454][ T536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.030366][ T536] usb 3-1: config 0 descriptor?? [ 623.200835][ T9] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 623.356707][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 623.371268][ T9] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 623.382583][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.393614][ T9] usb 10-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 623.435335][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 623.445070][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.453296][ T9] usb 10-1: Product: syz [ 623.457845][ T9] usb 10-1: Manufacturer: syz [ 623.462611][ T9] usb 10-1: SerialNumber: syz [ 623.681867][ T9] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 623.700761][ T9] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 623.708645][ T9] usb 10-1: 2:1 : sample bitwidth 74 in over sample bytes 3 [ 623.716088][ T9] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 623.741443][ T9] usb 10-1: USB disconnect, device number 47 [ 623.841319][T16102] udevd[16102]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 623.963390][T21283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39 [ 624.341316][T21288] rust_binder: 21287 RLIMIT_NICE not set [ 624.502633][T21291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:41 [ 624.513073][T21290] rust_binder: Error while translating object. [ 624.522572][T21290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 624.529343][T21290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:41 [ 624.770235][ T393] usb 4-1: USB disconnect, device number 13 [ 624.806427][ T36] kauditd_printk_skb: 679 callbacks suppressed [ 624.806448][ T36] audit: type=1400 audit(2000000291.811:54280): avc: denied { read write } for pid=20711 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 624.898135][ T36] audit: type=1400 audit(2000000291.841:54281): avc: denied { read write open } for pid=20711 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 624.947088][T21300] binder: Bad value for 'stats' [ 624.952395][ T36] audit: type=1400 audit(2000000291.851:54282): avc: denied { ioctl } for pid=20711 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 625.038493][ T36] audit: type=1400 audit(2000000291.881:54283): avc: denied { read write } for pid=21178 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 625.094905][ T36] audit: type=1400 audit(2000000291.881:54284): avc: denied { read write open } for pid=21178 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 625.157387][ T36] audit: type=1400 audit(2000000291.881:54285): avc: denied { ioctl } for pid=21178 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 625.185173][ T36] audit: type=1400 audit(2000000291.951:54286): avc: denied { mounton } for pid=21299 comm="syz.9.7002" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 625.210453][ T36] audit: type=1400 audit(2000000291.961:54287): avc: denied { write } for pid=21297 comm="syz.3.7001" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 625.244378][ T36] audit: type=1400 audit(2000000291.961:54288): avc: denied { remove_name } for pid=21297 comm="syz.3.7001" name="binder0" dev="binder" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 625.282068][ T36] audit: type=1400 audit(2000000291.961:54289): avc: denied { unlink } for pid=21297 comm="syz.3.7001" name="binder0" dev="binder" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 625.427370][T21308] rust_binder: Error while translating object. [ 625.427406][T21308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 625.441037][T21308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:135 [ 625.550259][ T536] usb 3-1: USB disconnect, device number 122 [ 625.672936][T14382] Bluetooth: hci0: Frame reassembly failed (-84) [ 625.946353][T21317] KVM: debugfs: duplicate directory 21317-7 [ 626.472759][T21326] bpf: Bad value for 'uid' [ 626.510768][ T393] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 626.650863][ T393] usb 3-1: device descriptor read/64, error -71 [ 626.890984][ T393] usb 3-1: device descriptor read/64, error -71 [ 627.130822][ T393] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 627.270901][ T393] usb 3-1: device descriptor read/64, error -71 [ 627.510820][ T393] usb 3-1: device descriptor read/64, error -71 [ 627.620896][ T393] usb usb3-port1: attempt power cycle [ 627.750834][T14978] Bluetooth: hci0: command 0x1003 tx timeout [ 627.756932][ T435] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 627.845741][T21336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7015'. [ 627.906905][T21337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:146 [ 627.960798][ T393] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 627.993286][ T393] usb 3-1: device descriptor read/8, error -71 [ 628.123403][ T393] usb 3-1: device descriptor read/8, error -71 [ 628.370760][ T393] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 628.403364][ T393] usb 3-1: device descriptor read/8, error -71 [ 628.534031][ T393] usb 3-1: device descriptor read/8, error -71 [ 628.566050][T21353] 9pnet: Could not find request transport: f [ 628.650922][ T393] usb usb3-port1: unable to enumerate USB device [ 628.666951][T21358] netlink: 124 bytes leftover after parsing attributes in process `syz.9.7023'. [ 628.676741][T21358] SELinux: policydb version 2134819135 does not match my version range 15-33 [ 628.689380][T21358] SELinux: failed to load policy [ 628.736790][T21360] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.744109][T21360] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.751951][T21360] bridge0: entered allmulticast mode [ 628.763876][T21360] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.771034][T21360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.778420][T21360] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.785508][T21360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.792973][T21360] bridge0: entered promiscuous mode [ 628.802545][T21360] netlink: 'syz.3.7024': attribute type 4 has an invalid length. [ 628.810390][T21360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7024'. [ 628.996824][T21364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 629.001375][T21364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 629.470783][ T399] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 629.653810][T21386] binder: Unknown parameter '' [ 629.658044][ T399] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.697953][ T399] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 629.744364][ T399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.772763][ T399] usb 3-1: Product: syz [ 629.783568][ T399] usb 3-1: Manufacturer: syz [ 629.799202][ T399] usb 3-1: SerialNumber: syz [ 629.818381][ T36] kauditd_printk_skb: 397 callbacks suppressed [ 629.818402][ T36] audit: type=1400 audit(2000000296.821:54687): avc: denied { ioctl } for pid=21372 comm="syz.2.7029" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 629.904154][ T36] audit: type=1400 audit(2000000296.821:54688): avc: denied { ioctl } for pid=21372 comm="syz.2.7029" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 629.960764][ T36] audit: type=1400 audit(2000000296.821:54689): avc: denied { ioctl } for pid=21372 comm="syz.2.7029" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.030753][ T36] audit: type=1400 audit(2000000296.821:54690): avc: denied { ioctl } for pid=21372 comm="syz.2.7029" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.100783][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 630.108491][ T36] audit: type=1400 audit(2000000296.861:54691): avc: denied { read write } for pid=21390 comm="syz.3.7035" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.170761][ T36] audit: type=1400 audit(2000000296.861:54692): avc: denied { read write open } for pid=21390 comm="syz.3.7035" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.221782][ T36] audit: type=1400 audit(2000000296.861:54693): avc: denied { ioctl } for pid=21390 comm="syz.3.7035" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.249409][ T36] audit: type=1400 audit(2000000296.861:54694): avc: denied { ioctl } for pid=21390 comm="syz.3.7035" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.276037][ T36] audit: type=1400 audit(2000000296.861:54695): avc: denied { ioctl } for pid=21390 comm="syz.3.7035" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 630.292189][T21391] audit: audit_backlog=65 > audit_backlog_limit=64 [ 630.313885][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.324566][ T9] usb 4-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 630.326821][T21407] rust_binder: 984: no such ref 3 [ 630.342628][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 630.351666][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 630.363602][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.373136][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.381511][ T9] usb 4-1: Product: syz [ 630.385947][ T9] usb 4-1: Manufacturer: syz [ 630.390790][ T9] usb 4-1: SerialNumber: syz [ 630.510757][ T8579] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 630.611623][ T9] cdc_ether 4-1:1.0: skipping garbage [ 630.617250][ T9] usb 4-1: bad CDC descriptors [ 630.624255][ T9] usb 4-1: USB disconnect, device number 14 [ 630.660774][ T8579] usb 10-1: Using ep0 maxpacket: 32 [ 630.669974][ T8579] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 630.683049][ T8579] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 630.696044][ T8579] usb 10-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 630.705253][ T8579] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.716366][ T8579] usb 10-1: config 0 descriptor?? [ 630.948462][ T399] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 630.955396][ T399] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 630.963032][ T399] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 631.147304][ T8579] uclogic 0003:145F:0212.0036: interface is invalid, ignoring [ 631.274245][T21415] overlayfs: disabling nfs_export due to verity=require [ 631.345438][ T31] usb 10-1: USB disconnect, device number 48 [ 631.549413][T21428] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 631.559180][T21428] SELinux: failed to load policy [ 631.615626][T21431] rust_binder: Write failure EFAULT in pid:991 [ 631.644604][T21433] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7045'. [ 631.992317][T21447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 631.993341][T21447] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 631.999864][T21447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 632.008176][T21447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:84 [ 632.098409][T21451] binder: Unknown parameter 'seblabel!' [ 632.173099][T14382] Bluetooth: hci0: Frame reassembly failed (-84) [ 632.275426][ T8579] usb 3-1: USB disconnect, device number 127 [ 632.284637][ T8579] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 632.686262][T21482] fuse: Unknown parameter 'grou00000000000000000000' [ 632.767333][T21488] __vm_enough_memory: pid: 21488, comm: syz.2.7063, bytes: 18014402804453376 not enough memory for the allocation [ 632.992787][T21498] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7064'. [ 633.022911][T21498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21498 comm=syz.3.7064 [ 633.143056][T21501] rust_binder: Write failure EFAULT in pid:75 [ 633.288603][T21510] rust_binder: Error while translating object. [ 633.295123][T21510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 633.301689][T21510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:77 [ 633.411944][T21513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.430611][T21513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.640774][ T9] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 633.793474][ T9] usb 3-1: No LPM exit latency info found, disabling LPM. [ 633.806481][ T9] usb 3-1: config 64 has an invalid descriptor of length 194, skipping remainder of the config [ 633.827101][ T9] usb 3-1: config 64 has 0 interfaces, different from the descriptor's value: 3 [ 633.843723][T21521] fuse: Unknown parameter 'grou00000000000000000000' [ 633.846992][ T9] usb 3-1: string descriptor 0 read error: -22 [ 633.867728][ T9] usb 3-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 633.883354][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.984832][T21523] __vm_enough_memory: pid: 21523, comm: syz.3.7072, bytes: 18014402804453376 not enough memory for the allocation [ 634.081865][T21530] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 634.103423][ T8579] usb 3-1: USB disconnect, device number 2 [ 634.230837][ T435] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 634.230883][T14978] Bluetooth: hci0: command 0x1003 tx timeout [ 634.415463][T21543] rust_binder: Write failure EFAULT in pid:91 [ 634.493923][T21548] fuse: Unknown parameter 'grou00000000000000000000' [ 634.550624][T21549] binder: Binderfs stats mode cannot be changed during a remount [ 634.590296][T21549] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 634.600173][T21550] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 634.825960][ T36] kauditd_printk_skb: 1034 callbacks suppressed [ 634.825981][ T36] audit: type=1400 audit(2000000301.828:55722): avc: denied { ioctl } for pid=21567 comm="syz.2.7088" path="/dev/binderfs/binder1" dev="binder" ino=16 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 634.912260][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7089'. [ 634.922418][ T36] audit: type=1400 audit(2000000301.888:55723): avc: denied { read write } for pid=21063 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 634.956761][ T36] audit: type=1400 audit(2000000301.888:55724): avc: denied { read write open } for pid=21063 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 635.012473][ T36] audit: type=1400 audit(2000000301.888:55725): avc: denied { ioctl } for pid=21063 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 635.077809][ T36] audit: type=1400 audit(2000000301.908:55726): avc: denied { create } for pid=21570 comm="syz.3.7089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 635.100988][T21580] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7092'. [ 635.102576][ T36] audit: type=1400 audit(2000000301.908:55727): avc: denied { ioctl } for pid=21570 comm="syz.3.7089" path="socket:[122269]" dev="sockfs" ino=122269 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 635.137829][ T36] audit: type=1400 audit(2000000301.908:55728): avc: denied { write } for pid=21570 comm="syz.3.7089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 635.143058][T21580] rust_binder: Error while translating object. [ 635.180383][T21580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 635.191925][ T36] audit: type=1400 audit(2000000301.908:55729): avc: denied { read write } for pid=15063 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 635.218508][T21580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1030 [ 635.233409][ T8579] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 635.252494][ T36] audit: type=1400 audit(2000000301.908:55730): avc: denied { connect } for pid=21570 comm="syz.3.7089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 635.274985][ T36] audit: type=1400 audit(2000000301.908:55731): avc: denied { read write open } for pid=15063 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 635.351192][T21588] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7094'. [ 635.391406][T21587] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7094'. [ 635.430806][ T8579] usb 3-1: device descriptor read/64, error -71 [ 635.671363][ T8579] usb 3-1: device descriptor read/64, error -71 [ 635.831200][T21599] rust_binder: 223: no such ref 1 [ 635.840119][T21599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 635.910783][ T8579] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 636.021316][T21612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 636.091751][ T8579] usb 3-1: device descriptor read/64, error -71 [ 636.190813][T21618] rust_binder: 1051: no such ref 2 [ 636.195988][T21618] rust_binder: Write failure EFAULT in pid:1051 [ 636.311795][T21626] netlink: 'syz.3.7107': attribute type 4 has an invalid length. [ 636.380765][ T8579] usb 3-1: device descriptor read/64, error -71 [ 636.438916][T21629] rust_binder: 106: no such ref 0 [ 636.451586][T21629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:106 [ 636.474215][T21632] rust_binder: 1053: no such ref 3 [ 636.495956][ T8579] usb usb3-port1: attempt power cycle [ 636.500660][T21632] rust_binder: 1053: no such ref 1 [ 636.507059][T21632] rust_binder: Write failure EFAULT in pid:1053 [ 636.777224][T21653] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 636.810907][T21653] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 636.850780][ T8579] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 636.883362][ T8579] usb 3-1: device descriptor read/8, error -71 [ 637.024387][ T8579] usb 3-1: device descriptor read/8, error -71 [ 637.032016][T21657] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 637.234315][T21665] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 637.260788][ T8579] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 637.316352][ T8579] usb 3-1: device descriptor read/8, error -71 [ 637.494163][ T8579] usb 3-1: device descriptor read/8, error -71 [ 637.640849][ T8579] usb usb3-port1: unable to enumerate USB device [ 637.668429][T21672] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 637.673851][T21672] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 637.698742][T21672] rust_binder: Write failure EINVAL in pid:1060 [ 637.761057][T21676] input: syz0 as /devices/virtual/input/input68 [ 637.773782][T21676] input: failed to attach handler leds to device input68, error: -6 [ 637.881052][T21682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 637.953565][T21684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7125'. [ 638.154416][T21699] rust_binder: Write failure EFAULT in pid:1067 [ 638.168445][T21695] input: syz1 as /devices/virtual/input/input69 [ 638.238568][T21706] fuse: Bad value for 'fd' [ 638.244216][T21705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 638.244550][T21705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 638.260397][T21706] rust_binder: Failed copying into alloc: EFAULT [ 638.260427][T21706] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 638.268511][T21705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 638.277107][T21706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 638.287607][T21705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 638.294466][T21706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1070 [ 638.303146][T21705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 638.350843][T21705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 638.481856][T21720] fuse: Bad value for 'user_id' [ 638.520886][T21720] fuse: Bad value for 'user_id' [ 638.741862][T21739] rust_binder: Write failure EFAULT in pid:108 [ 638.884720][T21746] loop2: detected capacity change from 0 to 7 [ 638.913881][ C0] blk_print_req_error: 1 callbacks suppressed [ 638.913904][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.929611][ C0] buffer_io_error: 1 callbacks suppressed [ 638.929633][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 638.947571][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.957430][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 638.965522][T16102] loop2: unable to read partition table [ 639.025763][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.035854][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 639.071818][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.081056][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 639.088967][T21746] loop2: unable to read partition table [ 639.094608][T21757] fuse: Bad value for 'fd' [ 639.100792][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.110481][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 639.119320][ T8579] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 639.126894][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.126938][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 639.132908][T21746] loop_reread_partitions: partition scan of loop2 (7࢕cＦpX]Mec!Z83&;!, @~+ρsPɶlԏ) failed (rc=-5) [ 639.137450][T21749] loop2: unable to read partition table [ 639.161102][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.164997][T21749] loop_reread_partitions: partition scan of loop2 (7࢕cＦpX]Mec!Z83&;!, @~+ρsPɶlԏ) failed (rc=-5) [ 639.172930][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 639.178585][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.204166][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 639.214014][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.223479][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 639.240319][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.249557][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 639.340755][ T8579] usb 3-1: Using ep0 maxpacket: 16 [ 639.349000][ T8579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.370628][ T8579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.389710][ T8579] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 639.412489][ T8579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.440184][ T8579] usb 3-1: config 0 descriptor?? [ 639.591168][T21775] kvm_intel: kvm [21774]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 639.601983][T21775] kvm_intel: kvm [21774]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 639.618785][T21775] kvm_intel: kvm [21774]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 639.629585][T21775] kvm_intel: kvm [21774]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 639.641160][T21775] kvm_intel: kvm [21774]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 639.652515][T21775] kvm_intel: kvm [21774]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 639.663286][T21775] kvm_intel: kvm [21774]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 639.673901][T21775] kvm_intel: kvm [21774]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 639.684497][T21775] kvm_intel: kvm [21774]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 639.695184][T21775] kvm_intel: kvm [21774]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 639.885607][ T36] kauditd_printk_skb: 679 callbacks suppressed [ 639.885629][ T36] audit: type=1400 audit(2000000306.888:56411): avc: denied { ioctl } for pid=21741 comm="syz.2.7142" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 639.920947][ T8579] konepure 0003:1E7D:2DB4.0037: unknown main item tag 0x0 [ 639.929326][ T8579] konepure 0003:1E7D:2DB4.0037: item fetching failed at offset 3/4 [ 639.940764][ T36] audit: type=1400 audit(2000000306.918:56412): avc: denied { ioctl } for pid=21741 comm="syz.2.7142" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 639.966853][ T8579] konepure 0003:1E7D:2DB4.0037: parse failed [ 639.973868][ T8579] konepure 0003:1E7D:2DB4.0037: probe with driver konepure failed with error -22 [ 640.064040][ T36] audit: type=1400 audit(2000000307.068:56413): avc: denied { mounton } for pid=21778 comm="syz.3.7154" path="/94/file0" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 640.088773][T21779] overlayfs: regular lower layers cannot follow data lower layers [ 640.099709][T21779] overlayfs: missing 'lowerdir' [ 640.104657][ T36] audit: type=1400 audit(2000000307.068:56414): avc: denied { mount } for pid=21778 comm="syz.3.7154" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 640.129861][ T36] audit: type=1400 audit(2000000307.088:56415): avc: denied { mounton } for pid=21778 comm="syz.3.7154" path="/94/file0" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 640.163739][ T36] audit: type=1400 audit(2000000307.098:56416): avc: denied { mounton } for pid=21778 comm="syz.3.7154" path="/94/bus" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 640.210809][ T36] audit: type=1400 audit(2000000307.128:56417): avc: denied { read } for pid=21741 comm="syz.2.7142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 640.232077][ T36] audit: type=1400 audit(2000000307.138:56418): avc: denied { mounton } for pid=21778 comm="syz.3.7154" path="/94/bus" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 640.256199][ T36] audit: type=1400 audit(2000000307.188:56419): avc: denied { read append } for pid=21741 comm="syz.2.7142" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 640.281775][T21781] netlink: 'syz.2.7142': attribute type 21 has an invalid length. [ 640.289678][T21781] netlink: 388 bytes leftover after parsing attributes in process `syz.2.7142'. [ 640.302702][ T36] audit: type=1400 audit(2000000307.188:56420): avc: denied { read open } for pid=21741 comm="syz.2.7142" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 640.329902][T21785] fuse: Bad value for 'fd' [ 640.426395][T21790] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21790 comm=syz.3.7158 [ 640.431127][T21791] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21791 comm=syz.3.7158 [ 640.582718][T21801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:169 [ 640.750125][T21808] fuse: Bad value for 'fd' [ 640.954161][T21810] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 640.954185][T21810] rust_binder: Read failure Err(EFAULT) in pid:176 [ 641.812237][ T9] usb 3-1: USB disconnect, device number 7 [ 642.107909][T21836] fuse: Bad value for 'fd' [ 642.241148][T21842] /dev/rnullb0: Can't lookup blockdev [ 642.592469][T21862] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 642.721153][T21872] /dev/rnullb0: Can't lookup blockdev [ 642.956558][T21881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:142 [ 643.207650][T21883] random: crng reseeded on system resumption [ 643.298660][T21885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 643.298701][T21885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:147 [ 643.794398][T21927] erofs: dax options not supported [ 643.815045][T21925] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 644.043886][T21950] overlayfs: failed to clone lowerpath [ 644.438105][T21969] tmpfs: Bad value for 'nr_inodes' [ 644.443874][T21968] tmpfs: Bad value for 'nr_inodes' [ 644.450976][T21968] binder: Binderfs stats mode cannot be changed during a remount [ 644.642756][T21974] kvm_pr_unimpl_wrmsr: 4379 callbacks suppressed [ 644.642785][T21974] kvm_intel: kvm [21973]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 644.674599][T21974] kvm_intel: kvm [21973]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 644.710972][T21974] kvm_intel: kvm [21973]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 644.721857][T21974] kvm_intel: kvm [21973]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 644.733666][T21974] kvm_intel: kvm [21973]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 644.745218][T21974] kvm_intel: kvm [21973]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 644.756739][T21974] kvm_intel: kvm [21973]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 644.768266][T21974] kvm_intel: kvm [21973]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 644.780826][T21974] kvm_intel: kvm [21973]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 644.796841][T21974] kvm_intel: kvm [21973]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 644.910774][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 644.919349][ T36] kauditd_printk_skb: 1353 callbacks suppressed [ 644.919367][ T36] audit: type=1400 audit(2000000311.918:57774): avc: denied { ioctl } for pid=21976 comm="syz.2.7219" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 644.951343][ T36] audit: type=1400 audit(2000000311.918:57775): avc: denied { ioctl } for pid=21976 comm="syz.2.7219" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 644.976734][ T36] audit: type=1400 audit(2000000311.918:57776): avc: denied { ioctl } for pid=21976 comm="syz.2.7219" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 645.011613][ T36] audit: type=1400 audit(2000000312.018:57777): avc: denied { ioctl } for pid=21976 comm="syz.2.7219" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 645.080749][ T36] audit: type=1400 audit(2000000312.078:57778): avc: denied { read write } for pid=15063 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 645.130812][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 645.143276][ T36] audit: type=1400 audit(2000000312.078:57779): avc: denied { read write open } for pid=15063 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 645.172551][ T9] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 645.181271][ T9] usb 3-1: config 0 has no interface number 0 [ 645.187409][ T9] usb 3-1: config 0 interface 230 has no altsetting 0 [ 645.197104][ T36] audit: type=1400 audit(2000000312.078:57780): avc: denied { ioctl } for pid=15063 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 645.224782][ T36] audit: type=1400 audit(2000000312.148:57781): avc: denied { ioctl } for pid=21976 comm="syz.2.7219" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 645.251718][ T36] audit: type=1400 audit(2000000312.148:57782): avc: denied { ioctl } for pid=21976 comm="syz.2.7219" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 645.280132][ T36] audit: type=1400 audit(2000000312.148:57783): avc: denied { ioctl } for pid=21976 comm="syz.2.7219" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 645.281411][ T9] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 645.317770][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.326438][ T9] usb 3-1: Product: syz [ 645.330650][ T9] usb 3-1: Manufacturer: syz [ 645.336799][ T9] usb 3-1: SerialNumber: syz [ 645.337999][T21982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 645.341544][T21982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1089 [ 645.353276][ T9] usb 3-1: config 0 descriptor?? [ 645.383997][ T9] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 645.406066][ T9] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 645.612521][T21992] /dev/rnullb0: Can't lookup blockdev [ 645.627139][T21992] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 645.650438][T21992] fuseblk: Bad value for 'fd' [ 645.744158][T21999] fuse: Invalid rootmode [ 645.860764][ T541] usb 10-1: new low-speed USB device number 49 using dummy_hcd [ 646.012779][ T541] usb 10-1: No LPM exit latency info found, disabling LPM. [ 646.024569][ T541] usb 10-1: config 64 has an invalid interface number: 174 but max is 2 [ 646.033253][ T541] usb 10-1: config 64 has an invalid interface number: 252 but max is 2 [ 646.041763][ T541] usb 10-1: config 64 has an invalid interface descriptor of length 2, skipping [ 646.050882][ T541] usb 10-1: config 64 has an invalid interface number: 140 but max is 2 [ 646.059239][ T541] usb 10-1: config 64 has no interface number 0 [ 646.066505][ T541] usb 10-1: config 64 has no interface number 1 [ 646.073814][ T541] usb 10-1: config 64 has no interface number 2 [ 646.080457][ T541] usb 10-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 646.093055][ T541] usb 10-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 646.105210][ T541] usb 10-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 646.116279][ T541] usb 10-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 646.130828][ T541] usb 10-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 646.142416][ T541] usb 10-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 646.154196][ T541] usb 10-1: config 64 interface 174 has no altsetting 0 [ 646.169146][ T541] usb 10-1: config 64 interface 252 has no altsetting 0 [ 646.176810][ T541] usb 10-1: config 64 interface 140 has no altsetting 0 [ 646.198774][ T541] usb 10-1: string descriptor 0 read error: -22 [ 646.205234][ T541] usb 10-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 646.242431][ T541] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.266095][ T541] usb-storage 10-1:64.174: USB Mass Storage device detected [ 646.304860][T22012] input: syz0 as /devices/virtual/input/input70 [ 646.323534][ T541] usb-storage 10-1:64.252: USB Mass Storage device detected [ 646.418891][ T541] usb-storage 10-1:64.140: USB Mass Storage device detected [ 646.480769][ T541] usb 10-1: USB disconnect, device number 49 [ 646.790996][T22028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1116 [ 646.847009][T22032] 9pnet_fd: Insufficient options for proto=fd [ 647.080743][T22050] fuse: Bad value for 'fd' [ 647.108167][T22052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 647.142592][T22055] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 647.178130][T22059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7244'. [ 647.240969][T22064] overlay: ./file0 is not a directory [ 647.330565][T22071] rust_binder: Write failure EFAULT in pid:263 [ 647.347814][T22067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 647.377327][T22067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1128 [ 647.545969][T22082] fuse: Bad value for 'rootmode' [ 647.570762][ T536] usb 10-1: new low-speed USB device number 50 using dummy_hcd [ 647.653468][T22087] overlayfs: missing 'lowerdir' [ 647.704294][ T9] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 647.741792][ T536] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 647.751589][ T536] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.764542][ T536] usb 10-1: config 0 descriptor?? [ 647.942132][T22107] fuse: Bad value for 'rootmode' [ 647.985388][ T536] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 648.745865][T22119] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7265'. [ 648.918316][T22135] netlink: 'syz.3.7270': attribute type 16 has an invalid length. [ 648.926434][T22135] netlink: 'syz.3.7270': attribute type 2 has an invalid length. [ 648.934369][T22135] netlink: 64110 bytes leftover after parsing attributes in process `syz.3.7270'. [ 649.400954][ T536] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 649.411316][ T536] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 649.424725][ T536] asix 10-1:0.0: probe with driver asix failed with error -71 [ 649.433368][ T536] usb 10-1: USB disconnect, device number 50 [ 649.451009][ T31] usb 3-1: USB disconnect, device number 8 [ 649.691975][T22147] input: syz1 as /devices/virtual/input/input71 [ 649.877719][T22153] fuse: Unknown parameter 'user_i00000000000000000000' [ 649.947515][ T36] kauditd_printk_skb: 421 callbacks suppressed [ 649.947535][ T36] audit: type=1400 audit(2000000316.948:58205): avc: denied { read write } for pid=22156 comm="syz.9.7280" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 649.982023][ T36] audit: type=1400 audit(2000000316.978:58206): avc: denied { read write open } for pid=22156 comm="syz.9.7280" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.007785][ T36] audit: type=1400 audit(2000000316.978:58207): avc: denied { ioctl } for pid=22156 comm="syz.9.7280" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.033340][ T36] audit: type=1400 audit(2000000316.978:58208): avc: denied { ioctl } for pid=22156 comm="syz.9.7280" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.058476][ T36] audit: type=1400 audit(2000000316.978:58209): avc: denied { ioctl } for pid=22156 comm="syz.9.7280" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.083913][ T36] audit: type=1400 audit(2000000316.978:58210): avc: denied { ioctl } for pid=22156 comm="syz.9.7280" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.109721][ T36] audit: type=1400 audit(2000000317.108:58211): avc: denied { ioctl } for pid=22156 comm="syz.9.7280" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.171170][ T36] audit: type=1400 audit(2000000317.178:58212): avc: denied { ioctl } for pid=22156 comm="syz.9.7280" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.230804][ T536] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 650.239212][ T36] audit: type=1400 audit(2000000317.238:58213): avc: denied { ioctl } for pid=22156 comm="syz.9.7280" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.264452][ T36] audit: type=1400 audit(2000000317.238:58214): avc: denied { ioctl } for pid=22156 comm="syz.9.7280" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.380777][ T536] usb 10-1: Using ep0 maxpacket: 32 [ 650.388463][ T536] usb 10-1: config 0 has an invalid interface number: 230 but max is 0 [ 650.397711][ T536] usb 10-1: config 0 has no interface number 0 [ 650.403938][ T536] usb 10-1: config 0 interface 230 has no altsetting 0 [ 650.414027][ T536] usb 10-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 650.423282][ T536] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.431401][ T536] usb 10-1: Product: syz [ 650.435668][ T536] usb 10-1: Manufacturer: syz [ 650.440355][ T536] usb 10-1: SerialNumber: syz [ 650.449353][ T536] usb 10-1: config 0 descriptor?? [ 650.465703][ T536] ums-usbat 10-1:0.230: USB Mass Storage device detected [ 650.489097][ T536] ums-usbat 10-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 650.654023][T22166] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 650.661499][T22166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1135 [ 650.667363][T22166] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 650.698838][T22166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 650.698870][T22166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1135 [ 650.751652][T22169] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 650.763912][T22169] rust_binder: validate_parent_fixup: new_min_offset=144115188075855932, sg_entry.length=0 [ 650.770533][T22169] rust_binder: Error while translating object. [ 650.780915][T22169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 650.787249][T22169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1138 [ 651.069444][T22177] fuse: Unknown parameter 'user_i00000000000000000000' [ 651.497722][T22198] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 651.838830][T22203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1156 [ 652.443367][T22207] netlink: 'syz.6.7294': attribute type 16 has an invalid length. [ 652.460662][T22207] netlink: 'syz.6.7294': attribute type 2 has an invalid length. [ 652.468600][T22207] netlink: 64086 bytes leftover after parsing attributes in process `syz.6.7294'. [ 652.535446][T22209] /dev/rnullb0: Can't lookup blockdev [ 653.080746][ T541] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 653.291964][ T541] usb 3-1: No LPM exit latency info found, disabling LPM. [ 653.301354][ T541] usb 3-1: config 64 has an invalid interface number: 74 but max is 2 [ 653.309730][ T541] usb 3-1: config 64 has an invalid interface number: 15 but max is 2 [ 653.318001][ T541] usb 3-1: config 64 has an invalid interface descriptor of length 2, skipping [ 653.327365][ T541] usb 3-1: config 64 has an invalid interface number: 235 but max is 2 [ 653.337709][ T541] usb 3-1: config 64 has no interface number 0 [ 653.345606][ T541] usb 3-1: config 64 has no interface number 1 [ 653.360260][ T541] usb 3-1: config 64 has no interface number 2 [ 653.373831][ T541] usb 3-1: config 64 interface 15 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 653.385698][ T541] usb 3-1: config 64 interface 15 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 653.398196][ T541] usb 3-1: config 64 interface 15 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 653.413310][ T541] usb 3-1: config 64 interface 15 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 653.427180][ T541] usb 3-1: config 64 interface 235 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 653.438797][ T541] usb 3-1: config 64 interface 235 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 653.450079][ T541] usb 3-1: config 64 interface 74 has no altsetting 0 [ 653.457237][ T541] usb 3-1: config 64 interface 15 has no altsetting 0 [ 653.464223][ T541] usb 3-1: config 64 interface 235 has no altsetting 0 [ 653.477865][ T541] usb 3-1: string descriptor 0 read error: -22 [ 653.484192][ T541] usb 3-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=a2.22 [ 653.494322][ T541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.508913][ T541] zaurus 3-1:64.74: invalid descriptor buffer length [ 653.515759][ T541] usb 3-1: bad CDC descriptors [ 653.707861][ T541] usb 3-1: USB disconnect, device number 9 [ 654.254133][T22218] fuse: Unknown parameter 'user_i00000000000000000000' [ 654.372572][ T536] ums-usbat 10-1:0.230: probe with driver ums-usbat failed with error -5 [ 654.384221][ T536] usb 10-1: USB disconnect, device number 51 [ 654.605800][T22224] netlink: 'syz.9.7299': attribute type 4 has an invalid length. [ 654.632691][T22224] netlink: 'syz.9.7299': attribute type 4 has an invalid length. [ 654.910847][ T536] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 654.970830][ T541] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 654.979285][ T36] kauditd_printk_skb: 257 callbacks suppressed [ 654.979304][ T36] audit: type=1400 audit(2000000321.978:58472): avc: denied { ioctl } for pid=22233 comm="syz.9.7304" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 655.011870][ T36] audit: type=1400 audit(2000000321.978:58473): avc: denied { ioctl } for pid=22233 comm="syz.9.7304" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 655.038149][ T36] audit: type=1400 audit(2000000321.978:58474): avc: denied { ioctl } for pid=22233 comm="syz.9.7304" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 655.063223][ T36] audit: type=1400 audit(2000000322.018:58475): avc: denied { ioctl } for pid=22230 comm="syz.2.7303" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 655.089037][ T36] audit: type=1400 audit(2000000322.088:58476): avc: denied { ioctl } for pid=22233 comm="syz.9.7304" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 655.115076][ T36] audit: type=1400 audit(2000000322.118:58477): avc: denied { ioctl } for pid=22230 comm="syz.2.7303" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 655.141581][ T36] audit: type=1400 audit(2000000322.148:58478): avc: denied { ioctl } for pid=22230 comm="syz.2.7303" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 655.143238][ T536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.170769][ T36] audit: type=1400 audit(2000000322.148:58479): avc: denied { ioctl } for pid=22230 comm="syz.2.7303" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 655.178737][ T536] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 655.215438][ T541] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.227266][ T541] usb 10-1: config 0 interface 0 has no altsetting 0 [ 655.235628][ T541] usb 10-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 655.238378][ T36] audit: type=1400 audit(2000000322.148:58480): avc: denied { ioctl } for pid=22230 comm="syz.2.7303" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 655.244941][ T536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.273530][ T36] audit: type=1400 audit(2000000322.148:58481): avc: denied { ioctl } for pid=22230 comm="syz.2.7303" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 655.280760][ T541] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.315628][ T536] usb 3-1: config 0 descriptor?? [ 655.340957][ T541] usb 10-1: config 0 descriptor?? [ 655.400156][T22238] fuse: Unknown parameter 'user_id00000000000000000000' [ 655.745033][ T536] usbhid 3-1:0.0: can't add hid device: -71 [ 655.751633][ T536] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 655.768958][ T536] usb 3-1: USB disconnect, device number 10 [ 655.984192][ T541] wacom 0003:056A:0018.0038: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 655.995666][ T541] wacom 0003:056A:0018.0038: hidraw0: USB HID v0.07 Device [HID 056a:0018] on usb-dummy_hcd.9-1/input0 [ 656.010795][ T541] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:0018.0038/input/input73 [ 656.304035][T22234] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 656.304066][T22234] rust_binder: Error while translating object. [ 656.320765][T22234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 656.327158][T22234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:277 [ 656.353301][ T541] usb 10-1: USB disconnect, device number 52 [ 656.470474][T22264] fuse: Unknown parameter 'user_id00000000000000000000' [ 656.521098][T22265] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 656.819944][T22277] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 656.821864][T22277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7319'. [ 656.878291][T22277] rust_binder: Error while translating object. [ 656.878346][T22277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 656.896845][T22277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1175 [ 657.064523][T14382] Bluetooth: hci0: Frame reassembly failed (-90) [ 657.083875][T22281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:279 [ 657.313284][T22285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 657.346885][T22285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 657.384192][T22285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1180 [ 657.510601][T22289] fuse: Unknown parameter 'user_id00000000000000000000' [ 658.750824][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 658.903259][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.913518][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.924798][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 658.933936][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 658.942282][ T9] usb 3-1: SerialNumber: syz [ 659.111967][ T435] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 659.118447][T14978] Bluetooth: hci0: command 0x1003 tx timeout [ 659.319333][T22356] rust_binder: Write failure EFAULT in pid:226 [ 659.357325][ T9] usb 3-1: invalid UAC_HEADER (v1) [ 659.397739][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 659.430670][T22371] rust_binder: Write failure EINVAL in pid:286 [ 659.454061][ T9] usb 3-1: USB disconnect, device number 11 [ 659.554637][T16102] udevd[16102]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 659.987966][T22404] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7363'. [ 659.988118][ T36] kauditd_printk_skb: 479 callbacks suppressed [ 659.988140][ T36] audit: type=1400 audit(2016777771.982:58961): avc: denied { read write } for pid=21063 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 660.047843][ T36] audit: type=1400 audit(2016777772.032:58962): avc: denied { read write open } for pid=21063 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 660.080816][ T36] audit: type=1400 audit(2016777772.032:58963): avc: denied { ioctl } for pid=21063 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 660.108363][ T36] audit: type=1400 audit(2016777772.082:58964): avc: denied { read } for pid=22403 comm="syz.9.7363" name="binder1" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 660.116246][T22404] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 216, size: 226) [ 660.131644][ T36] audit: type=1400 audit(2016777772.082:58965): avc: denied { read open } for pid=22403 comm="syz.9.7363" path="/dev/binderfs/binder1" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 660.133949][T22404] rust_binder: Error while translating object. [ 660.142563][ T36] audit: type=1400 audit(2016777772.082:58966): avc: denied { ioctl } for pid=22403 comm="syz.9.7363" path="/dev/binderfs/binder1" dev="binder" ino=31 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 660.201046][ T36] audit: type=1400 audit(2016777772.082:58967): avc: denied { set_context_mgr } for pid=22403 comm="syz.9.7363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 660.202242][T22404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 660.221266][T22404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 660.232249][ T36] audit: type=1400 audit(2016777772.082:58968): avc: denied { read write } for pid=22403 comm="syz.9.7363" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 660.294121][ T36] audit: type=1400 audit(2016777772.082:58969): avc: denied { read write open } for pid=22403 comm="syz.9.7363" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 660.353149][ T36] audit: type=1400 audit(2016777772.112:58970): avc: denied { ioctl } for pid=22403 comm="syz.9.7363" path="/dev/udmabuf" dev="devtmpfs" ino=83 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 660.610840][ T399] usb 10-1: new full-speed USB device number 53 using dummy_hcd [ 660.641592][T22433] 9pnet_fd: p9_fd_create_unix (22433): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 660.765048][ T399] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 660.777921][ T399] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 660.810792][ T399] usb 10-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 660.820171][ T399] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.851005][ T399] usb 10-1: config 0 descriptor?? [ 660.862332][T22420] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 660.896068][ T399] usbhid 10-1:0.0: can't add hid device: -22 [ 660.919112][ T399] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 661.265750][T22472] rust_binder: Write failure EFAULT in pid:1193 [ 661.278911][T22474] fuse: Unknown parameter '0x0000000000000003' [ 661.380639][T22481] netlink: 316 bytes leftover after parsing attributes in process `syz.6.7390'. [ 661.902236][T22496] input: syz0 as /devices/virtual/input/input77 [ 661.921179][T22496] netlink: 224 bytes leftover after parsing attributes in process `syz.9.7394'. [ 661.931589][T22496] rust_binder: Write failure EFAULT in pid:310 [ 662.189808][T22500] rust_binder: Write failure EFAULT in pid:312 [ 662.200262][T22500] rust_binder: Error while translating object. [ 662.206709][T22500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 662.213044][T22500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:312 [ 662.266485][T22502] fuse: Unknown parameter '0x0000000000000003' [ 662.534508][T22511] rust_binder: 323: no such ref 1 [ 662.539708][T22511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 662.785624][T22528] fuse: Unknown parameter '0x0000000000000003' [ 662.879917][T22534] rust_binder: Write failure EFAULT in pid:334 [ 662.884394][T22532] overlayfs: failed to clone lowerpath [ 662.885799][T22535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.910299][T22535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.921339][T22532] +$<: renamed from bridge0 (while UP) [ 662.943065][T22537] overlayfs: failed to clone lowerpath [ 662.987763][T22541] 9pnet_fd: Insufficient options for proto=fd [ 663.164924][T22548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=22548 comm=syz.3.7412 [ 663.178755][T22548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7412'. [ 663.507254][T22550] kvm_pr_unimpl_wrmsr: 1332 callbacks suppressed [ 663.507272][T22550] kvm_intel: kvm [22549]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x622c6c6562616c63 [ 663.613817][T22553] random: crng reseeded on system resumption [ 663.645033][T22553] netlink: 'syz.9.7414': attribute type 16 has an invalid length. [ 663.653083][T22553] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.7414'. [ 663.860775][T22560] tipc: Started in network mode [ 663.867645][T22560] tipc: Node identity ac14140f, cluster identity 4711 [ 663.879420][T22560] tipc: New replicast peer: 255.255.255.255 [ 663.887020][T22560] tipc: Enabled bearer , priority 10 [ 664.052130][T22574] ------------[ cut here ]------------ [ 664.057662][T22574] WARNING: CPU: 0 PID: 22574 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 664.067225][T22574] Modules linked in: [ 664.071176][T22574] CPU: 0 UID: 0 PID: 22574 Comm: syz.6.7422 Not tainted syzkaller #0 d899f4612b6642b8064e11bfad7fd90942082850 [ 664.082872][T22574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 664.083757][T22575] rust_binder: Write failure EFAULT in pid:352 [ 664.093163][T22574] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 664.093212][T22574] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a2 1f ee 05 00 0f 85 be 00 00 00 c6 05 95 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 664.124958][T22574] RSP: 0018:ffffc9000272f860 EFLAGS: 00010246 [ 664.131097][T22574] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 664.139100][T22574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000272f918 [ 664.147155][T22574] RBP: ffffc9000272f988 R08: ffffc9000272f917 R09: 0000000000000000 [ 664.155201][T22574] R10: ffffc9000272f900 R11: fffff520004e5f23 R12: ffffc9000272f8a0 [ 664.163384][T22574] R13: dffffc0000000000 R14: 1ffff920004e5f10 R15: 0000000000000000 [ 664.171500][T22574] FS: 00007fe528b516c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 664.180581][T22574] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 664.187213][T22574] CR2: 00007fd212bf6f98 CR3: 000000011476c000 CR4: 00000000003526b0 [ 664.195240][T22574] Call Trace: [ 664.198537][T22574] [ 664.201505][T22574] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 664.207615][T22574] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 664.213422][T22574] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 664.219205][T22574] ___kmalloc_large_node+0x81/0x220 [ 664.224470][T22574] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 664.230348][T22574] __kmalloc_large_node_noprof+0x1e/0xe0 [ 664.236043][T22574] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 664.241832][T22574] __kmalloc_noprof+0x336/0x530 [ 664.246719][T22574] ? __cfi_lockref_get+0x10/0x10 [ 664.251827][T22574] incfs_realloc_mount_info+0xa7/0x4d0 [ 664.257323][T22574] ? incfs_add_sysfs_node+0x118/0x240 [ 664.262826][T22574] incfs_alloc_mount_info+0x479/0x600 [ 664.268260][T22574] incfs_mount_fs+0x3ca/0x960 [ 664.273035][T22574] ? __cfi_incfs_mount_fs+0x10/0x10 [ 664.278387][T22574] ? vfs_parse_fs_string+0x102/0x170 [ 664.284103][T22574] ? selinux_capable+0x38/0x50 [ 664.289169][T22574] legacy_get_tree+0x106/0x1b0 [ 664.294048][T22574] ? __cfi_incfs_mount_fs+0x10/0x10 [ 664.299304][T22574] vfs_get_tree+0x9e/0x290 [ 664.304086][T22574] do_new_mount+0x251/0xb40 [ 664.308798][T22574] ? security_capable+0xcf/0xf0 [ 664.314014][T22574] path_mount+0x688/0x1050 [ 664.318573][T22574] ? putname+0x113/0x150 [ 664.322870][T22574] __se_sys_mount+0x2bd/0x480 [ 664.327575][T22574] ? __x64_sys_mount+0xf0/0xf0 [ 664.332408][T22574] ? __kasan_check_write+0x18/0x20 [ 664.337570][T22574] ? fpregs_restore_userregs+0x11d/0x260 [ 664.343276][T22574] __x64_sys_mount+0xc3/0xf0 [ 664.347895][T22574] x64_sys_call+0x2021/0x2ee0 [ 664.352650][T22574] do_syscall_64+0x58/0xf0 [ 664.357094][T22574] ? clear_bhb_loop+0x50/0xa0 [ 664.361819][T22574] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 664.367747][T22574] RIP: 0033:0x7fe527d8eec9 [ 664.372226][T22574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.391938][T22574] RSP: 002b:00007fe528b51038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 664.400571][T22574] RAX: ffffffffffffffda RBX: 00007fe527fe5fa0 RCX: 00007fe527d8eec9 [ 664.408864][T22574] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 664.416895][T22574] RBP: 00007fe527e11f91 R08: 0000200000000280 R09: 0000000000000000 [ 664.424923][T22574] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 664.432940][T22574] R13: 00007fe527fe6038 R14: 00007fe527fe5fa0 R15: 00007ffd28ea5498 [ 664.441159][T22574] [ 664.444202][T22574] ---[ end trace 0000000000000000 ]--- [ 664.450909][T22574] incfs: Error allocating mount info. -12 [ 664.456870][T22574] incfs: mount failed -12 [ 665.000815][ T9] tipc: Node number set to 2886997007