last executing test programs: 31m5.567315561s ago: executing program 32 (id=3664): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00ffff000000000000000000000000000000000000000100010000200002000a05000000000000fe8000000000000000000000000000aa000000000d0001007564703a73"], 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000140)={0x18}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r1, 0x5, 0xfffffffffffffffe, 0x2}) mknodat(r5, &(0x7f00000000c0)='./file0\x00', 0x400, 0x200) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000028c0), r6) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000001000)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x64040050}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}}) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011000000"], 0x54}}, 0x20004010) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x28000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r11, 0x3309) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r10, 0x0) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000035b000/0x400000)=nil, 0x400000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r12, 0x0, 0x1, 0x0, &(0x7f0000000080)) pread64(r9, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 30m52.405315432s ago: executing program 33 (id=3845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100", @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000580)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FICLONE(r4, 0x40049409, 0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x801, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000080)=0x4) close_range(r5, 0xffffffffffffffff, 0x0) 30m22.574907071s ago: executing program 34 (id=3958): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10000002}}}, 0x32) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8) r1 = socket(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000500)={0x40, 0x11, 0x5f, {0x5f, 0x2b, "892244da298be32e38e4bcc996828bc270247d81eb07970d81e16dc7f8ce644cfb909fd306ebc65bddaec5d5a3c043fc033459811c4c6bf8b17ad40b0ec1034cd17e2f92142147f5590a80f746f0079201000000000000004b2d59b885"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) unshare(0x20040600) syz_usb_control_io(r7, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x0, 0xe0, {0xe0, 0x9, "eed8076b8d9e177766f5e0874c38ea434fc4c757152db58c5cf7ab0c5c426f02f2048bd29ce0cbc48c50c08b101fe8538972ec883cb3c4a2178604fa1a467b855e50929a1de6e8acde3ba843c06c06b079205720d1885122f07e9a414720e6801dac110baaee63a73b1c9189d72b666765e899214c2cb6c079520c9e1450500cc9fdf4a8fc1c771764b0c517961700d549d1f845f52add889eb765576f3e1af11e7ee690016f5209b84af3ebd8777f8503763e2d1327a9b5b49e35c8e044a36e633df25552eca7fff5d91efe5ccd43cb58aa702592ee6cee50e25cfacffb"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000680)={0x0, 0xf, 0x8f, {0x5, 0xf, 0x8f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "d84ae3d199c69d523ec615705cf5eeea"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x10}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x200, 0x0, 0x400, [0x3fff, 0x7e0f, 0xc0, 0xf0, 0xc0, 0x1fe0000]}, @generic={0x48, 0x10, 0x3, "5af835a42fabbc48fa417a0dd21a4b314d5dfa3d319b320700b8c3c32a5dadadbac3cdba4625dd8af274de05c0e5437b53df9da5bfab70d9a6dfe65c73e30e4a1873c125fa"}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x18, 0x5, 0x8, "e169b387", "d331a2f5"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x29, 0xe, 0xb9, 0x0, 0x9}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000740)={0x0, 0x17, 0x36, "b55e8bbf6b2322f7c06de8940761000d15549ceaab1010c263e6d38d14f3547b0cb496244c9933502c6d60b04b730167721d1666a872"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x322, 0x8}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0xb, 0x2, "e088"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "812e"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b00)={0x40, 0x21, 0x1}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xc1) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000001000010000000000000000000000000a54008cb07b783a3221f800000000000002000000280004802400018009"], 0x7c}}, 0x4041) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="0a012a20", @ANYRESHEX, @ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x20000055) socket(0x10, 0x3, 0x0) 28m46.321504707s ago: executing program 35 (id=5247): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x15) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) (async) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) (async) write$rfkill(r0, &(0x7f00000001c0)={0x5929, 0x1, 0x3, 0x1}, 0x8) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000001080)={{0x2, 0x4e21, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x0, {0x2, 0x4e24, @broadcast}, 'ipvlan1\x00'}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0x8008770b, 0x8) (async, rerun: 64) recvmsg$can_raw(r1, &(0x7f0000000480)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000300)=""/31, 0x1f}], 0x3, &(0x7f0000000580)=""/196, 0xc4}, 0x122) (async) syz_usb_connect(0x5, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x60, r10, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x4000005) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) 23m51.183003051s ago: executing program 3 (id=9631): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(r2, &(0x7f00000000c0)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000f80)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0xfa, 0x5}, {0x28, 0x3, 0x0, 0x7fff}, {0x8, 0xfc, 0xfa, 0x80000040}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) getgroups(0x1, &(0x7f0000000340)=[0xffffffffffffffff]) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) syz_clone(0x21000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x3) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000400) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f00000000c0)=""/37, &(0x7f0000000040)=0x25) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f0000000f40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r7, 0x10, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}}, 0x4084) sendmmsg(r4, &(0x7f0000000e00)=[{{&(0x7f0000000380)=@in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x70c1}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000580)="6f4c9ed138279176f92a83d3494cf5bee08ab9b88c83e9c04ea55fd12eb292a5b195653dfba86b344819b5a3c72ecbe5b1e6d5a9b59696c0feec14b047ec0f03c2b1cd4488b635345928cf8bf5ef944e04288bb0eae7ba4ab939d0a596632a6d33d070cd34c5583bb32f4552209adb3fd216ffda766275c59e48505781239be215a8a7ab831205f09aebb1f2f3b6a253b981032251d9987485546a49ff4662a69f71e73a6b418529a26d50de7ff5947e414bdeb89b65229b95a699ec99f987d4e17fc73a14b786", 0xc7}, {&(0x7f0000000440)="4219c5d51d44d8d82ea5467e607ca911887303ed578fe6ad265617e0e57f615b821aa3c5c4bf8d148228482f87620b5dad2dec59efc7b36e1e184d86e9e9c54a24c620655edf086cc23bd2a4ee0c8d63457e590bc23f9a42b2bc7b2ad5a94b4f4fa1800bd2cd1fcc86219678a82045bb21c6794806e0498ac9df8734ebd4ad5d5bdbf7a012650c97d97ed804b1813205647a1cc1fc993321a05ae728ba286a6dafbcfc0015950d", 0xa7}, {&(0x7f0000000680)="84683949364dab6bb6fe49ed910b144fdd65a5ea76dadb59d28427b4df68f2153603198f155e0f3fec3ede61d797cdc70c736a1556df86e927477e40f614fe14a85a0601e18140cf9fb1b8ef0d50d10c38bb6a63010074c1b3ee703759d8d5da4aff9cc81810e34e108e5114e779e942f8884ead2016983b54fe8fcb64c7acf74b6619a3097ecd28ee72d04566c0faae9c85e455b02994e4f3e54f859f486ec8a85fb872a9abf016a72a3b28d9e51eac5f4426bd72a47d589fb947a5e039294dd35add75cd5fffe5676c0aef76", 0xcd}, {&(0x7f0000000780)="d7b4b79819abc73c22687f00d787a023f82dceeef3d86e1093956782b2aa6911a56a7aaaacb6d9adc61180dd24edda2cded1e809ceca3fde6f8fa5c72a73639475f09d8163ecf1729982e3fbd467b5c9e57425a4d78b8b2345e288e966adad7acc6b3872b7e5e9042f808de38a6247b8afc6bd234f27841d4c52b4b11166e133da0095b93026d460697bf18a050d2a476fad8109ac5157f6e44ed086e0018459ec4ff037b3c902d605b2e10a95eb9b3b1b91fcd4028a5f9781b7a42f3d4b021738d190bb10595d4d1d82f1129144799614bf207afc49162ddd7bb93104668382802f4b121aecc4b5ecc46e1401088b652bbf", 0xf2}, {&(0x7f0000000880)="fa178046f6482e520790402eb8d93ed04f7aa2ab2c2c9804f8ae22225f17c3f5c7d8b3961230326ff6a0eea9e2179439179e8f75f17570ef74e63bb59476070ef13532b989511b1fd6aa5557b37b34581d6bbfe9425cc493b094f90d1d10e23d84b36abba0622c869e473cfed048d301336683c3584894803f2b857e7ded6b781b6006c62b1ac1042abd2fe069ef2790ffe4801d62e7c2d7aa33669c144acc07db928a5fb3698396195c07ad1498f7e488ab2a7b0b03b0efd217ba5d05de0695c208ee15e414b9a263b2a8ae86a7", 0xce}], 0x5, &(0x7f0000001640)=[{0xc0, 0x10e, 0x2, "713fd2723d5128fcfed671fe626251b2517f23227a710bc91b4eb2130ada40cd811cf86322fd3ad5443dd9568dea4a84ee7a6de1e567366c7fd6c2adf6fffedba7475ce2bd9d7868157c719259fea74ba706b4c7ed8aabcc98e698cf7bddbe494d6155c03f292e46bab1194f560d214580dc51e9ab8c4ad4eb002e325548237daf342848935703d32cf431d24a6da36caec5b5298e05c1d5d33aa139b427c1406accbf3bab7043f9192b"}, {0xb0, 0x111, 0x6, "2151c9261846083eaede579b00c972bdf1cfde5310c22911363b3fa8563996aeb8f94e2c0d43af3dea4ce3417bd2b86f836facf00c04f5695d9c4de326957796ec7fc7386fa3c79f1ce91b616e6ba9f67b37a5c0d994b20901266f3bab07f8039912b19278ef61760b8caac05fd288cf74d268ef18ebd593148e342d1d7253ab2d25d4408726476f4129256615ea4e6f6c45feb8232306fff9"}, {0x1010, 0x0, 0x4, "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"}, {0x108, 0x11, 0x401, "7c344cadadfcd98328744ec136777f8477db272bb7e8d77634c80624f422ac369f07e451b51c28ef8d6de4dc0341168870ab8a58ca7ef0eee3105a8cdca8b9619bfc3087ea80976ab95945d99a5788a34f30f9ae1da3188167ddf27aa5edb679c97dc75312b08737daaeb4057c219a1d9068e6e987b28531979095cb347c53c752b7a40084985914bca114511d357b8d51f40b8302994bc364fd6b9f63905391c90aa3b927f4ee8d4d11929b169ec1e6b366e713837534d107088f3b5b72f343d195dc75836e01554d5c1d92838beca9ff11fb898b384225072761a097845f2ca36d6e2014ae633c546623806b0c31f2eb14dfa8632ca8"}], 0x1288}}, {{&(0x7f0000000a00)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-simd\x00'}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000000ac0)=[{0xd8, 0x10b, 0x8, "c9d692996f8366f86331269d846ade18c2845a0cd8e68c15d9c00d5ab4c626f5358d9ef46ced1d474044fc39070a999866bd45cee8ac166dacc11f8bd7e711b4b015c9d623796131537b2393f8b79a9177f776d5e5dc8fa6c2aa33cd51943620dd6a4ed4cf6e8bcd96ffad1e305340f7e1b35f482f93c2a913db23714ffccb4ec89f0dcbd83bb2491a244e25e16e7ba1d240a8f37200cf73965fa7902f4f5f22608c926c599879f954182cdff4dbeb1c7150f267386d4d50d966e25f3b1948da75"}, {0x28, 0x118, 0x1, "d1cd04fd4b6c438df88dabae151c08c32be4579c307504"}, {0x88, 0x0, 0xc81, "4f5fba53c0e2259514aaacb9e275fc5824341614517dbfe3cce4794b5fd61202b9f6efc5f3fd456b485417c2553b554a8c76abdbdefe31ea4e6ce1eff28c1cb7f929d7bf37e9efebd9ff26ceb33287b42ee8b9fa54cf3a83647bc46a98d779480931e56276842052e459c7c9e4c96f361e08"}, {0xd8, 0x88, 0x0, "74416dbfe44fa08aec967b5b04e389227269c9688c3db712ad84b08c2435b04df8b62de9c5cf94b558d31d03746a28c038f71ff102395611161951db745121361c05d8ecdd54e67f0920b1d303cc315b157509add936dceeebf27ee86afbad94b76c0f2c2d0955b3a05cf4aa2d7469ee03808a9d614e11fa27f6717a1973628e74ab2df97fa86a72daf190942f8a10155fca5802c6a167435759671bb23bf43ee7f09bf5caf38ad4ebc038194097dde361feacb807ea4f7f368791507c7862ecbfb5"}, {0xb8, 0x10d, 0x6, "d305705e984eaae53eb6679b16972638f247df09fbdcad7cfa0d5fcbc666b1b30efa27c6643a11dfc47fd1faea19b61680654e4fa888f8a3635ff78919e38dc6e8e5661ee96976fa5dd9bb8da834d7c0573eea93bb0acf86ad5b2563291b3172abaf0d975ead6643b29bf30e16892699270762df5aca6e1668d71f33a1bddbfc0e41a2b66d3de3433ab224550ad7b6b08021fd849c0c57bc0c216570b194065a0bdb4b"}], 0x318}}], 0x2, 0xc000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) getpid() 23m50.839846197s ago: executing program 3 (id=9634): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 23m50.747202679s ago: executing program 3 (id=9635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r1, 0x0, 0x60, 0x0, &(0x7f0000d23000)=0x44) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000880)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) 23m49.250680007s ago: executing program 3 (id=9660): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_require}]}) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) (async) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) r0 = socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003340)=ANY=[@ANYBLOB="e01400002d00010000000000fbdbdf251d010900cc141380c814"], 0x14e0}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x801, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) (async) r6 = open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x7}) (async) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x7}) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) (async) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) connect$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e) (async) connect$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000002040)={0x0, 0x0, @pic={0x6, 0x4, 0xfd, 0x25, 0x7f, 0x1, 0xf7, 0x8, 0x8, 0x4, 0xfc, 0xc, 0x6, 0x7f, 0x6, 0xdd}}) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000002040)={0x0, 0x0, @pic={0x6, 0x4, 0xfd, 0x25, 0x7f, 0x1, 0xf7, 0x8, 0x8, 0x4, 0xfc, 0xc, 0x6, 0x7f, 0x6, 0xdd}}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001000)=0x3) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) close_range(r1, 0xffffffffffffffff, 0x0) 23m49.138568499s ago: executing program 3 (id=9661): ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) 23m48.983112552s ago: executing program 3 (id=9662): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x222c00c, 0x0) 23m48.982452652s ago: executing program 36 (id=9662): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x222c00c, 0x0) 23m2.964121329s ago: executing program 5 (id=10218): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x14880, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r1, 0x147a5000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3", 0x5}], 0x1}}], 0x1, 0x8800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x8, 0x4e23, 0x9, 0xa, 0x10, 0xc0, 0x6, 0x0, 0xffffffffffffffff}, {0xb, 0x7, 0x7, 0x9737, 0xffff, 0x0, 0x0, 0x6}, {0x101, 0xffff, 0x9e, 0x8000000000000000}, 0x4, 0x6e6bbb, 0x4, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3502, 0x4, 0x0, 0x6, 0x0, 0x6, 0x7}}, 0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r7, r7) (async) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r8, @ANYBLOB="100006000000000020"], 0x54, 0x1) creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCBRDELBR(r9, 0x89a1, &(0x7f0000000000)='veth0_virt_wifi\x00') (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x66053000) 23m2.848568171s ago: executing program 5 (id=10219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x2, 0x8001, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x6, 0x4, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x97, 0x5, 0x9, '\x00', 0xfe}, {0x9, 0x0, 0x6, '\x00', 0x10}, {0x7, 0x4, 0x8, '\x00', 0xb3}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x83, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x1b, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xe}, {0xa5, 0x7, 0x0, '\x00', 0x7}, {0x3, 0xc, 0x6, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe2, '\x00', 0x6}, {0xf8, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x2, 0x8001, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x6, 0x4, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x97, 0x5, 0x9, '\x00', 0xfe}, {0x9, 0x0, 0x6, '\x00', 0x10}, {0x7, 0x4, 0x8, '\x00', 0xb3}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x83, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x1b, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xe}, {0xa5, 0x7, 0x0, '\x00', 0x7}, {0x3, 0xc, 0x6, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe2, '\x00', 0x6}, {0xf8, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) (async) 23m2.848371991s ago: executing program 5 (id=10220): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x4000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x8010, r1, 0xcf82b000) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x847, 0x0, 0x400000002}, {0x8d9, 0x0, 0x4}]}) (async) read(r1, 0x0, 0x0) 23m2.806037932s ago: executing program 5 (id=10221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1381, 0x1000000000003}) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0x51c, 0x4002) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYRES16=r4, @ANYBLOB="0103fcffffff000000002b0000000c0006"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 23m2.756492693s ago: executing program 5 (id=10222): socket(0x22, 0x5, 0x3ff) (async) io_submit(0x0, 0x2, &(0x7f0000000100)=[0x0, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x2, 0x6, 0xffffffffffffffff, 0x0}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x2a31000) 23m2.678976614s ago: executing program 5 (id=10223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) fsetxattr$security_evm(r0, &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "b258136f57aa0265d7086c1feb114719519693d8"}, 0x15, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x8000, 0x180000000000}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x6) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLCREATE(r2, &(0x7f00000001c0)={0x18, 0xf, 0x1, {{0x8, 0x3, 0x7}, 0x7}}, 0x18) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200), 0x10) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000240)={0x4e, 0x7d, 0x2, {0x0, 0x47, 0x40, 0xc95e, {0x80, 0x2, 0x5}, 0xa110000, 0x2, 0x1a, 0x4, 0x3, 'lo\x00', 0x3, 'lo\x00', 0xd, 'security.evm\x00', 0x1, ')'}}, 0x4e) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000001780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001740)={&(0x7f0000000300)={0x1438, 0x14, 0x200, 0x70bd28, 0x25dfdbff, {0x1d, 0xf4}, [@INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "bb0787e2df5817eac2f881423c69e07fe6a9b428a79f075f4c74685e8cb8a9aac8d3944f232a688e4dc9c662979638b55ad9dccb3991616ba4f4618d5c12a29895f57da9a7e279a523be3d963e8798b2ab0dc9989803d8b3c32271dbecb85f57affbe7cf8ebd09870233eeff3a11c54968cca6030e2860ccfb0e0b92a1a9aaa0866e6f689727bc5c589d6ae8f16e90e7954be297e17a7e11"}, @INET_DIAG_REQ_BYTECODE={0x48, 0x1, "dae0ace2111822974fe5dbe0a42a8731d75d253b9ba5084fba401ed7a1593cfa18465e0b498ad217013b8b9842f0153ab041636721ef53424c912aeec7ea0fe6a7ed3e88"}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "4e13c8ef19f1142daf3a2256d934e1ac9e3e8b2bd1da0baedd2acfe0856e3ef73d25783d758ca28b88fc25a9e523438b91c5895decb62dae8b61fc89099787c2eb8e3b0b4d14225d90ebff5f7e98ccf75c54ee7f54f2"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "a7529af5d2564d74fcb3bca4fd6cfeeac992f3c0bf7555d06ff6b8dd6cc52fe322b6fb79d6772205e8d235fa871d27663ab094b9c7d67864e9765570b55a5d6c171320e98c5f623b00cb4fc83d873d3f50ec0370544498e69932217911598dd139bad383499ad02b54ae5db5936037"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "cd50b655c3f88ad6eacaaeb380decb9ace2dc1e5d4490d74de0078fa8b2e2ba84a53b0faccdfda9c2bc94aa5d70bbc00f8d9021f936ce8dadea1ac3a74bfc8bdf6d9dbd0ecb10be67353388bc0d4627fa1730343ace613f43d7e21903b050275f57b82e0f5be33c94ebcf5421cb34a63fb11d60651923b110d33c856a92600342354b5a5a455bbff7a8eb78ffa5afd8b96fcadd22dd4a36dbd"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "8b04bc703a45a3ea7011ccbcba1f7805f49d25fda1dc68d1c2e12a77dbadfc97bffb5312343b9c9e96f357a31af3c7311a2762a9054943676d7a6876df6e8a8ecf3b27bcc82864457907c0927504a6199891de2e44c9791f86d25b9ca570b002085e602eb41b560b879a5fbd0d897fd3c3a9"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "2e5a7e189a7ea943c7fbe473bd48ceca77a3ccb6f07953b0f4a3456cab06b26fa2e482e6c83298bbaa2d7033bd6e4cdb5af4df66456fc54c0325870c869341e94435a11480303bf6ca4eb932b3de5328662378036f6838fd84d72af7051f34a942a78ce26c5558882504ca3ec7bb0487dd282789e56f87b239504bfae622fd7d30676e6294766405afee356ac39db8e71128983d45d0da3c6c668fbaa70dd426e03790ab9ca72d2321833f6d2d414453728a14351776ca769028ebc3b5299e41b400d99b1d7e3ff3f8a40b30c9e9d872ccbaceb9755df39a6b0b72c195aa0d7f87d3ba88"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "20e62b32f66ed475e474abfb0bbe876bde5f4937ae0c2202fd2458add2e5de593eaaef3fba3215d2292955cdc0844415431c27cccda821c4cc047588c19f8b5f5f410b2c33c355773192bccf3b08de0795af6b935b7cad3aaf36e2d8d1f8a1ddd5b81206323c1ea2"}]}, 0x1438}, 0x1, 0x0, 0x0, 0x20004811}, 0x4008080) write$P9_RCLUNK(r2, &(0x7f00000017c0)={0x7, 0x79, 0x2}, 0x7) fsync(r3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000001a40)={0x3, 0x1, &(0x7f0000001840)=""/97, &(0x7f00000018c0)=""/219, &(0x7f00000019c0)=""/100, 0xdddd1000}) r6 = socket(0x3, 0x5, 0x7) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x99}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x66}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc011}, 0x40006) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000001bc0)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000001f00)={0x2, 0x0, &(0x7f0000001c40)=""/234, &(0x7f0000001d40)=""/252, &(0x7f0000001e40)=""/161, 0x5000}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000001f40)) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r5, 0x4004af77, &(0x7f0000001f80)=0x7fffffff) getsockopt$netlink(r6, 0x10e, 0x4, &(0x7f0000001fc0)=""/180, &(0x7f0000002080)=0xb4) fstat(r5, &(0x7f00000020c0)) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000002140)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000021c0)={'syztnl0\x00', &(0x7f0000002180)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0x4, 0x8, {{0x5, 0x4, 0x0, 0x15, 0x14, 0x64, 0x0, 0x7, 0x2f, 0x0, @remote, @multicast2}}}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000002400)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000023c0)={&(0x7f00000022c0)={0xe0, r9, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000800}, 0x84) 23m2.678699324s ago: executing program 37 (id=10223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) fsetxattr$security_evm(r0, &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "b258136f57aa0265d7086c1feb114719519693d8"}, 0x15, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x8000, 0x180000000000}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x6) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLCREATE(r2, &(0x7f00000001c0)={0x18, 0xf, 0x1, {{0x8, 0x3, 0x7}, 0x7}}, 0x18) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200), 0x10) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000240)={0x4e, 0x7d, 0x2, {0x0, 0x47, 0x40, 0xc95e, {0x80, 0x2, 0x5}, 0xa110000, 0x2, 0x1a, 0x4, 0x3, 'lo\x00', 0x3, 'lo\x00', 0xd, 'security.evm\x00', 0x1, ')'}}, 0x4e) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000001780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001740)={&(0x7f0000000300)={0x1438, 0x14, 0x200, 0x70bd28, 0x25dfdbff, {0x1d, 0xf4}, [@INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "bb0787e2df5817eac2f881423c69e07fe6a9b428a79f075f4c74685e8cb8a9aac8d3944f232a688e4dc9c662979638b55ad9dccb3991616ba4f4618d5c12a29895f57da9a7e279a523be3d963e8798b2ab0dc9989803d8b3c32271dbecb85f57affbe7cf8ebd09870233eeff3a11c54968cca6030e2860ccfb0e0b92a1a9aaa0866e6f689727bc5c589d6ae8f16e90e7954be297e17a7e11"}, @INET_DIAG_REQ_BYTECODE={0x48, 0x1, "dae0ace2111822974fe5dbe0a42a8731d75d253b9ba5084fba401ed7a1593cfa18465e0b498ad217013b8b9842f0153ab041636721ef53424c912aeec7ea0fe6a7ed3e88"}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "4e13c8ef19f1142daf3a2256d934e1ac9e3e8b2bd1da0baedd2acfe0856e3ef73d25783d758ca28b88fc25a9e523438b91c5895decb62dae8b61fc89099787c2eb8e3b0b4d14225d90ebff5f7e98ccf75c54ee7f54f2"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "a7529af5d2564d74fcb3bca4fd6cfeeac992f3c0bf7555d06ff6b8dd6cc52fe322b6fb79d6772205e8d235fa871d27663ab094b9c7d67864e9765570b55a5d6c171320e98c5f623b00cb4fc83d873d3f50ec0370544498e69932217911598dd139bad383499ad02b54ae5db5936037"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "cd50b655c3f88ad6eacaaeb380decb9ace2dc1e5d4490d74de0078fa8b2e2ba84a53b0faccdfda9c2bc94aa5d70bbc00f8d9021f936ce8dadea1ac3a74bfc8bdf6d9dbd0ecb10be67353388bc0d4627fa1730343ace613f43d7e21903b050275f57b82e0f5be33c94ebcf5421cb34a63fb11d60651923b110d33c856a92600342354b5a5a455bbff7a8eb78ffa5afd8b96fcadd22dd4a36dbd"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "8b04bc703a45a3ea7011ccbcba1f7805f49d25fda1dc68d1c2e12a77dbadfc97bffb5312343b9c9e96f357a31af3c7311a2762a9054943676d7a6876df6e8a8ecf3b27bcc82864457907c0927504a6199891de2e44c9791f86d25b9ca570b002085e602eb41b560b879a5fbd0d897fd3c3a9"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "2e5a7e189a7ea943c7fbe473bd48ceca77a3ccb6f07953b0f4a3456cab06b26fa2e482e6c83298bbaa2d7033bd6e4cdb5af4df66456fc54c0325870c869341e94435a11480303bf6ca4eb932b3de5328662378036f6838fd84d72af7051f34a942a78ce26c5558882504ca3ec7bb0487dd282789e56f87b239504bfae622fd7d30676e6294766405afee356ac39db8e71128983d45d0da3c6c668fbaa70dd426e03790ab9ca72d2321833f6d2d414453728a14351776ca769028ebc3b5299e41b400d99b1d7e3ff3f8a40b30c9e9d872ccbaceb9755df39a6b0b72c195aa0d7f87d3ba88"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "20e62b32f66ed475e474abfb0bbe876bde5f4937ae0c2202fd2458add2e5de593eaaef3fba3215d2292955cdc0844415431c27cccda821c4cc047588c19f8b5f5f410b2c33c355773192bccf3b08de0795af6b935b7cad3aaf36e2d8d1f8a1ddd5b81206323c1ea2"}]}, 0x1438}, 0x1, 0x0, 0x0, 0x20004811}, 0x4008080) write$P9_RCLUNK(r2, &(0x7f00000017c0)={0x7, 0x79, 0x2}, 0x7) fsync(r3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000001a40)={0x3, 0x1, &(0x7f0000001840)=""/97, &(0x7f00000018c0)=""/219, &(0x7f00000019c0)=""/100, 0xdddd1000}) r6 = socket(0x3, 0x5, 0x7) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x99}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x66}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc011}, 0x40006) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000001bc0)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000001f00)={0x2, 0x0, &(0x7f0000001c40)=""/234, &(0x7f0000001d40)=""/252, &(0x7f0000001e40)=""/161, 0x5000}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000001f40)) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r5, 0x4004af77, &(0x7f0000001f80)=0x7fffffff) getsockopt$netlink(r6, 0x10e, 0x4, &(0x7f0000001fc0)=""/180, &(0x7f0000002080)=0xb4) fstat(r5, &(0x7f00000020c0)) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000002140)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000021c0)={'syztnl0\x00', &(0x7f0000002180)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0x4, 0x8, {{0x5, 0x4, 0x0, 0x15, 0x14, 0x64, 0x0, 0x7, 0x2f, 0x0, @remote, @multicast2}}}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000002400)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000023c0)={&(0x7f00000022c0)={0xe0, r9, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000800}, 0x84) 21m36.263821984s ago: executing program 7 (id=11265): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xc, 0x8, 0x40, 0x7, 0x13, "71feaf33c32ed6fe90107884be157e88b3e578"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xfe) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xcca, 0x1, 0x1000, 0x6, 0x17}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000800)=""/4096) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf250d00000005001a007f00000006000a00010000000500180005000000050017009600000500190000000000050007001000000006000800a0aa0000"], 0x4c}, 0x1, 0x0, 0x0, 0x2000008c}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x705], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x868]}, 0x45c) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x100) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f00000007c0)=0x1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21m36.117946297s ago: executing program 7 (id=11267): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r2 = syz_open_pts(r1, 0x80400) close_range(r0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x140000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@loose}, {@noxattr}, {@ignoreqv}, {@nodevmap}, {@cache_none}, {@fscache}], [{@obj_role={'obj_role', 0x3d, '/dev/ptmx\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}]}}) 21m35.903037021s ago: executing program 7 (id=11269): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) prlimit64(r0, 0xa, &(0x7f00000000c0)={0x8, 0x8a}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range(r1, r2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000180)=0x6) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) 21m35.839411952s ago: executing program 7 (id=11271): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r1 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x4c06, 0x3) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x0, 0x10000}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e74657874ccf0d4f05b379200ee000000000000000007c92e93c31fddfe210a7dce7f4826"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc0386723, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x45, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0x30) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r5, 0xfffffffffffffffd, &(0x7f0000000800)="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") ptrace$cont(0x18, r7, 0xfffffffffffffffe, 0x0) ioprio_get$pid(0x2, r7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000002100001000a0c10000000e6ff224e0000", 0x58}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x2}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_clone(0x20300400, &(0x7f0000000440)="72abd557d6d0f1685ccda88a87c2eeaba73633e2e883d06aa26a39305bb07a051311f80aa5fd07e348c1ea3bb4ca455990b0f01c0e6bf05adfa8a658558ac15d13c311cd69f5da9df4c7f0ec21ba47820cd642f9453ce61b1dcc97aa8a3d604c1799de9403d7a2f0e2a65ae174795d928437dee77bdc85a6ce652820988c3d3d4fd3967f97ad3d4b6e1cc1fd454cd6c8", 0x90, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000600)="5f59990c328d829e7d289c83d96f6233f4ec70491289c5aa13384e85b94b9617743541cf75477ce943b6670ef627809cd5b2beca93272d04c01e9b4e984a52cc2d2241abeef9b7c525bceb5bc2421694d717ce6e55aa1f852c790762167ef7c8") 21m35.554403878s ago: executing program 7 (id=11275): r0 = syz_io_uring_complete(0x0) getsockname$tipc(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000340)="e76b64859fd877f2"}) (async) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x60000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x2, 0x0, 0x81, 0x3, 0x908e}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) 21m35.524498698s ago: executing program 7 (id=11277): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x82502, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000100)=0x1) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x5, 0x2) (async) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x80000000}, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x65010102}, 0x10, 0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x40000) (async) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="8701000000500000050200d1000100000100000000000000"], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) fstat(r1, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="012132df063a0e879b7266646e6f59f7b1bd935df270a5886b88d913ff78690f315bbb9a817f67c9d08c5c86dca3fac1d1bbccc24235dc3aa814db05cb9095d278d6bd4e3cc01d72191c1f8a33bf7984d8e747eb23ae1e8efa7eced8e2861c30272b82916a958286f1ca26e55fde3131e6f24d8f24e85d9e50aa21411491c372825a20a61eca72944eb67401cb81c728c302d248ec34405f3a66599ddf8ce5840c6c532162a12abb3077523bfda0aec5486348a3f679bba2bed3a774f17388a984b60d97e1487a1e7fd830d2b49944962ffabac57932e4460d1a7a9dea25ff", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 21m35.40004936s ago: executing program 38 (id=11277): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x82502, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000100)=0x1) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x5, 0x2) (async) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x80000000}, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x65010102}, 0x10, 0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x40000) (async) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="8701000000500000050200d1000100000100000000000000"], 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) fstat(r1, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="012132df063a0e879b7266646e6f59f7b1bd935df270a5886b88d913ff78690f315bbb9a817f67c9d08c5c86dca3fac1d1bbccc24235dc3aa814db05cb9095d278d6bd4e3cc01d72191c1f8a33bf7984d8e747eb23ae1e8efa7eced8e2861c30272b82916a958286f1ca26e55fde3131e6f24d8f24e85d9e50aa21411491c372825a20a61eca72944eb67401cb81c728c302d248ec34405f3a66599ddf8ce5840c6c532162a12abb3077523bfda0aec5486348a3f679bba2bed3a774f17388a984b60d97e1487a1e7fd830d2b49944962ffabac57932e4460d1a7a9dea25ff", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 20m29.467137919s ago: executing program 9 (id=12189): socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, &(0x7f0000000000), &(0x7f0000000100)=0x14) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x2f, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000001480)=""/4096, 0x0, 0x1, 0x2}, @fda={0x66646185, 0xa, 0x1000000002, 0x9}, @fd}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 20m29.40504324s ago: executing program 9 (id=12191): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000100)={0xe, 0x1, {0x56, 0x4, 0x3, {0x6, 0x8}, {0xf634, 0xff}, @ramp={0x4, 0x2, {0xc95, 0x7, 0x3, 0x2}}}, {0x56, 0x80, 0x0, {0x1ff, 0xa6c3}, {0x96, 0x2}, @const={0x8, {0x4, 0x3, 0x8, 0x6}}}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0xc88c4) write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"}) r4 = syz_open_pts(r3, 0x20800) dup3(r4, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x44) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f8020000", @ANYRES16=r5, @ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffff8000) modify_ldt$read(0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000300)={0xffffffc0, 0x80}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 20m29.119086166s ago: executing program 9 (id=12193): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000100)="83", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r3, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000180)={{r3}, {@void, @actul_num={@void, 0x52, 0x65}}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x2e}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000780)=[@request_death], 0x0, 0x0, 0x0}) 20m28.571251746s ago: executing program 9 (id=12200): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000080)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100000000, 0x20000) clock_gettime(0x5, &(0x7f00000001c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1d) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt(r2, 0x90, 0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), &(0x7f00000002c0)=0x30) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async) chroot(&(0x7f0000000080)='./file0/../file0/../file0\x00') (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) (async) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') (async) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100000000, 0x20000) (async) clock_gettime(0x5, &(0x7f00000001c0)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1d) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) setsockopt(r2, 0x90, 0x1, 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), &(0x7f00000002c0)=0x30) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async) 20m28.38161426s ago: executing program 9 (id=12203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) listen(r0, 0x3) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1, 0x91, 0x5) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20m28.274840341s ago: executing program 9 (id=12207): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x1000, 0xd, 0x2fae, 0x2}, 0x28, [0x7fff, 0x5, 0x3, 0xd, 0x0, 0x2, 0x23, 0x7, 0x44e, 0x8, 0xf4f2, 0x65, 0xa, 0xa32, 0xcfd, 0xffffff54, 0x5, 0x9, 0x4, 0x9, 0x3, 0x6a, 0x7, 0x6, 0x9000, 0xffffffe1, 0x2, 0xc, 0x8, 0xfffffff9, 0x4, 0x7, 0xfffffffc, 0x885, 0x9, 0x1, 0x9, 0x5, 0xfffffff8, 0xffffffff, 0x0, 0x8, 0x80000001, 0x8, 0xd0b, 0x5, 0x7ff, 0x9, 0x9, 0x0, 0xab, 0x13707275, 0x8bba, 0x1, 0x9, 0x9, 0x3, 0x4, 0x8, 0x4a, 0x3, 0x6, 0x4], [0x5, 0x9, 0x3, 0x7, 0x101, 0xff5, 0x3, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x7, 0xd, 0x0, 0x0, 0x7, 0xe, 0x6, 0x9, 0x1ff, 0x38e, 0x7, 0xccc3, 0x7, 0x8, 0x40000000, 0x72ab, 0x92, 0xfffffff3, 0x10001, 0x1, 0x7fffffff, 0x8, 0xa92f5e2d, 0x7fffffff, 0x4, 0x2, 0xb3, 0x4, 0x300, 0x6, 0xd4b2, 0xffffffff, 0x783e, 0x6, 0x3ff, 0xf4, 0x86, 0x6, 0x2, 0x400, 0x9, 0x5, 0x6, 0xe1, 0x9373, 0x6, 0x1c00, 0x9, 0x7, 0x26d, 0x7ff, 0x3ff], [0x4, 0x7, 0x1, 0x1, 0x4, 0x6, 0x1, 0x4, 0x9, 0x3, 0x0, 0x6, 0xb8f, 0x8, 0x0, 0x1, 0x4, 0x0, 0x9, 0xe6f6, 0x1, 0x80000000, 0x6, 0xfffffbff, 0x6, 0x8, 0x1, 0x1, 0xad27, 0x382, 0xd7d, 0x2, 0x4, 0x1, 0x81, 0x7fffffff, 0xaaa, 0x4, 0x8, 0x2, 0x5, 0x2, 0xc, 0x3, 0x5, 0xf, 0x2, 0x0, 0x1, 0x7, 0x1, 0xfefffffa, 0xfffffc01, 0x2, 0x6, 0x7a, 0x8, 0x401, 0x6, 0xd, 0x2, 0x7ff0, 0x80000000, 0xf], [0x4, 0x5, 0x101, 0x4, 0x4, 0x4, 0xd, 0xa, 0x5701, 0x3, 0x4, 0x0, 0xc, 0x0, 0x8, 0x7, 0x401, 0x101, 0x3, 0x7, 0x8, 0xce6, 0x80, 0x7f, 0x781, 0x80000000, 0x6a, 0x5, 0xea5, 0x8000, 0x2, 0x5, 0x6, 0x0, 0xff, 0xd, 0x3, 0x4, 0x1, 0x1, 0x0, 0x6, 0x5, 0x0, 0x80000001, 0xfa65, 0x10001, 0xffffffff, 0x4, 0x6, 0x2, 0x3, 0x81, 0x1, 0x6, 0xfffffffc, 0x3, 0xd8, 0x5, 0x3097be3d, 0x7f, 0x8, 0x1]}, 0x45c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='silent\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 20m28.084483635s ago: executing program 39 (id=12207): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x1000, 0xd, 0x2fae, 0x2}, 0x28, [0x7fff, 0x5, 0x3, 0xd, 0x0, 0x2, 0x23, 0x7, 0x44e, 0x8, 0xf4f2, 0x65, 0xa, 0xa32, 0xcfd, 0xffffff54, 0x5, 0x9, 0x4, 0x9, 0x3, 0x6a, 0x7, 0x6, 0x9000, 0xffffffe1, 0x2, 0xc, 0x8, 0xfffffff9, 0x4, 0x7, 0xfffffffc, 0x885, 0x9, 0x1, 0x9, 0x5, 0xfffffff8, 0xffffffff, 0x0, 0x8, 0x80000001, 0x8, 0xd0b, 0x5, 0x7ff, 0x9, 0x9, 0x0, 0xab, 0x13707275, 0x8bba, 0x1, 0x9, 0x9, 0x3, 0x4, 0x8, 0x4a, 0x3, 0x6, 0x4], [0x5, 0x9, 0x3, 0x7, 0x101, 0xff5, 0x3, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x7, 0xd, 0x0, 0x0, 0x7, 0xe, 0x6, 0x9, 0x1ff, 0x38e, 0x7, 0xccc3, 0x7, 0x8, 0x40000000, 0x72ab, 0x92, 0xfffffff3, 0x10001, 0x1, 0x7fffffff, 0x8, 0xa92f5e2d, 0x7fffffff, 0x4, 0x2, 0xb3, 0x4, 0x300, 0x6, 0xd4b2, 0xffffffff, 0x783e, 0x6, 0x3ff, 0xf4, 0x86, 0x6, 0x2, 0x400, 0x9, 0x5, 0x6, 0xe1, 0x9373, 0x6, 0x1c00, 0x9, 0x7, 0x26d, 0x7ff, 0x3ff], [0x4, 0x7, 0x1, 0x1, 0x4, 0x6, 0x1, 0x4, 0x9, 0x3, 0x0, 0x6, 0xb8f, 0x8, 0x0, 0x1, 0x4, 0x0, 0x9, 0xe6f6, 0x1, 0x80000000, 0x6, 0xfffffbff, 0x6, 0x8, 0x1, 0x1, 0xad27, 0x382, 0xd7d, 0x2, 0x4, 0x1, 0x81, 0x7fffffff, 0xaaa, 0x4, 0x8, 0x2, 0x5, 0x2, 0xc, 0x3, 0x5, 0xf, 0x2, 0x0, 0x1, 0x7, 0x1, 0xfefffffa, 0xfffffc01, 0x2, 0x6, 0x7a, 0x8, 0x401, 0x6, 0xd, 0x2, 0x7ff0, 0x80000000, 0xf], [0x4, 0x5, 0x101, 0x4, 0x4, 0x4, 0xd, 0xa, 0x5701, 0x3, 0x4, 0x0, 0xc, 0x0, 0x8, 0x7, 0x401, 0x101, 0x3, 0x7, 0x8, 0xce6, 0x80, 0x7f, 0x781, 0x80000000, 0x6a, 0x5, 0xea5, 0x8000, 0x2, 0x5, 0x6, 0x0, 0xff, 0xd, 0x3, 0x4, 0x1, 0x1, 0x0, 0x6, 0x5, 0x0, 0x80000001, 0xfa65, 0x10001, 0xffffffff, 0x4, 0x6, 0x2, 0x3, 0x81, 0x1, 0x6, 0xfffffffc, 0x3, 0xd8, 0x5, 0x3097be3d, 0x7f, 0x8, 0x1]}, 0x45c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='silent\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 9m26.52285827s ago: executing program 1 (id=22221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03052bbd7000f3dbdf25050000001c000180170001006574683a1cb7ad0e958a95565584626174616476"], 0x30}}, 0x400d800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 9m26.50584032s ago: executing program 1 (id=22223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa100000000000000000000000ffffffff001800000000000000000000e0000002000000000000000000000000fe8000000000000000000000000020aa3c040019"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000000)=0xe0000) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x8000, 0x0, 0x21}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kheaders.tar.xz', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x2040400) r3 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) utimensat(r3, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0xa}, 0x18) fadvise64(r2, 0x1fe, 0x7ffc, 0x3) 9m26.410999453s ago: executing program 1 (id=22225): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40047705, 0x0) 9m26.396475923s ago: executing program 1 (id=22226): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendto(r0, &(0x7f0000000280)="89196223e6b50acd1473d706aabfcb5b", 0x10, 0x8000, &(0x7f0000000300)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000240)='./file1\x00', 0x0, 0x800, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xa) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, r5) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000010000c0bfae00000600000012e1485e81000080000000000800008019770000f5000000f4ffffff0e00000000000000"]) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20, 0x40044}}], 0x1, 0x4) r6 = geteuid() r7 = getuid() r8 = getuid() r9 = getegid() syz_fuse_handle_req(r1, &(0x7f0000004440)="59ccc7d7500b00993504b79d4bf0e97c77e01dca0cbe8a6d81211791d6a0a009aa8306cb8488c1acd31d0b1dd739dd6d0e5072eae85436e6be0771194a0d5774796aa49a3bccfce99758ebe2a43287d497d5b63c0e59fdfd271a930a9ffd7ac19f945486ae99d139c50a26dcd721da8da450957a450802e9c416193abcbb6fbae1114d5719019ca9d875d03e6d263f2190086040747281800bd0a756a966ab2b86b310c6f2ec1adcce41c0210db227384fb1ba678263423336e99e06b04b240ad352452c30070ef6ea3d5a5bcc82a499ea3ff5c1607172f15fb39155597a29b235f20240823e06f216bc1543aa23bb0d6646a7a4b0d7b19fb242ba3765f9d687903ae3769f19416e52feb0a1f09c6cafaf017e52d123a920e872fb59915b445408d16e4542edeac28c8a2fbc6f9c40936b2a490cf653eb72a872174d7ebbd66685b589face3b3d319a0eb5c7e2fd3413e7592faa3800bb6593540bcaddbf7b2dd488da819b171d3605e119f952fc1c4e4e960122e70e185c92dd27e756cc589f45c6e0ac6730061d10d175fa38ff0fe839d089fbc4a452a8286410f2c7889df34e091628b9b280afa90bf11f42e2ad0fce0ad54a4ede53f6872d23d59fc18dcd32071b80c98fe8e38dae0cbad9b94976e06a9563b3314f46b0a9913eba4968af8d111f741e87ddeac49829998636e8ebacba73c9849bb49df44465e4325ba7ec4ee2b4bba69b3c356da3484a7e8ed8fe40d21ac0987229cb87b5229757fb698123870828119c7e5f787c1dd3c988bde152db6b5292c102ffbff939ff1b37d3cb3ddf3993e164812d2103cb81120c13ce6422f30372afd9d5ec6494f559deae8de0af307fb6389af06a4bf156bbc63cf20ef152e74025849f581c72f099f205c7d2546185aba8bbeb7a9dfaff21333966efb7b1c8019d16c42482ebc00890738853de6ac4c7c08eea011447b5244e5c35c805452581b6afa7c93c15901cbda34da4229184e41f171800ad09faf67a4f321ec7816089cb78acf9a7e8c87548742a882ec1af6550da28bc81fc87a288310491675194e6a007e9bb6ceed3ff32616f9fbc8165b59f7782deb46673965993f69e0849361ee8cf731e0ca9f895a299ac5086ff4bc8a6681408e211ef1afb9454c01948699a848dde1309d2774df23af2d4551cee9198b319bcd53de322d7443911e484e96a92043370db3b317ae994a3094898921db31e2cd49d068592c68e5e8f5f0201a25f59836365a483b2ff1a45c47c3695d42be7112a88d8e18cda8570f11c6158d9961b645e91ea79baf89abf1c79b180033ecfb1d3d949cdbe3da35be18289a3c58326213e0cdf24759f7b30bda386e13d9fedb488e336688c390cf1e3a6447893fc7ba9f6289560c74f1994f9fe74e8908fe8897e6ea121c88430adfb11298553b7f9038dcd73c40f407b800da78f0b47674fb1f4ac8b31b5ad422f797507d0440995ffb0018905352427c5feb98912c607cb5c212ac683b2de197916e5eab27d17ec19be9a20cb3882aa2166e08e67f0786e52763da259ad36dee7ad471ea0894535a75d22b9703ec9c4931bc6a02a85a7c872d7b825b9c053e7d57624083004477ea5e2f6345d80fc47b2e59787149e21bed20081396d0b6fe16d202fcec956d72aa70b6387f4195fa5c3502bb042bd5ac33c682912fd85cdc7fee1107d2330dd14bc1567cfa2ac6dca840b12023fdc6073906d2f639aeab1928a21108bc706c13f45d0fbd3d05a9201df46452cef204fe8f547f028b69400b5094caac77586a7540c0b692faab13b0d84aa65d6f145e1a1fa17d48298126c75448553cd11c1f70e19ed0a3ca8ef59fae6520af9ecef5b2196adbafc80808456458c7f1a12de3fb4c4040af23ccb2609a1a7d8944f025740a89abb21c2536a863b89b8747508f86129be6510a28b0fa57da42eacd44001c8145cc39550c9d2c0639c65fdbf13541be67e81b1bb5c5900375b756fd0d76d5c8787f3e54e58155007cb2e0005982cffd1dbd2f886604662b5c23d1e5f610af0e77c4846aacb5d99b7a8d5141ad5c18e3318a35b8de61a70d0477aa29ad74e09e8591bec62693acc5ae30d14a49e36e4d7f611b3159905f6560658a65ff2eed369cea9dd60aae003f2fba79e05863cb44687326ae2ae2ec0d283fd2acab3565827e65437ede75597ee0715089b746b03e007f6f8f7378e9d33e70c340ab1aeab97fc2472c9e1fc4ade8d97838de86b0518bf431bc3cf9a1950440168aaa2c6c83333a52bbbc1fbd404b2d15ee807fc5ace760e7f3103cfea94e319c3bcdc57a956d54997c54fcd3e1ff2abfef1ddd6017815e6c9cb75f197be1d2578c3c7deb13c114504639a75d2171d4627ece8c4871b21a8bf1ed10337b6e75a96f19a067e750e7e2ba6bd3e2e0ffce1dea7a597b14d0936b885748ff1b47e48009ac29d3365eb3e5d1be1ceefe7f44faba7e256f3ebde8e796c5eb0ecb1f16b22b2c55d08e4582f7fbe857a731786d521fd371d96decc569df6c04fa3541dabea5b5f49781c709a2ff0b0752da2e200215ba8c8126d8eb6f7e35bb2d9a3010955e5fce8fc70106a90e3a9c918be4472d33bcbf0f47c93cff4cd5ce2db9123b986a4dcd1614d09e7faafc485a465fa0b76ef51f6d3d49d6250dcf6ce80606a88c2a4caa9f672a2f8a6929e78136fe8b02b84b3eb70976112f1861f4ab4912aec98ee4cff6cae3311664950cc37243e374056037ba3b5460481cf8aa4167aefb2952a44286c22d6436b1388583ec06e5ccf9ee9fc2f3ddb1f21b6b562bcd23ea9b61ea96daf0e119f86825735f28d197b0813efdd84b1e79df9b974e1064b5c641f82153ede7bdfc4ddd182aeb7b8e0f28dbadec42fe4b651b6e005e82f3555a5358207270413271301685459074b2a32c6c01ced7d91c0cc27160a2146741c859af9a9b1b06c897b18601e270cbcb115adf31be0bff282c3802ae9a0201e17ead2c52a9f5ac32670309ead60d5d638c1be0de09118e97f73caa9de8457276225d62a45aa1eb928d45038318ebd877673243710ce8afd689befde203bacfb7b1dbadc335f836dbbd4dcd38369284128ad79815a52172cf24ed535e3691c7b25a7e1da1dcbafd75b71bf42cb5ea9c94b4e9b9d269ff7e23056756ee272ed22da3218abf59253058772e57083f481ae7e3d9a93f4aae6c0f4da6afb73eff310b2923fcff2a01a95f7eb00942f47f92391845008469c59ff249fe2afd5b9659f1376e428c05d3a3e62e2f7731f33f72c17334dda19b9750e49df9875f8450d85942acd895d505369cf1de708e4fa083ac4c72d7c509d9d8ffb02e876100ad9fe28d3c8735123c41821028206a45cb7a7f438e809e2c17d2619c366f0ee51b4f382231d1d5659ad8983ae637a1e0c263a2784807ef25817ad6f20b7acea0b31be90cb58211f0c3e9a68f97f98a838faf06d4e5886cd28dc163dafa138b65efa4cfaaf515652bc9f2113ecfe99bb87ce16869c9733d1f0a04c3aac4eb5114bbf13520ef265471d1199dbd7e813e6f6e2d5d205b7cb97662ab41779f904bb3885ab9b162be793615919d25a23bac7aa143247eae8424b9656609978bb8a3845c1e9d627af9531b3be30438fb26a07137ad4fbe214cd24f09b165df647c5c786aed061f0aaebd227019c3ebc66e1023a06c9d65ceaea46659ee44942bb2e197d53d8d46a24c8c3b9f1b68da63780077b6ad7e288eed4920d4c29bbef30e7d4a4391a2cba49f69ddf2649e3390bd4ea6d55aac56e9c658042c0c17e2a30a3c5a1288781d5d3f7c8e2d43dbf7401dfffc15de8236839c85711db4014832527ec02866d4e4f998c35330eb8bc31e76ba51e94de95dc1d13ae313c5cc6dcddefa9c8218be48044ced3368676450233d11b7a35cbb5084f93f15df28ce1ea2b1ad3e588f44d7c6ee479ae591497853aab8d4b68a7900624e42639da28c4050efa6db2d258bb87e9e10f0c3771c5d6352896ef86b9fd95ddf4355406138e0a6077f6228842f41ca158898473716146a02e85bb6019ccd5e09efb85b9406c315d8077f926065d06a3e30ed7e9efec90de142e3d1c3687a9238a67d62fd5de4d0472be6a5d624b01bbe601a9409903d5a8a5f51e84d2902500567c3109f3d241895e3dba8b3cb33ecec8cd32c0a410fd91e0acf6f0b59cb11098c6f820c4e0eec8c4f1704b4ac349f644a34e05c5ed5d3da04e7fb8572bd6138a95f428cdf859b4e8434dd5b6bddbb935f59c19e9d937ce8b758d6301df97650f726b8374b4645d4149835fac4b13af13073010952a2d03db6830735eaa6bea42dacca13766404c8ef2faadd6715c95f5ae47a75e210eccd3a8f4611a2ad70cf346c171c66ecde48bbfc90859bddf25718a2c0e9c8246af542603259b9e58f4a7fa47581683d39480f4d1426fa182b7c7b4e11071e291954b64cde4fe98851d439d4471cccfa18fbd9e5e63b944a3033e9f881cedf60f21ddc11cd77792904b9a702ca3eee6c33b10d37e7dce48b039238b99438362999e94ae0a3e29542ff9fce14b8698787b225aa466e7a74343e991a04163f8a768dd9d56febc7405b37add19488820f2a8a6333e2da6013b64e1e775034ad29266f51969860d9734e70b5cfa97c5a06aae0bc6545862a1c15399440e34c96c971c9d26985b5fa0c1cf38d6ff09b77ee479c68f109c3e2b1adc5355e7f86080cc435e5f3d2437099c4e3a859f77683242a1529ba6de7bd7602c0ade0ec1f73c7c771c777d1dbc953ba80a404470b402e9ffb593ced55d393324939f3545afffa68af878a62dab6b34a790b23466b4692d697a775b710456c46eba46d98dcb2bca647e83f3f26577484e037a34c1115ee213b07967469049d9d83079202b8cbcbabca3d90c5837bd3a790dba9a85bf4ae1683c82a286f32de88379722b1f68bc20229facc27b95bc8591475b500a9fc544a823c39e003e5678db5c20d337cc5ab117a8fdaf703799d47cee40252f8e87863ccf9ab8ae90fbd602afd98fbb3bd69efc8fb8bc450efe52d1eb603d2ff8a95a60e18e96e3a523e9b713dc2405cfa5db211a140fc8f469022e66e94a0fc658d9802ba2ad13daf4e456833022b8604169112dc82909e05b6fc53c7d4a9135aba0dab866fbddca07a8eabc11715505de2fecda1ec4413307a51d666d6bd77c1640f218eb7254031cc8c99d3ef9dbc4d577fa3c236cbc8c2e2dd16201084b543af8aef03e4dfb4b22576dbf8da7425d93a59268d77d8ce12fa1cd802bc178410f904e3c97ab4fc8d940f240c19cabf7a2dc77b4a14f87858cb3332899529dec375dafdf3d0b2535da6088cfe6e46cf896d46586e5e07678d1e6c476cc4c7726b31eec287c7b2c3e7f490d9f7ad968b3f02024d07ea4f7d7e52acfff91241654b452c156341ea3ec51423b638ba2a0279f1238fd388c5358abd764952d25ac26c14d81555841b6ca2fcee316dbec94e259bece999528bbaa0fdcf0b37ec7e759caf075d781218baba1ae090a4ab114fdcdc73d0051c15a7d8bd6e1c0bc1b28d3e958f57cebba026d4ee4f9734e66cc5749599e52560faa5da06a024f3cb6610e0776ca96e301e894ec5b38af70c2ff87d0b114266d5b099186cb61ae04fd5c4447935a2536acdac61453356db6707178e89a88c6e3c556bbfc81d1a475285014240c56ee0f1353de49fb6d7902391dc8b69bdc33d32f709c7d28630304a8f5cbdaa984dfed2c70bf51aa173d96f8d834e06fc2c635d4b3ea79f957c83aff99b394585ca773049725edc939dd2ab18cd274d6f16e19b0b46071e28997b39541666c4836fb9c39cba9d08733846964f107d7d8f67f04c9794f9eabbd243b0b7b1b68958e685244b9b681118cc9423903bef7c7802d94c62f8afd739a69477aaabe582ea8cc9735677e6742eabde5c2eaceaf0b720a8cb3af6c6f7c4ae2bd5d2c2430c98541ff69ea9e42f6ee3371f516a37818a492bfede24303b297b6fa02f8aa28aa6a7a214a2511397087731f5a033a74336d78ea78dfe26b32baa2d98dec87b9dbb3743937c97383c61e109e51ed258b1e487a5acb9f820c1a5d6e814d8d57c0658b1a80cf7b93f3ebe8f1aa460689716c125b5d790e9f611f2a42ff0f3ae8c42fab5a71849c8c2b6b3a1964e5f63c8f0b0dfef6fa8a24d820f1e52fc79dc43024b62e793ee58ec0fab3707b1f8ed73ad1ce1cdc13b19c9094fd00d1e08aa526c30172fa3107f999ac4b37fea3be6b3b8d660c0c4a1b9fe050111dee588db710b91eb44b38b381cc39d6250be8a149d0902ce058ea8d1255cbd817e291e8ab1b3160cb4c427dde3b539226ce513f86e3fe631a69ba14f97a33aa6dfa594ee193edf026b44b9883f10dbce2680effc67166abbc3c7bc8b0e71a31448e482ded9369b05933ede52dc664a50808a5e536e1582d0983e39569de86155bc6005ff49c55b52c7c425f8cdd44cacd3180d55e09d48bf9758a60025e5599edef068b4d1ccc924808383f22f3968ce1b2708822824df68f1fc840990dfc10af41b5f91b48e6f91c114ad9d41f459af41f4d8f535f0c578a5eeadb62b724feb61871eb6881bfb1bb484cd30346a7d294f8aa146b14e88a3647ad1c81f2f1748537985752c49834d911a46f09681a2d3bce7a2b028d022737640099256455d08abb4d4e0e92068cc91a23945e998850417cd499c08412b06594c5921b89f877cd31496da81b7267b65f2370950a06fceca7fd1746a8131a84ede4d596f78b76045c12cc58f41a3242f1a3f92ff3d1d816067816ddf805743d0ce25a55aa1146626635ca15ff66992c726d82d860cdb98650dca3d80d41e874195e86633e75fbc5d0292afd09744fac439b9b9a73e6c9b847f241ff818a447cc1e71aaa55ae39656f9ff841fe35c130c7e83cc45f2b0cae012fda843a916054e8b0cce5ee7cb41b41aca54fb9eb26d859da7dcf4da015a8fd1efa5cd5931b0e3556ec352271ead2a33292d99bc042fbbbe43a47ed2d0ad96a2ed4e75ed2962bd49bc848295aff5d026c3e5b264431a1764a8f591f16c64caa492489e0602269dccbc024f3978822220779bf848585ab979cbe2cc8d5307671f0b5a836827e74007ac251e51b24ea4535b52800c6c866bda065a1cfceb182ecfe5b9ce920fb8a2c7fb64efbcce9bba8ef24320e59d1c0808ac195a83c3815b4a6bbae14638103e78667fc0b0a3ab4df9fbe37c5fe679dc0b1e27770fb5763d3d0f09c63b4308b280c4c82b4a42a580175dfd56932e3786aa615e10ffab7410b54d5d9992b3e45145c521a4a7487d2ae612377daefbddc97483daa29b94ae59c160baf2444e49c62badcdc24e68d04af886c172868dc23467479e0ccaf539c432b551527924f61c4fb7d4743fddd4c8e63491ccd58eea775ad6fe88ec34e1eab92c09e687ece8f8b51ac467e1dcddebd95b2a648911c6ab5b0ce07cbc62b81cc37738ea70ebccc58b31db11d3c5a680ec9437a416b5b901870832b6b1357f3657137422a27fe2d6756c5c9f7a0586ccf3b0ceda376ea15aec0de4fd74b0e658f41afa845bebe658512a64b8e200a6a5f214fd7207b19e026571c720308f7e1b1f7e6664ae08354819547d903e7ffb4759f28e4b796f6222e213b40548dbb31d01752d8dbdd6ff05bc4fcbff3565d1e76d56ad5403358b1b39635b3e803fad7af513931b8c364d63a1dac7b1f257e1a0fc714142373f02838fd5450c3ee9fd4f7f188eda26de59d0b611fce8e0514c23c3c6d534ae9c3164a00bfdc7350acde7b69e883ad2eacd75842925e6442df90cb50e2798a8e56286a0920fae693c6cafdb8f18839639f51c1a2e6f179b698cfb35f100f4ee90a77b093fb0bde2815c596e2b0a14cd796302ce1b8ad866b715a5fa4cd5e875cc97477f6b0e5e0bdec02b6f4c4ec4ec5dfc7e16fe5d2e7606d306c0900342eca695502443e6e20bf967c5a14ca85599ff01a5be9a9018e27f23d176620e62d134740f4e63717a7b56aebb2d13c1205b32123a2e470360c3e486320f54a6031ac9def7b1c5aa4fc2c6c12c431837e39c1363f371a9340be22b8da776d88ff2f1f6024881d951c76778852eaff6378c954ff1834848009f4ee46a049d7c6f21f86e64f4420432fc9454720171215077e892fd8739d1a0a50fb235a409fe1c2726b0b431f95ecbc18af287ba6d60006bd6e2bb9e247e545e0749876536acf19f01587e6c63a82b2a0cc52dcfb087438a19d4bce732edb3f08bb74a428dfff7ef93a7f0cdd9cca4671d58a1dec1f4235dd56ec54c5243c2e02ad9caa97699a0c7d6a309577b076b19813e13a67e097a742ea97c20920f55cab7a27a4459d8f0cf0b52f098adf141515e51b57af4fa94b0e2c40ae96bab02fb8ff213927bfbfe088efc9cfe4813448821aa3d8a4d09d8f1ef01223022167e8c50796cb331308a4fa52a25d97548c9748b60469d15ed4d3e0b374e1b9cff69804752cfdf213e41b0ec0772e3a70c4d596b01f17b89bafa1cf8f76411340e036852664bdf581e7563ad73ae26fa850030e4bd3d3ac79d09986d7414661cb110ce197ca3742bbeb237aae9763b73797a83480488f67db577287d6b39247e50910b8b58e8f18685bbf2165b496ce320a4f8fb59af00e1163adaca512d84e70fb2f895065556dce98ccc4347e565ee61e23c2c9789a6289f1d4701dbcf2375ea1f06731e2949978efe5914c614855042bd485c13fbe87f63edbe487e55ceb438d9a80873f7afb7cad31a7d7a0b8a4469f90eda402d82eebab0da568b6aa3fc9531ca8f04a10e1a404cb5988461467419088a85c84f1e0fe996243eb6dfe4641561bbe3bf41cd0f24402e727f369c8f1e79d4e6e61dfce2e25eace2fe31a13aba7d113de13400c02fbe14d6d7ef15e6ee5dd62f13828ef79002117711772fd02e90f25c6254a41357900b9e6fbc963f6e8878469e9b537a633b4787ac7cce738408c977a2092662ecd77f86d25f7b38a14d256ffd5a5a12e70da48503d2833e93c5b4ab30fda8fefd4d518b7e9316d3b2c13deb1cb0c2c6dd5563befed619d432cff985a3fcb0432a3e2e9f703822db91141bcba0edd9d0db09083dd1ad47630443490f965689d867438166393c2f8b58afe6f0ba42c9a3eb28a87932c66dce175a23e894f9941c8f72978d6fd2e5ab67aec2f892ab2f0794c47b6f14a4f345d9d3b02d000ca8f6f0a8a1772f4f8dd5b566b00da93a36b7a3d532f28d6892378209f9d6fa8899e8d0eaeda97ffc79b48f329ebb7b7b810aa921ad160918013c656abe4f9bc6c3cf81dfa74baceafc68a9931c52a2ff7a8150959b32dc8b599598fecfdb167dbc81bc14274efa8023cac0dd63cb691d92d16cf9d076fae393893c19af9babdcb278984aab18333acd084ec4aa61d86bc5460895aad59fd4afc7f480eaba9e80ec718914f05d253a49835ec607fe0eaa7a75ca42ab89d8a4b6837cac9f64b492646f8ccd2f63874e907817fd3e92aea7379013320dd283ce232f4e4134ed56012fa330b77be05e98a4dfb05376bb724b123329c684735c9348cfca6e11e111ec42adf5fde941739a054603122fc428e88c0ce4aef11fccfdf3b6af6d7f340548f2018abe42bcfe07bd0c2090d449f48d6744a9bb41791423e91ee649b1a36c7995c1576eca21775f8c1a34eff0768ea9d6bd55a60e5e1b814f01ca5586db94600e9ed18f081a69791a780f7dd5b5f90360aee0690715809bbade37d21b550f79edc29f71d0b86610da71e70238b32e3ad4427aa9c1bc9f630afba941211cc67c7f1ce604241a8236141e506cd77945e1fb4fbcd0ac9cc9f3bddd9ff83dba07351d575d49d97de953dd57d0920c9ccf1eb54b6d315233360a8d244dcc986f90579634dd74bd8c759aa1d5f07c3c41ae18d80cf894666ac6787ce79fa9d92ab8328e3c615865f4bb8f6ee9d3d629b2cefbbd1db70e3bbafecafd19894c11c61ab2c0f34066153a5bfc794c66966e2976cefcdd2a333775736bd5c456548979339899e6b74148b14c09cf40bdb932544e9b812a95d2cdded67a9555fde51cf08337a0c766071d3dada966f4788a532005cb27b274147185830ba0ac720954d04e82ec3199de127711fa504a10d69d86c0807486e44c87d9c0675d3fec9551d489f1fa562221e56e978bdba48ec593d41c410ddfb281470095ebcbad0d2047edf70273b763d41f972cedbe7ebaffe3a6c7aa167a513db0c4618ced0971703db87971875d961859956e0312cbe8f83e70db65ad9eca884a5d6125629666db36cac29a9a6111f8e19ba51ffbcbbda7a7e7c532a8588f0cd23e996202db86734aee55335b49eae661b2f98f431506c7eec06d5252d4355e4898f88f1bb79d9b83b43aa6722d949623961e283b8627dd0ffbc455dbc3bd3bb4954494d989becf9a5430813987287f144178dbc0a8782da935d90f3485765716ea2b91500651e7ce5878f7dcb270b6c17f9d3017d13d5643495da5c785fceb47269b0b093683c279fa006641dbf5be7e0f294c81821fed0be08e50af500c308000ffe69da5fa159138441adfef6eba9ba079b053db2ae2d640e157a154206af9a032e7cbf640c654e310b56cb5fc31e616e53c0ec41bba336be34dc3f20757c4e90878febc1d0a04f4fd4a8283a2fe92cc837543b3033e547caccdda4731ce95bb9f52ed87e3fb51bf2ce29a0592588abb9266c9e37d931009fd0a8ec87b4d19a7bd76a380d1af377f2803872048f2eace339a651c33c9dd31cd12a36ac20b00fa0e8b0fcb3000f7c83e52823d1c23306014b38ead6fd882695ffdaef085542a030c65f559e499f3c3f899f284eb8b8172d6a4edb6acb011352765c4f6e5a83c44db63047e25c6df86e1e79c8ed7359c93206a5bc6ffc626c8858180e7aeb39d4479cea28f772cdd8f182f280557297e2daa56db06305d4597036bdd53f3d0402ebc2a5cd5e47fb314c3dd993b3232e21baa8321dcdcde5d2563954c50f2740ba68e326bfb596d8ecd5deda3f623fcc66c74e42d8d71a0de1135fb1a3504ea0f38b85f2240d34b1c4b7f10754e2b5165b2994dc19887c7922959336ceb33532cec487f703b53bb5b898b846814d0d4e287aad0428c89102002d4c59241b883404be3a620cbe77a849fcc6773c563a3a6a60a0a56cd72e7f8ccfad6ab1149ee51d9d2278f1520bab6d7acab3799d6f70723824f7afc21d35a51164b7e37d3342479f1f26c7b5220744bdb9993699d193e4a6d16f92c4b35c293dcbdbb49ca8bcae127f9f40a968a2a5759cf08b956c2f506204a772abd1062b69e4ca49e6c7e03a9cf0a6d3cfdfeb5be8ed01e4e0ac55fdd5ed3fb9a2c27b900ca9b63861689598d16b3c9a5af46d85d8bb571321f608334f31fc48bd8654e0d2dfd3da026a3fdb653028a179312d9123c15ea78ffa09a88e90c3a4d33b99c0e832074a5a924f1989a6544126eecbaa2dec5e9591d196a122847338be597174ed74f866f7ca5bdeb00a99c6f968e151d5d575935304b5fd3c1276933fa3be7216da6aea583f96f3608f7824ab8c4900", 0x2000, &(0x7f0000001b40)={&(0x7f0000000480)={0x50, 0x0, 0x4, {0x7, 0x2b, 0x8, 0x0, 0x7, 0x2, 0x4, 0x3, 0x0, 0x0, 0x10, 0x8}}, &(0x7f0000000400)={0x18, 0x0, 0x8}, &(0x7f0000000500)={0x18, 0x0, 0x2, {0x3}}, &(0x7f0000000540)={0x18, 0x0, 0x7f, {0x3ff}}, &(0x7f0000000580)={0x18, 0xfffffffffffffff5, 0x7}, &(0x7f00000008c0)={0x28, 0x0, 0x4000000000000000, {{0x101, 0x6}}}, &(0x7f0000000900)={0x60, 0x0, 0x5, {{0x9, 0xb1, 0xffffffff, 0x67, 0x80, 0xfffffff7, 0x8001, 0x7ff}}}, &(0x7f0000000980)={0x18, 0x0, 0x74, {0x5}}, &(0x7f0000000600)=ANY=[@ANYBLOB="11000000008821c6ac8c0a995a006f1599210000000000"], &(0x7f0000000a40)={0x20, 0x0, 0x8000000000000000}, &(0x7f0000000c80)={0x78, 0x0, 0xfff, {0x800, 0x80, 0x0, {0x1, 0xe, 0x2, 0xe, 0x0, 0x80000000, 0x1, 0x2f3, 0x5, 0x2000, 0x1, r7, 0x0, 0x3}}}, &(0x7f0000000d80)={0x90, 0xb3ee620b0bd22337, 0xff, {0x6, 0x3, 0x9, 0x4000000000000000, 0xa07, 0x1, {0x0, 0x67, 0x9, 0x53afebae, 0x7, 0xbb3f, 0x3, 0x3, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x3, 0x9}}}, &(0x7f0000000e40)=ANY=[@ANYBLOB="3000000000000000ff7f0000000000000600000000000000000000000000000001000000870200005d00000000001a00"], &(0x7f0000001c00)=ANY=[@ANYBLOB="08050000000000000800000000000000010000000000000003000000000000000300000000000000c90000000000000008000000040000000000000000000000010000000000000009000000000000000300000000000000000000000000050000000000000008000000040000000000000000a0000004000000", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="0700000040000000000000000400000000000000030000000000000007000000263200005d255b7b2a5d210005000000000000000000000000000000b2000000000000000100000000000000060000004b14ffff05000000000000000400000000000000f7ffffffffffffff09000000000000000300000000000000f9ffffffffffffff60c1000000000000008000000020000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000080000000000600000000000000060000000000000008000000000000006c6f7765726469720700000000000000000000000000000000000000000007000000000000c02b060853000026fbffff000000000000000000000000000000000600000000000000ff03000000000000f7ffffffffffffff02000000000000000000000005000000010400000040000002000000", @ANYRES16, @ANYRES32, @ANYBLOB="09000000959d00000000000003000000000000000f0000000000000001000000010000005c0000000000000004000000000000000000000000000000ff07000000000000049e00000000000005000000090000000400000000000000ff0f00000000000001000080000000005b0600000000000000000000000000000400000000000000ffffffff020000000900000000c0000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0c0000000200000000000000030000fcff000000d39f7bd0ffffffff00000000050000000200000000000000030000000000000003000000000000000600000000000000010000000e000000020000000000000000040000000000000800000000000000060000000000000008000000000000000e00000000000000f6130000f51200001c9300000020000009000000", @ANYRESDEC=r6, @ANYRES32=0x0, @ANYBLOB="000000000800000000000000050000000000000000feffffffffffff0a000000fc0f00006d6f756e74696e666f0000000000000002000000000000000000000000000000ffffffffffffffff090000000000000001000000ca06000001000000000000000900000000000000050000000000000000000000000000000400000000000000c2ffffffffffffff0100010002000000107900000020000003000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="09000000090000000000000005000000000000000900000000000000060000000900000024f32a285da9000006000000000000000300000000000000010001000000000002000000000000000000000003000000000000000000000006000000000000000600000000000000030000000000000000000000000000000200000000000000000400006ee100000200000000a00000ffffffff", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="040000000000000000000000060000000000000004000000000000000000000010000000060000000000000002000000000000000900000000000000f6ffffffffffffff1a060000010000000400000000000000ffffffffffffffff81a40000000000003f090000000000000080000000000000070000000000000000100000050000000000000000a0000005000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="0900000007000000000000000100000000000000ff0f00000000000001000000070000007d00000000000000"], &(0x7f0000001900)={0xa0, 0x6992a7f99b0a1587, 0x1, {{0x2, 0x3, 0x5, 0x4, 0xd3, 0xdc, {0x4, 0x81, 0x763f, 0x5, 0x1000, 0x0, 0x0, 0x200, 0x538f, 0x2000, 0x4, r7, 0xee00, 0x1, 0x3}}, {0x0, 0x8}}}, &(0x7f00000019c0)={0x20, 0x0, 0x3, {0x4, 0x4, 0x5, 0x1}}, &(0x7f0000001a00)={0x130, 0x0, 0x5c8, {0x3ff, 0x7, 0x0, '\x00', {0x2000, 0x10, 0x66, 0x835, r8, r9, 0x1000, '\x00', 0x1, 0xfff, 0x9, 0x0, {0x1, 0xc00}, {0x6, 0xb}, {0x3, 0xd}, {0xfffffffffffffa8e, 0xc56}, 0x2, 0x6, 0x1, 0xc79}}}}) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r10, &(0x7f0000002400)={0x2020}, 0x2020) 9m26.228956046s ago: executing program 1 (id=22229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000580)={0x0, 0x0, 0x1, [0x6, 0x4, 0x8, 0x3, 0x5], [0x2, 0x0, 0x0, 0x8, 0x4, 0x7, 0x80, 0x6, 0x78000000000, 0x1, 0x100, 0x1, 0x3, 0x6000, 0x7fffffffffffffff, 0x1, 0x0, 0x1, 0x800, 0x3, 0x101, 0xce1d, 0x4, 0x8001, 0x0, 0x0, 0x9, 0x9c4, 0x200, 0x7, 0x9, 0x43, 0x8, 0x2, 0x100000001, 0xabf6, 0x100000000, 0x39, 0x8, 0x3, 0x80, 0xcd, 0xba1, 0x68, 0x7ff, 0x1, 0x7, 0x9, 0x3, 0xe5, 0x95, 0x9, 0x1, 0x7, 0x3, 0x2, 0x5, 0x9, 0xc9ec, 0x6, 0x4, 0x3, 0xd, 0x5, 0x5, 0x1, 0xe8, 0x371, 0x0, 0x8, 0x4, 0xa, 0x1, 0x6, 0x0, 0x9, 0x5, 0x1, 0x8001, 0xeb, 0x91b, 0x7, 0x368a, 0x7a, 0x4, 0x8, 0x5, 0x236, 0x8, 0x1000, 0xffffffffffffffff, 0x8, 0x8000000000000000, 0x0, 0xffffffffffffffff, 0xc544, 0x7f, 0x9, 0x3, 0x8000000000000001, 0x100, 0x5, 0x9a, 0x5, 0xfffffffffffffffd, 0x7, 0x596b40b3, 0x8, 0x7, 0x19c, 0x10000, 0x1, 0xfe000000000, 0x4, 0x7, 0x4, 0x200, 0x2, 0x3ff, 0xc3, 0x1]}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000009c0)={r1, 0x625, 0x7, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x1c}}, 0x8000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r4, 0xfffffffffffffffb, 0x0) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000000)=0x4, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x5, 0x6}, {0x6}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f0000000080)) 9m26.133872648s ago: executing program 1 (id=22232): r0 = socket$inet6(0xa, 0x80802, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) (async) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) (async) sendmmsg$inet6(r0, &(0x7f0000000180), 0x0, 0x1) (async) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) (async) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000000c0)={0xffffffffffffffff}) 9m26.070016629s ago: executing program 40 (id=22232): r0 = socket$inet6(0xa, 0x80802, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) (async) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) (async) sendmmsg$inet6(r0, &(0x7f0000000180), 0x0, 0x1) (async) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) (async) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000000c0)={0xffffffffffffffff}) 2m56.663952948s ago: executing program 8 (id=26708): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x80002009}) (async) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x101) (async) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0xc}, 0x2}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x8d05, 0x4) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r7 = add_key$keyring(&(0x7f0000000180), 0xfffffffffffffffd, 0x0, 0x0, 0x0) (async) dup(r3) (async) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r8) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='./binderfs/binder1\x00', &(0x7f0000000240)='keyring\x00', 0x0) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYRES16=r7, @ANYRES16=r9, @ANYBLOB="330c000000000000000001000000e00008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040009004e22ac1e01010000000000000000a000008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b0600050009000000200004000a004e200000000520010000000010000000000000000001db0000001400040002004e22ac1414230000000000000000060005000d000000080003000500000024000100000000000000000000000000000000000000000000000000000000000000000008000a000100000014000200776732"], 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) (async) recvmsg(r6, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000080)}, 0x1) (async) syz_usb_ep_write(r5, 0xcd, 0x21, &(0x7f0000000080)="0f167897563cbd4165d0fcab25823467dc90d601161e8b4cd9c78f01db9b98f3fb") 2m56.455434851s ago: executing program 8 (id=26710): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x4, 0x81, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x7, 0xeeb, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x7, 0x7, 0x9, 0x2, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x67, 0x0, 0x5, 0x2f, 0x0, @remote, @loopback}}}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x1, r9, 0x1, 0x9d, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000500)={&(0x7f0000000000)={0x1d, r12}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x34, 0x1, 0x0, 0x0, "4454ce5065ac213d8cc299ba11f20f148ee9d76acc07641c11f52885a7c98ba9e4a4c5d0a40c5a6e296d32b4dbded9de898e84fbd4f49937024ece4d7798aa73"}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4004001) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'gretap0\x00', &(0x7f00000008c0)={'gretap0\x00', 0x0, 0x1, 0x80, 0x5, 0x5, {{0x7, 0x4, 0x3, 0x2, 0x1c, 0x65, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, {[@rr={0x7, 0x7, 0x82, [@multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x29, 0x10, 0x3, 0xffffffff, 0x60, @local, @remote, 0x40, 0x7800, 0x35a4, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x80, 0x7, 0xc000000, 0xff, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @remote, {[@generic={0x88, 0x9, "f53ccd01754d4b"}, @timestamp_addr={0x44, 0x14, 0xb2, 0x1, 0x4, [{@local, 0x2}, {@empty, 0xa}]}, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x5, [{@private=0xa010102, 0x1000}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xc, 0x0, 0x2, [0x7]}, @ssrr={0x89, 0xf, 0x92, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0xc8, 0xe66, 0x12, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x43}, 0x40, 0x700, 0x1000, 0x21}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f0000001e80)=ANY=[@ANYBLOB='h\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="a80102803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000200087f040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004009c1a000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400cbd9000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004005b42000008000100", @ANYRES32=0x0, @ANYBLOB="fc00028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040020050000080006004a27239c6232fda5c0f39a9bf712d8ebdcf21db07606c883749876bda11fe6cea42b11c9a09f46be08e55eaf0609bdf852e590cd51ede907019f7de7181e1c1ce515d0352595f1d807ab4a14e43769652b492fd5fb9339e004bc73ac618800"/168, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESHEX=r16, @ANYBLOB="c400028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000014000400030000400800000000f006800002000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f7ffffff08000700000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="200202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400040000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004008000000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="680102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r15, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ffff000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="b80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500d3b30300000008000400f7ffffff40000100240001007100000000000000000000000000000000000500030003000000080004004f00000008000600a89be44444f7d2d7fff16868", @ANYRES32=0x0, @ANYBLOB], 0x868}, 0x1, 0x0, 0x0, 0x40000}, 0x40) accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80800) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x200200, 0x0) close_range(r2, r1, 0x0) 2m56.163057277s ago: executing program 8 (id=26713): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) listen(r4, 0xc) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYRESDEC, @ANYRES64=r6], 0x14}}, 0x4801) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYBLOB="200028ad7000fddbdf250200000031c69918333974571ecf9f37c6fe434c98beda751ec2774b15c4b524e34fd8ee64da0550e058f6e2331d643e9d0a04ade7480010cbd6b65d1eecd5e1b5daea3a676db5970e7a1e7ba5c11efc9c7f53de2be638cf33ddaaaa63276e8b61650e685effc03adff739497adb47d91171991de9884e50db0220e951845f2ad2376cd6e03fce46370da096069ceba160bbdf5171f1ba592ae331ac6cbd5d6a"], 0x14}, 0x1, 0x0, 0x0, 0x40980}, 0x4048005) 2m56.028114829s ago: executing program 8 (id=26714): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x15) (async) setuid(0xee01) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (async) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x28) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sched_setscheduler(r3, 0x3, &(0x7f0000000080)=0x4) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0xfffffffffffffd6f) 2m55.975396411s ago: executing program 8 (id=26715): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) creat(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0) (async) r2 = creat(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) syz_io_uring_complete(0x0) (async) r3 = syz_io_uring_complete(0x0) write$P9_RVERSION(r3, &(0x7f00000012c0)=ANY=[@ANYBLOB="b5fe4256434a3cdb0b4f1738fd8114912690b8b76f347dfacba90c404e69edf64d53731d6da58b3591030a969ce963fad806f84f93cebf8f11a2a0d8415ad50224349cc817ad7239a3a79525382c4c92ec30ebd2b085329ab8110ad5d456c0b5adf7944b3c9b658f2b6b252718957c8a894208c5ca5f8480fbf8f5c6fb51a75ac462bb947f50ce63fffb69ace0a0471effa167f7676223076f57439c1fa4969cad1404b2865073998038d7c7ed6617b9d4c4184608eaeecbafcf465138cfce6f3b96"], 0x15) (async) write$P9_RVERSION(r3, &(0x7f00000012c0)=ANY=[@ANYBLOB="b5fe4256434a3cdb0b4f1738fd8114912690b8b76f347dfacba90c404e69edf64d53731d6da58b3591030a969ce963fad806f84f93cebf8f11a2a0d8415ad50224349cc817ad7239a3a79525382c4c92ec30ebd2b085329ab8110ad5d456c0b5adf7944b3c9b658f2b6b252718957c8a894208c5ca5f8480fbf8f5c6fb51a75ac462bb947f50ce63fffb69ace0a0471effa167f7676223076f57439c1fa4969cad1404b2865073998038d7c7ed6617b9d4c4184608eaeecbafcf465138cfce6f3b96"], 0x15) dup(r1) (async) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) r5 = socket(0x28, 0x5, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@directio}]}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000)=0x6, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) pread64(r6, &(0x7f0000000200)=""/4086, 0x103f, 0x4) (async) pread64(r6, &(0x7f0000000200)=""/4086, 0x103f, 0x4) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000001280)=0xfff) openat(r8, &(0x7f00000001c0)='./file0\x00', 0x80, 0x10) 2m55.829229423s ago: executing program 8 (id=26717): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) unshare(0x2a020480) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, @empty, 0x0, 0x40, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xb5, 0x22000) r2 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000bf0000000f0231f550572e9ef67f33273809a852e7dba7b115d387910e965378888b1031b1fa1420ccdcfe7d1ed6180d450e85524c13d963af9669cff13cd069adc807e1dab55ad21ebf917e464e4b91195b9c292810469bdbf9123103d2c00cc7d7b27cefe84c169571c2498b0dd42c78d8f227b7b83891732c1e7e0d8ee3fca907de8f309030b5fdb1e4ae169db5706e67dbd086d786978f55976c0d89e9dfac8c44a6e9b35a9db2b358e588b79e07059e7b0eaa0992e4264b55e65ab18918491d9c01ab202b0f821b399934adc10ac3a9b28bb25df7cc3ded49101e4b640c608c68335f06669b6e036220fd666d14dbe142e05"], &(0x7f00000002c0)=ANY=[@ANYBLOB="918c24edc9ac54f0cbd1848f7c915eed715c1aaebe318d29288ef63da98d808935077d9a94d6f521f6cc2d"], 0x0, 0x0, 0x0}, &(0x7f0000000d40)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="2007000aa4bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x2, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x6, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x203, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x4, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = eventfd2(0x7, 0x80000) r5 = eventfd(0x9) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000180)={r4, 0xfffffffd, 0x2, r5}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000303030303030303030303030010001003470"]) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r7, 0x0, r6, 0x0, 0x7ffff000, 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 2m55.790702464s ago: executing program 41 (id=26717): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) unshare(0x2a020480) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, @empty, 0x0, 0x40, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xb5, 0x22000) r2 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000700)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000bf0000000f0231f550572e9ef67f33273809a852e7dba7b115d387910e965378888b1031b1fa1420ccdcfe7d1ed6180d450e85524c13d963af9669cff13cd069adc807e1dab55ad21ebf917e464e4b91195b9c292810469bdbf9123103d2c00cc7d7b27cefe84c169571c2498b0dd42c78d8f227b7b83891732c1e7e0d8ee3fca907de8f309030b5fdb1e4ae169db5706e67dbd086d786978f55976c0d89e9dfac8c44a6e9b35a9db2b358e588b79e07059e7b0eaa0992e4264b55e65ab18918491d9c01ab202b0f821b399934adc10ac3a9b28bb25df7cc3ded49101e4b640c608c68335f06669b6e036220fd666d14dbe142e05"], &(0x7f00000002c0)=ANY=[@ANYBLOB="918c24edc9ac54f0cbd1848f7c915eed715c1aaebe318d29288ef63da98d808935077d9a94d6f521f6cc2d"], 0x0, 0x0, 0x0}, &(0x7f0000000d40)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="2007000aa4bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x2, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x6, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x203, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x4, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket(0x11, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = eventfd2(0x7, 0x80000) r5 = eventfd(0x9) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000180)={r4, 0xfffffffd, 0x2, r5}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000303030303030303030303030010001003470"]) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r7, 0x0, r6, 0x0, 0x7ffff000, 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 5.179235273s ago: executing program 0 (id=29147): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x2c000010) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 5.177327562s ago: executing program 0 (id=29148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000000000000002"]) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2800001) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r3, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12000, 0x0) (async) recvmmsg(r3, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12000, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000000c0)={0x0, 0x9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) 5.070122775s ago: executing program 0 (id=29154): r0 = inotify_init1(0x80800) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = dup3(r0, r1, 0x80000) fgetxattr(r1, &(0x7f0000000b00)=@known='system.posix_acl_default\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r4 = fsopen(0x0, 0x1) r5 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={&(0x7f0000003f00)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r3], 0x0) 3.747143179s ago: executing program 0 (id=29183): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x2, 0x78, 0x0, 0x0, 0x192, 0x4}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000440)) close(r3) (async) write$tun(r1, &(0x7f0000000400)={@val={0x0, 0x8917}, @val={0x7, 0x1, 0x0, 0x300, 0x8}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x3, 0x6, 0x24, 0x67, 0x0, 0x5, 0x21, 0x0, @rand_addr=0x64010100, @multicast2}, {{0x4e21, 0x4e20, 0x4, 0x1, 0x2, 0x0, 0x0, 0x9, 0x0, "45a8bc", 0x0, "fc5a6b"}}}}}, 0x32) (async) r4 = socket(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)={0x14, 0x21, 0x205, 0x70bd2b, 0x24dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24000010) (async, rerun: 64) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (rerun: 64) write$binfmt_register(r6, &(0x7f0000002300)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3ff, 0x3a, '.', 0x3a, '#:', 0x3a, './file0'}, 0x2a) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x8}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x35, &(0x7f0000000040)=0x2000007, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) getsockopt$TIPC_NODE_RECVQ_DEPTH(r9, 0x10f, 0x83, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140)) pwritev(r10, &(0x7f0000000540)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1, 0x4, 0x1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) clock_gettime(0x9, &(0x7f0000000080)) (async) r12 = getpgrp(0xffffffffffffffff) fcntl$lock(r4, 0x24, &(0x7f0000000300)={0x2, 0x1, 0x2, 0x0, r12}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042cbd7000fcdbdf216700000008000300", @ANYRES32=r11, @ANYBLOB="0c009900070000004f0000000800c30000000000080000000300000008008300070000000800c4000a8f00000800c30006000000"], 0x50}, 0x1, 0x0, 0x0, 0x4005}, 0x94) syz_open_dev$rtc(&(0x7f0000000340), 0x8000000000000001, 0x412100) 3.71344491s ago: executing program 0 (id=29184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000049000100000000000010ff000a00866e"], 0x1c}}, 0x4008000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x400, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x1, 0x7) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000ffa45dbedc773c64db781c3a29b9d64cecbaf8c35f61b392ad25d49c675c7eca72e56cf5e3ac83736f15d98401772792b42b4787456986400ae82ae5a545eaa679383c20332799e202f38dc65c13febb1c752aacf854e0439dfc1c2edc379e88", @ANYRES16=r3, @ANYBLOB="00042abd7000fbdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$can_bcm(r7, &(0x7f00000003c0)={0x0, 0x89, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r7, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES8=r5], 0x48}}, 0x24000845) socket(0x3, 0x3, 0x88) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000af4000004000000140001"], 0x44}}, 0x40800) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x2400) bind$tipc(r9, 0x0, 0x0) listen(r0, 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103"], 0x0) r10 = socket$netlink(0x10, 0x3, 0x7) writev(r10, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149004006040800", 0x58}], 0x1) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x891b, &(0x7f0000002280)={'lo\x00', {0x2, 0x4e23, @broadcast}}) 2.843175647s ago: executing program 6 (id=29193): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r1, 0x0, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x98, 0x200) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_stats}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.842968697s ago: executing program 6 (id=29194): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc005a28ae, 0x12, r0, 0x6fb0e000) 2.842579877s ago: executing program 6 (id=29195): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000200)={0x0, 0xf2d8, 0x13090, 0x0, 0x382}, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "51c52e03f6d371e8", "4127f6158d71f1799931b7e0b6d73b28", "1b8bec20", "408295c4101fca8f"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000c00)=@ccm_128={{0x304, 0x33}, "e12dc20a892d7dde", "a52c04ebffff7ba94ab06f060000001c", "45e67da3", "ebee76f27293fe23"}, 0x28) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0x6, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x5, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.787434448s ago: executing program 6 (id=29196): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[]) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r2, r1, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) sendto$inet(r5, &(0x7f0000000240)="64046a7bed9b5ae7bbcacf72606336ce0b7a0736de30d79b8f6b4ec9303d0e024f74e464fa5b8727a06d0a573660b31782cd4f348cae426a7daed9020540ef49b290fb8bc46e25cfff", 0x49, 0x800, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) (async) r8 = openat$cgroup_ro(r0, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) fcntl$getown(r8, 0x9) (async) preadv(r8, &(0x7f00000005c0)=[{&(0x7f0000001b00)=""/4096, 0x1000}], 0x1, 0x0, 0x8004) (async) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="2b000000040000000000000000000000030000000000000002000000000000000500"/43], 0x2b) 2.773763528s ago: executing program 6 (id=29197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.374851156s ago: executing program 0 (id=29199): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r1, &(0x7f0000000480)="532e87ac770767f7429748", 0xb) r2 = syz_clone(0x81820000, 0x0, 0x43, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0xa0, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x75, 0x80, [@fast_bss_trans={0x37, 0x52, {0x0, 0x0, "a2f0b889637c033f02ea82730d520b7c", "c2be15535ab7fea1330d7852d0f1517a00b6edc7bdef6b52598be755a7254e8d", "45c6d9a2e095fb5011856d3acefe9f1fcab00ab0de223c8a9c12140822b64532"}}, @dsss={0x3, 0x1, 0x5}, @supported_rates={0x1, 0x2, [{0xc, 0x1}, {0xc, 0x1}]}, @gcr_ga={0xbd, 0x6}, @challenge={0x10, 0x1, 0x5f}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1}]}]]}, 0xa0}}, 0x0) getpeername$inet6(r3, 0x0, 0x0) (async) getpeername$inet6(r3, 0x0, 0x0) tkill(r2, 0x12) socket(0x840000000002, 0x3, 0xff) (async) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201d42f9619e1ac9bc49d1c41014813442024040075ee69010203010910000904b8070296d1ca000905060200000000"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) (async) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r7, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="60100400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(r6, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x7}}], 0x1, 0x4014) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) (async) setuid(r9) socket$netlink(0x10, 0x3, 0xf) (async) r10 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r10) r11 = syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') write$FUSE_IOCTL(r11, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r12, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) (async) pread64(r12, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) socket$inet_udp(0x2, 0x2, 0x0) (async) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r13, 0x891a, &(0x7f0000000180)={'veth0_to_team\x00', {0x2, 0x4e20, @multicast2}}) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r13, 0x891a, &(0x7f0000000180)={'veth0_to_team\x00', {0x2, 0x4e20, @multicast2}}) 2.214634688s ago: executing program 6 (id=29204): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x1002, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = fsopen(&(0x7f0000000380)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x9afca54543f43d8c, 0x81) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0x29, 0x4) prlimit64(r2, 0xd, &(0x7f0000000140), 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x7a, 0x0, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x40}], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x4e1a, &(0x7f0000000600)={0x0, 0x5946, 0x2, 0x2, 0x2c5}, 0x0, 0x0) rt_sigsuspend(&(0x7f00000001c0)={[0x401]}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'nicvf0\x00', 0x0}) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c30816040102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24f4000103020001000600060924030505030605810924030601030405050724", @ANYRES8=r9], 0x0) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x88f7, r8}, 0x14) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r10, 0x11, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) recvfrom(r0, &(0x7f0000000140)=""/213, 0xd5, 0x40030002, &(0x7f0000000240)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x80) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x1, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 1.723295397s ago: executing program 4 (id=29205): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) sendfile(r0, r1, 0x0, 0x240000000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x65b, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x38, @empty, @private1, 0x0, 0x10, 0x200, 0x6}}) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) (async) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='vfat\x00', 0x8080, &(0x7f00000001c0)='discard') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.659144999s ago: executing program 4 (id=29206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200"/88], 0x290) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.143706258s ago: executing program 4 (id=29207): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a004e2400000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006002b00020000000000000000000000fe880000000000000000000000000001fc010000020000000000000000000000040004"], 0xc0}}, 0x0) getsockopt$MRT6(r0, 0x29, 0x1e, 0x0, &(0x7f0000000200)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000040)={0x5200c100, 0x0, 0x0, 0x0, {0x86c}, 0x0, 0xff7c, 0x0, 0x0, 0xc3}, 0x58) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) arch_prctl$ARCH_GET_CPUID(0x1011) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 1.131615278s ago: executing program 4 (id=29208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000f2600d478ef8ed"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000001000004000"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) fstat(0xffffffffffffffff, &(0x7f0000000000)) 1.07082813s ago: executing program 4 (id=29209): r0 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa1\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x88m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x5, 0x2012, r0, 0x5401000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mprotect(&(0x7f00003e4000/0x2000)=nil, 0x2000, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xfffffffffffffff7, 0xffffffffffff6bd8, 0x2) getresuid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020680)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000080)={0x0, 0x8e000}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000140)={0xa, 0x6ff, 0x220, 0x4, 0x4, 0x80, 0x29bd}, 0xc) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', r3, 0x0, 0x8000, 0x0, 0x402226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r10, 0x22e7c000) 254.981795ms ago: executing program 2 (id=29216): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0xccb3}) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r2, r0, 0x0, 0xffffffff) 248.828725ms ago: executing program 2 (id=29217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @nested={0x4, 0x71}, @nested={0x10, 0xbc, 0x0, 0x1, [@nested={0x4, 0xc3}, @nested={0x8, 0x13, 0x0, 0x1, [@generic="3a48ad04"]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572010000000000000000000000000000000000000000000000000007"], &(0x7f0000000200)=0x2f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x80000, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 235.369986ms ago: executing program 2 (id=29218): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r0, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x2}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r0, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x4}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x0, 0x19) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000140)={0x8, 0x0, [{0xc0000001, 0x915c, 0x2, 0xb3, 0x4, 0x7, 0x7}, {0x80000006, 0x285, 0x4, 0xe, 0x7, 0x0, 0x1}, {0x40000000, 0x0, 0x6, 0xa, 0x6, 0x3, 0xa}, {0x40000000, 0x0, 0x2, 0x3ff, 0xde9, 0x10001, 0x9}, {0xc0000000, 0x54, 0x0, 0x8001, 0x56cb, 0xfffffbff, 0x8000}, {0x80000001, 0x6, 0x1, 0x0, 0x7, 0x4, 0x1000}, {0x0, 0x4, 0x1, 0x5, 0x1, 0x5, 0xf}, {0x40000000, 0xf, 0x0, 0x8, 0xcdf, 0x9, 0xfffffff9}]}) (async) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000002c0)={0x2, 0x0, [{0xd, 0xb, 0x7, 0x3, 0x1, 0x6, 0xbd72}, {0x80000000, 0x1afb, 0x2, 0x200, 0x100, 0x2, 0x8}]}) fsetxattr(r1, &(0x7f0000000340)=@known='trusted.syz\x00', &(0x7f0000000380)='].:\x00', 0x4, 0x5) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'nr0\x00', 0x0}) (async) write$tcp_congestion(r1, &(0x7f0000000400)='nv\x00', 0x3) (async) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f0000000480)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000440)=0x6}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)={0xa, 0x0, [{0x24c, 0x0, 0x9}, {0x9e6, 0x0, 0x1}, {0x85c, 0x0, 0x71db}, {0x8ee, 0x0, 0x1}, {0x2c8, 0x0, 0x5}, {0x3f7, 0x0, 0x3400000000}, {0x843, 0x0, 0x1}, {0x48d, 0x0, 0x1d4}, {0xc01, 0x0, 0x4}, {0xb78, 0x0, 0x3ff}]}) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'ip_vti0\x00', r2, 0x20, 0x7809, 0x9, 0x100, {{0x15, 0x4, 0x0, 0x12, 0x54, 0x64, 0x0, 0xbc, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@timestamp={0x44, 0x18, 0x85, 0x0, 0x9, [0xead7, 0xf0cc, 0x4, 0x2, 0x10001]}, @ssrr={0x89, 0x1b, 0x36, [@dev={0xac, 0x14, 0x14, 0x30}, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0xc, 0xe7, 0x1, 0x8, [{@empty, 0x7fff}]}, @end]}}}}}) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000640)='veth0_macvtap\x00', 0x10) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000680)) tee(r0, r4, 0x7ff, 0x2) (async) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f00000006c0)="66b9ec0800000f32660f3804cea5199aa0000fbaae0000392e0f08b8d4008ec866b9381001c00f3267260f636d0af4", 0x2f}], 0x1, 0x50, &(0x7f0000000740)=[@cstype0={0x4, 0xc}, @efer={0x2, 0x1100}], 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000780)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f0000000840)=@attr_other={0x0, 0x6d87ee53, 0x3, &(0x7f0000000800)=0x800}) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000880)=[0x6, 0x1]) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000008c0)={{0x9, 0x7}, 0x100, './file0\x00'}) r6 = inotify_init() ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000a00)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x4) 179.111746ms ago: executing program 2 (id=29219): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x3, 0x0, [{0x80000008, 0x2008, 0x1, 0x0, 0x2, 0x200, 0x5}, {0x0, 0x4843257, 0x0, 0x2, 0x1b, 0x3, 0x9}, {0x40000000, 0x0, 0x6, 0x3, 0x1, 0x8, 0xc}]}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r8) setregid(0xffffffffffffffff, r6) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0xd, 0x6, 0x1, 0x3, 0x6, 0x400, 0x5}]}) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000180)=0x7, 0x4) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=unix,', {[{@cache_loose}, {@afid={'afid', 0x3d, 0x5}}, {@version_L}], [{@dont_appraise}, {@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'binder\x00'}}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000240)=0x1) socket$inet6(0xa, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x3, 0x0, [{0x80000008, 0x2008, 0x1, 0x0, 0x2, 0x200, 0x5}, {0x0, 0x4843257, 0x0, 0x2, 0x1b, 0x3, 0x9}, {0x40000000, 0x0, 0x6, 0x3, 0x1, 0x8, 0xc}]}) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff]) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) fstat(r7, &(0x7f0000000440)) (async) setreuid(0x0, r8) (async) setregid(0xffffffffffffffff, r6) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0xd, 0x6, 0x1, 0x3, 0x6, 0x400, 0x5}]}) (async) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000180)=0x7, 0x4) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) (async) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=unix,', {[{@cache_loose}, {@afid={'afid', 0x3d, 0x5}}, {@version_L}], [{@dont_appraise}, {@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'binder\x00'}}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000240)=0x1) (async) 178.821727ms ago: executing program 4 (id=29220): r0 = inotify_init1(0x80800) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = dup3(r0, r1, 0x80000) fgetxattr(r1, &(0x7f0000000b00)=@known='system.posix_acl_default\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r4 = fsopen(0x0, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000100)={@id={0x2, 0x0, @auto="19dbf3d67a69d7c14d4db1feab947f5a"}}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x300, 0x70bd26, 0x25dfdbfb, {0x8, 0x0, 0x1, r5, 0x7, 0x4a, 0x8, 0x2, 0x0, 0x7, 0x10}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x44001) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r3], 0x0) 37.606199ms ago: executing program 2 (id=29221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000ff000040"]) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x2) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x3, r0, 'id1\x00'}) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0xa, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4c190) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)={0x3}) 0s ago: executing program 2 (id=29222): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) chdir(0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69db13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e631b0309b9a6963cc00e9e52df03723ce3", 0xcf}, {&(0x7f0000000d00)="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", 0x20d}], 0x2}, 0xc5004) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) (async) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x26e1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x15, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000801, 0x0, &(0x7f0000000100)={0x0, 0xeae, 0x5, 0x8, 0x2, 0x6, 0x7, 0x7f, 0x1}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008ef0ec472000000000001090224000100009000090400000103000000092103000001220500090581030000"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c2010203010902440001000000000904000000020a0000052406000005240000000d240f0100000000000000000004241399052406000005ed7311dd0d24"], 0x0) (async) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c2010203010902440001000000000904000000020a0000052406000005240000000d240f0100000000000000000004241399052406000005ed7311dd0d24"], 0x0) syz_usb_control_io(r7, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0003050000001408b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0x770a, 0x2) (async) ioctl$KVM_CREATE_VCPU(r2, 0x770a, 0x2) kernel console output (not intermixed with test programs): [ 1951.448558][T14419] 9pnet_fd: Insufficient options for proto=fd [ 1951.505322][T14423] netlink: 328 bytes leftover after parsing attributes in process `syz.0.26806'. [ 1951.543278][T14428] netlink: 'syz.0.26807': attribute type 1 has an invalid length. [ 1951.558223][T14428] tipc: Enabling of bearer rejected, failed to enable media [ 1951.570446][T13540] usb 3-1: device descriptor read/64, error -71 [ 1951.788836][T14443] block device autoloading is deprecated and will be removed. [ 1951.816166][T13540] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1951.916959][T14450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.26816'. [ 1951.954963][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1951.965096][T13540] usb 3-1: device descriptor read/64, error -71 [ 1952.208048][T13540] usb 3-1: device descriptor read/64, error -71 [ 1952.320174][T13540] usb usb3-port1: attempt power cycle [ 1952.404779][T14467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1952.404811][T14467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:390 [ 1952.472870][T14471] /dev/rnullb0: Can't lookup blockdev [ 1952.664611][T13540] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1952.704937][T13540] usb 3-1: device descriptor read/8, error -71 [ 1952.841326][T13540] usb 3-1: device descriptor read/8, error -71 [ 1953.085125][T13540] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1953.108276][T13540] usb 3-1: device descriptor read/8, error -71 [ 1953.241319][T13540] usb 3-1: device descriptor read/8, error -71 [ 1953.351930][T13540] usb usb3-port1: unable to enumerate USB device [ 1953.494426][T14490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26829'. [ 1953.619875][T14496] tun0: tun_chr_ioctl cmd 1074025676 [ 1953.625295][T14496] tun0: owner set to 0 [ 1953.882279][T14503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1953.891175][T14503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1954.104413][T14510] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1954.112953][T14510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26836'. [ 1954.122076][T14510] tipc: Invalid UDP bearer configuration [ 1954.122104][T14510] tipc: Enabling of bearer rejected, failed to enable media [ 1954.263559][T14512] rust_binder: Got transaction with invalid offset. [ 1954.263602][T14512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1954.270501][T14512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:476 [ 1954.447252][T14518] 9pnet_fd: Insufficient options for proto=fd [ 1954.448000][T14516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:478 [ 1954.677438][T14534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:414 [ 1954.752914][ T36] kauditd_printk_skb: 600 callbacks suppressed [ 1954.752947][ T36] audit: type=1400 audit(2000006239.107:315728): avc: denied { read write } for pid=12859 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1954.813842][T14539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.830609][T14539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1954.841152][ T36] audit: type=1400 audit(2000006239.107:315729): avc: denied { read write open } for pid=12859 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1954.868304][ T36] audit: type=1400 audit(2000006239.107:315730): avc: denied { ioctl } for pid=12859 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1954.894935][ T36] audit: type=1400 audit(2000006239.155:315731): avc: denied { read } for pid=14538 comm="syz.4.26849" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1954.917968][ T36] audit: type=1400 audit(2000006239.155:315732): avc: denied { read open } for pid=14538 comm="syz.4.26849" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1954.944389][ T36] audit: type=1400 audit(2000006239.164:315733): avc: denied { create } for pid=14536 comm="syz.0.26848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1954.968232][T26809] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1954.968278][ T36] audit: type=1400 audit(2000006239.164:315734): avc: denied { write } for pid=14536 comm="syz.0.26848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1954.980720][T14546] 9pnet_fd: Insufficient options for proto=fd [ 1954.996602][ T36] audit: type=1400 audit(2000006239.164:315735): avc: denied { nlmsg_write } for pid=14536 comm="syz.0.26848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1955.023798][ T36] audit: type=1400 audit(2000006239.164:315736): avc: denied { read write } for pid=14538 comm="syz.4.26849" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1955.048384][ T36] audit: type=1400 audit(2000006239.164:315737): avc: denied { read write open } for pid=14538 comm="syz.4.26849" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1955.115081][T14552] overlay: Unknown parameter '/' [ 1955.158499][T26809] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1955.168483][T26809] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1955.177647][T26809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.185754][T26809] usb 3-1: Product: syz [ 1955.189977][T26809] usb 3-1: Manufacturer: syz [ 1955.194598][T26809] usb 3-1: SerialNumber: syz [ 1955.428238][T14535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:482 [ 1955.434960][T26809] usb 3-1: USB disconnect, device number 119 [ 1955.667882][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 1955.667893][T17897] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1955.832491][T14575] /dev/rnullb0: Can't lookup blockdev [ 1956.081075][T14591] rust_binder: Write failure EINVAL in pid:484 [ 1956.096099][T14595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.132898][T14595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1956.374327][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26869'. [ 1956.386033][ T4695] Bluetooth: hci0: Frame reassembly failed (-84) [ 1957.467001][T26809] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1957.627554][T26809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1957.638630][T26809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1957.653207][T26809] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 1957.662438][T26809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.672346][T26809] usb 3-1: config 0 descriptor?? [ 1957.678910][T14621] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1957.687614][T26809] usbhid 3-1:0.0: can't add hid device: -22 [ 1957.693743][T26809] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1957.840895][T14628] netlink: 'syz.0.26881': attribute type 15 has an invalid length. [ 1957.848974][T14628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26881'. [ 1957.910663][T14621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1957.940154][T14621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1957.960777][T26809] usb 3-1: USB disconnect, device number 120 [ 1958.035181][T14643] fuse: Bad value for 'group_id' [ 1958.041434][T14643] fuse: Bad value for 'group_id' [ 1958.104887][T14648] tipc: Enabling of bearer rejected, failed to enable media [ 1958.145172][T14648] rust_binder: Write failure EFAULT in pid:509 [ 1958.262992][T14660] __vm_enough_memory: pid: 14660, comm: syz.2.26889, bytes: 18014402804453376 not enough memory for the allocation [ 1958.335754][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26891'. [ 1958.344924][T14667] bridge_slave_1: left allmulticast mode [ 1958.352189][T14667] bridge_slave_1: left promiscuous mode [ 1958.365181][T14667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.381989][T14667] bridge_slave_0: left allmulticast mode [ 1958.392861][T14667] bridge_slave_0: left promiscuous mode [ 1958.399447][T14667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.534977][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 1958.534977][T17897] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1958.581804][T14678] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1958.590534][T14678] rust_binder: Write failure EFAULT in pid:522 [ 1958.635870][T14684] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 1958.654886][T14684] rust_binder: Error while translating object. [ 1958.667904][T14684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1958.674734][T14684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:524 [ 1958.688763][T14688] overlayfs: failed to clone upperpath [ 1958.727055][T14690] __vm_enough_memory: pid: 14690, comm: syz.2.26898, bytes: 18014402804453376 not enough memory for the allocation [ 1959.072481][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26903'. [ 1959.099997][ T4693] Bluetooth: hci0: Frame reassembly failed (-84) [ 1959.134611][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26903'. [ 1959.157090][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.157988][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26903'. [ 1959.170023][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.826482][T14721] netlink: 'syz.4.26909': attribute type 4 has an invalid length. [ 1959.835969][T14721] netlink: 992 bytes leftover after parsing attributes in process `syz.4.26909'. [ 1959.851652][T14723] rust_binder: Error while translating object. [ 1959.851692][T14723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1959.857994][T14723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:445 [ 1959.904622][T14729] __vm_enough_memory: pid: 14729, comm: syz.4.26911, bytes: 18014402804453376 not enough memory for the allocation [ 1960.032282][ T36] kauditd_printk_skb: 543 callbacks suppressed [ 1960.032304][ T36] audit: type=1400 audit(2000006244.125:316281): avc: denied { read } for pid=14734 comm="syz.4.26913" name="binder0" dev="binder" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1960.085340][ T36] audit: type=1400 audit(2000006244.125:316282): avc: denied { read open } for pid=14734 comm="syz.4.26913" path="/dev/binderfs/binder0" dev="binder" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1960.117293][ T36] audit: type=1400 audit(2000006244.125:316283): avc: denied { ioctl } for pid=14734 comm="syz.4.26913" path="/dev/binderfs/binder0" dev="binder" ino=40 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1960.144675][ T36] audit: type=1400 audit(2000006244.125:316284): avc: denied { set_context_mgr } for pid=14734 comm="syz.4.26913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1960.167562][ T36] audit: type=1400 audit(2000006244.125:316285): avc: denied { create } for pid=14734 comm="syz.4.26913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1960.197626][ T36] audit: type=1400 audit(2000006244.125:316286): avc: denied { create } for pid=14734 comm="syz.4.26913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1960.222158][ T36] audit: type=1400 audit(2000006244.125:316287): avc: denied { write } for pid=14734 comm="syz.4.26913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1960.255848][ T36] audit: type=1400 audit(2000006244.125:316288): avc: denied { read } for pid=14734 comm="syz.4.26913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1960.277425][ T36] audit: type=1400 audit(2000006244.125:316289): avc: denied { read } for pid=14734 comm="syz.4.26913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1960.298252][ T36] audit: type=1400 audit(2000006244.125:316290): avc: denied { ioctl } for pid=14734 comm="syz.4.26913" path="/dev/binderfs/binder0" dev="binder" ino=40 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1961.253435][T17897] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1961.253629][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 1961.307253][T14765] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 1961.336445][T14768] netlink: 37 bytes leftover after parsing attributes in process `syz.2.26922'. [ 1961.419777][T14772] binder: Bad value for 'max' [ 1961.828217][T14802] netlink: 'syz.0.26935': attribute type 6 has an invalid length. [ 1961.933918][T14808] 9pnet_fd: Insufficient options for proto=fd [ 1962.352249][T14826] SELinux: failed to load policy [ 1962.499650][T14831] /dev/rnullb0: Can't lookup blockdev [ 1962.513229][T14832] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1962.745811][T14844] tipc: Enabling of bearer rejected, media not registered [ 1962.859731][T14852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1962.873189][T14851] tipc: Enabled bearer , priority 0 [ 1962.893962][T14852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1962.924335][T14852] tipc: Disabling bearer [ 1963.715999][T14868] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=37 [ 1963.716029][T14868] rust_binder: Error while translating object. [ 1963.724858][T14868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1963.732608][T14868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:558 [ 1964.078244][T14883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.113717][T14883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.373021][T14896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.389665][T14896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.621649][T28574] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1964.784263][T28574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1964.795242][T28574] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1964.808094][T28574] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 1964.817282][T28574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.827225][T28574] usb 3-1: config 0 descriptor?? [ 1964.833915][T14897] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1964.843655][T28574] usbhid 3-1:0.0: can't add hid device: -22 [ 1964.851017][T28574] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1965.060234][T28574] usb 3-1: USB disconnect, device number 121 [ 1965.502877][ T36] kauditd_printk_skb: 529 callbacks suppressed [ 1965.502898][ T36] audit: type=1400 audit(2000006249.249:316820): avc: denied { read write } for pid=5326 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1965.534334][ T36] audit: type=1400 audit(2000006249.268:316821): avc: denied { read write open } for pid=5326 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1965.571549][ T36] audit: type=1400 audit(2000006249.268:316822): avc: denied { ioctl } for pid=5326 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1965.609241][ T36] audit: type=1400 audit(2000006249.352:316823): avc: denied { read write } for pid=5326 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1965.635215][ T36] audit: type=1400 audit(2000006249.361:316824): avc: denied { read write } for pid=12430 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1965.670441][ T36] audit: type=1400 audit(2000006249.361:316825): avc: denied { read write open } for pid=12430 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1965.709163][T14917] rust_binder: Error while translating object. [ 1965.709216][T14917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1965.725464][ T36] audit: type=1400 audit(2000006249.361:316826): avc: denied { ioctl } for pid=12430 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1965.749877][T14917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:565 [ 1965.798055][ T36] audit: type=1400 audit(2000006249.371:316827): avc: denied { read write open } for pid=5326 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1965.834950][ T36] audit: type=1400 audit(2000006249.371:316828): avc: denied { ioctl } for pid=5326 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1965.861676][ T36] audit: type=1400 audit(2000006249.436:316829): avc: denied { read } for pid=14913 comm="syz.2.26973" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1965.893782][T14923] /dev/rnullb0: Can't lookup blockdev [ 1965.908080][T14924] /dev/rnullb0: Can't lookup blockdev [ 1966.415335][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26979'. [ 1967.205342][T13540] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1967.356077][T13540] usb 3-1: device descriptor read/64, error -71 [ 1967.417829][T14972] netlink: 68 bytes leftover after parsing attributes in process `syz.4.26994'. [ 1967.611264][T13540] usb 3-1: device descriptor read/64, error -71 [ 1967.684562][T14980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:522 [ 1967.801718][T14994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1967.826051][T14994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1967.878296][T13540] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 1968.017157][T13540] usb 3-1: device descriptor read/64, error -71 [ 1968.273542][T13540] usb 3-1: device descriptor read/64, error -71 [ 1968.367980][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27004'. [ 1968.391159][T13540] usb usb3-port1: attempt power cycle [ 1968.432387][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27005'. [ 1968.443436][T15014] erspan0: default FDB implementation only supports local addresses [ 1968.453316][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27005'. [ 1968.455241][T15014] rust_binder: inc_ref_done called when no active inc_refs [ 1968.462408][T15013] erspan0: default FDB implementation only supports local addresses [ 1968.521291][T15017] input: syz0 as /devices/virtual/input/input113 [ 1968.588394][T15021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.597369][T15021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1968.754320][T13540] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1968.778235][T13540] usb 3-1: device descriptor read/8, error -71 [ 1968.917011][T13540] usb 3-1: device descriptor read/8, error -71 [ 1969.171014][T13540] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1969.205561][T13540] usb 3-1: device descriptor read/8, error -71 [ 1969.328550][T15027] rust_binder: Error while translating object. [ 1969.328585][T15027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1969.334832][T15027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:543 [ 1969.378369][T13540] usb 3-1: device descriptor read/8, error -71 [ 1969.521720][T15037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.27013'. [ 1969.523722][T13540] usb usb3-port1: unable to enumerate USB device [ 1970.056493][T15062] rust_binder: Write failure EFAULT in pid:583 [ 1970.099501][T15067] rust_binder: 588: no such ref 0 [ 1970.111318][T15067] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1970.118470][T15067] rust_binder: 588: no such ref 2 [ 1970.133331][T15067] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 1970.241261][T15073] netlink: 12 bytes leftover after parsing attributes in process `syz.6.27023'. [ 1970.362451][T15082] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 1970.362477][T15082] rust_binder: Error while translating object. [ 1970.371365][T15082] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1970.377761][T15082] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:599 [ 1970.424003][T15085] /dev/rnullb0: Can't lookup blockdev [ 1970.821046][T15099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1970.830742][T15099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1970.838812][T26806] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1970.913323][ T36] kauditd_printk_skb: 641 callbacks suppressed [ 1970.913343][ T36] audit: type=1400 audit(2000006254.323:317471): avc: denied { ioctl } for pid=15090 comm="syz.2.27030" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1970.952021][ T36] audit: type=1400 audit(2000006254.351:317472): avc: denied { mounton } for pid=15100 comm="syz.0.27035" path="/127/file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1970.963915][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27035'. [ 1970.975137][ T36] audit: type=1400 audit(2000006254.351:317473): avc: denied { mounton } for pid=15100 comm="syz.0.27035" path="/127/file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1971.007266][ T36] audit: type=1400 audit(2000006254.360:317474): avc: denied { mount } for pid=15100 comm="syz.0.27035" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1971.029737][ T36] audit: type=1400 audit(2000006254.360:317475): avc: denied { mounton } for pid=15100 comm="syz.0.27035" path="/127/file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1971.054732][ T36] audit: type=1400 audit(2000006254.360:317476): avc: denied { mounton } for pid=15100 comm="syz.0.27035" path="/127/file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1971.078975][T26806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1971.090430][T26806] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1971.103522][ T36] audit: type=1400 audit(2000006254.360:317477): avc: denied { mounton } for pid=15100 comm="syz.0.27035" path="/127/file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1971.126593][T26806] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 1971.129979][T15107] overlayfs: failed to clone lowerpath [ 1971.135661][T26806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.138349][T26806] usb 3-1: config 0 descriptor?? [ 1971.154274][ T36] audit: type=1400 audit(2000006254.360:317478): avc: denied { mount } for pid=15100 comm="syz.0.27035" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1971.176961][ T36] audit: type=1400 audit(2000006254.416:317479): avc: denied { create } for pid=15102 comm="syz.0.27036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1971.199716][T15091] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1971.208406][T26806] usbhid 3-1:0.0: can't add hid device: -22 [ 1971.214459][T26806] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 1971.223327][ T36] audit: type=1400 audit(2000006254.416:317480): avc: denied { write } for pid=15102 comm="syz.0.27036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1971.270506][T15114] 9pnet_fd: Insufficient options for proto=fd [ 1971.457304][T15091] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 1971.497627][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27043'. [ 1971.509991][T15128] rust_binder: Write failure EFAULT in pid:569 [ 1971.641337][T26806] usb 3-1: USB disconnect, device number 126 [ 1971.771359][T15146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 1971.771395][T15146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:577 [ 1971.787729][T15148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1971.847455][T15155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1971.876272][T15155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1972.483983][T26806] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1972.535022][T15167] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 1972.632813][T15177] binder: Unknown parameter 'fscontext?}' [ 1972.665647][T26806] usb 3-1: Using ep0 maxpacket: 8 [ 1972.667919][T15179] netlink: 104 bytes leftover after parsing attributes in process `syz.0.27059'. [ 1972.681435][T26806] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 32 [ 1972.708346][T26806] usb 3-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1972.743005][T26806] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1972.765476][T26806] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1972.783155][T26806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.793854][T26806] usb 3-1: Product: ъ [ 1972.797997][T26806] usb 3-1: Manufacturer: 咦술프缾嗍᣹﶑䵖䊴њ샏侓彛纨෺䘄㕈鷉ᢘ鎧❾좒埂ꎭ襥醶틥埅堒靻葅ꚵ熻嵪仡დﰵ痽቟襟洎䅰⁛쏓䨞ˆ횙䆺൅⁘죧 [ 1972.825636][T26806] usb 3-1: SerialNumber: 崃锵欨ࣃᾆ發훟羍킚拞⼽埄㱿⿏ﰄ䘱㿠厯⌰┌닃Ď㔑▲Dz顃螎烍ꈒ텙ꡥ䬻 [ 1972.871363][T15160] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1972.879925][T15160] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1972.909741][T15188] netlink: 'syz.4.27062': attribute type 2 has an invalid length. [ 1972.919448][T15188] binder: Bad value for 'stats' [ 1973.055022][T15193] rust_binder: Error in use_page_slow: ESRCH [ 1973.055048][T15193] rust_binder: use_range failure ESRCH [ 1973.062323][T15193] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 1973.068018][T15193] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1973.076176][T15193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:604 [ 1973.128154][T26806] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1973.163719][T26806] usb 3-1: USB disconnect, device number 127 [ 1973.309974][T15201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1973.319821][T15201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1973.722258][T15231] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 1973.730828][T15231] rust_binder: Write failure EINVAL in pid:612 [ 1974.062977][T15251] x_tables: duplicate underflow at hook 1 [ 1974.169220][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27084'. [ 1974.182313][T28076] Bluetooth: hci0: Frame reassembly failed (-84) [ 1974.230704][T15262] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1974.265989][T15267] netlink: 288 bytes leftover after parsing attributes in process `syz.0.27086'. [ 1974.283572][T15267] netlink: 679 bytes leftover after parsing attributes in process `syz.0.27086'. [ 1974.551865][T15271] netlink: 'syz.6.27088': attribute type 3 has an invalid length. [ 1974.559799][T15271] netlink: 944 bytes leftover after parsing attributes in process `syz.6.27088'. [ 1974.895015][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27095'. [ 1975.510212][T13540] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1975.525382][T13540] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1975.659983][T15304] fido_id[15304]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1976.267822][ T36] kauditd_printk_skb: 6768 callbacks suppressed [ 1976.267843][ T36] audit: type=1326 audit(2000006259.319:324249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.4.27103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af798eec9 code=0x7ff00000 [ 1976.298286][ T36] audit: type=1326 audit(2000006259.328:324250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.4.27103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af798eec9 code=0x7ff00000 [ 1976.322194][ T36] audit: type=1326 audit(2000006259.328:324251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.4.27103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af798eec9 code=0x7ff00000 [ 1976.346018][ T36] audit: type=1326 audit(2000006259.328:324252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.4.27103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af798eec9 code=0x7ff00000 [ 1976.350128][T15331] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1976.370207][ T36] audit: type=1326 audit(2000006259.328:324253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.4.27103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af798eec9 code=0x7ff00000 [ 1976.377667][T15331] audit: audit_lost=562 audit_rate_limit=0 audit_backlog_limit=64 [ 1976.400450][T17897] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1976.408038][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 1976.414364][ T36] audit: type=1326 audit(2000006259.328:324254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.4.27103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af798eec9 code=0x7ff00000 [ 1976.423834][T15331] audit: backlog limit exceeded [ 1976.449578][ T36] audit: type=1326 audit(2000006259.328:324255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15318 comm="syz.4.27103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af798eec9 code=0x7ff00000 [ 1976.648243][T15342] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15342 comm=syz.6.27113 [ 1976.661624][T15342] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=15342 comm=syz.6.27113 [ 1976.917737][T15352] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1977.071481][T15369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1977.091197][T15369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1977.101376][T15369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1977.121179][T15371] overlayfs: failed to clone upperpath [ 1977.216885][T15373] netlink: 'syz.0.27122': attribute type 2 has an invalid length. [ 1977.451766][T15385] 9pnet: Could not find request transport: xen [ 1977.513985][T15383] netlink: 182 bytes leftover after parsing attributes in process `syz.0.27127'. [ 1977.756704][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27129'. [ 1977.792943][T15387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27129'. [ 1977.840808][ T4697] Bluetooth: hci0: Frame reassembly failed (-84) [ 1977.989920][T15398] vlan0: entered promiscuous mode [ 1977.999731][T15398] vlan0: entered allmulticast mode [ 1978.006516][T15398] veth0_vlan: entered allmulticast mode [ 1978.147923][T15410] overlayfs: failed to clone upperpath [ 1978.515847][T15441] netlink: 'syz.0.27144': attribute type 16 has an invalid length. [ 1978.523936][T15441] netlink: 'syz.0.27144': attribute type 2 has an invalid length. [ 1978.531851][T15441] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.27144'. [ 1979.118080][T15462] netlink: 112 bytes leftover after parsing attributes in process `syz.2.27152'. [ 1979.202658][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27154'. [ 1979.227754][ T4693] Bluetooth: hci1: Frame reassembly failed (-84) [ 1979.243644][T15470] netlink: 'syz.6.27155': attribute type 16 has an invalid length. [ 1979.251689][T15470] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.27155'. [ 1980.052226][T17897] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1980.058001][T31450] Bluetooth: hci0: command 0x1003 tx timeout [ 1980.653072][T15518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.663071][T15518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1980.681257][T15518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.690861][T15518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1981.420498][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1981.426734][T17897] Bluetooth: hci1: command 0x1003 tx timeout [ 1981.649879][ T36] kauditd_printk_skb: 1786 callbacks suppressed [ 1981.649901][ T36] audit: type=1400 audit(2000006264.361:326042): avc: denied { mounton } for pid=15528 comm="syz.4.27175" path="/224/file0" dev="tmpfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1981.720717][ T36] audit: type=1400 audit(2000006264.407:326043): avc: denied { read write } for pid=12859 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1981.773319][ T36] audit: type=1400 audit(2000006264.407:326044): avc: denied { read write open } for pid=12859 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1981.800047][ T36] audit: type=1400 audit(2000006264.407:326045): avc: denied { ioctl } for pid=12859 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1981.818392][T15535] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 1981.828886][ T36] audit: type=1400 audit(2000006264.473:326046): avc: denied { create } for pid=15530 comm="syz.0.27177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1981.854363][T15535] rust_binder: Write failure EINVAL in pid:654 [ 1981.855655][ T36] audit: type=1400 audit(2000006264.473:326047): avc: denied { create } for pid=15530 comm="syz.0.27177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1981.883097][ T36] audit: type=1400 audit(2000006264.473:326048): avc: denied { write } for pid=15530 comm="syz.0.27177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1981.904356][ T36] audit: type=1400 audit(2000006264.473:326049): avc: denied { read } for pid=15530 comm="syz.0.27177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1981.926619][ T36] audit: type=1400 audit(2000006264.473:326050): avc: denied { read } for pid=15530 comm="syz.0.27177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1981.948843][ T36] audit: type=1400 audit(2000006264.482:326051): avc: denied { write } for pid=15530 comm="syz.0.27177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1982.022873][T15547] /dev/rnullb0: Can't lookup blockdev [ 1982.177700][T15556] /dev/rnullb0: Can't lookup blockdev [ 1982.287382][T15559] rust_binder: Error while translating object. [ 1982.287433][T15559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1982.294834][T15559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:663 [ 1982.327547][T15561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1982.343850][T15561] rust_binder: Error in use_page_slow: ESRCH [ 1982.350565][T15561] rust_binder: use_range failure ESRCH [ 1982.356651][T15561] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 1982.363672][T15561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1982.372173][T15561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:665 [ 1982.685969][T15579] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1982.707722][T15579] rust_binder: Read failure Err(EFAULT) in pid:674 [ 1982.802513][T15587] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1982.938960][T15577] binder: Bad value for 'max' [ 1983.003353][T15589] rust_binder: Write failure EFAULT in pid:678 [ 1983.016937][T15591] rust_binder: Write failure EFAULT in pid:676 [ 1983.378488][T15607] 9pnet_fd: Insufficient options for proto=fd [ 1983.663159][T15622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1983.696100][T15622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1984.071926][T15634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1984.073647][T15634] rust_binder: Error in use_page_slow: ESRCH [ 1984.080121][T15634] rust_binder: use_range failure ESRCH [ 1984.086403][T15634] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 1984.091909][T15634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1984.099949][T15634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:681 [ 1984.454666][T15644] /dev/rnullb0: Can't lookup blockdev [ 1984.754940][T15662] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1984.755810][T15663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1984.832397][T15667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1984.873820][T15667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1984.886082][T15667] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1984.895773][T15667] SELinux: failed to load policy [ 1985.331117][T15676] tipc: Failed to remove unknown binding: 66,1,1/0:1884006722/1884006724 [ 1985.340937][T15676] tipc: Failed to remove unknown binding: 66,1,1/0:1884006722/1884006724 [ 1985.350407][T15676] tipc: Failed to remove unknown binding: 66,1,1/0:1884006722/1884006724 [ 1985.402399][T15678] incfs: Can't find or create .index dir in ./bus [ 1985.409199][T15678] incfs: mount failed -1 [ 1985.415818][T15678] incfs: Can't find or create .index dir in ./bus [ 1985.423888][T15678] incfs: mount failed -1 [ 1985.893815][T15705] SELinux: failed to load policy [ 1985.901756][T15705] __vm_enough_memory: pid: 15705, comm: syz.4.27230, bytes: 18014402804453376 not enough memory for the allocation [ 1986.180260][T15717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1986.203464][T15717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1986.219404][T15720] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1986.573306][T26806] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1986.734539][T26806] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 1986.745505][T26806] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1986.753238][T26806] usb 3-1: can't read configurations, error -61 [ 1986.802053][T15737] 9pnet_fd: Insufficient options for proto=fd [ 1986.851455][T15742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1986.860193][T15742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1986.874245][T15742] rust_binder: 743: no such ref 3 [ 1986.879329][T15742] rust_binder: 743: no such ref 2 [ 1986.904703][T26806] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1986.949119][T15747] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1987.022972][ T36] kauditd_printk_skb: 818 callbacks suppressed [ 1987.022993][ T36] audit: type=1400 audit(2000006269.393:326870): avc: denied { create } for pid=15751 comm="syz.4.27246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1987.052513][T15752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1987.062831][T15752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1987.076690][T26806] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 1987.094349][T26806] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1987.110194][T26806] usb 3-1: can't read configurations, error -61 [ 1987.118647][ T36] audit: type=1400 audit(2000006269.412:326871): avc: denied { read write } for pid=15751 comm="syz.4.27246" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1987.142770][T26806] usb usb3-port1: attempt power cycle [ 1987.149750][ T36] audit: type=1400 audit(2000006269.412:326872): avc: denied { read write open } for pid=15751 comm="syz.4.27246" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1987.157986][T15752] __vm_enough_memory: pid: 15752, comm: syz.4.27246, bytes: 18014402804453376 not enough memory for the allocation [ 1987.174626][ T36] audit: type=1400 audit(2000006269.412:326873): avc: denied { ioctl } for pid=15751 comm="syz.4.27246" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1987.211919][ T36] audit: type=1400 audit(2000006269.412:326874): avc: denied { ioctl } for pid=15751 comm="syz.4.27246" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1987.243230][ T36] audit: type=1400 audit(2000006269.440:326875): avc: denied { ioctl } for pid=15729 comm="syz.2.27239" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1987.252074][T15757] fuse: Bad value for 'user_id' [ 1987.268683][ T36] audit: type=1400 audit(2000006269.440:326876): avc: denied { ioctl } for pid=15729 comm="syz.2.27239" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1987.275369][T15757] fuse: Bad value for 'user_id' [ 1987.299171][ T36] audit: type=1400 audit(2000006269.440:326877): avc: denied { ioctl } for pid=15729 comm="syz.2.27239" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1987.324513][T15757] netlink: 76 bytes leftover after parsing attributes in process `syz.0.27248'. [ 1987.329571][ T36] audit: type=1400 audit(2000006269.449:326878): avc: denied { ioctl } for pid=15729 comm="syz.2.27239" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1987.343902][T15757] 9pnet_fd: Insufficient options for proto=fd [ 1987.363820][ T36] audit: type=1400 audit(2000006269.449:326879): avc: denied { ioctl } for pid=15729 comm="syz.2.27239" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1987.499481][T15769] overlayfs: failed to clone lowerpath [ 1987.524786][T26806] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1987.548008][T26806] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 1987.559412][T26806] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1987.567113][T26806] usb 3-1: can't read configurations, error -61 [ 1987.616345][T15781] tipc: Enabling of bearer rejected, failed to enable media [ 1987.706547][T26806] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1987.729650][T26806] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 1987.740646][T26806] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1987.748263][T26806] usb 3-1: can't read configurations, error -61 [ 1987.755187][T26806] usb usb3-port1: unable to enumerate USB device [ 1988.262260][T15799] __vm_enough_memory: pid: 15799, comm: syz.4.27262, bytes: 18014402804453376 not enough memory for the allocation [ 1988.317014][T15801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1988.331447][T15802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1988.340897][T15801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1988.354920][T15802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1988.583138][T15813] tipc: Enabling of bearer rejected, failed to enable media [ 1988.597058][T15813] netlink: 88 bytes leftover after parsing attributes in process `syz.0.27266'. [ 1988.770035][T15827] /dev/rnullb0: Can't lookup blockdev [ 1988.781273][T15827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1988.795507][T15827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1989.385390][T15861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1989.385711][T15861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1989.433779][T15866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1989.448930][T15866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1989.636134][T15872] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1989.648640][T15872] rust_binder: Error in use_page_slow: ESRCH [ 1989.655269][T15872] rust_binder: use_range failure ESRCH [ 1989.661396][T15872] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 1989.667793][T15872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1989.676185][T15872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:702 [ 1989.935578][T26806] rust_binder: 0: removing orphan mapping 0:4096 [ 1990.134698][T15886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.141921][T15886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1990.149481][T15886] bridge_slave_0: entered allmulticast mode [ 1990.156018][T15886] bridge_slave_0: entered promiscuous mode [ 1990.164384][T15886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.171869][T15886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1990.182755][T15886] bridge_slave_1: entered allmulticast mode [ 1990.189310][T15886] bridge_slave_1: entered promiscuous mode [ 1990.231905][T15893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.242388][T15893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1990.329563][T15901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27294'. [ 1990.347889][T15886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.355016][T15886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1990.362547][T15886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.369637][T15886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1990.438742][T28076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1990.448030][T28076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1990.466405][ T4695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.473551][ T4695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1990.487086][ T4695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.494198][ T4695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1990.515920][T15914] 9pnet_fd: Insufficient options for proto=fd [ 1990.584973][T15886] veth0_vlan: entered promiscuous mode [ 1990.622513][T15886] veth1_macvtap: entered promiscuous mode [ 1990.734692][T15917] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 1990.817483][T15920] rust_binder: Error in use_page_slow: ESRCH [ 1990.831621][T15920] rust_binder: use_range failure ESRCH [ 1990.844717][T15920] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 1990.851857][T15922] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 1990.861788][T15920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1990.870930][T15920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:6 [ 1991.019174][T15930] veth1: entered allmulticast mode [ 1991.109354][T15938] veth1: left allmulticast mode [ 1991.221431][T15947] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1991.230695][T15947] overlayfs: missing 'lowerdir' [ 1991.877318][T15954] netlink: 176 bytes leftover after parsing attributes in process `syz.0.27310'. [ 1991.928322][T15956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27311'. [ 1991.940123][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1992.000416][T15960] /dev/rnullb0: Can't lookup blockdev [ 1992.495085][ T36] kauditd_printk_skb: 602 callbacks suppressed [ 1992.495105][ T36] audit: type=1400 audit(2000006274.501:327482): avc: denied { read write } for pid=12430 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1992.526457][ T36] audit: type=1400 audit(2000006274.501:327483): avc: denied { read write open } for pid=12430 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1992.553020][ T36] audit: type=1400 audit(2000006274.501:327484): avc: denied { ioctl } for pid=12430 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1992.589880][ T36] audit: type=1400 audit(2000006274.594:327485): avc: denied { read append } for pid=15970 comm="syz.2.27316" name="rnullb0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 1992.640618][ T36] audit: type=1400 audit(2000006274.594:327486): avc: denied { ioctl open } for pid=15970 comm="syz.2.27316" path="/dev/rnullb0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 1992.673387][ T36] audit: type=1400 audit(2000006274.594:327487): avc: denied { ioctl } for pid=15970 comm="syz.2.27316" path="/dev/rnullb0" dev="devtmpfs" ino=936 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 1992.705606][ T36] audit: type=1400 audit(2000006274.613:327488): avc: denied { read write } for pid=12430 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1992.730340][ T36] audit: type=1400 audit(2000006274.613:327489): avc: denied { read write open } for pid=12430 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1992.755677][ T36] audit: type=1400 audit(2000006274.613:327490): avc: denied { ioctl } for pid=12430 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1992.781630][ T36] audit: type=1400 audit(2000006274.641:327491): avc: denied { watch } for pid=15972 comm="syz.2.27317" path="/248" dev="tmpfs" ino=1329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1992.990913][ T4693] tipc: Disabling bearer [ 1993.150399][ T4693] tipc: Left network mode [ 1993.156571][ T4693] veth0_vlan: left promiscuous mode [ 1993.220125][T15988] __vm_enough_memory: pid: 15988, comm: syz.4.27323, bytes: 72057594040029184 not enough memory for the allocation [ 1993.352728][T16002] ./cgroup: Can't lookup blockdev [ 1993.623769][T16012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1993.731417][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1993.751708][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1993.912531][ T31] kernel write not supported for file 724/net/vlan/vlan1 (pid: 31 comm: kworker/1:0) [ 1994.204461][T16053] rust_binder: Write failure EFAULT in pid:727 [ 1994.215748][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27348'. [ 1994.339043][T16061] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27350'. [ 1994.348275][T16061] bridge_slave_1: left allmulticast mode [ 1994.354019][T16061] bridge_slave_1: left promiscuous mode [ 1994.359850][T16061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1994.367985][T16061] bridge_slave_0: left allmulticast mode [ 1994.373753][T16061] bridge_slave_0: left promiscuous mode [ 1994.379628][T16061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1994.395694][ T4693] Bluetooth: hci0: Frame reassembly failed (-84) [ 1995.100566][T16082] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:734 [ 1995.104770][T16081] rust_binder: 734: no such ref 2 [ 1995.228094][T16086] /dev/loop0: Can't lookup blockdev [ 1995.366787][T16096] rust_binder: Write failure EFAULT in pid:741 [ 1995.504131][T16107] bpf: Bad value for 'uid' [ 1995.509418][T16108] bpf: Bad value for 'uid' [ 1995.674321][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27372'. [ 1995.932395][T16126] binder: Unknown parameter 'defcontext01777777777777777777777' [ 1996.250613][T16130] netlink: 679 bytes leftover after parsing attributes in process `syz.4.27377'. [ 1996.261307][T16130] netlink: 679 bytes leftover after parsing attributes in process `syz.4.27377'. [ 1996.275112][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27377'. [ 1996.558323][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1996.567936][T16140] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1996.572532][T16141] rust_binder: Error in use_page_slow: ESRCH [ 1996.579223][T16140] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 1996.588352][T16140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 1996.601029][T16141] rust_binder: use_range failure ESRCH [ 1996.610625][T16140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:757 [ 1996.610665][T16141] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 1996.625572][T16141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 1996.633763][T16141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:757 [ 1996.689820][T16143] rust_binder: Write failure EFAULT in pid:760 [ 1996.743154][T16146] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1996.759593][T16146] 9pnet: p9_errstr2errno: server reported unknown error [ 1996.781916][T16146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 1996.781961][T16146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:763 [ 1997.141622][T16150] rust_binder: Write failure EFAULT in pid:19 [ 1997.414172][T16167] netlink: 'syz.4.27392': attribute type 16 has an invalid length. [ 1997.428330][T16167] netlink: 'syz.4.27392': attribute type 2 has an invalid length. [ 1997.446894][T16167] netlink: 64086 bytes leftover after parsing attributes in process `syz.4.27392'. [ 1997.743876][T16184] __vm_enough_memory: pid: 16184, comm: syz.2.27397, bytes: 18014402804453376 not enough memory for the allocation [ 1997.810241][T16194] 9pnet_fd: Insufficient options for proto=fd [ 1997.847883][ T36] kauditd_printk_skb: 600 callbacks suppressed [ 1997.847905][ T36] audit: type=1400 audit(2000006279.514:328092): avc: denied { read write } for pid=12430 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1997.898387][ T36] audit: type=1400 audit(2000006279.514:328093): avc: denied { read write } for pid=16196 comm="syz.6.27401" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1997.922085][ T36] audit: type=1400 audit(2000006279.514:328094): avc: denied { read write open } for pid=16196 comm="syz.6.27401" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1997.948438][ T36] audit: type=1400 audit(2000006279.533:328095): avc: denied { read write open } for pid=12430 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1997.975694][ T36] audit: type=1400 audit(2000006279.533:328096): avc: denied { ioctl } for pid=12430 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1998.002296][ T36] audit: type=1400 audit(2000006279.552:328097): avc: denied { ioctl } for pid=16196 comm="syz.6.27401" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1998.028216][ T36] audit: type=1400 audit(2000006279.552:328098): avc: denied { create } for pid=16198 comm="syz.2.27402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1998.078917][ T36] audit: type=1400 audit(2000006279.552:328099): avc: denied { write } for pid=16198 comm="syz.2.27402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1998.099947][ T36] audit: type=1400 audit(2000006279.561:328100): avc: denied { execmem } for pid=16196 comm="syz.6.27401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1998.141402][ T36] audit: type=1400 audit(2000006279.561:328101): avc: denied { read } for pid=16198 comm="syz.2.27402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1998.265029][T16204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 1998.387895][ T9947] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1998.578791][ T9947] usb 3-1: Using ep0 maxpacket: 16 [ 1998.586861][ T9947] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 1998.601024][ T9947] usb 3-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 1998.611169][ T9947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.619314][ T9947] usb 3-1: Product: syz [ 1998.625607][ T9947] usb 3-1: Manufacturer: syz [ 1998.630291][ T9947] usb 3-1: SerialNumber: syz [ 1998.864637][ T9947] usb 3-1: USB disconnect, device number 6 [ 1999.590309][T16252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:783 [ 2000.151589][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27423'. [ 2000.575494][T16293] netlink: 'syz.4.27432': attribute type 1 has an invalid length. [ 2000.738295][T26809] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2000.772398][T16304] netlink: 104 bytes leftover after parsing attributes in process `syz.4.27435'. [ 2000.773827][T16305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=16305 comm=syz.0.27436 [ 2000.909362][T26809] usb 3-1: Using ep0 maxpacket: 16 [ 2000.922865][T26809] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2000.938080][T26809] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2000.958303][T26809] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2000.968573][T26809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.976954][T26809] usb 3-1: Product: syz [ 2001.000948][T26809] usb 3-1: Manufacturer: syz [ 2001.005954][T26809] usb 3-1: SerialNumber: syz [ 2001.050045][T16330] veth1_macvtap: left promiscuous mode [ 2001.208450][T16335] rust_binder: Error while translating object. [ 2001.208509][T16335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 2001.215568][T16335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 2001.268447][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27448'. [ 2001.313191][ T4693] Bluetooth: hci0: Frame reassembly failed (-84) [ 2001.387325][T26809] usb 3-1: failed to enable PITCH for EP 0x82 [ 2001.398470][T16347] netlink: 'syz.4.27449': attribute type 2 has an invalid length. [ 2001.410820][T26809] usb 3-1: 2:1: cannot set freq 3624486 to ep 0x82 [ 2001.427458][T26809] usb 3-1: USB disconnect, device number 7 [ 2001.511094][T13683] udevd[13683]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2002.660964][T16400] fuse: Bad value for 'fd' [ 2002.716365][T16402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27469'. [ 2002.733388][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.734260][T16405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:802 [ 2002.735795][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.773737][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.782039][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.789193][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.796181][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.803125][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.812250][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.819647][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.826592][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.833497][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.840740][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.847634][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.854517][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.855080][T16409] overlayfs: failed to clone upperpath [ 2002.863143][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.873614][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.880608][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.887692][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.894505][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.902601][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.910019][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.916882][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.923781][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.930651][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.937489][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.944384][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.951519][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.958328][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.965233][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.971952][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.979008][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.985849][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.992580][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2002.999373][T16404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2003.197238][ T36] kauditd_printk_skb: 529 callbacks suppressed [ 2003.197259][ T36] audit: type=1400 audit(2000006284.519:328631): avc: denied { create } for pid=16421 comm="syz.2.27476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2003.238120][ T36] audit: type=1400 audit(2000006284.537:328632): avc: denied { mounton } for pid=16425 comm="syz.4.27477" path="/336/file0" dev="tmpfs" ino=1820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2003.262161][ T36] audit: type=1400 audit(2000006284.547:328633): avc: denied { write } for pid=16421 comm="syz.2.27476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2003.286627][ T36] audit: type=1400 audit(2000006284.547:328634): avc: denied { read write } for pid=16421 comm="syz.2.27476" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2003.310697][ T36] audit: type=1400 audit(2000006284.547:328635): avc: denied { read write open } for pid=16421 comm="syz.2.27476" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2003.335682][ T36] audit: type=1400 audit(2000006284.547:328636): avc: denied { ioctl } for pid=16421 comm="syz.2.27476" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2003.363496][ T36] audit: type=1400 audit(2000006284.547:328637): avc: denied { ioctl } for pid=16421 comm="syz.2.27476" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2003.389886][ T36] audit: type=1400 audit(2000006284.547:328638): avc: denied { ioctl } for pid=16421 comm="syz.2.27476" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2003.416453][ T36] audit: type=1400 audit(2000006284.547:328639): avc: denied { ioctl } for pid=16421 comm="syz.2.27476" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2003.442695][ T36] audit: type=1400 audit(2000006284.603:328640): avc: denied { create } for pid=16425 comm="syz.4.27477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2003.485796][T17897] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2003.486113][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 2003.498268][T13540] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 2003.670696][T13540] usb 3-1: not running at top speed; connect to a high speed hub [ 2003.680096][T13540] usb 3-1: config 4 has an invalid interface number: 158 but max is 0 [ 2003.688365][T13540] usb 3-1: config 4 has no interface number 0 [ 2003.694596][T13540] usb 3-1: config 4 interface 158 altsetting 8 endpoint 0xA has invalid maxpacket 1088, setting to 64 [ 2003.705600][T13540] usb 3-1: config 4 interface 158 has no altsetting 0 [ 2003.716564][T13540] usb 3-1: New USB device found, idVendor=a40d, idProduct=548e, bcdDevice=5b.b9 [ 2003.733949][T13540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.742018][T13540] usb 3-1: Product: syz [ 2003.747897][T13540] usb 3-1: Manufacturer: syz [ 2003.752575][T13540] usb 3-1: SerialNumber: syz [ 2003.968403][T16474] overlayfs: missing 'lowerdir' [ 2003.981183][T16423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2003.996250][T16423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.548676][T16488] 9pnet_fd: Insufficient options for proto=fd [ 2004.559339][T13540] usb-storage 3-1:4.158: USB Mass Storage device detected [ 2004.616468][T13540] usb 3-1: USB disconnect, device number 8 [ 2004.641358][T16494] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2004.649175][T16495] rust_binder: Error in use_page_slow: ESRCH [ 2004.664437][T16495] rust_binder: use_range failure ESRCH [ 2004.664472][T16495] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 2004.669971][T16495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2004.707642][T16495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:809 [ 2004.876789][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27500'. [ 2004.903878][T28076] Bluetooth: hci0: Frame reassembly failed (-84) [ 2006.669128][T16563] netlink: 80 bytes leftover after parsing attributes in process `syz.0.27526'. [ 2007.078028][T17897] Bluetooth: hci0: command 0x1003 tx timeout [ 2007.084277][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2007.199442][T16596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2007.200016][T16596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2007.366997][T16600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2007.386022][T16600] rust_binder: Error in use_page_slow: ESRCH [ 2007.398536][T16600] rust_binder: use_range failure ESRCH [ 2007.404583][T16600] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 2007.421435][T16600] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2007.462664][T16600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:823 [ 2007.602277][T16610] binder: Unknown parameter '' [ 2007.708623][T16613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2007.711937][T16613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2007.752766][T16613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:828 [ 2007.857566][T16617] /dev/rnullb0: Can't lookup blockdev [ 2008.085235][T16642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2008.180447][T16648] 9pnet_fd: Insufficient options for proto=fd [ 2008.339302][T13540] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2008.456533][T16664] /dev/nullb0: Can't lookup blockdev [ 2008.531925][T13540] usb 3-1: Using ep0 maxpacket: 32 [ 2008.542125][T13540] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2008.553235][T13540] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 2008.563166][ T36] kauditd_printk_skb: 1096 callbacks suppressed [ 2008.563186][ T36] audit: type=1400 audit(2000006289.532:329737): avc: denied { ioctl } for pid=16641 comm="syz.2.27553" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2008.595986][T13540] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 2008.602124][ T36] audit: type=1400 audit(2000006289.532:329738): avc: denied { create } for pid=16668 comm="syz.0.27565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2008.611521][T13540] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2008.626232][ T36] audit: type=1400 audit(2000006289.532:329739): avc: denied { ioctl } for pid=16668 comm="syz.0.27565" path="socket:[307345]" dev="sockfs" ino=307345 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2008.636424][T13540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.660462][ T36] audit: type=1400 audit(2000006289.570:329740): avc: denied { ioctl } for pid=16641 comm="syz.2.27553" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2008.669211][T13540] usb 3-1: Product: syz [ 2008.693810][ T36] audit: type=1400 audit(2000006289.579:329741): avc: denied { ioctl } for pid=16641 comm="syz.2.27553" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2008.708385][T13540] usb 3-1: Manufacturer: syz [ 2008.724724][ T36] audit: type=1400 audit(2000006289.579:329742): avc: denied { ioctl } for pid=16641 comm="syz.2.27553" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2008.749285][T13540] usb 3-1: SerialNumber: syz [ 2008.753907][ T36] audit: type=1400 audit(2000006289.579:329743): avc: denied { ioctl } for pid=16641 comm="syz.2.27553" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2008.797932][ T36] audit: type=1400 audit(2000006289.579:329744): avc: denied { ioctl } for pid=16641 comm="syz.2.27553" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2008.823296][ T36] audit: type=1400 audit(2000006289.579:329745): avc: denied { ioctl } for pid=16641 comm="syz.2.27553" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2008.849054][ T36] audit: type=1400 audit(2000006289.579:329746): avc: denied { ioctl } for pid=16641 comm="syz.2.27553" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2009.207322][T16642] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2009.215188][T16642] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2009.443794][T16642] rust_binder: Error in use_page_slow: ESRCH [ 2009.443835][T16642] rust_binder: use_range failure ESRCH [ 2009.449942][T16642] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 2009.456536][T16642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2009.465795][T16642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:840 [ 2009.478663][T13540] cdc_ncm 3-1:1.0: bind() failure [ 2009.504598][T13540] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2009.512879][T13540] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2009.531843][T13540] usb 3-1: USB disconnect, device number 9 [ 2009.726905][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27582'. [ 2009.967518][T16741] 9pnet_fd: Insufficient options for proto=fd [ 2010.183409][T16750] tmpfs: Unknown parameter 'nKY;|_3'ɳeZ*#3΄5pGo?h60'on q3TVR)6.ⶔV-DR)&60^.`a[eqkm2  R5Z%3i`58弜0`ޫ00000000000000000000000p5c/POdvhWpo^Etl^' [ 2010.295305][T16758] veth1: entered allmulticast mode [ 2010.372982][T16763] veth1: left allmulticast mode [ 2011.312091][T16801] fuse: Bad value for 'fd' [ 2011.426827][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27608'. [ 2011.754716][T16812] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 2011.768021][T16812] SELinux: failed to load policy [ 2012.664046][T16841] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2012.840051][T26809] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2013.016651][T26809] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2013.043138][T26809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2013.063676][T26809] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2013.073240][T26809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2013.087179][T26809] usb 3-1: SerialNumber: syz [ 2013.313024][T26809] usb 3-1: 0:2 : does not exist [ 2013.317988][T26809] usb 3-1: unit 255 not found! [ 2013.361373][T26809] usb 3-1: USB disconnect, device number 10 [ 2013.507054][T13676] udevd[13676]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2013.536737][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27635'. [ 2013.905961][T16911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2013.924984][ T36] kauditd_printk_skb: 480 callbacks suppressed [ 2013.925004][ T36] audit: type=1400 audit(2000006294.546:330227): avc: denied { read write } for pid=12430 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2013.963529][ T36] audit: type=1400 audit(2000006294.565:330228): avc: denied { read write open } for pid=12430 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2013.996940][ T36] audit: type=1400 audit(2000006294.565:330229): avc: denied { ioctl } for pid=12430 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2014.023864][ T36] audit: type=1400 audit(2000006294.612:330230): avc: denied { read } for pid=16912 comm="syz.2.27641" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2014.048099][ T36] audit: type=1400 audit(2000006294.612:330231): avc: denied { read open } for pid=16912 comm="syz.2.27641" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2014.073728][ T36] audit: type=1400 audit(2000006294.612:330232): avc: denied { execmem } for pid=16912 comm="syz.2.27641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2014.095687][ T36] audit: type=1400 audit(2000006294.612:330233): avc: denied { create } for pid=16912 comm="syz.2.27641" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2014.138374][ T36] audit: type=1400 audit(2000006294.612:330234): avc: denied { ioctl } for pid=16912 comm="syz.2.27641" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=308477 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2014.176763][ T36] audit: type=1400 audit(2000006294.612:330235): avc: denied { ioctl } for pid=16912 comm="syz.2.27641" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=308477 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2014.203436][ T36] audit: type=1400 audit(2000006294.715:330236): avc: denied { read write } for pid=12430 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2014.226443][T16921] netlink: 'syz.2.27642': attribute type 12 has an invalid length. [ 2014.273935][T16923] rust_binder: Write failure EFAULT in pid:129 [ 2014.546868][T16934] binder: Unknown parameter '' [ 2014.609630][T16938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16938 comm=syz.6.27649 [ 2014.693089][T16945] 9pnet_fd: Insufficient options for proto=fd [ 2014.743029][T16950] rust_binder: Error while translating object. [ 2014.743076][T16950] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2014.749356][T16950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147 [ 2014.813847][T16954] netlink: 76 bytes leftover after parsing attributes in process `syz.6.27656'. [ 2014.842981][T16957] fuse: Bad value for 'fd' [ 2014.854434][T16961] fuse: Bad value for 'fd' [ 2014.867947][T16961] netlink: 80 bytes leftover after parsing attributes in process `syz.0.27654'. [ 2015.021020][T16974] netlink: 104 bytes leftover after parsing attributes in process `syz.4.27659'. [ 2015.053735][T16974] netlink: 'syz.4.27659': attribute type 27 has an invalid length. [ 2015.062101][T16974] lo: entered promiscuous mode [ 2015.085099][T16974] lo: entered allmulticast mode [ 2015.090868][T16974] tunl0: entered promiscuous mode [ 2015.100152][T16974] tunl0: entered allmulticast mode [ 2015.105718][T16974] gre0: entered promiscuous mode [ 2015.111666][T16974] gre0: entered allmulticast mode [ 2015.128472][T16974] gretap0: entered allmulticast mode [ 2015.149804][T16974] erspan0: entered promiscuous mode [ 2015.170607][T16974] erspan0: entered allmulticast mode [ 2015.176544][T16974] ip_vti0: entered promiscuous mode [ 2015.222148][T16974] ip_vti0: entered allmulticast mode [ 2015.228917][T16974] ip6_vti0: entered promiscuous mode [ 2015.262657][T16974] ip6_vti0: entered allmulticast mode [ 2015.283116][T16974] sit0: entered promiscuous mode [ 2015.315522][T16974] sit0: entered allmulticast mode [ 2015.332492][T16974] ip6tnl0: entered promiscuous mode [ 2015.345396][T16974] ip6tnl0: entered allmulticast mode [ 2015.351268][T16974] ip6gre0: entered promiscuous mode [ 2015.356609][T16974] ip6gre0: entered allmulticast mode [ 2015.363531][T16974] ip6gretap0: entered promiscuous mode [ 2015.370451][T16974] ip6gretap0: entered allmulticast mode [ 2015.377985][T16974] vcan0: entered promiscuous mode [ 2015.383768][T16974] vcan0: entered allmulticast mode [ 2015.389830][T16974] dummy0: entered promiscuous mode [ 2015.395628][T16974] dummy0: entered allmulticast mode [ 2015.403271][T16974] veth0: entered promiscuous mode [ 2015.408781][T16974] veth0: entered allmulticast mode [ 2015.417836][T16974] veth1: entered promiscuous mode [ 2015.423138][T16974] veth1: entered allmulticast mode [ 2015.428971][T16974] wg0: entered promiscuous mode [ 2015.434646][T16974] wg0: entered allmulticast mode [ 2015.440388][T16974] wg1: entered promiscuous mode [ 2015.448927][T16974] wg1: entered allmulticast mode [ 2015.458552][T16974] wg2: entered promiscuous mode [ 2015.463972][T16974] wg2: entered allmulticast mode [ 2015.469549][T16974] veth0_to_bridge: entered promiscuous mode [ 2015.475596][T16974] veth0_to_bridge: entered allmulticast mode [ 2015.482650][T16974] bridge_slave_0: entered promiscuous mode [ 2015.488546][T16974] bridge_slave_0: entered allmulticast mode [ 2015.495337][T16974] veth1_to_bridge: entered promiscuous mode [ 2015.501278][T16974] veth1_to_bridge: entered allmulticast mode [ 2015.507866][T16974] bridge_slave_1: entered promiscuous mode [ 2015.514222][T16974] bridge_slave_1: entered allmulticast mode [ 2015.524085][T16974] veth0_to_bond: entered promiscuous mode [ 2015.529859][T16974] veth0_to_bond: entered allmulticast mode [ 2015.538275][T16974] bond_slave_0: entered promiscuous mode [ 2015.544830][T16974] bond_slave_0: entered allmulticast mode [ 2015.551175][T16974] veth1_to_bond: entered promiscuous mode [ 2015.557542][T16974] veth1_to_bond: entered allmulticast mode [ 2015.564532][T16974] bond_slave_1: entered promiscuous mode [ 2015.570609][T16974] bond_slave_1: entered allmulticast mode [ 2015.577279][T16974] veth0_to_team: entered promiscuous mode [ 2015.583236][T16974] veth0_to_team: entered allmulticast mode [ 2015.589960][T16974] team_slave_0: entered promiscuous mode [ 2015.595820][T16974] team_slave_0: entered allmulticast mode [ 2015.602207][T16974] veth1_to_team: entered promiscuous mode [ 2015.607979][T16974] veth1_to_team: entered allmulticast mode [ 2015.614702][T16974] team_slave_1: entered promiscuous mode [ 2015.620777][T16974] team_slave_1: entered allmulticast mode [ 2015.627336][T16974] veth0_to_batadv: entered promiscuous mode [ 2015.633876][T16974] veth0_to_batadv: entered allmulticast mode [ 2015.640671][T16974] batadv_slave_0: entered promiscuous mode [ 2015.646815][T16974] batadv_slave_0: entered allmulticast mode [ 2015.653691][T16974] veth1_to_batadv: entered promiscuous mode [ 2015.659809][T16974] veth1_to_batadv: entered allmulticast mode [ 2015.666628][T16974] batadv_slave_1: entered promiscuous mode [ 2015.672491][T16974] batadv_slave_1: entered allmulticast mode [ 2015.684479][T16974] xfrm0: entered promiscuous mode [ 2015.689582][T16974] xfrm0: entered allmulticast mode [ 2015.695402][T16974] veth0_to_hsr: entered promiscuous mode [ 2015.701094][T16974] veth0_to_hsr: entered allmulticast mode [ 2015.707454][T16974] hsr_slave_0: entered promiscuous mode [ 2015.713045][T16974] hsr_slave_0: entered allmulticast mode [ 2015.720205][T16974] veth1_to_hsr: entered promiscuous mode [ 2015.725905][T16974] veth1_to_hsr: entered allmulticast mode [ 2015.732458][T16974] hsr_slave_1: entered promiscuous mode [ 2015.738366][T16974] hsr_slave_1: entered allmulticast mode [ 2015.744722][T16974] veth1_virt_wifi: entered promiscuous mode [ 2015.752886][T16974] veth1_virt_wifi: entered allmulticast mode [ 2015.759880][T16974] veth0_virt_wifi: entered promiscuous mode [ 2015.765825][T16974] veth0_virt_wifi: entered allmulticast mode [ 2015.772705][T16974] veth1_vlan: entered promiscuous mode [ 2015.778220][T16974] veth1_vlan: entered allmulticast mode [ 2015.786848][T16974] veth0_vlan: entered allmulticast mode [ 2015.793641][T16974] vlan0: entered promiscuous mode [ 2015.798914][T16974] vlan0: entered allmulticast mode [ 2015.805950][T16974] vlan1: entered promiscuous mode [ 2015.811316][T16974] vlan1: entered allmulticast mode [ 2015.817627][T16974] veth1_macvtap: entered allmulticast mode [ 2015.825932][T16974] veth0_macvtap: entered promiscuous mode [ 2015.831993][T16974] veth0_macvtap: entered allmulticast mode [ 2015.840332][T16974] macsec0: entered promiscuous mode [ 2015.846251][T16974] macsec0: entered allmulticast mode [ 2015.852022][T16974] syztnl0: entered promiscuous mode [ 2015.857359][T16974] syztnl0: entered allmulticast mode [ 2015.870709][T16974] netpci0: entered promiscuous mode [ 2015.876209][T16974] netpci0: entered allmulticast mode [ 2015.882365][T16976] netlink: 'syz.4.27659': attribute type 5 has an invalid length. [ 2015.890528][T16976] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.27659'. [ 2015.899888][T16985] netlink: 'syz.4.27659': attribute type 58 has an invalid length. [ 2015.908987][T16985] wg1: left promiscuous mode [ 2015.913626][T16985] wg1: left allmulticast mode [ 2015.919618][T16985] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2016.092222][T17008] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2016.123073][T17008] rust_binder: Error in use_page_slow: ESRCH [ 2016.131132][T17008] rust_binder: use_range failure ESRCH [ 2016.138230][T17008] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 2016.163622][T17008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2016.189033][T17008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:891 [ 2016.487195][T17038] rust_binder: 17027 RLIMIT_NICE not set [ 2016.497287][T17027] rust_binder: Write failure EINVAL in pid:162 [ 2016.598076][T28574] rust_binder: 17017: removing orphan mapping 0:1168 [ 2016.660600][T17042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:167 [ 2016.665866][T17042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2016.688702][T17042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:167 [ 2016.861906][T17048] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2017.170219][T17061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2017.467288][T17077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2017.482279][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27690'. [ 2017.509141][T17077] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 2017.629441][T17079] input: syz0 as /devices/virtual/input/input116 [ 2017.714934][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2017.904335][ T31] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2017.931794][ T31] usb 3-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 2017.947020][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2017.968250][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2017.986697][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.003617][ T31] usb 3-1: Product: ତ綊肸Ӫ⛊肖妨║ய䍜皌磦歑쎫涇ꍜꧡᧈ⿀㗎稨딶彔︫皲慽萌ȩ୑刃뮹邞ഺ禀Н᠍昱䵒ﭱ౐ထ竞闾؋ḛ [ 2018.029355][ T31] usb 3-1: Manufacturer: Ё [ 2018.034111][ T31] usb 3-1: SerialNumber: ж [ 2018.067993][T17091] __vm_enough_memory: pid: 17091, comm: syz.6.27697, bytes: 18014402804453376 not enough memory for the allocation [ 2018.236505][T17107] netlink: 393 bytes leftover after parsing attributes in process `syz.4.27702'. [ 2018.281641][T17109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2018.309151][T17109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2018.359347][ T31] usb 3-1: 0:2 : does not exist [ 2018.380761][ T31] usb 3-1: USB disconnect, device number 11 [ 2018.496815][T17117] netlink: 'syz.4.27705': attribute type 33 has an invalid length. [ 2018.510867][T13676] udevd[13676]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2018.515763][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27705'. [ 2018.601358][T17121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2018.602717][T17121] rust_binder: inc_ref_done called when no active inc_refs [ 2018.631759][T17118] netlink: 'syz.4.27705': attribute type 33 has an invalid length. [ 2018.655780][T17121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:911 [ 2018.656002][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27705'. [ 2018.751552][T17124] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2018.758283][T17124] rust_binder: Error in use_page_slow: ESRCH [ 2018.785930][T17124] rust_binder: use_range failure ESRCH [ 2018.798642][T17124] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 2018.808871][T17124] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2018.817682][T17124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:914 [ 2019.048008][T17136] netlink: 57 bytes leftover after parsing attributes in process `syz.4.27712'. [ 2019.164556][T17148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2019.175995][T17148] rust_binder: Error in use_page_slow: ESRCH [ 2019.185999][T17148] rust_binder: use_range failure ESRCH [ 2019.200942][T17148] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 2019.206464][T17148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2019.222366][T17148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:924 [ 2019.232087][T17148] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 2019.246092][T17148] rust_binder: Read failure Err(EFAULT) in pid:924 [ 2019.339926][ T36] kauditd_printk_skb: 750 callbacks suppressed [ 2019.339951][ T36] audit: type=1400 audit(2000006299.551:330987): avc: denied { execmem } for pid=17153 comm="syz.4.27719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2019.395173][T17155] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=276 sclass=netlink_xfrm_socket pid=17155 comm=syz.4.27719 [ 2019.443998][ T36] audit: type=1400 audit(2000006299.560:330988): avc: denied { read write } for pid=12430 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2019.468434][ T36] audit: type=1400 audit(2000006299.560:330989): avc: denied { read write open } for pid=12430 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2019.501149][ T36] audit: type=1400 audit(2000006299.560:330990): avc: denied { ioctl } for pid=12430 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2019.530331][ T36] audit: type=1400 audit(2000006299.644:330991): avc: denied { execmem } for pid=17160 comm="syz.0.27721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2019.551733][ T36] audit: type=1400 audit(2000006299.663:330992): avc: denied { read write } for pid=17158 comm="syz.2.27720" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2019.579287][ T36] audit: type=1400 audit(2000006299.663:330993): avc: denied { read write open } for pid=17158 comm="syz.2.27720" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2019.606758][ T36] audit: type=1400 audit(2000006299.672:330994): avc: denied { create } for pid=17153 comm="syz.4.27719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2019.628528][ T36] audit: type=1400 audit(2000006299.672:330995): avc: denied { write } for pid=17153 comm="syz.4.27719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2019.651671][ T36] audit: type=1400 audit(2000006299.672:330996): avc: denied { write } for pid=17153 comm="syz.4.27719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2019.920980][T17196] tipc: Enabling of bearer rejected, failed to enable media [ 2020.056180][T28574] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 2020.219055][T28574] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2020.235286][T28574] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2020.245338][T28574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.253691][T28574] usb 3-1: Product: syz [ 2020.257900][T28574] usb 3-1: Manufacturer: syz [ 2020.262536][T28574] usb 3-1: SerialNumber: syz [ 2020.268838][T28574] usb 3-1: config 0 descriptor?? [ 2020.276451][T28574] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2020.284420][T28574] usb 3-1: Detected FT232H [ 2020.492014][T28574] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2020.500536][T28574] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2020.512656][T28574] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 2020.521103][T28574] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2020.530349][T28574] usb 3-1: USB disconnect, device number 12 [ 2020.537992][T28574] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2020.547557][T28574] ftdi_sio 3-1:0.0: device disconnected [ 2021.118869][T17219] SELinux: Context ϧ-):E2٭ؾ@m[ vB is not valid (left unmapped). [ 2021.131912][T17219] binder: Unknown parameter '' [ 2021.216510][T17221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:936 [ 2021.610347][T17245] overlayfs: failed to clone lowerpath [ 2021.932321][T17259] netlink: 104 bytes leftover after parsing attributes in process `syz.0.27754'. [ 2022.449888][T17274] binder: Bad value for 'max' [ 2022.473564][T17274] binder: Bad value for 'max' [ 2022.479707][T17274] binder: Bad value for 'max' [ 2022.491970][T17274] binder: Bad value for 'max' [ 2022.499998][T17274] binder: Bad value for 'max' [ 2022.506210][T17274] binder: Bad value for 'max' [ 2022.512402][T17274] binder: Bad value for 'max' [ 2022.518638][T17274] binder: Bad value for 'max' [ 2022.526115][T17274] binder: Bad value for 'max' [ 2022.532256][T17274] binder: Bad value for 'max' [ 2022.539827][T17274] binder: Bad value for 'max' [ 2022.546057][T17274] binder: Bad value for 'max' [ 2022.552370][T17274] binder: Bad value for 'max' [ 2022.560357][T17274] binder: Bad value for 'max' [ 2022.566602][T17274] binder: Bad value for 'max' [ 2022.572909][T17274] binder: Bad value for 'max' [ 2022.579010][T17274] binder: Bad value for 'max' [ 2022.591090][T17274] binder: Bad value for 'max' [ 2022.613752][T17274] binder: Bad value for 'max' [ 2022.629466][T17274] binder: Bad value for 'max' [ 2022.633713][T17285] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 344, limit: 1168, size: 18446744073709551614) [ 2022.634214][T17285] rust_binder: Error while translating object. [ 2022.646624][T17285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2022.647423][T17274] binder: Bad value for 'max' [ 2022.652814][T17285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 2022.671382][T17274] binder: Bad value for 'max' [ 2022.688429][T17274] binder: Bad value for 'max' [ 2022.696159][T17274] binder: Bad value for 'max' [ 2022.702418][T17274] binder: Bad value for 'max' [ 2022.709084][T17274] binder: Bad value for 'max' [ 2022.714967][T17274] binder: Bad value for 'max' [ 2022.721461][T17274] binder: Bad value for 'max' [ 2022.727317][T17274] binder: Bad value for 'max' [ 2022.739628][T17274] binder: Bad value for 'max' [ 2022.751997][T17274] binder: Bad value for 'max' [ 2022.763180][T17274] binder: Bad value for 'max' [ 2022.776574][T17274] binder: Bad value for 'max' [ 2022.785931][T17274] binder: Bad value for 'max' [ 2022.792334][T17274] binder: Bad value for 'max' [ 2022.799299][T17274] binder: Bad value for 'max' [ 2022.806026][T17274] binder: Bad value for 'max' [ 2022.812115][T17274] binder: Bad value for 'max' [ 2022.819975][T17274] binder: Bad value for 'max' [ 2022.826703][T17274] binder: Bad value for 'max' [ 2022.832871][T17274] binder: Bad value for 'max' [ 2022.839876][T17274] binder: Bad value for 'max' [ 2022.846120][T17274] binder: Bad value for 'max' [ 2022.858186][T17274] binder: Bad value for 'max' [ 2022.868596][T17274] binder: Bad value for 'max' [ 2022.874365][T17274] binder: Bad value for 'max' [ 2022.891476][T17274] binder: Bad value for 'max' [ 2022.897482][T17274] binder: Bad value for 'max' [ 2022.909889][T17274] binder: Bad value for 'max' [ 2022.924052][T17274] binder: Bad value for 'max' [ 2022.938328][T17274] binder: Bad value for 'max' [ 2022.946104][T17274] binder: Bad value for 'max' [ 2022.952142][T17274] binder: Bad value for 'max' [ 2022.975640][T17274] binder: Bad value for 'max' [ 2022.997305][T17274] binder: Bad value for 'max' [ 2023.014087][T17274] binder: Bad value for 'max' [ 2023.024870][T17274] binder: Bad value for 'max' [ 2023.030927][T17274] binder: Bad value for 'max' [ 2023.036924][T17274] binder: Bad value for 'max' [ 2023.044064][T17274] binder: Bad value for 'max' [ 2023.045925][T17300] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 2023.048842][T17300] rust_binder: Error while translating object. [ 2023.052376][T17274] binder: Bad value for 'max' [ 2023.060944][T17300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2023.070111][T17274] binder: Bad value for 'max' [ 2023.073612][T17300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 2023.083212][T17274] binder: Bad value for 'max' [ 2023.102971][T17274] binder: Bad value for 'max' [ 2023.109105][T17274] binder: Bad value for 'max' [ 2023.246399][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27772'. [ 2023.280196][ T4700] Bluetooth: hci0: Frame reassembly failed (-84) [ 2023.382000][T17316] tipc: Enabling of bearer rejected, failed to enable media [ 2023.406926][T17319] cgroup: Unknown subsys name 'rdma' [ 2023.461685][T17319] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2023.592256][T17339] netlink: 'syz.0.27780': attribute type 16 has an invalid length. [ 2023.600294][T17339] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.27780'. [ 2023.732172][T17351] 9pnet_fd: Insufficient options for proto=fd [ 2023.738589][T17350] 9pnet_fd: Insufficient options for proto=fd [ 2024.070867][T17360] netlink: 72 bytes leftover after parsing attributes in process `syz.2.27786'. [ 2024.526602][T17397] tipc: Enabling of bearer rejected, failed to enable media [ 2024.629839][T17405] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2024.651810][T17405] overlayfs: missing 'lowerdir' [ 2024.654214][T17406] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2024.669355][T17406] overlayfs: missing 'lowerdir' [ 2024.738546][ T36] kauditd_printk_skb: 763 callbacks suppressed [ 2024.738584][ T36] audit: type=1400 audit(2000006304.658:331760): avc: denied { create } for pid=17410 comm="syz.0.27800" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2024.789789][ T36] audit: type=1400 audit(2000006304.705:331761): avc: denied { mounton } for pid=17412 comm="syz.0.27801" path="/388/file0" dev="tmpfs" ino=2103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2024.819970][ T36] audit: type=1400 audit(2000006304.714:331762): avc: denied { mount } for pid=17412 comm="syz.0.27801" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2024.873427][ T36] audit: type=1400 audit(2000006304.789:331763): avc: denied { create } for pid=17416 comm="syz.2.27802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2024.952354][ T36] audit: type=1400 audit(2000006304.864:331764): avc: denied { write } for pid=17416 comm="syz.2.27802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2024.984089][ T36] audit: type=1400 audit(2000006304.892:331765): avc: denied { create } for pid=17416 comm="syz.2.27802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2025.033337][ T36] audit: type=1400 audit(2000006304.939:331766): avc: denied { create } for pid=17421 comm="syz.0.27803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2025.054073][ T36] audit: type=1400 audit(2000006304.939:331767): avc: denied { create } for pid=17421 comm="syz.0.27803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2025.084678][ T36] audit: type=1400 audit(2000006304.939:331768): avc: denied { ioctl } for pid=17421 comm="syz.0.27803" path="socket:[310394]" dev="sockfs" ino=310394 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2025.106081][T17430] netlink: 'syz.2.27805': attribute type 16 has an invalid length. [ 2025.145426][T17430] netlink: 'syz.2.27805': attribute type 3 has an invalid length. [ 2025.152010][ T36] audit: type=1400 audit(2000006304.939:331769): avc: denied { bind } for pid=17421 comm="syz.0.27803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2025.155579][T17430] netlink: 10482 bytes leftover after parsing attributes in process `syz.2.27805'. [ 2025.269821][T17442] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2025.465755][T17897] Bluetooth: hci0: command 0x1003 tx timeout [ 2025.471828][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2025.821746][T17463] netlink: 'syz.0.27817': attribute type 28 has an invalid length. [ 2026.097802][T17489] netlink: 'syz.0.27826': attribute type 33 has an invalid length. [ 2026.105862][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27826'. [ 2026.243294][T17506] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 2026.550697][T17538] fuse: Bad value for 'fd' [ 2026.563033][T17540] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17540 comm=syz.6.27843 [ 2026.980360][T17577] netlink: 'syz.2.27857': attribute type 11 has an invalid length. [ 2027.554402][T17600] fuseblk: Unknown parameter 'rootYode' [ 2027.561933][T17600] fuseblk: Unknown parameter 'appraise_type' [ 2027.819303][T17632] 9pnet_fd: p9_fd_create_tcp (17632): problem connecting socket to 127.0.0.1 [ 2027.916477][T17640] 9pnet_fd: Insufficient options for proto=fd [ 2028.779040][T17645] tc_dump_action: action bad kind [ 2028.840649][T17651] fuse: Unknown parameter 'rotmoD]Cjӂ\tde' [ 2028.890863][T17658] overlay: Unknown parameter '/' [ 2028.895378][T17657] netlink: 68 bytes leftover after parsing attributes in process `syz.4.27885'. [ 2028.938361][T17660] netlink: 'syz.6.27887': attribute type 6 has an invalid length. [ 2029.435560][T17669] netlink: 72 bytes leftover after parsing attributes in process `syz.2.27890'. [ 2030.148414][ T36] kauditd_printk_skb: 463 callbacks suppressed [ 2030.148433][ T36] audit: type=1400 audit(2000006309.728:332233): avc: denied { create } for pid=17736 comm="syz.6.27914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2030.178911][ T36] audit: type=1400 audit(2000006309.756:332234): avc: denied { write } for pid=17736 comm="syz.6.27914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2030.184602][T17738] netlink: 20 bytes leftover after parsing attributes in process `syz.6.27914'. [ 2030.201191][ T36] audit: type=1400 audit(2000006309.756:332235): avc: denied { read } for pid=17736 comm="syz.6.27914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2030.229599][ T36] audit: type=1400 audit(2000006309.756:332236): avc: denied { read } for pid=17736 comm="syz.6.27914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2030.251039][T17737] netlink: 20 bytes leftover after parsing attributes in process `syz.6.27914'. [ 2030.267420][ T36] audit: type=1400 audit(2000006309.756:332237): avc: denied { write } for pid=17736 comm="syz.6.27914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2030.308862][ T36] audit: type=1400 audit(2000006309.831:332238): avc: denied { write } for pid=17736 comm="syz.6.27914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2030.330044][ T36] audit: type=1400 audit(2000006309.859:332239): avc: denied { mounton } for pid=17743 comm="syz.0.27917" path="/415/file0" dev="tmpfs" ino=2248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2030.373359][ T36] audit: type=1400 audit(2000006309.859:332240): avc: denied { mount } for pid=17743 comm="syz.0.27917" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2030.412327][ T36] audit: type=1400 audit(2000006309.868:332241): avc: denied { remount } for pid=17743 comm="syz.0.27917" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2030.433050][ T36] audit: type=1400 audit(2000006309.962:332242): avc: denied { mount } for pid=17750 comm="syz.6.27919" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2030.458781][T17751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27918'. [ 2031.225661][T17778] netlink: 104 bytes leftover after parsing attributes in process `syz.4.27927'. [ 2031.293194][T17780] netlink: 104 bytes leftover after parsing attributes in process `syz.4.27927'. [ 2033.470200][T17900] /dev/rnullb0: Can't lookup blockdev [ 2033.591843][T17906] /dev/rnullb0: Can't lookup blockdev [ 2033.598051][T17905] veth1_to_hsr: left promiscuous mode [ 2033.603504][T17905] veth1_to_hsr: left allmulticast mode [ 2033.617866][T17910] tmpfs: Bad value for 'nr_blocks' [ 2033.796182][T17932] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 2033.804879][T17932] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 2033.939878][T17946] x_tables: duplicate underflow at hook 2 [ 2033.939878][T17947] x_tables: duplicate underflow at hook 2 [ 2034.008876][T17953] x_tables: duplicate entry at hook 2 [ 2034.197928][T17981] overlayfs: missing 'lowerdir' [ 2034.274211][T17987] overlayfs: failed to clone upperpath [ 2034.284139][T17987] netlink: 'syz.2.28000': attribute type 32 has an invalid length. [ 2034.380963][T18000] netlink: 188 bytes leftover after parsing attributes in process `syz.4.28005'. [ 2034.393503][T18000] netlink: 180 bytes leftover after parsing attributes in process `syz.4.28005'. [ 2034.890335][T18051] fuseblk: Bad value for 'user_id' [ 2034.895589][T18051] fuseblk: Bad value for 'user_id' [ 2035.528044][ T36] kauditd_printk_skb: 573 callbacks suppressed [ 2035.528063][ T36] audit: type=1400 audit(2000006314.760:332816): avc: denied { name_bind } for pid=18085 comm="syz.2.28034" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2035.577788][ T36] audit: type=1400 audit(2000006314.788:332817): avc: denied { node_bind } for pid=18085 comm="syz.2.28034" saddr=::ffff:172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 2035.601434][ T36] audit: type=1400 audit(2000006314.788:332818): avc: denied { create } for pid=18085 comm="syz.2.28034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2035.623419][ T36] audit: type=1400 audit(2000006314.788:332819): avc: denied { create } for pid=18085 comm="syz.2.28034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2035.650024][ T36] audit: type=1400 audit(2000006314.788:332820): avc: denied { write } for pid=18085 comm="syz.2.28034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2035.671532][ T36] audit: type=1400 audit(2000006314.788:332821): avc: denied { read } for pid=18085 comm="syz.2.28034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2035.693110][ T36] audit: type=1400 audit(2000006314.788:332822): avc: denied { read } for pid=18085 comm="syz.2.28034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2035.719479][ T36] audit: type=1400 audit(2000006314.788:332823): avc: denied { write } for pid=18085 comm="syz.2.28034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2035.729319][T18088] 9pnet_fd: Insufficient options for proto=fd [ 2035.741614][ T36] audit: type=1326 audit(2000006314.938:332824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.6.28020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86c98eec9 code=0x7fc00000 [ 2035.807731][ T36] audit: type=1400 audit(2000006314.938:332825): avc: denied { create } for pid=18087 comm="syz.2.28036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2036.778480][T18158] cgroup: Unknown subsys name 'measure' [ 2037.233097][T18173] overlayfs: overlapping lowerdir path [ 2037.269624][T18175] fuseblk: Bad value for 'fd' [ 2038.090947][T18270] netlink: 3 bytes leftover after parsing attributes in process `syz.0.28094'. [ 2038.140396][T18276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18276 comm=syz.2.28102 [ 2038.381410][T18290] netlink: 16 bytes leftover after parsing attributes in process `syz.6.28106'. [ 2039.657937][T18326] netlink: 168 bytes leftover after parsing attributes in process `syz.6.28119'. [ 2039.792988][T18339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18339 comm=syz.0.28125 [ 2040.507280][T18384] netlink: 'syz.2.28139': attribute type 4 has an invalid length. [ 2041.003894][ T36] kauditd_printk_skb: 415 callbacks suppressed [ 2041.003916][ T36] audit: type=1400 audit(2000006319.877:333241): avc: denied { create } for pid=18450 comm="syz.0.28158" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2041.032636][ T36] audit: type=1400 audit(2000006319.877:333242): avc: denied { ioctl } for pid=18450 comm="syz.0.28158" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=312715 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2041.056730][T18460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18460 comm=syz.2.28162 [ 2041.059815][ T36] audit: type=1400 audit(2000006319.877:333243): avc: denied { create } for pid=18450 comm="syz.0.28158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2041.074803][T18460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18460 comm=syz.2.28162 [ 2041.100001][ T36] audit: type=1400 audit(2000006319.877:333244): avc: denied { bind } for pid=18450 comm="syz.0.28158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2041.131926][ T36] audit: type=1400 audit(2000006319.877:333245): avc: denied { connect } for pid=18450 comm="syz.0.28158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2041.152765][ T36] audit: type=1400 audit(2000006319.877:333246): avc: denied { read } for pid=18450 comm="syz.0.28158" lport=37845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2041.175416][ T36] audit: type=1400 audit(2000006319.914:333247): avc: denied { mounton } for pid=18459 comm="syz.2.28162" path="/440/file0" dev="tmpfs" ino=2353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2041.199254][ T36] audit: type=1400 audit(2000006319.914:333248): avc: denied { execute } for pid=18459 comm="syz.2.28162" name="file0" dev="tmpfs" ino=2353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2041.207670][T18471] 9pnet_fd: Insufficient options for proto=fd [ 2041.222255][ T36] audit: type=1400 audit(2000006319.970:333249): avc: denied { create } for pid=18459 comm="syz.2.28162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2041.248167][ T36] audit: type=1400 audit(2000006319.970:333250): avc: denied { create } for pid=18459 comm="syz.2.28162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2041.833977][T18531] overlay: Bad value for 'metacopy' [ 2042.537268][T18576] netlink: 40 bytes leftover after parsing attributes in process `syz.6.28199'. [ 2042.577898][T18578] netlink: 120 bytes leftover after parsing attributes in process `syz.2.28200'. [ 2043.776826][T18606] devpts: called with bogus options [ 2044.632635][T18647] IPv6: NLM_F_CREATE should be specified when creating new route [ 2044.707691][T18651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=18651 comm=syz.6.28228 [ 2044.708809][T18652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=18652 comm=syz.6.28228 [ 2044.811897][T18658] tipc: Enabling of bearer rejected, failed to enable media [ 2045.067785][T18662] fuse: Bad value for 'rootmode' [ 2045.074454][T18662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.28232'. [ 2045.526358][T18671] 9pnet_fd: Insufficient options for proto=fd [ 2045.553229][T18671] netlink: 80 bytes leftover after parsing attributes in process `syz.0.28235'. [ 2045.688250][T18683] fuse: Unknown parameter '' [ 2046.073010][T18715] netlink: 100 bytes leftover after parsing attributes in process `syz.4.28250'. [ 2046.300404][T18746] veth0_vlan: left promiscuous mode [ 2046.320772][T18747] 9pnet_fd: Insufficient options for proto=fd [ 2046.339357][T18749] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2046.361012][ T36] kauditd_printk_skb: 467 callbacks suppressed [ 2046.361054][ T36] audit: type=1400 audit(2000006324.891:333718): avc: denied { mounton } for pid=18745 comm="syz.0.28259" path="/499/file0" dev="tmpfs" ino=2694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2046.361430][T18750] 9pnet_fd: Insufficient options for proto=fd [ 2046.397417][T18749] netlink: 'syz.2.28260': attribute type 46 has an invalid length. [ 2046.413127][ T36] audit: type=1400 audit(2000006324.937:333719): avc: denied { create } for pid=18748 comm="syz.2.28260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2046.457301][ T36] audit: type=1400 audit(2000006324.937:333720): avc: denied { write } for pid=18748 comm="syz.2.28260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2046.473109][T18753] netlink: 'syz.2.28262': attribute type 15 has an invalid length. [ 2046.484450][ T36] audit: type=1400 audit(2000006324.937:333721): avc: denied { write } for pid=18748 comm="syz.2.28260" lport=37512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2046.494211][T18753] netlink: 'syz.2.28262': attribute type 15 has an invalid length. [ 2046.526073][ T36] audit: type=1400 audit(2000006324.937:333722): avc: denied { create } for pid=18748 comm="syz.2.28260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2046.533852][T18755] overlayfs: conflicting options: metacopy=off,verity=require [ 2046.562317][ T36] audit: type=1400 audit(2000006325.040:333723): avc: denied { create } for pid=18754 comm="syz.6.28261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2046.584863][ T36] audit: type=1400 audit(2000006325.040:333724): avc: denied { getopt } for pid=18754 comm="syz.6.28261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2046.629153][ T36] audit: type=1400 audit(2000006325.040:333725): avc: denied { create } for pid=18754 comm="syz.6.28261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2046.660349][ T36] audit: type=1400 audit(2000006325.040:333726): avc: denied { setopt } for pid=18754 comm="syz.6.28261" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2046.682052][ T36] audit: type=1400 audit(2000006325.050:333727): avc: denied { mounton } for pid=18754 comm="syz.6.28261" path="/178/bus" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2046.711154][T18771] /dev/loop0: Can't lookup blockdev [ 2046.772064][T18782] 9pnet_fd: Insufficient options for proto=fd [ 2047.073754][T18814] netlink: 76 bytes leftover after parsing attributes in process `syz.4.28279'. [ 2047.082935][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28279'. [ 2047.215359][T18819] overlay: Unknown parameter 'default_permissions:/' [ 2047.973183][T18870] 9pnet_fd: Insufficient options for proto=fd [ 2048.323809][T18897] netlink: 'syz.2.28308': attribute type 32 has an invalid length. [ 2048.381994][T18899] 9pnet_fd: p9_fd_create_tcp (18899): problem connecting socket to 127.0.0.1 [ 2048.831732][T18909] /dev/nullb0: Can't lookup blockdev [ 2048.840857][T18909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=18909 comm=syz.6.28313 [ 2048.862741][T18909] netlink: 80 bytes leftover after parsing attributes in process `syz.6.28313'. [ 2048.919764][T18913] 9pnet_fd: Insufficient options for proto=fd [ 2049.026992][T18922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=18922 comm=syz.2.28319 [ 2049.051594][T18922] netlink: 'syz.2.28319': attribute type 6 has an invalid length. [ 2049.059531][T18922] IPv6: NLM_F_CREATE should be specified when creating new route [ 2049.674910][T18941] 9pnet_fd: Insufficient options for proto=fd [ 2049.995943][T18965] netlink: 224 bytes leftover after parsing attributes in process `syz.2.28334'. [ 2050.389075][T18991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28345'. [ 2051.610634][T19027] netlink: 'syz.2.28359': attribute type 20 has an invalid length. [ 2051.621204][T19028] netlink: 'syz.2.28359': attribute type 20 has an invalid length. [ 2051.758592][ T36] kauditd_printk_skb: 520 callbacks suppressed [ 2051.758607][ T36] audit: type=1400 audit(2000006329.942:334248): avc: denied { mount } for pid=19040 comm="syz.2.28363" name="/" dev="ramfs" ino=313585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2051.812705][ T36] audit: type=1400 audit(2000006329.989:334249): avc: denied { execmem } for pid=19035 comm="syz.0.28361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2051.836421][ T36] audit: type=1400 audit(2000006330.007:334250): avc: denied { create } for pid=19047 comm="syz.2.28365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2051.858819][ T36] audit: type=1400 audit(2000006330.007:334251): avc: denied { create } for pid=19047 comm="syz.2.28365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2051.880468][ T36] audit: type=1400 audit(2000006330.007:334252): avc: denied { create } for pid=19035 comm="syz.0.28361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2051.906330][ T36] audit: type=1400 audit(2000006330.007:334253): avc: denied { write } for pid=19047 comm="syz.2.28365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2051.927094][ T36] audit: type=1400 audit(2000006330.007:334254): avc: denied { read } for pid=19047 comm="syz.2.28365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2051.948261][ T36] audit: type=1400 audit(2000006330.017:334255): avc: denied { create } for pid=19047 comm="syz.2.28365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2051.970522][ T36] audit: type=1400 audit(2000006330.017:334256): avc: denied { write } for pid=19047 comm="syz.2.28365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2051.994435][ T36] audit: type=1400 audit(2000006330.063:334257): avc: denied { create } for pid=19046 comm="syz.6.28364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2052.045999][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28369'. [ 2053.654403][T19134] netlink: 36 bytes leftover after parsing attributes in process `syz.4.28394'. [ 2053.826264][T19144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28397'. [ 2053.838927][T19143] netlink: 120 bytes leftover after parsing attributes in process `syz.4.28397'. [ 2053.848271][T19143] netlink: 96 bytes leftover after parsing attributes in process `syz.4.28397'. [ 2053.956345][T19151] overlay: Unknown parameter '/' [ 2053.992995][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28401'. [ 2054.003283][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28401'. [ 2054.020671][T19159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28401'. [ 2054.023168][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28401'. [ 2055.123511][T19255] overlayfs: missing 'lowerdir' [ 2055.126221][T19257] /dev/rnullb0: Can't lookup blockdev [ 2055.906497][T19274] veth1: entered allmulticast mode [ 2055.914142][T19274] netlink: 'syz.0.28426': attribute type 4 has an invalid length. [ 2055.923632][T19272] veth1: left allmulticast mode [ 2060.875408][ T4701] bridge_slave_1: left allmulticast mode [ 2060.881183][ T4701] bridge_slave_1: left promiscuous mode [ 2060.888028][ T4701] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.895722][ T4701] bridge_slave_0: left allmulticast mode [ 2060.901380][ T4701] bridge_slave_0: left promiscuous mode [ 2060.907218][ T4701] bridge0: port 1(bridge_slave_0) entered disabled state [ 2061.045387][ T4701] tipc: Left network mode [ 2061.051058][ T4701] veth1_macvtap: left promiscuous mode [ 2061.056672][ T4701] veth0_vlan: left promiscuous mode [ 2066.967941][ T36] kauditd_printk_skb: 448 callbacks suppressed [ 2066.967961][ T36] audit: type=1400 audit(2000006344.169:334706): avc: denied { create } for pid=19293 comm="syz.4.28431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2067.002648][ T36] audit: type=1400 audit(2000006344.188:334707): avc: denied { write } for pid=19293 comm="syz.4.28431" path="socket:[314962]" dev="sockfs" ino=314962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2067.032953][T19292] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 2067.082492][ T36] audit: type=1400 audit(2000006344.188:334708): avc: denied { write } for pid=19293 comm="syz.4.28431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2067.133297][ T36] audit: type=1400 audit(2000006344.197:334709): avc: denied { create } for pid=19291 comm="syz.0.28433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2067.159613][ T36] audit: type=1400 audit(2000006344.197:334710): avc: denied { write } for pid=19291 comm="syz.0.28433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2067.182269][ T36] audit: type=1400 audit(2000006344.216:334711): avc: denied { name_bind } for pid=19291 comm="syz.0.28433" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2067.214457][ T36] audit: type=1400 audit(2000006344.216:334712): avc: denied { node_bind } for pid=19291 comm="syz.0.28433" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 2067.237710][ T36] audit: type=1400 audit(2000006344.235:334713): avc: denied { create } for pid=19291 comm="syz.0.28433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2067.291424][ T36] audit: type=1400 audit(2000006344.235:334714): avc: denied { setopt } for pid=19291 comm="syz.0.28433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2067.314301][ T36] audit: type=1400 audit(2000006344.235:334715): avc: denied { setopt } for pid=19291 comm="syz.0.28433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2068.252508][T19368] overlayfs: failed to clone lowerpath [ 2068.348414][T19375] 8021q: VLANs not supported on xfrm0 [ 2068.542743][T19383] netlink: 100 bytes leftover after parsing attributes in process `syz.0.28464'. [ 2068.779507][T19406] tipc: Enabling of bearer rejected, failed to enable media [ 2068.813629][T19411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28474'. [ 2069.133169][T19426] bridge0: port 1(bridge_slave_0) entered blocking state [ 2069.140388][T19426] bridge0: port 1(bridge_slave_0) entered disabled state [ 2069.147589][T19426] bridge_slave_0: entered allmulticast mode [ 2069.153916][T19426] bridge_slave_0: entered promiscuous mode [ 2069.215004][T19426] bridge0: port 2(bridge_slave_1) entered blocking state [ 2069.222250][T19426] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.229345][T19426] bridge_slave_1: entered allmulticast mode [ 2069.236026][T19426] bridge_slave_1: entered promiscuous mode [ 2069.280651][ T4696] tipc: Left network mode [ 2069.379101][T19426] bridge0: port 2(bridge_slave_1) entered blocking state [ 2069.386252][T19426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2069.393611][T19426] bridge0: port 1(bridge_slave_0) entered blocking state [ 2069.400676][T19426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2069.472666][ T4701] bridge0: port 1(bridge_slave_0) entered disabled state [ 2069.481721][ T4701] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.509531][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state [ 2069.516695][ T4697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2069.529230][ T4701] bridge0: port 2(bridge_slave_1) entered blocking state [ 2069.536361][ T4701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2069.691125][T19447] fuse: Bad value for 'fd' [ 2069.706957][T19426] veth0_vlan: entered promiscuous mode [ 2069.789444][T19426] veth1_macvtap: entered promiscuous mode [ 2069.797217][T19452] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.28485'. [ 2069.809281][T19452] netlink: 280 bytes leftover after parsing attributes in process `syz.0.28485'. [ 2070.252354][T19478] /dev/loop0: Can't lookup blockdev [ 2070.428381][T19489] rust_binder: Write failure EFAULT in pid:11 [ 2070.582690][T19501] tipc: Enabling of bearer rejected, failed to enable media [ 2070.683649][T19508] 9pnet_fd: p9_fd_create_tcp (19508): problem connecting socket to 127.0.0.1 [ 2071.141771][T19512] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.28504'. [ 2071.486070][T19538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2071.504068][T19538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.535560][T19538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2071.552928][T19538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.581433][T19538] batadv_slave_0: entered promiscuous mode [ 2071.599586][T19538] batadv_slave_0: left promiscuous mode [ 2071.719605][T19559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28519'. [ 2071.900928][T19568] /dev/rnullb0: Can't lookup blockdev [ 2072.165945][T19590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=19590 comm=syz.6.28530 [ 2072.210227][T19593] rust_binder: Error while translating object. [ 2072.210274][T19593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2072.217445][T19593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 2072.303119][T19598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2072.325577][T19598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2072.344224][T19598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28534'. [ 2072.364516][ T36] kauditd_printk_skb: 600 callbacks suppressed [ 2072.364537][ T36] audit: type=1400 audit(2000006349.211:335316): avc: denied { create } for pid=19600 comm="syz.2.28536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2072.403083][ T36] audit: type=1400 audit(2000006349.211:335317): avc: denied { create } for pid=19596 comm="syz.4.28534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2072.429534][ T36] audit: type=1400 audit(2000006349.211:335318): avc: denied { mounton } for pid=19596 comm="syz.4.28534" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2072.454910][ T36] audit: type=1400 audit(2000006349.249:335319): avc: denied { mounton } for pid=19600 comm="syz.2.28536" path="/566/file0" dev="tmpfs" ino=3023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2072.478871][ T36] audit: type=1400 audit(2000006349.249:335320): avc: denied { mounton } for pid=19600 comm="syz.2.28536" path="/566/file0" dev="tmpfs" ino=3023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2072.502820][ T36] audit: type=1400 audit(2000006349.249:335321): avc: denied { create } for pid=19600 comm="syz.2.28536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2072.524992][ T36] audit: type=1400 audit(2000006349.249:335322): avc: denied { write } for pid=19600 comm="syz.2.28536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2072.546643][ T36] audit: type=1400 audit(2000006349.249:335323): avc: denied { read } for pid=19600 comm="syz.2.28536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2072.568108][ T36] audit: type=1400 audit(2000006349.249:335324): avc: denied { read } for pid=19600 comm="syz.2.28536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2072.589831][ T36] audit: type=1400 audit(2000006349.249:335325): avc: denied { write } for pid=19600 comm="syz.2.28536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2072.697024][T19603] veth1: entered allmulticast mode [ 2072.711264][T19603] fuse: Bad value for 'fd' [ 2072.787916][T19602] veth1: left allmulticast mode [ 2073.259522][T19638] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=613063823 (1226127646 ns) > initial count (200000 ns). Using initial count to start timer. [ 2073.289727][T19638] rust_binder: Write failure EFAULT in pid:33 [ 2073.554326][T19658] kvm: user requested TSC rate below hardware speed [ 2073.809889][T19680] rust_binder: Error while translating object. [ 2073.809941][T19680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2073.840499][T19680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 2073.921759][T19684] netlink: 104 bytes leftover after parsing attributes in process `syz.0.28563'. [ 2073.982502][T19697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2074.003715][T19698] overlayfs: failed to clone upperpath [ 2074.009727][T19697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2075.067389][T19746] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 2075.067420][T19746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 2075.085514][T19746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:51 [ 2075.156580][T19754] tipc: Started in network mode [ 2075.170926][T19754] tipc: Node identity ac14140f, cluster identity 4711 [ 2075.178234][T19754] tipc: New replicast peer: 255.255.255.255 [ 2075.186561][T19754] tipc: Enabled bearer , priority 10 [ 2075.259668][T19761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2075.268501][T19761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2075.324828][T19766] netlink: 108 bytes leftover after parsing attributes in process `syz.6.28592'. [ 2075.336511][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.28592'. [ 2075.430350][T19773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28595'. [ 2076.343937][T19817] fuse: Bad value for 'fd' [ 2076.374165][ T31] tipc: Node number set to 2886997007 [ 2076.443825][T19825] overlayfs: missing 'lowerdir' [ 2076.692493][T19844] netlink: 316 bytes leftover after parsing attributes in process `syz.0.28617'. [ 2077.439232][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28628'. [ 2077.739999][ T36] kauditd_printk_skb: 442 callbacks suppressed [ 2077.740020][ T36] audit: type=1400 audit(2000006354.244:335768): avc: denied { execmem } for pid=19910 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2077.888774][ T36] audit: type=1400 audit(2000006354.384:335769): avc: denied { read } for pid=19911 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2077.945759][ T36] audit: type=1400 audit(2000006354.384:335770): avc: denied { read open } for pid=19911 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2077.973656][ T36] audit: type=1400 audit(2000006354.384:335771): avc: denied { mounton } for pid=19911 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2078.034234][ T36] audit: type=1400 audit(2000006354.384:335772): avc: denied { sys_module } for pid=19911 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2078.061998][ T36] audit: type=1400 audit(2000006354.384:335773): avc: denied { sys_module } for pid=19911 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2078.098928][ T36] audit: type=1400 audit(2000006354.384:335774): avc: denied { sys_module } for pid=19911 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2078.143750][T19911] bridge0: port 1(bridge_slave_0) entered blocking state [ 2078.156321][ T36] audit: type=1400 audit(2000006354.412:335775): avc: denied { sys_module } for pid=19911 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2078.178099][T19911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2078.186620][T19911] bridge_slave_0: entered allmulticast mode [ 2078.194205][T19911] bridge_slave_0: entered promiscuous mode [ 2078.206215][T19911] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.213384][T19911] bridge0: port 2(bridge_slave_1) entered disabled state [ 2078.220503][T19911] bridge_slave_1: entered allmulticast mode [ 2078.228291][T19911] bridge_slave_1: entered promiscuous mode [ 2078.282090][ T36] audit: type=1400 audit(2000006354.749:335776): avc: denied { sys_module } for pid=19911 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2078.312036][ T36] audit: type=1400 audit(2000006354.767:335777): avc: denied { sys_module } for pid=19911 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2078.334010][ T4705] tipc: Left network mode [ 2078.513465][T19911] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.520584][T19911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2078.527959][T19911] bridge0: port 1(bridge_slave_0) entered blocking state [ 2078.535155][T19911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2078.621680][T16578] bridge0: port 1(bridge_slave_0) entered disabled state [ 2078.629532][T16578] bridge0: port 2(bridge_slave_1) entered disabled state [ 2078.653019][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 2078.660141][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2078.675149][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.682267][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2078.803180][T19911] veth0_vlan: entered promiscuous mode [ 2078.824858][T19935] x_tables: duplicate underflow at hook 1 [ 2078.834300][T19935] x_tables: duplicate underflow at hook 1 [ 2078.840726][T19935] x_tables: duplicate underflow at hook 1 [ 2078.848351][T19935] x_tables: duplicate underflow at hook 1 [ 2078.855747][T19935] x_tables: duplicate underflow at hook 1 [ 2078.856043][T19911] veth1_macvtap: entered promiscuous mode [ 2078.862501][T19935] x_tables: duplicate underflow at hook 1 [ 2078.875195][T19935] x_tables: duplicate underflow at hook 1 [ 2078.883513][T19934] overlayfs: failed to resolve './file0': -2 [ 2078.886771][T19935] x_tables: duplicate underflow at hook 1 [ 2078.907413][T19935] x_tables: duplicate underflow at hook 1 [ 2078.925775][T19935] x_tables: duplicate underflow at hook 1 [ 2079.282166][T26806] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 2079.431796][T26806] usb 1-1: device descriptor read/64, error -71 [ 2079.688351][T26806] usb 1-1: device descriptor read/64, error -71 [ 2079.945028][T26806] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 2080.105251][T26806] usb 1-1: device descriptor read/64, error -71 [ 2080.293804][T19962] overlayfs: failed to clone upperpath [ 2080.365775][T26806] usb 1-1: device descriptor read/64, error -71 [ 2080.479861][T26806] usb usb1-port1: attempt power cycle [ 2080.494863][T19970] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 2080.864248][T26806] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 2080.899279][T26806] usb 1-1: device descriptor read/8, error -71 [ 2081.059658][T26806] usb 1-1: device descriptor read/8, error -71 [ 2081.313279][T26806] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 2081.337154][T26806] usb 1-1: device descriptor read/8, error -71 [ 2081.476381][T26806] usb 1-1: device descriptor read/8, error -71 [ 2081.592423][T26806] usb usb1-port1: unable to enumerate USB device [ 2081.614908][T20022] rust_binder: Error in use_page_slow: ESRCH [ 2081.614928][T20022] rust_binder: use_range failure ESRCH [ 2081.620973][T20022] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 2081.626515][T20022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 2081.634562][T20022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:85 [ 2081.738298][T20026] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 2081.755138][T20026] SELinux: failed to load policy [ 2081.761573][T20026] fuseblk: Unknown parameter 'rootmod' [ 2082.027869][T20034] fuse: Bad value for 'group_id' [ 2082.033535][T20035] fuse: Bad value for 'group_id' [ 2082.038568][T20035] fuse: Bad value for 'group_id' [ 2082.044129][T20034] fuse: Bad value for 'group_id' [ 2082.053782][T20034] fuse: Unknown parameter '0x0000000000000006$TAxnܼ >"5BQ0yR_#Xu&sU% ͮ#S )q|&'ҤwLej!a xqCX'EҞqߗ7z]:H9G0¬.1c -OL-_T)tx6' [ 2082.649581][T28574] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2082.690860][T20071] No source specified [ 2082.843649][T28574] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2082.857474][T28574] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2082.869497][T28574] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2082.884069][T28574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2082.893141][T28574] usb 1-1: SerialNumber: syz [ 2083.139041][T28574] usb 1-1: 0:2 : does not exist [ 2083.160834][T28574] usb 1-1: USB disconnect, device number 69 [ 2083.174783][T20091] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.201497][T20091] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.230876][T20091] bridge_slave_0: entered allmulticast mode [ 2083.237399][T20091] bridge_slave_0: entered promiscuous mode [ 2083.260834][T20091] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.267932][T20091] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.284939][T19943] udevd[19943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2083.291079][T20091] bridge_slave_1: entered allmulticast mode [ 2083.310983][ T36] kauditd_printk_skb: 1006 callbacks suppressed [ 2083.311003][ T36] audit: type=1400 audit(2000006359.454:336784): avc: denied { create } for pid=20097 comm="syz.6.28692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2083.338725][T20091] bridge_slave_1: entered promiscuous mode [ 2083.364268][ T36] audit: type=1400 audit(2000006359.482:336785): avc: denied { write } for pid=20097 comm="syz.6.28692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2083.388330][ T36] audit: type=1400 audit(2000006359.529:336786): avc: denied { sys_module } for pid=20091 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2083.436218][ T36] audit: type=1400 audit(2000006359.547:336787): avc: denied { sys_module } for pid=20091 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2083.472730][ T36] audit: type=1400 audit(2000006359.547:336788): avc: denied { create } for pid=20100 comm="syz.6.28693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2083.493894][ T36] audit: type=1400 audit(2000006359.547:336789): avc: denied { watch } for pid=20100 comm="syz.6.28693" path="/292" dev="tmpfs" ino=1563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2083.523641][ T36] audit: type=1400 audit(2000006359.547:336790): avc: denied { watch watch_reads } for pid=20100 comm="syz.6.28693" path="/292" dev="tmpfs" ino=1563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2083.558260][ T36] audit: type=1400 audit(2000006359.547:336791): avc: denied { watch } for pid=20100 comm="syz.6.28693" path="/292/file0" dev="tmpfs" ino=1568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2083.605669][ T36] audit: type=1400 audit(2000006359.557:336792): avc: denied { create } for pid=20100 comm="syz.6.28693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2083.626928][ T36] audit: type=1400 audit(2000006359.557:336793): avc: denied { write } for pid=20100 comm="syz.6.28693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2083.696538][T20091] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.703746][T20091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2083.711085][T20091] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.718157][T20091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2083.812548][T20127] /dev/rnullb0: Can't lookup blockdev [ 2083.819152][T20129] 9pnet_fd: Insufficient options for proto=fd [ 2083.863161][T16578] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.898178][T16578] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.904283][T20133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20133 comm=syz.4.28704 [ 2083.947577][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.955064][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2083.987318][T16578] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.994403][T16578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.070382][T20140] rust_binder: 18: no such ref 1 [ 2084.119592][T20140] rust_binder: Write failure EINVAL in pid:18 [ 2084.246409][T20091] veth0_vlan: entered promiscuous mode [ 2084.365035][T20091] veth1_macvtap: entered promiscuous mode [ 2084.400409][T20160] /dev/rnullb0: Can't lookup blockdev [ 2084.563558][T28574] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2084.613604][T20166] rust_binder: Write failure EFAULT in pid:2 [ 2084.742256][T28574] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2084.767918][T20168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2084.767955][T20168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:4 [ 2084.789180][T28574] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2084.830513][T28574] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2084.850474][T28574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2084.861249][T28574] usb 1-1: SerialNumber: syz [ 2084.990689][T20172] tap0: tun_chr_ioctl cmd 1074025672 [ 2085.003775][T20172] tap0: ignored: set checksum enabled [ 2085.112834][T28574] usb 1-1: 0:2 : does not exist [ 2085.136319][T28574] usb 1-1: USB disconnect, device number 70 [ 2085.341179][T19943] udevd[19943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2085.618187][T20200] overlay: Unknown parameter 'dont_measure' [ 2086.107063][T20235] rust_binder: Write failure EFAULT in pid:27 [ 2086.417574][T20259] rust_binder: Write failure EFAULT in pid:34 [ 2086.466119][T26806] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2086.533905][T20271] binder: Unknown parameter 'fscontV' [ 2086.635592][T20276] /dev/rnullb0: Can't lookup blockdev [ 2086.661541][T26806] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.672363][T26806] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2086.686603][T26806] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2086.706588][T26806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2086.718143][T26806] usb 3-1: SerialNumber: syz [ 2086.787486][T20278] netlink: 56 bytes leftover after parsing attributes in process `syz.0.28749'. [ 2086.953863][T26806] usb 3-1: 0:2 : does not exist [ 2086.978010][T26806] usb 3-1: USB disconnect, device number 13 [ 2087.092505][T20284] rust_binder: Error while translating object. [ 2087.092578][T20284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2087.099014][T20284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:46 [ 2087.342647][T19943] udevd[19943]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2087.388693][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.28752'. [ 2087.853155][T20315] rust_binder: Write failure EFAULT in pid:56 [ 2087.877158][T20317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 2087.888274][T20316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 2088.060950][T20324] tmpfs: Bad value for 'nr_blocks' [ 2088.146962][T20327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2088.149397][T20327] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 128, size: 18446744073709551507) [ 2088.176128][T20327] rust_binder: Error while translating object. [ 2088.209988][T20327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2088.243009][T20327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 2088.657502][T26806] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2088.674402][ T36] kauditd_printk_skb: 1375 callbacks suppressed [ 2088.674455][ T36] audit: type=1400 audit(2000006364.458:338169): avc: denied { read append } for pid=20359 comm="syz.2.28773" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2088.732509][ T36] audit: type=1400 audit(2000006364.458:338170): avc: denied { read append open } for pid=20359 comm="syz.2.28773" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2088.779544][ T36] audit: type=1400 audit(2000006364.514:338171): avc: denied { create } for pid=20361 comm="syz.6.28774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2088.788398][T20365] rust_binder: 20360 RLIMIT_NICE not set [ 2088.828559][T20367] sock: sock_set_timeout: `syz.6.28776' (pid 20367) tries to set negative timeout [ 2088.828734][ T36] audit: type=1400 audit(2000006364.514:338172): avc: denied { create } for pid=20361 comm="syz.6.28774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2088.878490][T20360] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 1144, size: 4096) [ 2088.878520][T20360] rust_binder: Error while translating object. [ 2088.892268][ T36] audit: type=1400 audit(2000006364.514:338173): avc: denied { read } for pid=20359 comm="syz.2.28773" dev="nsfs" ino=4026532560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2088.908263][T20360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2088.936675][T20360] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 2088.941812][T26806] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.959886][T20360] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:52 [ 2088.972120][T20371] overlayfs: failed to clone upperpath [ 2088.978421][ T36] audit: type=1400 audit(2000006364.514:338174): avc: denied { read open } for pid=20359 comm="syz.2.28773" path="net:[4026532560]" dev="nsfs" ino=4026532560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2089.008234][T28574] rust_binder: 20359: removing orphan mapping 0:1144 [ 2089.009936][T26806] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2089.025558][ T36] audit: type=1400 audit(2000006364.514:338175): avc: denied { create } for pid=20359 comm="syz.2.28773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2089.047887][ T36] audit: type=1400 audit(2000006364.514:338176): avc: denied { create } for pid=20361 comm="syz.6.28774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2089.054524][T26806] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2089.070687][ T36] audit: type=1400 audit(2000006364.514:338177): avc: denied { write } for pid=20361 comm="syz.6.28774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2089.109583][T26806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2089.129054][ T36] audit: type=1400 audit(2000006364.514:338178): avc: denied { read } for pid=20361 comm="syz.6.28774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2089.138838][T26806] usb 1-1: SerialNumber: syz [ 2089.229951][T26805] rust_binder: 20372: removing orphan mapping 0:4096 [ 2089.312511][T20377] 9pnet_fd: p9_fd_create_unix (20377): problem connecting socket: ./file0: -111 [ 2089.393739][T26806] usb 1-1: 0:2 : does not exist [ 2089.402704][T26806] usb 1-1: USB disconnect, device number 71 [ 2089.521985][T19943] udevd[19943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2089.716469][T20382] overlayfs: failed to resolve '/B3MUjp': -2 [ 2090.029070][T20403] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 2090.070007][T20409] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2090.078957][T20409] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2090.087252][T20409] rust_binder: Error while translating object. [ 2090.093882][T20409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2090.100183][T20409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:67 [ 2090.134388][T20413] netlink: 'syz.6.28792': attribute type 6 has an invalid length. [ 2090.171944][T20413] netlink: 'syz.6.28792': attribute type 4 has an invalid length. [ 2090.197163][T20413] netlink: 'syz.6.28792': attribute type 6 has an invalid length. [ 2090.205044][T20413] netlink: 5944 bytes leftover after parsing attributes in process `syz.6.28792'. [ 2090.224217][T20416] netlink: 44 bytes leftover after parsing attributes in process `syz.6.28792'. [ 2090.436754][T20428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2090.436814][T20428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 2090.529697][T26806] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2090.753043][T26806] usb 1-1: Using ep0 maxpacket: 16 [ 2090.765965][T26806] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 2090.774441][ T9947] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2090.775145][T26806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.790972][T26806] usb 1-1: Product: syz [ 2090.795188][T26806] usb 1-1: Manufacturer: syz [ 2090.800014][T26806] usb 1-1: SerialNumber: syz [ 2090.934838][ T9947] usb 3-1: device descriptor read/64, error -71 [ 2091.191386][ T9947] usb 3-1: device descriptor read/64, error -71 [ 2091.212828][T20458] overlayfs: failed to resolve './file0/file0': -2 [ 2091.212935][T20459] overlayfs: failed to resolve './file0/file0': -2 [ 2091.448648][ T9947] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2091.468709][T26806] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 2091.526216][T19943] udevd[19943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2091.608310][ T9947] usb 3-1: device descriptor read/64, error -71 [ 2091.677186][T28574] usb 1-1: USB disconnect, device number 72 [ 2091.875633][ T9947] usb 3-1: device descriptor read/64, error -71 [ 2091.993679][ T9947] usb usb3-port1: attempt power cycle [ 2092.303473][T20503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2092.303778][T20503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2092.311988][T20503] rust_binder: Error while translating object. [ 2092.322441][T20503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2092.328847][T20503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:71 [ 2092.357411][ T9947] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2092.413240][ T9947] usb 3-1: device descriptor read/8, error -71 [ 2092.465113][T20509] fuseblk: Bad value for 'fd' [ 2092.564363][ T9947] usb 3-1: device descriptor read/8, error -71 [ 2092.837744][ T9947] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2092.874152][ T9947] usb 3-1: device descriptor read/8, error -71 [ 2093.036308][ T9947] usb 3-1: device descriptor read/8, error -71 [ 2093.106774][T20550] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2093.108830][T20550] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2093.127547][T20550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:87 [ 2093.158588][ T9947] usb usb3-port1: unable to enumerate USB device [ 2093.432739][T20564] overlayfs: failed to clone lowerpath [ 2093.440714][T20564] overlayfs: failed to resolve './file1': -2 [ 2093.586068][T26805] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2093.746410][T26805] usb 1-1: Using ep0 maxpacket: 8 [ 2093.761750][T26805] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2093.772896][T26805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.783744][T26805] usb 1-1: config 0 descriptor?? [ 2093.863541][T20581] binder: Unknown parameter '' [ 2093.913097][T20583] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 2093.913126][T20583] rust_binder: Error while translating object. [ 2093.923787][T20583] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2093.930027][T20583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 2093.994128][T20585] rust_binder: Error while translating object. [ 2094.003509][T20585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2094.009955][T20585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 2094.019562][T26805] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2094.038262][ T36] kauditd_printk_skb: 787 callbacks suppressed [ 2094.038280][ T36] audit: type=1400 audit(2000006369.481:338966): avc: denied { read write } for pid=20091 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2094.084020][ T36] audit: type=1400 audit(2000006369.491:338967): avc: denied { read write open } for pid=20091 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2094.109746][ T36] audit: type=1400 audit(2000006369.491:338968): avc: denied { ioctl } for pid=20091 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2094.135665][ T36] audit: type=1400 audit(2000006369.519:338969): avc: denied { read write } for pid=20587 comm="syz.2.28848" name="rnullb0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 2094.164941][ T36] audit: type=1400 audit(2000006369.528:338970): avc: denied { read write open } for pid=20587 comm="syz.2.28848" path="/dev/rnullb0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 2094.195010][ T36] audit: type=1400 audit(2000006369.528:338971): avc: denied { write } for pid=20587 comm="syz.2.28848" name="rnullb0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 2094.226782][ T36] audit: type=1400 audit(2000006369.528:338972): avc: denied { name_bind } for pid=20587 comm="syz.2.28848" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2094.249803][ T36] audit: type=1400 audit(2000006369.528:338973): avc: denied { node_bind } for pid=20587 comm="syz.2.28848" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 2094.271063][ T36] audit: type=1400 audit(2000006369.640:338974): avc: denied { read write } for pid=20587 comm="syz.2.28848" name="rnullb0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 2094.299464][ T36] audit: type=1400 audit(2000006369.640:338975): avc: denied { read write open } for pid=20587 comm="syz.2.28848" path="/dev/rnullb0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:iptables_initrc_exec_t:s0" [ 2094.466190][T20596] rust_binder: Read failure Err(EAGAIN) in pid:94 [ 2095.123076][T20610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28855'. [ 2095.182389][T20610] fuse: Unknown parameter '000000000000000000030x0000000000000046' [ 2095.883565][T26805] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2095.905933][T26805] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2095.937798][T26805] asix 1-1:0.0: probe with driver asix failed with error -71 [ 2095.962394][T26805] usb 1-1: USB disconnect, device number 73 [ 2096.353223][T20651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2096.360297][T20650] rust_binder: Error while translating object. [ 2096.376322][T20650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2096.383355][T20650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:95 [ 2096.451680][T28574] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 2096.661054][T28574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2096.675673][T28574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 2096.700650][T28574] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2096.718862][T28574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.734544][T28574] usb 3-1: Product: syz [ 2096.739039][T28574] usb 3-1: Manufacturer: syz [ 2096.744134][T28574] usb 3-1: SerialNumber: syz [ 2096.751635][T28574] usb 3-1: config 0 descriptor?? [ 2096.981229][T20647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2097.002532][T20647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2097.148260][T28572] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2097.175982][T28574] usb 3-1: USB disconnect, device number 18 [ 2097.244842][T19539] udevd[19539]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2097.330822][T28572] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.359837][T28572] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2097.378638][T28572] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2097.390270][T28572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2097.406471][T28572] usb 1-1: SerialNumber: syz [ 2097.638787][T28572] usb 1-1: 0:2 : does not exist [ 2097.647843][T28572] usb 1-1: USB disconnect, device number 74 [ 2097.699768][T19943] udevd[19943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2097.814989][T20689] 9pnet_fd: Insufficient options for proto=fd [ 2097.933602][T20695] rust_binder: Write failure EFAULT in pid:106 [ 2098.139649][T20778] /dev/rnullb0: Can't lookup blockdev [ 2098.318862][T20799] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=20799 comm=syz.6.28895 [ 2098.659378][T20841] overlayfs: failed to clone upperpath [ 2098.728249][T26806] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2098.793399][T20849] rust_binder: Error while translating object. [ 2098.793433][T20849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 2098.799651][T20849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:179 [ 2098.889787][T26806] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2098.909153][T26806] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2098.918814][T26806] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2098.927936][T26806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2098.936061][T26806] usb 1-1: SerialNumber: syz [ 2099.091741][T26805] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2099.157994][T26806] usb 1-1: 0:2 : does not exist [ 2099.166442][T26806] usb 1-1: USB disconnect, device number 75 [ 2099.175522][T19943] udevd[19943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2099.253279][T26805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2099.264507][T26805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2099.274403][T26805] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2099.287450][T26805] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2099.296533][T26805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.305231][T26805] usb 3-1: config 0 descriptor?? [ 2099.525330][T20856] netlink: 'syz.2.28910': attribute type 16 has an invalid length. [ 2099.539970][T26805] usbhid 3-1:0.0: can't add hid device: -71 [ 2099.546212][T26805] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2099.557295][T26805] usb 3-1: USB disconnect, device number 19 [ 2099.563668][ T36] kauditd_printk_skb: 311 callbacks suppressed [ 2099.563689][ T36] audit: type=1400 audit(2000006374.663:339287): avc: denied { name_bind } for pid=20859 comm="syz.2.28912" src=20009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2099.564727][T20860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 2099.592915][T20860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:188 [ 2099.626938][ T36] audit: type=1400 audit(2000006374.710:339288): avc: denied { create } for pid=20863 comm="syz.2.28914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2099.656908][ T36] audit: type=1400 audit(2000006374.710:339289): avc: denied { write } for pid=20863 comm="syz.2.28914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2099.677015][ T36] audit: type=1400 audit(2000006374.719:339290): avc: denied { create } for pid=20865 comm="syz.4.28915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2099.701715][ T36] audit: type=1400 audit(2000006374.729:339291): avc: denied { nlmsg_write } for pid=20867 comm="syz.4.28916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2099.722947][T20878] /dev/rnullb0: Can't lookup blockdev [ 2099.726706][ T36] audit: type=1400 audit(2000006374.738:339292): avc: denied { mount } for pid=20867 comm="syz.4.28916" name="/" dev="incremental-fs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2099.788259][ T36] audit: type=1400 audit(2000006374.738:339293): avc: denied { name_bind } for pid=20867 comm="syz.4.28916" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2099.819508][ T36] audit: type=1400 audit(2000006374.813:339294): avc: denied { mounton } for pid=20877 comm="syz.0.28920" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2099.873082][ T36] audit: type=1400 audit(2000006374.897:339295): avc: denied { create } for pid=20888 comm="syz.6.28924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2099.914903][ T36] audit: type=1400 audit(2000006374.981:339296): avc: denied { create } for pid=20892 comm="syz.6.28926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2099.957776][T26805] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2100.118013][T26805] usb 3-1: Using ep0 maxpacket: 8 [ 2100.124354][T26805] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2100.132723][T26805] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2100.143117][T26805] usb 3-1: config 179 has no interface number 0 [ 2100.153908][T26805] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 2100.171476][T26805] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2100.203540][T26805] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2100.210727][T26805] usb 3-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 2100.231255][T26805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.478833][T20864] fuse: Unknown parameter '|5N' [ 2100.486288][T26805] usb 3-1: USB disconnect, device number 20 [ 2100.930568][T28572] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 2101.044961][T20934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2101.044987][T20934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:192 [ 2101.091979][T28572] usb 1-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 2101.109831][T28572] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 2101.118855][T28572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2101.130824][T28572] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2101.140734][T28572] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 2101.149810][T28572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.158634][T28572] usb 1-1: config 0 descriptor?? [ 2101.326114][T28574] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2101.487626][T28574] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2101.497826][T28574] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2101.507438][T28574] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2101.516562][T28574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2101.524642][T28574] usb 3-1: SerialNumber: syz [ 2101.557242][T20943] netlink: 260 bytes leftover after parsing attributes in process `syz.4.28944'. [ 2101.600517][T28572] usbhid 1-1:0.0: can't add hid device: -71 [ 2101.609144][T28572] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2101.631653][T28572] usb 1-1: USB disconnect, device number 76 [ 2101.651083][T20950] netlink: 'syz.6.28946': attribute type 27 has an invalid length. [ 2101.750203][T28574] usb 3-1: 0:2 : does not exist [ 2101.765636][T28574] usb 3-1: USB disconnect, device number 21 [ 2101.828143][T20970] /dev/rnullb0: Can't lookup blockdev [ 2101.845174][T20972] devpts: called with bogus options [ 2102.299097][T20990] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 2102.459317][T28574] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2102.631939][T28574] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 2102.643727][T28574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.651716][T26805] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 2102.656728][T28574] usb 1-1: config 0 descriptor?? [ 2102.665765][T28574] usb 1-1: selecting invalid altsetting 1 [ 2102.683672][T28574] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2102.823833][T26805] usb 3-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 2102.834217][T26805] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2102.847178][T26805] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2102.856309][T26805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.865096][T26805] usb 3-1: config 0 descriptor?? [ 2102.871089][T26805] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2102.880592][T20987] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2102.880924][T20987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2102.887665][T20988] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2102.888019][T20987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 2102.897358][T20988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 2102.916270][T26805] usb 1-1: USB disconnect, device number 77 [ 2103.087173][T26809] usb 3-1: USB disconnect, device number 22 [ 2103.467019][T21011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2103.468431][T21011] cgroup: name respecified [ 2103.509972][T21013] rust_binder: Error while translating object. [ 2103.510104][T21013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2103.516499][T21013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 2103.651508][T21021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2103.661117][T21021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:200 [ 2103.674435][T21022] rust_binder: Write failure EFAULT in pid:133 [ 2103.817242][T21034] binder: Unknown parameter '00000000000000000000034' [ 2104.297737][T21045] netlink: 68 bytes leftover after parsing attributes in process `syz.6.28981'. [ 2104.384446][T21049] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 2104.391623][T21049] rust_binder: Write failure EINVAL in pid:214 [ 2104.410720][T21053] veth0_to_team: entered promiscuous mode [ 2104.423027][T21053] veth0_to_team: entered allmulticast mode [ 2104.471165][T21055] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2104.588574][T21066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 2104.595470][T21057] rust_binder: Error while translating object. [ 2104.608279][T21057] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2104.614523][T21057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:137 [ 2104.776236][T21071] bridge0: port 2(bridge_slave_1) entered disabled state [ 2104.792742][T21071] bridge0: port 1(bridge_slave_0) entered disabled state [ 2104.920726][T21087] 9pnet_fd: Insufficient options for proto=fd [ 2104.961886][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 2104.961908][ T36] audit: type=1400 audit(2000006379.715:339360): avc: denied { mount } for pid=21088 comm="syz.6.28997" name="/" dev="configfs" ino=1459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2104.962286][T21089] /dev/rnullb0: Can't lookup blockdev [ 2105.012428][T21093] /dev/rnullb0: Can't lookup blockdev [ 2105.034418][ T36] audit: type=1400 audit(2000006379.771:339361): avc: denied { setopt } for pid=21094 comm="syz.6.28999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2105.055131][ T36] audit: type=1400 audit(2000006379.771:339362): avc: denied { create } for pid=21094 comm="syz.6.28999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2105.083493][T21097] netlink: 'syz.6.29000': attribute type 1 has an invalid length. [ 2105.106509][ T36] audit: type=1400 audit(2000006379.836:339363): avc: denied { bind } for pid=21098 comm="syz.6.29001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2105.375234][ T36] audit: type=1326 audit(2000006380.089:339364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21105 comm="syz.0.29004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f882138eec9 code=0x0 [ 2105.483683][T21108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29005'. [ 2105.486989][ T36] audit: type=1400 audit(2000006380.201:339365): avc: denied { read } for pid=21105 comm="syz.0.29004" dev="nsfs" ino=4026533588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2105.496855][T21108] bridge_slave_1: left allmulticast mode [ 2105.517411][ T36] audit: type=1400 audit(2000006380.229:339366): avc: denied { open } for pid=21105 comm="syz.0.29004" path="net:[4026533588]" dev="nsfs" ino=4026533588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2105.520344][T21108] bridge_slave_1: left promiscuous mode [ 2105.549568][T21108] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.557138][ T36] audit: type=1400 audit(2000006380.257:339367): avc: denied { unmount } for pid=20091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2105.557467][T21108] bridge_slave_0: left allmulticast mode [ 2105.582903][T21108] bridge_slave_0: left promiscuous mode [ 2105.588643][T21108] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.588808][ T36] audit: type=1400 audit(2000006380.294:339368): avc: denied { unmount } for pid=20091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2105.675180][ T36] audit: type=1400 audit(2000006380.369:339369): avc: denied { mount } for pid=21105 comm="syz.0.29004" name="/" dev="ramfs" ino=321083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2105.750632][T21125] 9pnet_fd: Insufficient options for proto=fd [ 2105.880274][T26805] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2105.905102][T21158] overlayfs: failed to clone lowerpath [ 2106.043287][T26805] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2106.052514][T26805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.060620][T26805] usb 3-1: Product: syz [ 2106.064945][T26805] usb 3-1: Manufacturer: syz [ 2106.069647][T26805] usb 3-1: SerialNumber: syz [ 2106.072797][T21171] tipc: Enabling of bearer rejected, failed to enable media [ 2106.617913][ T9947] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2106.748957][T26805] rtl8150 3-1:1.0: couldn't reset the device [ 2106.755089][T26805] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 2106.766770][T26805] usb 3-1: USB disconnect, device number 23 [ 2106.778375][ T9947] usb 1-1: Using ep0 maxpacket: 16 [ 2106.786754][ T9947] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 2106.796221][ T9947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.810648][ T9947] usb 1-1: config 0 descriptor?? [ 2106.821912][ T9947] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2106.829894][ T9947] usb 1-1: Detected FT4232H [ 2107.135705][ T9947] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2107.144593][ T9947] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2107.163301][ T9947] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2107.173212][ T9947] usb 1-1: USB disconnect, device number 78 [ 2107.183697][ T9947] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2107.193657][ T9947] ftdi_sio 1-1:0.0: device disconnected [ 2107.201791][T21214] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2107.315922][T21221] rust_binder: 241: no such ref 2 [ 2107.321066][T21221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:241 [ 2107.351178][T21226] can0: slcan on ttyS3. [ 2107.365771][T21226] netlink: 680 bytes leftover after parsing attributes in process `syz.2.29043'. [ 2107.402795][T21226] can0 (unregistered): slcan off ttyS3. [ 2107.410519][T21226] rust_binder: Error while translating object. [ 2107.410567][T21226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2107.416789][T21226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 2107.529302][T21251] sock: sock_set_timeout: `syz.2.29045' (pid 21251) tries to set negative timeout [ 2107.636024][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.641723][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.647768][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.653426][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.659234][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.664751][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.670419][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.675899][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.681565][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.687114][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.696364][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.702221][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.708166][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.714134][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.719880][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.725510][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.727235][T21272] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2107.731324][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.743434][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.749085][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.754639][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.760656][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.766620][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.772194][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.777897][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.784405][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.790269][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.795892][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.801499][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.807207][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.812976][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.818587][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.824293][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.830139][T21269] /dev/rnullb0: Can't lookup blockdev [ 2107.854894][T21279] input: syz0 as /devices/virtual/input/input118 [ 2107.885688][T21279] can0: slcan on ttyS3. [ 2107.899320][T21286] tipc: Enabling of bearer rejected, failed to enable media [ 2108.175497][T21318] 9pnet_fd: Insufficient options for proto=fd [ 2108.240432][T21325] cgroup: Unknown subsys name 'measure' [ 2109.056143][T21386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2109.060420][T21386] rust_binder: Write failure EFAULT in pid:175 [ 2109.651591][T21413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29092'. [ 2109.680083][T21410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2109.680123][T21410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 2109.769058][T21426] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.29096'. [ 2109.887899][T21430] cgroup: noprefix used incorrectly [ 2109.893774][T21430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29097'. [ 2109.903152][T21430] bridge_slave_1: left allmulticast mode [ 2109.908857][T21430] bridge_slave_1: left promiscuous mode [ 2109.914712][T21430] bridge0: port 2(bridge_slave_1) entered disabled state [ 2109.922546][T21430] bridge_slave_0: left allmulticast mode [ 2109.928227][T21430] bridge_slave_0: left promiscuous mode [ 2109.934065][T21430] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.000014][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29098'. [ 2110.009124][T21433] bridge_slave_1: left allmulticast mode [ 2110.014819][T21433] bridge_slave_1: left promiscuous mode [ 2110.020873][T21433] bridge0: port 2(bridge_slave_1) entered disabled state [ 2110.028802][T21433] bridge_slave_0: left allmulticast mode [ 2110.034469][T21433] bridge_slave_0: left promiscuous mode [ 2110.040398][T21433] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.056787][ T4712] Bluetooth: hci1: Frame reassembly failed (-84) [ 2110.255474][T21437] incfs: mount failed -22 [ 2110.894408][T21459] tipc: Enabling of bearer rejected, failed to enable media [ 2111.333937][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 2111.333959][ T36] audit: type=1400 audit(2000006385.673:339416): avc: denied { ioctl } for pid=21460 comm="syz.6.29108" path="socket:[321470]" dev="sockfs" ino=321470 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2111.385767][T21474] tipc: Enabling of bearer rejected, failed to enable media [ 2111.394795][T21475] tipc: Enabling of bearer rejected, failed to enable media [ 2111.559253][ T36] audit: type=1400 audit(2000006385.879:339417): avc: denied { connect } for pid=21482 comm="syz.4.29115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2111.590953][T21485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29116'. [ 2111.611027][ T36] audit: type=1400 audit(2000006385.935:339418): avc: denied { accept } for pid=21486 comm="syz.4.29117" path=0000214E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2111.784309][T21500] netlink: 'syz.4.29121': attribute type 1 has an invalid length. [ 2112.016533][ T36] audit: type=1400 audit(2000006386.300:339419): avc: denied { nlmsg_read } for pid=21507 comm="syz.6.29124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2112.016537][T21508] netlink: 104 bytes leftover after parsing attributes in process `syz.6.29124'. [ 2112.046904][T21509] netlink: 104 bytes leftover after parsing attributes in process `syz.6.29124'. [ 2112.187948][T31450] Bluetooth: hci0: command 0x1003 tx timeout [ 2112.188095][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2112.273410][T17897] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2112.273493][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 2112.621786][T21516] netlink: 72 bytes leftover after parsing attributes in process `syz.6.29126'. [ 2112.631235][T21516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21516 comm=syz.6.29126 [ 2112.676566][ T36] audit: type=1400 audit(2000006386.917:339420): avc: denied { ioctl } for pid=21525 comm="syz.6.29130" path="socket:[321517]" dev="sockfs" ino=321517 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2112.682490][T21526] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 2112.751202][ T36] audit: type=1400 audit(2000006386.992:339421): avc: denied { create } for pid=21527 comm="syz.2.29131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2112.782167][ T36] audit: type=1400 audit(2000006387.020:339422): avc: denied { mounton } for pid=21531 comm="syz.2.29132" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2112.782202][T21532] binder: Bad value for 'stats' [ 2112.849001][T21534] 9pnet_fd: Insufficient options for proto=fd [ 2112.912237][ T36] audit: type=1400 audit(2000006387.142:339423): avc: denied { append } for pid=21546 comm="syz.2.29138" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2112.925162][T21545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2112.938864][T21545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:192 [ 2112.946212][ T36] audit: type=1400 audit(2000006387.170:339424): avc: denied { create } for pid=21544 comm="syz.0.29139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2112.990382][T21549] rust_binder: 21548 RLIMIT_NICE not set [ 2112.992221][T21548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 2113.001220][T21551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2113.020995][T21551] rust_binder: Error while translating object. [ 2113.021026][T21551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2113.028279][T21551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:194 [ 2113.057009][T21548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2113.075470][T21548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2113.075555][T21556] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2113.083638][T21555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2113.143151][T21555] rust_binder: Error while translating object. [ 2113.150013][T21555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2113.156227][T21555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:197 [ 2113.166483][T21556] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.29141'. [ 2113.185080][T21555] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.29141'. [ 2113.197931][ T36] audit: type=1400 audit(2000006387.413:339425): avc: denied { sqpoll } for pid=21554 comm="syz.0.29141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2113.320960][T26806] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2113.338296][T21571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2113.338856][T21571] rust_binder: Error while translating object. [ 2113.353229][T21571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 2113.359537][T21571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:207 [ 2113.436657][T21580] rust_binder: Write failure EFAULT in pid:212 [ 2113.483826][T21592] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2113.502667][T26806] usb 3-1: Using ep0 maxpacket: 16 [ 2113.509589][T26806] usb 3-1: config 252 has an invalid descriptor of length 128, skipping remainder of the config [ 2113.525805][T26806] usb 3-1: config 252 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2113.545213][T26806] usb 3-1: New USB device found, idVendor=28d3, idProduct=0042, bcdDevice= 0.00 [ 2113.554501][T26806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.557142][T21596] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21596 comm=syz.0.29154 [ 2113.844771][T26809] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2114.006278][T26809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2114.018282][T26809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2114.030478][T26809] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2114.040230][T26809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2114.048573][T26809] usb 1-1: SerialNumber: syz [ 2114.277276][T26809] usb 1-1: 0:2 : does not exist [ 2114.284629][T26809] usb 1-1: USB disconnect, device number 79 [ 2114.293574][T19943] udevd[19943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2114.701112][T21663] /dev/rnullb0: Can't lookup blockdev [ 2114.905689][T21675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42239 sclass=netlink_route_socket pid=21675 comm=syz.0.29184 [ 2114.920570][T21675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.29184'. [ 2115.181093][ T9947] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2115.320553][T21681] /dev/rnullb0: Can't lookup blockdev [ 2115.344850][ T9947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2115.357151][ T9947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2115.381022][ T9947] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 2115.390697][ T9947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.399226][ T9947] usb 1-1: Product: syz [ 2115.403530][ T9947] usb 1-1: Manufacturer: syz [ 2115.408414][ T9947] usb 1-1: SerialNumber: syz [ 2115.414130][ T9947] usb 1-1: config 0 descriptor?? [ 2115.422593][ T9947] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 2115.429225][ T9947] usb 1-1: No valid video chain found. [ 2115.637856][T28572] usb 1-1: USB disconnect, device number 80 [ 2115.842402][T21712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.29197'. [ 2116.123073][T26806] usb 3-1: string descriptor 0 read error: -71 [ 2116.134561][T22574] rust_binder: 21546: removing orphan mapping 0:1144 [ 2116.141902][T26806] usbhid 3-1:252.0: couldn't find an input interrupt endpoint [ 2116.150373][T26806] usb 3-1: USB disconnect, device number 24 [ 2116.311717][T21725] 9pnet_fd: Insufficient options for proto=fd [ 2116.474668][ T9947] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2116.560250][T26806] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 2116.635029][ T9947] usb 1-1: device descriptor read/64, error -71 [ 2116.732413][T26806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2116.743585][T26806] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2116.756652][T26806] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 2116.765848][T26806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.774951][T26806] usb 3-1: config 0 descriptor?? [ 2116.780668][T21721] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2116.791315][T26806] usbhid 3-1:0.0: can't add hid device: -22 [ 2116.797391][T26806] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 2116.891598][ T9947] usb 1-1: device descriptor read/64, error -71 [ 2116.898734][T21734] /dev/nbd4: Can't lookup blockdev [ 2116.915357][T21737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29206'. [ 2117.006172][T21721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2117.014845][T21721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2117.024212][T26806] usb 3-1: USB disconnect, device number 25 [ 2117.158882][ T9947] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2117.297839][ T9947] usb 1-1: device descriptor read/64, error -71 [ 2117.484208][T21741] overlayfs: failed to clone upperpath [ 2117.554426][ T9947] usb 1-1: device descriptor read/64, error -71 [ 2117.612188][T21746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=21746 comm=syz.2.29210 [ 2117.673048][ T9947] usb usb1-port1: attempt power cycle [ 2117.679844][T21755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 2117.679886][T21755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:304 [ 2117.708918][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 2117.708940][ T36] audit: type=1400 audit(2000006391.632:339442): avc: denied { execute } for pid=21756 comm="syz.2.29213" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2118.046204][ T9947] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2118.068639][ T9947] usb 1-1: device descriptor read/8, error -71 [ 2118.207717][ T9947] usb 1-1: device descriptor read/8, error -71 [ 2118.463149][ T9947] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2118.497204][ T9947] usb 1-1: device descriptor read/8, error -71 [ 2118.635578][ T9947] usb 1-1: device descriptor read/8, error -71 [ 2118.672986][T21783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29222'. [ 2118.682249][T21783] netlink: 17 bytes leftover after parsing attributes in process `syz.2.29222'. [ 2118.691680][T21783] tipc: Invalid UDP bearer configuration [ 2118.691705][T21783] tipc: Enabling of bearer rejected, failed to enable media [ 2118.751868][ T9947] usb usb1-port1: unable to enumerate USB device [ 2118.954894][T13540] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2118.999511][T21792] overlayfs: failed to clone upperpath [ 2119.016613][ T36] audit: type=1400 audit(2000006392.848:339443): avc: denied { unlink } for pid=19426 comm="syz-executor" name="file2" dev="tmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2119.125952][T13540] usb 3-1: Using ep0 maxpacket: 32 [ 2119.134025][T13540] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2119.143218][T13540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.151272][T13540] usb 3-1: Product: syz [ 2119.155477][T13540] usb 3-1: Manufacturer: syz [ 2119.160152][T13540] usb 3-1: SerialNumber: syz [ 2119.165493][T13540] usb 3-1: config 0 descriptor?? [ 2119.171543][T13540] cdc_ether 3-1:0.0: More than one union descriptor, skipping ... [ 2119.179455][T13540] cdc_ether 3-1:0.0: skipping garbage [ 2119.184838][T13540] usb 3-1: bad CDC descriptors [ 2119.189764][T13540] usb 3-1: unsupported MDLM descriptors [ 2119.386378][T26806] usb 3-1: USB disconnect, device number 26 [ 2119.523476][T21811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2119.579449][T21818] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2119.595634][T21818] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2258.051905][T16578] tipc: Disabling bearer [ 2258.063726][T16578] tipc: Left network mode [ 2258.069582][T16578] veth1_macvtap: left promiscuous mode