last executing test programs: 10m50.486987339s ago: executing program 32 (id=657): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x805, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0xeb, 0x2, 0x0, 0x101, 0x6, 0x1], 0xeeee8000, 0x141200}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x8, 0x401, 0x1ff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0x1, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x9, 0x7f, 0x4, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0xd3, 0x1, '\x00', 0x5}, {0x52, 0x3, 0x3, '\x00', 0x9}, {0x0, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x9, '\x00', 0x80}, {0x6, 0x8, 0x6, '\x00', 0x1}, {0x1, 0x1, 0x6, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x6}, {0x5, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x2, 0xfa, '\x00', 0x2}, {0x6, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x4, 0xa, '\x00', 0xf8}, {0x8, 0x2, 0x1, '\x00', 0xf7}, {0x6, 0x6, 0x1, '\x00', 0xa}, {0x1, 0x0, 0x1, '\x00', 0x8}, {0x12, 0xe, 0x4, '\x00', 0x1}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="98"]) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 10m49.707342575s ago: executing program 33 (id=668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="3e0f340f005a00f20f58bd00300f38079d62e30fbe250125010c66b8d277288c66efbafc0cb83e00eff20f0866b8010000000f01c1baf80c66b8380d708466efbafc0c66b80048000066efdc2c", 0x4d}], 0x1, 0x64, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ptrace$setregset(0x4205, 0x0, 0x200, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m48.084666257s ago: executing program 34 (id=695): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) mount$overlay(0x0, 0x0, 0x0, 0x840, &(0x7f00000001c0)={[{@index_on}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m45.80966916s ago: executing program 35 (id=720): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000ec0)={0x44, &(0x7f0000001180)={0x0, 0x11, 0x4, "28172044"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x302000, 0x1000, 0xe9, 0x7}, 0x20) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0xc, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x20, 0x1, 0x4, "8f20888a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m33.98333692s ago: executing program 36 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc02366b97d3de60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001cac80493e131ccc00", 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x4, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x9, 0xa, 0x80000006, 0x5, 0x6, 0x101, 0xc000, 0x4, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x164) 5m22.375491087s ago: executing program 37 (id=7154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) userfaultfd(0x801) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000001a00)={{&(0x7f0000978000/0x3000)=nil, 0x3000}, 0x1}) r4 = eventfd(0xbfffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r4) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x20340, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000100)={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, 0x1, 0x7ff, 0x1, 0x500, 0xafff, 0x84410200}) (async) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000100)={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, 0x1, 0x7ff, 0x1, 0x500, 0xafff, 0x84410200}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) socket$tipc(0x1e, 0x2, 0x0) (async) r9 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000000)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000000)) ioctl$TCFLSH(r7, 0x400455c8, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_bt_hci(r6, 0x400448e2, &(0x7f0000000200)) close_range(r0, 0xffffffffffffffff, 0x0) 4m16.495013906s ago: executing program 38 (id=8763): pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x460c0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 3m6.835596159s ago: executing program 39 (id=10639): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc, 0x1100000000000000}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "00b45a9af75938f5795dc473f9ade9ee5248b03d32f0d1f8f5ac05"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) 2m4.045755169s ago: executing program 8 (id=12194): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r3, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9084) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000000)={r0}) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) r6 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x7a) fcntl$setlease(r6, 0x400, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) fcntl$getflags(r6, 0x401) recvmmsg(r5, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10002, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000440)="66b98009000066b8d464000066ba000000000f302e36670f080f01d10f7ff42e0fc79c0080baf80c66b860e30a8566efbafc0cec64f30f12ec66b9790300000f3266b9800000c00f326635001000000f30baf80c66b80913bc8566efbafc0cb099ee", 0x62}], 0x1, 0x64, 0x0, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x3d, &(0x7f0000000280)="4cdc9e7868a7e019c4d8f607e1dd6067", 0x10) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r10, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r11, 0x0) 2m3.920996702s ago: executing program 8 (id=12195): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xa7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xb) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, 0x0) ioctl$KVM_GET_PIT(r6, 0xc048ae65, &(0x7f0000000a80)) (async) ioctl$KVM_GET_PIT(r6, 0xc048ae65, &(0x7f0000000a80)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x0, 0x0, 0x0}) 2m3.919957292s ago: executing program 8 (id=12196): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00091000000010fa8294d4fb1cf6423220a54eb85103"], 0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0x101, 0x2000007, 0x6, 0x2, 0xffffff01, 0x6, 0x5}, 0x1c) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x8010, r5, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x22803, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) ioctl$RTC_WKALM_RD(r5, 0x40187014, &(0x7f0000000440)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x8, &(0x7f0000000140)=[{0x0, 0x8, 0x9, 0x10c}, {0x7, 0x4, 0x2, 0x5}, {0x2, 0x1, 0x8, 0x1}, {0x4b, 0x97, 0x5e, 0x6}, {0x7, 0x7, 0x9, 0x800}, {0xfffb, 0x2, 0x40, 0x8}, {0x8, 0x1, 0x8, 0x2}, {0x8, 0x7, 0x8, 0x895a}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000200)={0x0}) r9 = accept$inet(r5, &(0x7f0000000280)={0x2, 0x0, @local}, &(0x7f0000000380)=0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f00000003c0)={r8, 0x3, r9, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x6, 0x3, 0x7b61fdda, 0x2, 0xffffffffffffffff, 0x4002004c4, 0x9, 0x7fffffff, 0xc595, 0x7, 0x2, 0xffffffffffffff7f, 0x0, 0x80000004000000, 0x5], 0x80a0000, 0x156d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) readv(r2, &(0x7f0000000080), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x19000, 0x1}) 2m3.389094862s ago: executing program 8 (id=12219): r0 = gettid() process_vm_readv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r6, &(0x7f0000000940)={&(0x7f00000000c0)=@can, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/248, 0xf8}, {&(0x7f0000000400)=""/84, 0x54}, {&(0x7f0000000480)=""/251, 0xfb}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f0000000580)=""/253, 0xfd}, {&(0x7f0000000680)=""/97, 0x61}, {&(0x7f0000000700)=""/140, 0x8c}], 0x8, &(0x7f0000000840)=""/196, 0xc4}, 0x40008121) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES16=r7, @ANYBLOB="01000000bdf3f40225209655398e73340328d7385b074fe7c74f71c0dd13a7b8b0448e237ad66fa94d13862b58b5108aba1dee08a8d2e2490227c80279be10513e628d65b29bb8"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000007010040"]) write(r1, &(0x7f0000000000)="b3820f655d6088105bb0a5888fdd", 0xe) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) 2m3.261017634s ago: executing program 8 (id=12220): futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dedb505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d5e02bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdc9e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705079f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff759fc677a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e402b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10fd534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb75bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eec747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r2, r0, 0x80000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000b00)=0x1, 0x8, 0x1, 0x0, 0x0, 0x2) 2m3.223999095s ago: executing program 8 (id=12221): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='veth0\x00') prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xac) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010000008003950320830302e75"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) openat(r4, &(0x7f0000000400)='./file0\x00', 0x8200, 0x48) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="2c63616368653d667363616368652c6b44a6da11e0bf347c893263e0223f4b50d2ef77f3c5667ffbb6ecdb42c5acbc433f7b809f3abba5252abfad828a5a8222ac95cdba98610d015d7b659c54d6306cfb586f7492c9050b14411f55085845a8219ef7fff2ad7202147ddd1f42c570a87aa997a0aa8a8288b68af92d37946ec3496fbf59314ea970c02ca7e2bfcb791c99ca2b0b44ee6d943692c433b4415dacec7c431c17297fb3b2d9f5e5fcc98894bc36e0247e5508167f393f1a4636b8e3cde9d7d4f3e59766e863bdeeb50f5c11676c31b4b21d4a01feefd78ade0cfdf7ce45c8cec1fd51a9c5f7"]) ioctl$FIONCLEX(r3, 0x5450) syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) prctl$PR_GET_TIMERSLACK(0x1e) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) ioctl$TUNSETVNETLE(r6, 0x5452, &(0x7f0000000000)) listen(r5, 0x0) r7 = accept(r5, 0x0, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) recvmsg$can_bcm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)=""/74, 0x4a}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c30b502", @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf25660000000c00990005ffe3002b0000000400b8000400b8000400b8001800b9801200ba009e0c730c00010900c410000081ad0000"], 0x44}, 0x1, 0x0, 0x0, 0xbc0e3338590381e2}, 0x7062bdfb7a65599) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x1, 0x4, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m47.077053296s ago: executing program 40 (id=12221): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='veth0\x00') prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xac) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010000008003950320830302e75"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) openat(r4, &(0x7f0000000400)='./file0\x00', 0x8200, 0x48) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="2c63616368653d667363616368652c6b44a6da11e0bf347c893263e0223f4b50d2ef77f3c5667ffbb6ecdb42c5acbc433f7b809f3abba5252abfad828a5a8222ac95cdba98610d015d7b659c54d6306cfb586f7492c9050b14411f55085845a8219ef7fff2ad7202147ddd1f42c570a87aa997a0aa8a8288b68af92d37946ec3496fbf59314ea970c02ca7e2bfcb791c99ca2b0b44ee6d943692c433b4415dacec7c431c17297fb3b2d9f5e5fcc98894bc36e0247e5508167f393f1a4636b8e3cde9d7d4f3e59766e863bdeeb50f5c11676c31b4b21d4a01feefd78ade0cfdf7ce45c8cec1fd51a9c5f7"]) ioctl$FIONCLEX(r3, 0x5450) syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) prctl$PR_GET_TIMERSLACK(0x1e) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) ioctl$TUNSETVNETLE(r6, 0x5452, &(0x7f0000000000)) listen(r5, 0x0) r7 = accept(r5, 0x0, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) recvmsg$can_bcm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)=""/74, 0x4a}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c30b502", @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf25660000000c00990005ffe3002b0000000400b8000400b8000400b8001800b9801200ba009e0c730c00010900c410000081ad0000"], 0x44}, 0x1, 0x0, 0x0, 0xbc0e3338590381e2}, 0x7062bdfb7a65599) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x1, 0x4, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.552796165s ago: executing program 4 (id=12800): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0xc) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x10400, 0xff, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9440}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003e8029ddb3719b62000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be0206439dfdbb690000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) socket$inet6(0xa, 0x80002, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0xfffffffffffeffff) socket$inet6(0xa, 0x3, 0x3c) 1m31.462452367s ago: executing program 4 (id=12805): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, 0x0) syslog(0x2, &(0x7f00000000c0)=""/10, 0xa) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "1839f45fc0723889c7f5877caaf7fb7dda5b8190582b216c82c2daaaad417cde7f31"}, 0x32) unshare(0x60000600) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001380)=[{{0x0, 0xffffffffffffff92, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000980)=""/201, 0xc9}, {&(0x7f00000035c0)=""/63, 0x3f}, {&(0x7f0000000240)=""/244, 0xf4}, {&(0x7f00000004c0)=""/135, 0x85}, {&(0x7f0000001300)=""/108, 0x6c}], 0x9}, 0x81}], 0x3, 0x2100, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='./cgroup/file0\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 1m28.224585639s ago: executing program 4 (id=12873): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xc9, 0x6, 0x78, 0x9}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={r1, 0x0, 0x9}) (async) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r2 = socket$netlink(0x10, 0x3, 0xf) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) (async, rerun: 32) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000200)={0x10, 0x0, "f50a27b8fc593c685d7da48067d77544"}) (async, rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000240)={{}, "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"}) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt(r3, 0x9, 0xffff, &(0x7f0000001240)=""/194, &(0x7f0000001340)=0xc2) close_range(r3, r2, 0x0) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000001840)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001800)={&(0x7f00000013c0)={0x41c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf, 0x6a}}}}, [@NL80211_ATTR_IE={0xd1, 0x2a, [@measure_req={0x26, 0xb8, {0xf5, 0x1, 0xb6, "60263df1de2dcc9f6898426edfae6708bcc7140f6f625800cec77da40d0c7ae6fac533a7f0c85a4015e5b4af3c18019a6f5f01a2678fb44118e291ad8a011900edb845ca0a860618360c86b142425957d59adb4a04b25a4da8d1cdf5a5f67c9366888a2013d9e23428a5aa24ed8e37e26430e9c091cf2daa34d2aac1704866280b23116baaae65ab4e5439bb23939d5efd0fa7334a59792de2653867962f671684cf56dd7430c1970c6885d7df8070a5b091ba1b73"}}, @cf={0x4, 0x6, {0x8, 0x1, 0x8000, 0x7}}, @peer_mgmt={0x75, 0x6, {0x1, 0x7, @val=0x80, @void, @void}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3e}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}, @NL80211_ATTR_IE={0xc1, 0x2a, [@tim={0x5, 0x90, {0x2, 0xbd, 0x9, "43d6004547f148705dc3f3e2ae642b87a66a6be066341c5f171159112a5672ceda5a2908b3b178359152163fccf8559e4a12fb680ff93fc3d43b2896ef3b8c1017f899fdcb3baf10a56e5c6d0317c00a23df9b29abe8307e3b0f389322b1abce37446972b741a4b08198c22bcca3bafa5e00ffaf62afc0cb3bb892d89f8bd15da84de0a0191bf1a45bd307885d"}}, @mic={0x8c, 0x10, {0x68e, "085f639b62eb", @short="43339111bc0c36fc"}}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x25, 0xb, 0x10, 0x4}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x8}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x63}, @NL80211_ATTR_IE={0x21a, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @supported_rates={0x1, 0x5, [{0xc, 0x1}, {0x1}, {0x3}, {0x48}, {0x36}]}, @random={0x3, 0xd8, "60a1b99350be7f08c75c3bcb9464172f5a8123711cd76e036a78a808655a0b504603e217424617104c0444ae3567846019ff9d1bf48ad5c1beab0fab11839feaa63775b3f63ca80e2d55302f6b8d6da1c7b752203ef3260eeb938b410d10817c915ba7637ad14ddb64a68f6e1fa591630b9c82ba8a03019c372b51fc7011cbccd8619fd186d45429f534c012e670f0b54e5820afc733826a7f8376593e443f4c66683525924cdfa3e88be557682b22252bc0726f35832fab10b4e1ee6184b03f07d308a16b0f3bf2efe180e3e63625944689e64c726b2e59"}, @sec_chan_ofs={0x3e, 0x1}, @perr={0x84, 0x42, {0x7, 0x4, [{{}, @broadcast, 0x1000, @void, 0x3b}, {{}, @broadcast, 0x1e, @void, 0x9}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x1a}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0x35}]}}, @peer_mgmt={0x75, 0x8, {0x0, 0x1000, @val=0x81, @val=0x3, @void}}, @perr={0x84, 0xd4, {0x1, 0xc, [{{}, @broadcast, 0x8000, @void, 0xd}, {{0x0, 0x1}, @broadcast, 0xe, @value=@device_b, 0x32}, {{}, @device_b, 0x5, @void, 0x22}, {{0x0, 0x1}, @device_b, 0x7fff, @value, 0x1c}, {{0x0, 0x1}, @device_b, 0x36, @value=@device_b, 0x15}, {{0x0, 0x1}, @device_a, 0x800, @value=@device_b, 0x1c}, {{}, @device_b, 0x9, @void, 0x4}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x3e}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x3a}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x16}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x16}, {{0x0, 0x1}, @device_b, 0x8, @value=@broadcast, 0x9}]}}, @chsw_timing={0x68, 0x4, {0x305b, 0x1}}]}, @NL80211_ATTR_MAC={0xa}]}, 0x41c}, 0x1, 0x0, 0x0, 0x840}, 0x801) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000001880), 0x4) (async) pipe2(&(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000001900)='memory.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001940)={'ip_vti0\x00', 0x4000}) ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f00000019c0)={0x2, 0xffff, {0x51, 0x0, 0x1, {0x101, 0x3}, {0x4, 0x6}, @rumble={0x5, 0xc}}, {0x52, 0x200, 0x4, {0xffd4}, {0x5, 0x3}, @period={0x59, 0x1000, 0x6, 0xa4, 0xe800, {0x7, 0x7, 0xbf, 0xe6d}, 0x8, &(0x7f0000001980)=[0x5, 0x4, 0x6, 0x0, 0x5, 0x1, 0x0, 0x7]}}}) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x11, 0xffffffffffffffff, 0xba338000) (async, rerun: 64) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a40)='/sys/power/disk', 0xb0081, 0xa0) (rerun: 64) ioctl$UI_BEGIN_FF_UPLOAD(r7, 0xc06855c8, &(0x7f0000001a80)={0x9, 0x29fb, {0x55, 0xfff7, 0xc478, {0x560, 0x9}, {0x1eff, 0x7fff}, @rumble={0x52a6, 0x7d34}}, {0x53, 0x4, 0x9, {0x7ff}, {0x6, 0x1}, @ramp={0x5, 0x9, {0x9, 0x9, 0x7, 0xe}}}}) (async) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000001b00)=""/155, &(0x7f0000001bc0)=0x9b) (async) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000001c00)=0x2) (async) write$P9_RWRITE(r7, &(0x7f0000001c40)={0xb, 0x77, 0x2, 0x10}, 0xb) r8 = dup(0xffffffffffffffff) ioctl$FIOCLEX(r8, 0x5451) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000001c80)={'vcan0\x00', {0x2, 0x0, @dev}}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) fstatfs(r9, &(0x7f0000001cc0)=""/231) 1m28.22161977s ago: executing program 4 (id=12874): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000080ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000de00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffff4a7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3fe74df0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c5b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x1000000000000080, {0xc, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x4, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20800, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006340)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="45ed273afec984409aeeaa7cfac6ccd1c22f2b6fa619b6523e551e04f818f1a3758f296d52ef951f217db065c3ff17855584b13ed1c11b5e56546ad545aa5694002199ee85fcd9c0415e484dc918780a523c317e0b664f97fe518edcfe7302d06b776d6c62232adb954a5e4282d1fdddeb921c850e22596dd4073027eda178199d66bd216fb4553fc94a34c185cdabc11b03eacad889f3154e45a6784b3df09afaaf87c1220f7c92e284a5c0136c2a69879541195f1be215606fd944e48e7ad5d8a1b04f867f64faf0c3ba9b32f293f048abfcb3d27afb0b55fdb0399bf40e79cedabce797155436e6f323d0b8ce75422f23f5cea387dbc062da43b10be2316c1dcd718558a5c34192bd8c7de59f5bb84978f3f5a3c7559c3837a16efb2c9a053aa973a8bbf4deaca853729f1f0bcd62f4f3038828abba197c385c05092e640244997f1750d7f2c093ec1a681efc2f50c52605d401c38bded7b86e3a555009cd56fc1712e6b0e673ad8235244c2eb74e12342b4b7919c0d62239b2109c3ca847055f02d148a77d0cf3119f2ce5a12dbb177b76e321d583a21bb259ad0eec8b6c28873827782ee3da7f3d00ea3ea13e275e7a27cd1a9ca70d225aa378af1022d206e4bd0bc5473e4b81f9940a75b11553905db10996362f9e79c88a6f7b2e67dee6aa388ce56fc921c2c5631fb6c593b9cba3d4c6d3a4130f4d91d52537b6333f3df0d439bbdecc3900dd77a7f75bd65d5d48cb789f4fda34e5757462dcb15e6d8e8259dc56d5d6da4755df0261186baa998feb592d4d47a1c8ae416647271b40fc18ef084fc03747e86b4a1272f247397a90e660606f59491ffb951c0225a4743ded60039d860426cd813469012221cbfd816bbe2c9c0224c8cb872d3c3dd12ddd3ba27e3b0e39e153d29f7610b4c1fdccb79ed4936306d4615ee7e4d63c362eddb06afbe0fa95c501640022c687f6dea95a05448ec7c5e12b0e1afe5e4172a99ecce689f044783c57809d254aaded0e65226acb2d1fb51253b22182aceecbb2ba4d7f21bdeb76f8e9ad8a0f3d27ef83e1d1751015d8851766693eaf5da6608e695265f6d54f37f693f251e9916220bbd57e0934549df32ca9d9225b367130afff0e9751f70349cbf89f10a75570a2a7188b352c5652e02bd7f78f7bf670923a855676826f81842e94ec7ffa35bd694a63f1e6928f2a8199212b1d56f5a35f6406ec153e0624b0ec06ac787bbc5dddeded31e304cbf3223c5e6ef030959b275c75702a27b20b48ab783b6aa7380a9fc620e1c3cb29f627b51aafd8a9a475b706974cceeeac852399c07bc606e1058cfb54e2856bbf6cd96c7d6f9f5673cf554ddac16decf4743b72646033672c158f84deca185fa3b11a9b7609913a61f2f5f36d67f4b373ab2ba824f2de0624daaae22e3031a0f6418e92ab425b98fbc993180b1af9ed3ef8b2045566547c509bcebe08901f7f937c5d5a51376b01f9b33526a09289cf7b93e975263de4980d4bc5c00db0172d8826a2c294820f8cd5bc4e895251171a9b2073a3f13b1745408a2a5dde591c4a278391d1c06a11b7b069fda73a372aa2705b64827799d314b1cc01bdacd164b48de15895617b0e542d1bcb6c70460d39daa1ce69923d7152490146c0eb61c95774faac1159b9a2b2ce534a9cde10e9138b603e0f2164c24a9becae31967dac2f5e05ce43955698c92b857acae8b5e622f1c393a6eeb1d8a078959b52cf467f9989f799043eeb8d6fa5fe426dc08148546ddc936e6e157fa1ee23efc1aa0b3c8716797f8c070cd7b4425a088793982c129b8b068ff6ab652120f2a73d73115e87b503dade127065b2bdc2456c8bef1a10c40bb9b4daee5cb5afe7c19a480b5eb6ee30a53c2847c09186d9fe7f0e8cd1d519fe1f8c701f914cb3c540305ac7612df32038d90c2fea74eca01894b04350f1995f7924c31254a219d124d225436c7f4064880d5c99f50986e17b00cb44235bb8d6ac5035722363c5cfc3e3f7a572648bbacda56021b867c3db3bcc1761e439d9f82841fed8b4d770389dad8dc5a3793d0dfa603b3ebbb8eefa50b51eabbbb3530ef1d5ef0ed15427097367fbcbb9b1161400f215dfe26d3b9ff111c2f96e32a5d2a2123fa892c67a45c4634f844c724a9592ae1e46be2417a52a860d79fae80d3a133f08ce13b8bacf555c6a1804eb7e74f884ff9502d8f1753f82fee0fd52fcf1763e3e45d892c84d462337a44fbdc2dfa72fbe6c28bea7a4da2f013dbed1611ad9ca2e064ee46b31bb2db0402dc817a890cbceccb78d1647de4b4a53b5a026a6258d3f60ac3a10ba5f2124d0c2e36ef6b9ca5b2f134e564ef7c565ae13e71329daaf4b413103554ba288b1e271ab825b9941d344fef820135815350ec00e85ff5dbfe07766f9f2ee39192533ab0cbc6acae9ab0f8f65416ddfd8e5b86714d5a18f71f90f526c85f0b8fd8682604894aca45351fd63fe6ff275e3ad09059353e47d922f86322b6e8260dc738c50e22c51e4fbcce25b611ac4e1a2733997d8d289a5b312e1915910c5d7c103baa958eedc7da895a0973e3e34993e11503bf6ae121be636d7357a6d8dc80ec97e7a864a96f5b42accb57d900abb06a480f8bc9a564d15443d0e17e29666853b3ec5d44ae0a7e0d706bb913f73b94ec5dc52c9531d37877733edd87fbd84515ca8db6ba4008438fea5136afc5627ea113fe187ef27ab93b9b8e4c33518e83fd0c3650218b86502f60bd2b8dc54cbb01583b88baaa2e70a606590b2be6043b2dd963bb42ebdd96aeecbec52990b82ea5c7625456b368e8efb00b1a9366640051b5138a7795eafec0bef19d84e00f18341aade191f41fdd9c5746128ce33d66c89206e914e218addb3e8eef507aa4e773e57c629db5592e2d480bacb9ab8726f6717b2d5e5cde9e0f1ce997f54617af56dbe6dfd66e0b26cb767f4be48b19c9509cb02510aae0430c61844711a5e9e8b0737b01f59eca8355dbc932fc2556e0a8af0f243512c046b5b026225bc0c1c73fe3526d30e5e20afaeeabe756095d02366c9c7d13e4ba1361c790cdf4ebe3f83325afbd75c1a3ec37dd637dbb843795e8e60fda366965769ffe2768b670f47ea7d8e94c61cf283940944f03eea97817bf1434bcf333b6db6d618f2a6fa9cac8d069337615b544b19cb9b05fd0df92da7ba1f59933c2401eabd0f4e08f72d2ba6b32f394bd1530dfa2d3cf36f24f189a266b3556175b882d01dc46d813c27490b7b4a2ef390ace06b551ae2e1e341c373abea638293a53e3ef164e5fb397a905828cf2b8876753ee2f0443b1f6f0c5f0178ce0601a90b33046a1a6664b1bd954a9f0f5f5536874134b7f843b3f37a3a1117571add703de87518b81eadf4a4f7e24421c9c5ccf7e0174ced5c73eb94ce1f2ea88d15b08c07b6504629fda9fad3e274a2c076e35932d70e52f3796c16cd0901ace1456e52cf688f3353c7e6734a1edf871c97fab3ab9ca60df95922cd9483284263dfa7c4d25a9ac4d52fb2a3e64758430d9fed6bc2e4eac4f072647fee0836e1fedb62df8c4abede05025334e43ee69ca749bbe7b8baa3a1d28420df6dfc69183152043656040500f5cfc3efa29f261e3eff035cc2e335ae772be280da26a2b7ff5db16916ce36416d7bec662b20ead02fcfb82233393ea30d1b617a7facaa6077a4e626614ad2091d891f6090a0ab56e72642a6e4f979cc423598872a1e6a0da0ad76c065f41da6ed4a5e41f27969dd81f633031fbdf5d283b86566135ff9f6f6ae92b5d8d2e5e66cb1d4668a3bde9ba5f4f562f9be1e440571af458fddad76f3ca25e78af8f053c40dd80ba1d440b1cc3a3117882c252363161c547ed40fd1ca6ec4fe1e079f0933b6653f4193b84e15723ec8748144593936c583c74d1120144bea8fa1df5df6a33e30a402216331b95af6a0a30920f5b9bd45cc93739ee3400ddf1350b79d192d399367c9ea8bfedf4e4488cb5f48f63edf67446b93e372ee713b701399fb285571c88e0ee0bad9195ab1fd82e1693b3e7b75190de64043646cf3ba0df1488dab04498d2033dbe3ac48f8f3208e86c579417aa903f65401b85ddfc57702bde74d7e5ce193a6689801305a562bbb0fff87d18b21b59d63cd60149b71411021dbcdbd33f6bf3b2f257f6d23d198c8162005dcbe34680209e59d4e00286764d884a9b62f448f2eec0dcc2a51661c42f03306b888121db92c5b8f3c771a8ca0e444d057ba1436c2f6d8979765a4166bf4fb7c1e4a345e6f3b4664c5fe457ec4c76d56e33098653cefd196f8a41d67b03251701055fead03cd447728acc509333d74bca03190eb72fabb7a3ac08baff7c59672500728ebf12deede871217e265241e26f0824d8cc3d6f011dbdcfd55fd5dec9ab9f0b79744c2b8b57b393d4741c06f3e92af5957f382e78c2053ab75b0931b11cbe4b68a8a4c0c36b17f4ef8268e7b953c301c492a159201bbbaa2a8acb035132ffe3607355d67f6b39a702562fd7d7b7337b7429f6e939c1937cfab80b42ff72f37b2a2699ca6ca6594841b6ad233aa253d4ed41459f10be0f5e522e0301ab9413e5962fa3c8cba42eab75b39e8de7e64fa7b8c8697ae51c23f97d7827268fd36becd7430b9ed862a4c3e76fb5161ad5184d46f3d0be03b5928f8049c09cddf0629c07613b2e39bbce02e155703f65f481cf7d3eeb5997ea83f35f12f56a18bd9f4af65fa44c5293e39df934e00f94dd88f48bba34043611c50869827bf5d55eb734a9b9de3eb3bfc6a7edcb3f4012bca5df2d8fa767b13ab1cdc4768367a2d835e42ccf5d7c2f56c33a46312cac054a533ada115882b5a7a394aae411ccd5afc819cb02c9c04043c2ccd3ba4d405a6dbbe0c17c10f76c1a7b01d528f9d3bf8f08d449d83e3d3ff8fd344c1f40e5f3340bd58e57d4d48eec259b413a22f4b7525ce41452915114eeaa56ce7dfc87d991523d2ffcb933dbd159916726b386faf0986af19ef53f8c3ed3481a7f95e4025302c7d09a355385baafbe4068d1c573e6c85edd77922a82f3b82905cdc21b3830e4ab8ef63207e0ded22fc70068a0aaee75b39b0ff4944d6f6c3ccd5d67326f845ed2b725bd2db5c8fe34f4a884a7d17970deeb8f6eaa4096061cf4a609516408684d9868a6e7ae3df19d22e0f04641280c90bf6a63feda3c070251085ddf31a5e1449b5c6b051fdb5f8e39b29a93d105ccd1e9fce0466b36d921cb0d25f42bddd4a0d5f861daedfe13a81cb99916ebf97935551d97ac4f1fbe5f75e12fedccea749e438206b70f4533b49f4540f202a18f647e2318a83f96e1151daa11dc588a542186b5bbc17cc088d4e199815dbad984c2a085d3389f05785be786fe8b4e3e6c1c94f8782ef11fabddf025c28556f5de2cee7a5491f9def2f174fd9c0c77c7cbb5a01306b2e882420a4718cf7dbf4c268adb32befdac1f8a47d3659e4086fa862e7bf48ae9b07168d9a4f473f705db713625b2b495905a8cd594b9ce9f7cf9c6c7d2bc3d725fe3158666b532d751c6946fbec396d0936c40e2f29320563ad2e789cf9ac40bd95e3f56255662668cc0f0e7944f98bda9036958b319c22f616a0a489c2e011658303f32a446f30b52e3128e5aa437258aa4a5f1734c09abc391d8a6b50c7558d700dd82d60948d2b602cea15da0fe260dd27f79e5bbe1464c65ec5975d6a5de5fe33b8c092f66e78c10a41f244085fc053f9d6c8f2ed9ebbb66ba563ec17d3f431a175d84d16abe1a4702b5e4d335b827fe53e7ed411bb5c952db5c84c34ee38e2f7a442ba7e2435ec4bbd01831641ba192e910884390a90f0179468784669adef5a0e17e86ec99312f6587bd6134071893b983594ad8765a089351d05b163a504018dd4e668f32864548943f64e6c066180c2b4428d07b1836622365e0cb87af659c07f35b43cb44b0867299c43f117b459afca39c98d1faeba3a80d517d4e86a7386df137c1a3a8d238e5d80ac841ac5e5d23e8bda85713bb30baf7019bd5638c41c8e263924ac3d022881128fb4f94de033e8b23d88a78a74769fdc8a61e016d50b92c804fc25c1937c656661d11052904f6892f2392c560c17a17961b63fa28e7aa161835c5d534ac1f63d67dcc5f01799d3eb4cf27989ed55647eb9a44fd5ba2e33d2e431e5748c7597f9d6b7e8a6f3487ee4d844addb2f63295c402e0ec3a67caaa09914b7293d429cc5abd05a0575198787d122ac7ad3bfa8035903526b461b9a91bc02f7c283581cc34ed001953318dcada72f70a41faf8b73627cf52b822433403968fb74ec14d6614ee77a729bd7f6d819bdab5daeef27714adff82d41f4fe117839ead7c21c96ab1e70da9038cdd27cfd74e9d7faa0b92157d2824c1d4b3e92b94fa1db81aef7e9dd22f41a47f345c02b9dd2dab59e212d524d4adc4243894fd9a555b698edbb996865f217ab613c2feafa12c6651d3e4577c7551446ba93d7c2a7685e7ef1c2e4ebba618a01a5af62fc40957addb612bd92f44cd2c944f968787852a673032f73611a8177cc5989f2e749f7433a24d20257bbb51c5fb3db75535005b71d21a831bc008107996f6f973e55cb23cea12fb499a001fb7a4e679e33b2c71da6320ddc5fdb8237aac5f0ac4c199824784ba450b287b2f93975d35bd2dd1cbb622033a1b41c9523bc8ba96c4aca591308558c1ccbfbd7d581b3c065a2acd0a1b52ac63ab2bb6834c67788ac99deda740cdf22470fc474db1d0db43a6f25d83e613d97088d5e34030ed28dcc996ad308feb70c03a158194edbc628fafde0e8da41de3b651e6a01a38c0c7d52dcf8540ff119c2d26d50d0669d8b74b84925883554c39debc9928d3ae785466d5d34e21b692e62dca242f225a690cbe987a87d98a25ec8a1728b422d06b2f736f02002c71d13dfbad5423057825f218eee0d0a8bc09f8a34d4680e456bc746cdaf80a711cfbf9b0ae8fca210823bd0f2f49ca815e5c4de97905e9119944e3ab391ad3bb4720ab1c680aeb13d65dd97d4dd328d249910457b089b2da641b859ab9f7fb94b1f8b7c73cfc3df3ca0662b428002f49656a51a38ec26004dee093b91884e27a3615e2d203e0427ae4f610845ae90a15ecd29a371181159a8f4f9ba5c6ae0caf7edecb1f984838ab7284112c73495dfbf1cd4195aeb1ccbb525d29f41b7a83d96ca69508544179743978b1ef58cc7cf162c87c4e14348e008347007722c32fc82d50ee4f5bd4cdfaa852517ffbdfe0f64ca61173ffe975c3a18ec51f78659833337c48b1befbc6884708f01d0dc45d79bb4d9ac471fc759dcb8bf8e0b8900d370a8ffe402fb297c5400ff9f097518de260391a387c44986a4b5329dcc328a1685cbf782718bdd315a5d8eb6b22ce454afb7a17e13e002267d96efcf7f1ed576c8496c139c37bdb78c591d2dacfba436d66dc8bd397451ca79ab0ffe6a974c26c238865ab4d8ee217b9b55a86f444f6ccdd66e3a8cfbc03cd1743f0d555e46b519a9727a55f8cb0a931dc7548c39879b2c17208e65151aa74642d1ae5d928da9e714a8f0e556c3f14d69e63842ee874af3c091a30241ac4b5ebb2037b7d4663bdcf64ecfd4a5b823fe15e8ab779805705ec06c167153f250ee7d13f1b16a90070d1cd665b99818e5380141e64ed76f34c511722aaa85f160f591ede2ddc83055c8b476ab1a97ef2ef7672d78d7311135273346eaae94886363da476dfd3d57334854656e46c9b76f2d35811b2475b022b9e49399f4fdce0a380d55c4a7d32fab72c2975b53551159a8dcb77ebd8c28603767d3a0e70445032254a0ebdd2ca3b6059608d2a53516614cb47c02f20640610b87161deb126a07b6c9d5093a1c8004ded88835bb3bacfda2ae0b14ea88ec6b4f29efee83f025714c4b7772f30cf2d3bbb894945e29f55747ad6e132f5f8624008d2fe1dd0b5710df56a478c090162bab51eeb1e107685b9bbfc365e54775c5090699bfe7e5ff6018f8d044155762fc5e4a71659bf5dda978308fda2647495023e1353050d563ce0b0aa1829ef71405fe2e61f86ec21d35f880afe36ea5984782507957ef6278f862676f9fa50a2d940b36173ba8fb7433e989f2472afb4cbcfda96ba56cdd26f187198678a27ef8e35a7e70af88b166527bc80e25a1edaacb604b6fdf7b1baeed11686bc307be609809364cd59b11819a0422f4a960f50bc9ba97398f97efbcbb177e5248357c1dc62d020a88a9c844c565458088361e712fbc80569b16bd612a94917e8b32bfffb4b4bb3c8c2540a7b2cb6978246e9842c9418375cd08aff36e0257abd8ab7b85495d87e8e3bacc2dd2ac35ff13bc10fde4011a8c7bada24339cfdbcc19c32cfc8e6f7b80eeb8b2f0927edf4c5d7e9df38f137fd8d77bb69c24eb49deed6db4f13165ccd21a8713c6b137f142e371254108c68fd264391b0e7bf018b767b7d5e0743dd11f4efda786770e4b12e637aa7b8b54784c898f9a4b62b0fc7ba3b1bb035ad8d40e243e85c25ef2c800d55011b2bdf4cca81b347a115be469aaeceed142737fd6f78a766a49a5553fe042f419f488cc4f20fa6a2475e5754b8ff1e7b829541d20057f594e5ee9f0989a77bee59fd7aac19cff8577d27cd2ba0a275c65cae3f253dcaaf127170a074c103c185a20361b885b24906b44ca076b545551114f485f49561a031e113f237f599edfebdd91d074a4d3f624d3e49c823e39303c14dbbc8a4f47b65aa0e5e8dbefb7a1b0984bb85e6903dfde243cddf55240697171ae47a8133600700de4d1595d0d4df3d9f1bf95adaf26de24a507db6903738750ec59b441b46ba176a93bb47e9dae2c9aea7ad6910734fc089e6fde8f283e9aa6d9d6c5dee87f6c44c39240d7a1ebfb0c263b0d055ff9a253cd68934b9ecc6517b0eb56c517dd51af09db944d19918619c5c3f92ee6edef63ab0dc5de854d22aeffbee48ac9f5de575e6f6792baed337427fd89c6725d7f40e50277113cf5b6c8f9551a7024b0ebca4e44e1dfab1406302a2e613257c5a0152972720f18fa78f3296c685df735120648edfc15b54b5cdb09df99d9ed0ac0da29be75c78f1afdb20a94dbfc4e9b3be938291c0b7458a16cd05c132565051884357767662177a0644d07f5ea8f448690efa65619c1d9ac3bb232bc761be6f3de103b7d320889d33c3678a778677b53b0d0da07ef2613716b5206e530ee56aedb468407cd41caabbb0a65fbc549ba248e867ebc3c0ec53129ba59ae9d599e1b912f0d702d4455dc2d71f30e288c73c0538abfab76bcc30e6ddd40bdbbfe32ebcd9f2293fb05ee72fb5696e3472b8d736671f71fac1630c8ae02770b6d19644140075aea0b4476f08e4dfb0cad04f71fdd33ae034d614da773bdc6fd36a59fc246aeb7efcdce7d577ab00125eba9c20f456a6853b50431ef01bf798d62c71baaf77b947dedfc6d74b0f929e519323b68a9cbc158ed8674bad45ccc30da81c66eb7bbf3334467da23855e2438bd168c1c228b8187a37f7c97d780d563197bfa8951985bfaac6bd328f49bfb88d77a3af833018f951b12f466640daa1d7b6f8c4f374d5219402063274c28dc562de648f793c32174bf6ff263f77468cfffa427de606c7bd1fca58036e071626ce59dc9abff63896a7e7a382fcdec06a1be4e6a97665b6628aeea4414fac792817126a0a9940854a030aa32895c752c27eb7b279612d5508747eab0d7a285c855f3ec86a805d247328cf63f8217ca5a006ba7a64bed46c6f9a11ac764585f148b1413f64ecc224204085f54961c3ea92f0cd89825bb532f46d90227dfeec0a4045658a6730967e22737db30e29bae82ef5876b27c4eac43d394e23c3db329773c558a6d90bcfc9dd3df596e0b4db4c0578f83b6a14595fe909f9ef770c143e8335b4f8d01d23e9471b0f8c7ae31d434d575e13a1421f1775724360fa671f8e8a66c16aa7588616a5e8e99c1cff8a83b02bb32fecc2c0a2b8895361056b0ff69535e442ab8ce07c39592d652bbe9132dd888cc90a8bb3be0bc73074d756546947f093aa21b674062564fc25baf6701acc26fc8d57bef191021e2fb56ed93c271f170a59fb61c91918c950d1bda91fc3466af910817d812437576e2d26cf30ad8838dde67fad6adf23db665283442981ccf8a47ffc4eeeeb53e09f7d24fecb222f15a9a4cff97b272db5c09cbd6e266cb111ebb9ae67a6451ed6badcbbe2f97ba30f44f968faffcaf9034e289b0fb7a27ade1f44db43f74ec6aa15cb0e8bb4fdaac005193fc0cade9b395d18df9303bd14bfb77fa857c67bb826d1e6c78a85bb94d08b149e3e0e34964dd99f0e4033e28c228328562317b95afc568bc472d1ce0f919484e2158ad92cf0712cee7d7866283ce58ce7c502a02700065fe4656e49b0552c2c4c4aa4ad0fccf676eb2830f630fef9589da69ba5aa376b2e9a8d84457daa9b8c0693f108dcf91d45e4d61fc9171959784002398628e321544fc4bf4681903783d087a617dc1efaf11a059faab96d2f876cd553dd6a028fa7923fbd51a8ef62af094cc428ee6e83b812ec519da0d6c81305fd4e739bac60de06e5babbbbffea4639fb8c296dde4ab30e3888a9826d89b9b84d676f651abfb46e10f10053cc1d84219d68279f5caf5f3cd26657ee68599774e4f3cf3c2b6bcb17cb9d43f28a4a1ea03ec5f8ef35d9e0107272a4b12c4ba2e989023b7de4619d6a40e7b7b7d4d96c3425fcf4e740833730afbee74707dcfea93b7563e326eff83902bbfbabdd25c5aa0bae49bb268c814301b8aba11e68dd7e6b521a1f533df0ee0aa6bb5d0269a0b113bd318e83d3881e2511446130ca884ed736a992305a12a0f4dca4ff0b5c04f5307e62ef56484d02d0f79cdf0e69421f8435b1ef0c93d2476e6ed79b4d07413de0eb893256284aae125a8988957cba5dfaddc6371e13e2914f1370b4ab30c384df06674cfc8e1e7726a8f116a5107bc3bb2fc380cc0b61823ed610e250540957131c8b4adb6d330897a2ce08f83c09c31078cc083ec9c45df804957d980d1980e01c21750cc829394e285e65de33e8865673e4dfaa1295c309ee15b3f625a4add943fb4ecc0d0cad21e35295d729b4a03b74c3aefd1b91c2f59d59a74c211ccf641a00ad403fbf8b3cbfc0bb635cde2d607766609d0d541bc8bd5d8c3c33071b8caff867e8e24c3121fd32ede02abfd3d8dd082de51f97fafff320e5f5b5acadd9b0639a036d4880196af4e1e49833ca07d09572f5b63ca2712ab7e20b3ab58cc431458ed5838efa7854afc684a5a4f7d98695c0ad74c2d83257c8241411735e5f03aabf545408c8b1183a8a0e2370d5be553f5a6e40dde3367d3a815e38e0f379d2fbd27bcd157711d99f7e11d7b0eebaf0769dda830f72c5e94bad6ba735469739672a9bf6dcb0bf95a56c45bb1306df63b7ddd5dadf1ee409e44e50246de4128fd1c31a5d10ce5bb370834dbfdde20548b9160e807b2d9e22472ea35b5b42085304104e5c4864395d8bb1f0e39601c323462c191b578b1870a24af581fd1cf36956ac3a7d1dc68e7d7e79d7df2c801db81decd9864c8d18d9a517c74c6ee5c", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f6e4ebc0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@local, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0xff}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {0xfffffffe}, 0x6, 0x0, 0x2, 0x4}}, 0xf0}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) ioctl$FS_IOC_FSGETXATTR(r10, 0x801c581f, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r10, 0x541c, &(0x7f00000001c0)={0x6, 0x1}) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x138}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040)) close_range(r6, r7, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RCREATE(r11, &(0x7f0000000140)={0x18, 0x73, 0x1, {{0x2, 0x4, 0x2}, 0x1}}, 0x18) 1m28.060491273s ago: executing program 4 (id=12875): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x2e560) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="1201500202000040"], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x2, 0x4010, r0, 0x85b83000) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x2, 0x4010, r0, 0x85b83000) 1m27.744933729s ago: executing program 4 (id=12877): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1a, &(0x7f0000000440)={[{@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x41, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1280, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1m27.739960619s ago: executing program 41 (id=12877): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1a, &(0x7f0000000440)={[{@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x41, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1280, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1m16.842956659s ago: executing program 1 (id=13099): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x67c700, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x80}) ioctl$FIONCLEX(r0, 0x5450) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x3, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r1, 0x5bc7000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x67c700, 0x0) (async) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x80}) (async) ioctl$FIONCLEX(r0, 0x5450) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x3, 0x0) (async) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r1, 0x5bc7000) (async) 1m16.827239659s ago: executing program 1 (id=13100): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x3a8, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x273}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x462}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc4c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x874}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3866}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6508}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x212}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfca5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x712e}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x66, 0x3, "6255832c1a74621206f8ffe807bae09cea7c47a5521473eaed1d9d6c8c5fcf150f421edd83cc17561b774ac53a15a689a562a5b4ab0e72e150831951925e58a9b0ab34a62de189ba91b3cec8d45137d41e72e6808cde4980bb7c0c28318b1a5e018b"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd97}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x2d, 0x3, "2b0430fb3f94786a7b7b6ce200d094e93ec87545fd754a2624aa78af146b524ebdb4300528204903e0"}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "6e64b06dac7072e85c43b6d29b85a99fba5f5089b6ee3f5ee4d141a1b1cd29a6b2779d84ebed"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0x6, 0x3, "ca47"}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5cbb229}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff367b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (rerun: 64) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5433, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') 1m16.76767815s ago: executing program 1 (id=13101): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1c, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xfbdfd840e2a0afac}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x44, r4, 0x300, 0xff, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x23}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x1a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48001}, 0x4000040) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000340)={&(0x7f0000000000)={0x1d, r11}, 0x10, &(0x7f00000005c0)={&(0x7f0000000240)=@canfd={{0x1}, 0x88, 0x3, 0x0, 0x0, "d6654fb393eb970e005e920024e8fe45ae01ab710300000000000000c6b6aa275866f025eecb750a3371571c516f4d7ec48f1dbabe3172939f52577f72fcd45d"}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x80) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1m16.76714024s ago: executing program 1 (id=13102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mouse(0x0, 0x0, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000140)={0x3, 'pimreg1\x00', {}, 0x8001}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES64=r4], 0x28) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000080)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x108000) syz_clone3(&(0x7f0000000340)={0x801400, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) 1m16.692965902s ago: executing program 1 (id=13103): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 1m16.632597403s ago: executing program 1 (id=13104): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x44c1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) preadv2(r1, 0x0, 0x0, 0xffffffff, 0x8000, 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x800, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, r2, &(0x7f0000000140)) accept$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x890d, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000180)={0x2c, 0xa, r8}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r9, 0x3304) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x12, r0, 0x0) epoll_create(0x80000000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000008c0)='\x00\x00\x03%\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\x01\xa23\xc9\xe8\x8f\xe84\x11nj\xb5@\xb9\xc6\x19\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xac\xac\xa6\xe2\n\xdaZsGhy\x92&\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\xa2\xecG,\f\x89\xc6\x12\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc2U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\x85\xd1\xdd\xc2\xa7\x86G\xbd\xf2\x1d\xa5_-\xb01\x9e\x18(\xb1;\x98\b\xf72\xa9Y1\xc5\xb7\x92\xc8m\x00'/749) 1m16.587427774s ago: executing program 42 (id=13104): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x44c1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) preadv2(r1, 0x0, 0x0, 0xffffffff, 0x8000, 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x800, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, r2, &(0x7f0000000140)) accept$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x890d, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000180)={0x2c, 0xa, r8}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r9, 0x3304) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x12, r0, 0x0) epoll_create(0x80000000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000008c0)='\x00\x00\x03%\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\x01\xa23\xc9\xe8\x8f\xe84\x11nj\xb5@\xb9\xc6\x19\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xac\xac\xa6\xe2\n\xdaZsGhy\x92&\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\xa2\xecG,\f\x89\xc6\x12\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc2U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\x85\xd1\xdd\xc2\xa7\x86G\xbd\xf2\x1d\xa5_-\xb01\x9e\x18(\xb1;\x98\b\xf72\xa9Y1\xc5\xb7\x92\xc8m\x00'/749) 1m7.9821754s ago: executing program 7 (id=13216): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r0, &(0x7f0000000180)=""/229, 0xe5) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x20000}, &(0x7f0000ffe000), 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd28, 0x25dfdbfc, 0x1, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x8080) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) r5 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r6, 0x8, r5) exit(0x7) sendmsg$inet(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}, 0x4044881) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x9c, r8, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0xffffffffffffffcd, 0x3, 0x408}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x408d1) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r10, &(0x7f0000000040)={0x24, @long}, 0x14) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x28000) ioctl$BLKCRYPTOGENERATEKEY(r11, 0xc030128a, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0x4) ioctl$ASHMEM_SET_PROT_MASK(r9, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r9, 0x66053000) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKALIGNOFF(r12, 0x127a, &(0x7f00000000c0)) 1m7.078936258s ago: executing program 7 (id=13223): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @local}}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 1m7.024159638s ago: executing program 7 (id=13226): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x82, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0x7, 0x3, 0xc32]}, &(0x7f0000000080)=0x44) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r2 = memfd_secret(0x80000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="000429bd7000fbdbdf25070000006c0005801c0002800800040054000000080001001e00000008000100150000003400028008000100070000000800030007000000080001000f000000080004000f000000080001001b0000000800040009000000040002801400029608000300030000000800040007000000"], 0x80}, 0x1, 0x0, 0x0, 0x8001}, 0x40) mmap(&(0x7f0000019000/0x2000)=nil, 0x2000, 0x3000001, 0x12, r0, 0xca639000) 1m7.014972638s ago: executing program 7 (id=13227): mkdir(&(0x7f00000020c0)='./bus\x00', 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@userxattr}, {@redirect_dir_nofollow}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 1m6.92881108s ago: executing program 7 (id=13229): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000000)=[@wr_drn={0x6e, 0x20, {0x5, 0x80000000}}, @wr_crn={0x46, 0x20, {0x2, 0x1ff}}, @uexit={0x0, 0x18, 0x43}, @code={0xa, 0x6e, {"b8010000000f01d90f01d048b800000000010000000f23d80f21f835800000000f23f866b843000f00d8410f3806e1b97d0800000f32450f01c266baf80cb82fdda28eef66bafc0cec66baa100b839fe0000ef2664260f51ad01000000"}}, @cpuid={0x14, 0x18, {0x0, 0x6}}, @cpuid={0x14, 0x18, {0x0, 0x3}}, @cpuid={0x14, 0x18, {0x400, 0xfffffff5}}, @cpuid={0x14, 0x18, {0x2, 0x1}}, @wr_drn={0x6e, 0x20, {0x5, 0x8}}, @in_dx={0x82, 0x20, {0x2bb1, 0x1}}, @code={0xa, 0x6f, {"f3420f1ac26467f22641ffd70f20d835080000000f22d80f30c744240005010000c744240204000000ff2c240f20e035000001000f22e0c46189eab0220f000066baf80cb830c92c89ef66bafc0cb0f4ee6567f2e41c4e0fc72db6090000"}}, @wr_crn={0x46, 0x20, {0x3, 0x3}}, @cpuid={0x14, 0x18, {0x4, 0x4}}, @wrmsr={0x1e, 0x20, {0x235}}, @wrmsr={0x1e, 0x20, {0xa7f, 0x5}}, @in_dx={0x82, 0x20, {0x9591, 0x6}}], 0x26d}) (async) r2 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x1000) ioctl$RTC_PIE_OFF(r2, 0x7006) (async) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x2, 0x1, 0x0, 0x0, 0x8, 0x3, 0x7}]}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x18, 0x31, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff1) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0xa03c0000) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x18) (async) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000fff000/0x1000)=nil) 1m6.92818679s ago: executing program 7 (id=13230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r1 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffc) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x10000004, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x5, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x5, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x81, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x3, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d04, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x1, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0x147a5000) (async, rerun: 64) madvise(&(0x7f0000273000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[]) (async, rerun: 32) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async, rerun: 64) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async, rerun: 64) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) (async) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xb451) (async) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r9, r0, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)=[@request_death], 0x42, 0x1000000, 0x0}) (rerun: 64) 1m6.895811901s ago: executing program 43 (id=13230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r1 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffc) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x10000004, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x5, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x5, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x81, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x3, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d04, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x1, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0x147a5000) (async, rerun: 64) madvise(&(0x7f0000273000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[]) (async, rerun: 32) r6 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async, rerun: 64) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async, rerun: 64) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) (async) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xb451) (async) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r9, r0, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)=[@request_death], 0x42, 0x1000000, 0x0}) (rerun: 64) 53.815220583s ago: executing program 5 (id=13477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0xe}, 0x8, 0x0, 0x200, 0x400, 0xcd8, 0x86620090}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000400)=""/144, 0x90) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x64000600) syz_clone(0x80801600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xee00}, {@in=@local, 0x0, 0x2b}, @in=@broadcast, {0x0, 0x0, 0x2, 0x2, 0x8, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0xfffffffd, 0xa, 0x2, 0x0, 0x70}, [@user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0xa}}, @offload={0xc}]}, 0x128}}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001540)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_MARK={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c840}, 0x4000000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x16) mincore(&(0x7f000011c000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/68) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) 53.022239709s ago: executing program 5 (id=13481): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xb9d01000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') (async) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) pipe2$9p(&(0x7f0000000300), 0x1000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcbgQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00'/700) 52.986352769s ago: executing program 5 (id=13485): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x0, 0x0, 0x0}) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="66643d1fac5278f6755ce61a457ff9417697fe19312324260ad42fd6d8d87d1c61fc9c526b17f32c9de775c916e032bd8080c7ad834dec11fe33072b7ee472d4c9ab0a09f1e27a529e2e3af1f5f23b7e6123e4660b48316d599954befd84f4d9c5635311521011b2a0d8fccfd5114fcd7890452e603ca97432b1d8f362f91d86d9431735a955e1a2f3ad87486131c02f52309cf2e8c695d2b873e0c6c9fb93b85d76688c2818b6709c00dd3e35448e945722b8f190a5c861974850d56a4d7a6effdbe8f119b2e01497f904a8d0538ca4349f4388ea61157697cfb5694aab11130993c88e67", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x7) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ppoll(&(0x7f00000003c0)=[{}, {}, {}, {r0, 0x9008}], 0x4, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000500)=0x0) fcntl$setstatus(r0, 0x4, 0x0) (async) io_cancel(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000b80)="204acb94333d81b66f4ae34e8f501d9efc7feff2d66a403d653c499ac7dd6bf469472b845616c6a641d78112abdd75516b30f58f2c9589c8acf9970c2b78e988365adb0a0fdd16ddceb82c2d66311617e3c9968c37ca3b67f160420da90c3abe95e9b6a1a85c51cf2ffc062ba7a052ac9d21077f39b2a151382fc3ca041bf07993081b9512e06d7950e43232a75609ec280003c067f32b35d3151b09c5be96d722878472351cd001f26135962f74fd652555403fc8fc4fd67bd21ef48414726735b532965518144a1252f063c2d178b4b20f0190154b5ceabc353411314ff9422bd97ccb91b450080f29", 0xea, 0x9, 0x0, 0x2}, &(0x7f0000000cc0)) (async) ioprio_set$uid(0x0, 0x0, 0x4007) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x301, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3e, 0x0, &(0x7f0000000100)) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) (async) setns(0xffffffffffffffff, 0x24020000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r7, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="100000001d0010002dbd70008ff0169ccbcda1ffabbec361fcdbdf25b8a68ddd3aa5824a43cf4cbd34fdda252c37c57c358a9e85d9720c13199c1fcfbdd2824d82c013f883080931c4a2a76a1c40ce04e540d0bebfe35ed7af9f5e198e2ed316d9e1aab8e069f480e01177cb763a8edd29f6359fb47c350bc3eef86f0e235ac4b795a757f5cebc6acd5f14a852176103644a978407e83b49a8450663c7e5c2839e8b79c5d3f582a8fdf7c710ad8ec32f047b3aafc32a2059502c3cd4bb12ad"], 0x10}], 0x1, &(0x7f0000008d80)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}], 0x20, 0x24000001}, 0x0) r9 = syz_usb_connect$uac1(0x4, 0xd1, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x4, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x1}, [@extension_unit={0xd, 0x24, 0x8, 0x5, 0x4, 0xe, "2c78db012677"}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0xa, 'm'}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0xa, "d8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x5, 0x4, "9ce8f5", "ab"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x6}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xff, 0x3, 0x40, 0x3}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x3, 0x74, 0x4}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xc, 0x2, 0x9, 0xf9, "69626ef1"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xea, 0x4, 0x7, 0x3, "bfaa9e8d1e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x40, 0x30, 0x8, {0x7, 0x25, 0x1, 0x2, 0x3, 0xfe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0xf, 0x3, '{Tr'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3bf, 0x5, 0x4, 0x3e, {0x7, 0x25, 0x1, 0x0, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x2c0, 0x1, 0x10, 0xd4, 0x8, 0x14}, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="050f39000407100206c91c00171002001406001c100a02e401000000007f0030a7f19b9b8538fd92ab344f95b83f00000f8080000f000000c0c00000"], 0x5, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x340a}}, {0xab, &(0x7f0000000440)=@string={0xab, 0x3, "5cdb321a511db2273348e320e3d704a2209979229912df6dbcb0b04970efeeb13b7380275d288d9e2c38d265aa34bdb3a9064209dd2e8fa8b6cded213b0727dcb9895b5285bec45656792a4219d8255fd57631075eee0d9c6cd57bafd8f44d6232e9332fa8b970584d16506b69d5e1fa9a3a611953372fe0c2c4ffc50ae6b7f887e73694a0724682e345dd9c18901bfc8fb19e3478bae22f872e16f6e14092ad01c4d4bd92c64f0457"}}, {0xe7, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]}]}) syz_usb_control_io$uac1(r9, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x3, 0x3, {0x3, 0x10, '-'}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="00034a0000004a037244a8865a4b00ed9772a928a374306258c69985f52fb409a44d93512c511119dcc7b75e2996f237f6b864c345d9060a896e6cce3ffe8e88fc26b0c9e8c302d59d2bff8faeb843229ee6eaa354693de220"]}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0xf, 0xa6, "d8605d0311440c8c4db97e24b3e1f0c84ba4950178aafe6be75b76e4c669090a3fa28eb9246a9b52d6e774fa76f1ecaee5f4c775b7463113d5a2545e1722b964a8345ca227f658e5a392dd8a4d7f4785ad1e7e382caa96c8127bb69c3f3b7a86261665c2af18d3507e64829d5331cf3d53df9cf7c1a5bac5413d151df543636b2f6c893b58a69bce4993dcbcb3fa8c6c891a9a8e4388110b77af7fe0b5a0df35ccb984167c08"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000800)={0x20, 0x81, 0x1, '%'}, &(0x7f0000000840)=ANY=[@ANYBLOB="0600000000000000c9"], &(0x7f0000000140)=ANY=[@ANYBLOB="208301000080389163a194433b802fdc4bd40ff864e32452cb3b5da3989bf97959982f86e9eb6881bc64804abf7ec4b9957d6229e22f66181919"], &(0x7f00000008c0)={0x20, 0x84, 0x3, "425704"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "20719b"}}) 52.965718s ago: executing program 5 (id=13486): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000000040)) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 52.844985982s ago: executing program 5 (id=13487): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setuid(0xee01) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) 52.754064153s ago: executing program 5 (id=13488): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0xffffffffffffffff, 0x3}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x62000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000002b00)={{0x1, 0x0, 0x3, 0x3, 0xf20}, 0xa836, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x7, 0x3, 0x200, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) 52.665198356s ago: executing program 44 (id=13488): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0xffffffffffffffff, 0x3}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x62000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000002b00)={{0x1, 0x0, 0x3, 0x3, 0xf20}, 0xa836, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x7, 0x3, 0x200, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) 47.018730654s ago: executing program 3 (id=13540): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = inotify_init1(0x80800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) inotify_add_watch(r5, &(0x7f0000002200)='./file0/file0\x00', 0x42000201) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000002040)={0x19980330, r4}, &(0x7f00000021c0)={0xffff, 0x9, 0x32e9, 0x40, 0xd}) pivot_root(&(0x7f0000002240)='./file0/file0\x00', 0x0) 46.113353822s ago: executing program 3 (id=13564): write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff"], 0x65) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0xf401}], 0x400000000000172, 0x0) 46.085143222s ago: executing program 3 (id=13565): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x10000, 0x4) ppoll(&(0x7f0000000200)=[{r1, 0x30}, {r1, 0x2309}, {r2, 0x2}, {r1, 0xc0}, {r0, 0x8008}], 0x5, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0xa]}, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000902, r4, &(0x7f0000000440)) 46.012841803s ago: executing program 3 (id=13566): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x682b, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20004874) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x3d70000, 0x0}) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) dup3(r0, r0, 0x80000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) timerfd_settime(0xffffffffffffffff, 0xf06a19edeaaab97b, &(0x7f0000000880)={{0x77359400}}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x2603, 0x102) r3 = open$dir(&(0x7f0000000240)='./file0/../file0\x00', 0x400, 0x2) renameat(r2, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000280)='./file0/../file0\x00') mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0x2000775) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = dup(r5) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 45.903176516s ago: executing program 3 (id=13567): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x11) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)={'U+', 0x7}, 0x16, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x61, 0x7b, 0x36, 0x20, 0x408, 0x4035, 0x1aea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0xb0, 0x5, [{{0x9, 0x4, 0xba, 0x5, 0x0, 0xe, 0x1, 0x1, 0xe0}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = fsmount(r3, 0x0, 0x1) (rerun: 64) fchdir(r4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r6, 0x1, 0x8, 0x0, &(0x7f00000000c0)) (async, rerun: 32) fchown(r5, 0x0, 0x0) (async, rerun: 32) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="98010000100013070000000000000000ffffffff777fe8e5b19a8d6c86592368341a5d190000001f0000000000000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x198}}, 0x0) (async, rerun: 32) read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) (rerun: 32) 45.861174986s ago: executing program 3 (id=13568): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x120, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xe000000}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_NAT_DST={0x6c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}]}, 0x120}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 45.786652698s ago: executing program 45 (id=13568): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x120, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xe000000}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_NAT_DST={0x6c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}]}, 0x120}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 7.586960894s ago: executing program 6 (id=13883): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async, rerun: 64) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x102, 0x0) (rerun: 64) sendfile(r1, r1, 0x0, 0x6) (async) write$ppp(r1, &(0x7f00000000c0)="b7df76e8f38c8f3ecfd170437ab5f514a0716bdf5bb282952e7e4ceaf339caa457742e8dbd2eb2f7937b49eb3fd464cc50c8c3763c134e754f2c9bd7c4de8ba1272e824e41e2abd18e0521aba9562b99d49d4747d8a5311f5bc0645eafa8e7dab63950b3a02498afc35f294a60e5f08c1da652be566eb478e5c32ebafbc4f3c2c8393d00b4f8523038403c39e3aa7d03a294344624aa679fbd3c18ac099c6cbb97b6dc", 0xa3) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) 7.532554135s ago: executing program 6 (id=13884): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040), 0x4) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f00000022c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000074d564b"]) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000074d564b"]) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r9, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x4}) r10 = open(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) utimensat(r10, 0x0, &(0x7f0000000000)={{0x0, 0x3ffffffe}}, 0x0) eventfd2(0x8, 0x1) (async) eventfd2(0x8, 0x1) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r11, 0x400, 0x3) (async) fcntl$setlease(r11, 0x400, 0x3) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 7.438329667s ago: executing program 6 (id=13885): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0]) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)={[{0x2d, 'rlimit'}, {0x2b, 'freezer'}, {0x2d, 'blkio'}, {0x2b, 'rlimit'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'net_cls'}, {0x2b, 'net'}]}, 0x38) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=""/146, 0x92) 7.419916597s ago: executing program 6 (id=13886): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000140)={{0x3, 0x0, 0xfffffffffffffcea, {0xd5c74000, 0x8000000}}, "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", "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"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 7.310950669s ago: executing program 6 (id=13887): prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000000c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000100)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000200)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000240)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000280)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000002c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000340)) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)={0x0, 0xfb, 0x31, 0x0, 0x40, "fae723216db2eee712de5eb76ca773b5", "2786dc712e31235340a34a16ff6959bcf53b9c79f9c7f89fca2cb3ac"}, 0x31, 0x1) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000400)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000440)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000480)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000004c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000500)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000540)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000580)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000005c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000600)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000640)) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x5) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000680)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000006c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000700)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000740)) 7.252884211s ago: executing program 6 (id=13888): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = epoll_create(0x8017) read(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}, 0x1c) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f0000000340)="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", 0xfc) read(r0, &(0x7f0000000080)=""/218, 0xda) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) (async) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) epoll_create(0x8017) (async) read(r3, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}, 0x1c) (async) socket(0x8000000010, 0x2, 0x0) (async) write(r5, &(0x7f0000000340)="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", 0xfc) (async) read(r0, &(0x7f0000000080)=""/218, 0xda) (async) 6.78696413s ago: executing program 9 (id=13898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000002c0)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x200, 0x4, 0x0, 0x0, @msi={0x4, 0x5, 0x9, 0x4}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x5eb, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') (async) mkdir(0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000001f00), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x50080, 0x0) (async, rerun: 32) umount2(&(0x7f0000000240)='./file0\x00', 0x1) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_GET_SECCOMP(0x15) (async) sched_setscheduler(r4, 0x6, &(0x7f0000000180)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x20}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x88, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x3b}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000640)}) 6.655737762s ago: executing program 9 (id=13899): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0x80000000d33) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @from_mac=@device_b, @device_b}}]}, 0x34}}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(r1, &(0x7f00000008c0)='\x00', 0x1001) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') read$FUSE(r3, &(0x7f0000000c40)={0x2020}, 0x2020) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000001c0)=""/68) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x28100, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x1, 0xa, 0xce, 0x200}, {0x3, 0xe, 0x10, 0x9}, {0xffff, 0xd, 0x5, 0x1}, {0x80, 0x40, 0x80, 0x2}]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500561008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 6.655082082s ago: executing program 9 (id=13900): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=']') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd, 0x0, 0xb3}) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="180000000000000029000016360000002b000000000000004000000000000000290000003b000000850400000000000005020000000100c2044e5d6dda0001000502080fc910fc00000000000000000000000000000100001400"], 0x70}, 0x810) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904"], 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@flat=@handle={0x73682a85, 0x201e, 0x1}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x5, 0x1, 0x12}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 3.392638675s ago: executing program 9 (id=13912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x5, 0x4, 0x408, 0x110, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private, @empty}}}, {{@uncond, 0xc0, 0x100}, @unspec=@CLASSIFY={0x0, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfcd7) socket(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) 3.390722805s ago: executing program 9 (id=13913): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') exit(0xfffffffffffffff7) preadv(r1, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/201, 0xc9}], 0x1, 0x2b1, 0x200) recvfrom$inet6(r0, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="c8050000200019", 0x7}], 0x45) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0x7, 0x0, &(0x7f0000000500)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c"], 0xb4}}, 0x0) syz_usb_ep_write(r6, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x122042, &(0x7f0000000480)={[{@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_null}, {@uuid_off}, {@xino_auto}, {@userxattr}], [{@fowner_lt={'fowner<', r7}}]}) r8 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) recvmmsg(r9, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001840)=""/4080, 0xff0}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000040)=""/102, 0x66}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x4000000089}) ioctl$INCFS_IOC_PERMIT_FILL(r8, 0x40046721, &(0x7f0000000000)={r5}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{r8}, 0xffff, 0x2, 0xfffffffffffffffa}) 2.668887549s ago: executing program 0 (id=13929): r0 = fsmount(0xffffffffffffffff, 0x0, 0xf) epoll_pwait(r0, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x5, 0xf612, &(0x7f00000002c0)={[0x7]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f0000000040)=[{r1, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"y'], 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c04"]) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r7], 0x10) sendfile(r6, r5, 0x0, 0xffffffff) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYRES16]) 2.148512319s ago: executing program 0 (id=13930): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = fsopen(&(0x7f00000000c0)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 2.06405637s ago: executing program 0 (id=13931): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x2000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1b, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1fffffffffffd]}}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xa, 0x0, 0x0, 0x1b, 0x10, "fee8a2ab78fc979fd1e00d96072000001ea89de2bdfb0040e60080b8785d9600010000000000ffffffff00005f08000b00", "2809e8dbe10a59894822875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000700", '24\x00', [0x5, 0x5]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getuid() mount$cgroup(0x0, 0xfffffffffffffffe, &(0x7f0000000480), 0x40000, &(0x7f0000000400)={[], [{@pcr={'pcr', 0x3d, 0x1}}, {@euid_eq={'euid', 0x3d, r7}}, {@appraise}, {@hash}, {@uid_lt={'uid<', r8}}, {@appraise}]}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000006c0)={0x1, 0x0, @pic={0x40, 0x3, 0x17, 0x9, 0x4, 0x8, 0x2, 0x9, 0x81, 0x5, 0x12, 0x33, 0x3, 0xf8, 0x0, 0x5}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_binder, @flat=@weak_handle={0x77682a85, 0x5, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000005c0)=""/230, 0xe6, 0x0, 0xc}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x4}) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000edfc054d564b"]) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000020a000000000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x89a0, 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r12, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0x4008af12, &(0x7f0000000080)={0x0, 0x10000}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r13 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r13, 0x11b, 0x8, 0x0, &(0x7f00000004c0)) 1.853697525s ago: executing program 0 (id=13934): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x40000043, 0x0) r3 = open_tree(r1, &(0x7f0000000380)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xffffffffffffff70, 0x0, 0x0}) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000780)="df6556a8", 0x4, 0xfffffffffffffffe) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffffff, 0x31}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000816) 1.772949926s ago: executing program 0 (id=13935): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000040)=""/47, 0x2f}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca1243e14cef7da76bb37b1fbde72b364878299efb605561cf63ec0aa8d4ea52490ac25b637a07b15d9e617816d76958ff2c027a38249fb2a6fbdae24d00f42bfb58ca9a9c34449b077c0463dbb9e84cb", 0x92}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18}, 0x18) r5 = socket(0x28, 0x5, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000d80)={0x24, &(0x7f0000000c00)={0x20, 0x10, 0xc, {0xc, 0x31, "471e6e6f71744cd7564d"}}, 0x0, 0x0, 0x0}, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1298}}, 0x4090) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='no=\x00'/15, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cachetag=^!#\\,cache=fscache,\x00']) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 185.024137ms ago: executing program 0 (id=13939): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) (async) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x0, 0x0, 0x0}) 167.684297ms ago: executing program 9 (id=13942): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0xde, 0x8, 0x4, 0x6, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x3, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x3, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x1, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x4, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0x8000, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x4, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1ff, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x7, 0x0, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0x401, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000100)=""/67, 0x18}], 0x1) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000440)={0x426, r3, 'id1\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x80080, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r3) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ff0126bd7000fb07000000000000000001801d0002003a0000000800050006080000"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x20044840) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x463}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "5ac5a9c5f0617295", "01ea8b275be257b91fca01d113de6db0", "33915b02", "b3f5d686491c5629"}, 0x28) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 79.306199ms ago: executing program 2 (id=13945): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x34bb00, 0x0) read(r0, &(0x7f0000000040)=""/141, 0x8d) sendfile(r0, r0, 0x0, 0x7ffff000) 78.309379ms ago: executing program 2 (id=13946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)=0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) ftruncate(r2, 0xf09) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'veth0_vlan\x00', 0xa53}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110b, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 77.339319ms ago: executing program 2 (id=13947): ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r0, &(0x7f0000000000)='\x00', 0x3) inotify_init() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0xe00, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x13, 0x13, 0xf1, &(0x7f0000000080)}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x30}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9100}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x40) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x50, 0xffffffffffffffff, 0xe9563000) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000005c0)=']{\']\x00') setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000600)=@req={0x4, 0x7ff, 0xc93e, 0xfffffff7}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000640)={0x0, r1, 0x7fff, 0x5, 0xd91, 0x3}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000680)={0x0, 0x1, 0x5, 0xeb, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1d}, @broadcast}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0xa00, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000700)={0x1, 0x200, 0x6}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1bc, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x144, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x38c}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4384e30a85d64fda1a68e969c8e5b226551e16bece422a19c02ebb60a98bb328"}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @mcast1}}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d6236171b6ec3f86c2728caf112beb2e1ae1ca8285ec32e1844581ff927fd638"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x1) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000a00)=0x25a8, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', r3, 0x4, 0xfb, 0x1, 0x10001, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @private0, 0x8, 0x10, 0x400, 0x6}}) fcntl$getownex(r0, 0x10, &(0x7f0000000b00)={0x0, 0x0}) statx(r1, &(0x7f0000000b40)='./file0\x00', 0x2400, 0x7ff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c80)={r4, r5, 0xffffffffffffffff}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000cc0)=0x1, 0x4) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000d00)=0x9) r6 = syz_open_dev$evdev(&(0x7f0000000d40), 0xb, 0x200) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f0000000d80)=""/118) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000e00)) fcntl$lock(r2, 0x0, &(0x7f0000000e80)={0x3, 0x1, 0xb0cf, 0xbbe, r4}) sendto$inet(r1, &(0x7f0000000ec0)="3b4e06b98bed1c3300a16dc71e1b8602143e5f540d4a6ebdfa3729cb02fed539f2a6b0fcfd4baf496eee63fb6b97b465a0ec5e61b9991887e8c00202ab704356", 0x40, 0x48004, &(0x7f0000000f00)={0x2, 0x4e22, @multicast1}, 0x10) vmsplice(r0, &(0x7f0000001240)=[{&(0x7f0000000f40)="21f00300644f323d99ceb7efcb66260c1c9f408aa9f3190f74a1bf263e87fa73079ba474ff38a6326d0717cfdf78bb4fb8adf93e12e0495f78717f8573873c1f0220079d76ee17952ed13a4c3f1bbf95ea7806118abbaef38d19cffa8ac5a05604e500aa5b953ae9bf280dc0173b6b53536e29c449494a6f90a82e054ffd999873212d6cd69093f2385837c0d7f0d336fdd79db3014a7bc0c1f7595ae82b028eec81f5847410d452b2dee9a90570ea40a65bca8385cc0e7580ef3f9f0e77b70163c9eb70defe46f7b3c38dd0ff32de85b00ebc2d1da6d978375dbe5258e043e0d8a255b245b2", 0xe6}, {&(0x7f0000001040)="e34b57777dd4e37d1ea33755deaeb77bdb0aa6e9830740f4302ef184e96b74", 0x1f}, {&(0x7f0000001080)="48938bbfeffb10adc75a78fe1f646f19d2ad8a15c18292d3f7778a54941e7ca2dc277204b039330c1122ca46f017c7cfa66bfb2950b3209ceadf705454a234e2d6c39eeeec607b912a31571b6e62dbda05af3725dfec3cd0b1d46d146060ef7ef44a8cdaa154c9c7b74fe1a3a6823b1de7ddf86f4fd25d9fb17d25684af453a485d17378742abf98e83c2d3627ce6be90cf51254157f9242a47a3732c7c66c971bed1eec82b4a02f548f42ba08a0fd0cbd307d07d7550926142f9c07d62a", 0xbe}, {&(0x7f0000001140)="29a46f5a1d3878ac4b497eacd813756d0fbc742126da1da340e3430860da2891be2be0fc2a799eda6809e926b95a315210036af1177dbf10ff73f935b9901969fbf7ce75feee6857bc87e740add3a66e4590d66e3969ff11c2c60fb384055c773366232e496b53d6fa23fb98eae75361afb7ba026c949cb1be1cb3e32ee8794148d98375cf9c38ab5d95690821bf7d4581578510dd647cf5796495b53d19cba66bd643427f2dc67aa4ed7c88012015bd7c44ffe23cf83ec7eff61411ad990afd5f984727fccc9bb291c785e0", 0xcc}], 0x4, 0x0) 76.974559ms ago: executing program 2 (id=13948): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x87, 0xc, 0x1, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2f}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @private1={0xfc, 0x1, '\x00', 0x1}]}, 0x68) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 923.881µs ago: executing program 2 (id=13949): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffeff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa4, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x3e}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/4080, 0xff0, 0x2, 0x3b}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=13950): memfd_create(0x0, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000000000000000001000000060006000300000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffff"], 0x1c8}}, 0x24000000) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000024c0)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) sendto$packet(r3, 0x0, 0x0, 0x200004c0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000300)={0x2c, r2, 0x917, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000050) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008880}, 0x4000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x2, 0xb, 0x3, 0x7fff, 0x4c74, 0x9, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x10000005, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x44, 0x4, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x80000001, 0xc8, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x9, 0x7, 0x5, 0x2f, 0x8, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x7, 0x0, 0xa, 0x1, 0x9, 0x9, 0xc, 0x7f, 0x9, 0x2, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x2, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x2400, 0x1005, 0x0, 0xe5ba, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa5, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x800, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x100, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc9, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0xfffffffe, 0x8010080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x3, 0x800005, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): callbacks suppressed [ 599.901959][T22705] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11938'. [ 600.168205][T22716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 600.168619][T22717] rust_binder: Error in use_page_slow: ESRCH [ 600.175088][T22717] rust_binder: use_range failure ESRCH [ 600.181057][T22717] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 600.186590][T22717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 600.194583][T22717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:741 [ 600.226729][T22721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 600.290398][T22722] rust_binder: Error in use_page_slow: ESRCH [ 600.296899][T22722] rust_binder: use_range failure ESRCH [ 600.303167][T22722] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 600.308623][T22722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 600.316679][T22722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:746 [ 600.395852][T22789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:746 [ 600.421240][T22929] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11947'. [ 600.879146][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 601.040671][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.051735][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.061516][ T9] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 601.070651][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.079347][ T9] usb 5-1: config 0 descriptor?? [ 601.212988][T22958] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11960'. [ 601.399678][T22979] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11969'. [ 601.492738][T22984] x_tables: duplicate underflow at hook 1 [ 601.769081][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11974'. [ 601.778744][T23092] fuse: Unknown parameter '0x0000000000000006' [ 601.941373][T23403] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11979'. [ 601.955575][ T9] hid-led 0003:27B8:01ED.0031: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 601.980791][ T9] hid-led 0003:27B8:01ED.0031: ThingM blink(1) initialized [ 602.459633][T23425] incfs: Can't find or create .index dir in ./bus [ 602.466129][T23425] incfs: mount failed -1 [ 602.470779][T23425] incfs: Can't find or create .index dir in ./bus [ 602.477277][T23425] incfs: mount failed -1 [ 602.541253][T23529] validate_nla: 5 callbacks suppressed [ 602.541281][T23529] netlink: 'syz.2.11989': attribute type 7 has an invalid length. [ 602.555025][T23529] netlink: 45 bytes leftover after parsing attributes in process `syz.2.11989'. [ 602.576716][T23535] cgroup: subsys name conflicts with all [ 602.587650][T23535] can0: slcan on ttyS3. [ 602.755320][T23562] fuseblk: Bad value for 'fd' [ 602.854980][T23674] netlink: 'syz.0.12003': attribute type 7 has an invalid length. [ 602.862917][T23674] netlink: 45 bytes leftover after parsing attributes in process `syz.0.12003'. [ 602.868466][ T400] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 603.017940][T23683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.026482][T23683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.060948][ T400] usb 3-1: Using ep0 maxpacket: 16 [ 603.067119][ T400] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.077922][ T400] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 603.088273][ T400] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 603.097347][ T400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.105380][ T400] usb 3-1: Product: syz [ 603.109537][ T400] usb 3-1: Manufacturer: syz [ 603.114122][ T400] usb 3-1: SerialNumber: syz [ 603.119360][ T400] usb 3-1: config 0 descriptor?? [ 603.224775][T23693] netlink: 'syz.8.12012': attribute type 7 has an invalid length. [ 603.232686][T23693] netlink: 45 bytes leftover after parsing attributes in process `syz.8.12012'. [ 603.249983][T23695] overlayfs: failed to clone upperpath [ 603.340564][ T10] usb 3-1: USB disconnect, device number 62 [ 603.425335][T23535] can0 (unregistered): slcan off ttyS3. [ 603.581294][ T36] audit: type=1400 audit(855.067:64731): avc: denied { mounton } for pid=23841 comm="syz.4.12017" path="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 603.610001][ T36] audit: type=1400 audit(855.095:64732): avc: denied { unmount } for pid=27157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 603.635180][T23844] rust_binder: 345: no such ref 0 [ 603.918559][T23849] rust_binder: Write failure EFAULT in pid:350 [ 603.933361][T23854] netlink: 'syz.4.12022': attribute type 7 has an invalid length. [ 603.947394][T23854] netlink: 'syz.4.12022': attribute type 6 has an invalid length. [ 603.955358][T23854] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12022'. [ 603.978093][ T36] audit: type=1400 audit(855.431:64733): avc: denied { write } for pid=23855 comm="syz.4.12023" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 604.002274][ T36] audit: type=1400 audit(855.459:64734): avc: denied { open } for pid=23855 comm="syz.4.12023" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 604.569690][T23899] input: syz1 as /devices/virtual/input/input32 [ 604.577166][T23899] rust_binder: Write failure EFAULT in pid:823 [ 604.620840][T23907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 604.637423][T23907] rust_binder: Error in use_page_slow: ESRCH [ 604.644273][T23907] rust_binder: use_range failure ESRCH [ 604.650381][T23907] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 604.663754][T23907] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 604.679410][T23907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:831 [ 605.126903][ T36] audit: type=1326 audit(1116.519:64735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24128 comm="syz.4.12050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f340ad8ec29 code=0x0 [ 605.499629][T24135] fuse: Unknown parameter 'fd' [ 605.744810][T24465] netlink: 'syz.0.12066': attribute type 7 has an invalid length. [ 605.752785][T24465] netlink: 'syz.0.12066': attribute type 11 has an invalid length. [ 605.763400][T24465] __nla_validate_parse: 1 callbacks suppressed [ 605.763418][T24465] netlink: 17 bytes leftover after parsing attributes in process `syz.0.12066'. [ 605.862599][T24676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 605.862731][T24676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 605.869408][T24676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:838 [ 606.021758][T24678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.100086][T24685] SELinux: policydb version 808464405 does not match my version range 15-33 [ 606.115349][T24685] SELinux: failed to load policy [ 606.314548][T24690] netlink: 104 bytes leftover after parsing attributes in process `syz.8.12076'. [ 606.623318][ T36] audit: type=1326 audit(1117.912:64736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24436 comm="syz.2.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2f8ec29 code=0x7fc00000 [ 606.661245][T24802] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.661446][T24803] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.668158][T24803] rust_binder: Error in use_page_slow: ESRCH [ 606.674589][T24803] rust_binder: use_range failure ESRCH [ 606.680599][T24803] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 606.686052][T24803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 606.694049][T24803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:841 [ 606.711613][T24805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.721462][T24805] rust_binder: Error in use_page_slow: ESRCH [ 606.729394][T24805] rust_binder: use_range failure ESRCH [ 606.735416][T24805] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 606.740916][T24805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 606.748904][T24805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:844 [ 606.770982][T24811] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12086'. [ 606.804510][ T36] audit: type=1400 audit(1118.090:64737): avc: denied { view } for pid=24812 comm="syz.4.12087" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 606.919055][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 607.923116][T24957] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12106'. [ 607.959683][ T36] audit: type=1400 audit(1119.165:64738): avc: denied { map } for pid=25058 comm="syz.4.12108" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 608.155233][T25082] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12116'. [ 608.182659][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12118'. [ 608.483800][T25204] netlink: 104 bytes leftover after parsing attributes in process `syz.8.12125'. [ 608.600223][T25422] netlink: 104 bytes leftover after parsing attributes in process `syz.8.12134'. [ 608.836764][T25757] netlink: 'syz.0.12151': attribute type 4 has an invalid length. [ 608.869162][T25759] netlink: 'syz.0.12152': attribute type 1 has an invalid length. [ 608.876999][T25759] netlink: 'syz.0.12152': attribute type 2 has an invalid length. [ 609.027202][T25871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12158'. [ 609.064351][T25871] /dev/rnullb0: Can't lookup blockdev [ 609.086016][T25874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12159'. [ 609.114761][ T803] Bluetooth: hci0: command 0x1003 tx timeout [ 609.114784][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 609.136269][T25879] fuseblk: Unknown parameter 'allower' [ 609.253242][ T36] audit: type=1400 audit(1120.362:64739): avc: denied { watch watch_reads } for pid=25891 comm="syz.2.12167" path="/322/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=lnk_file permissive=1 [ 609.281297][T25900] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 609.468342][T26015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.477173][T26015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.585025][ T400] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 609.745448][ T400] usb 3-1: Using ep0 maxpacket: 16 [ 609.751592][ T400] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.761822][ T400] usb 3-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.774786][ T400] usb 3-1: config 1 interface 0 has no altsetting 0 [ 609.782057][ T400] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 609.791104][ T400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 609.799120][ T400] usb 3-1: SerialNumber: syz [ 609.869643][T26019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=26019 comm=syz.0.12178 [ 609.918169][ T36] audit: type=1400 audit(1120.998:64740): avc: denied { map } for pid=26122 comm="syz.0.12180" path="socket:[163713]" dev="sockfs" ino=163713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 610.131026][T26135] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.131137][T26135] rust_binder: Error in use_page_slow: ESRCH [ 610.137579][T26135] rust_binder: use_range failure ESRCH [ 610.144272][T26135] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 610.149786][T26135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 610.157843][T26135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:876 [ 610.221525][T26348] SELinux: policydb magic number 0xf97cef8c does not match expected magic number 0xf97cff8c [ 610.241039][T26348] SELinux: failed to load policy [ 610.248436][T26348] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 610.258854][ T36] audit: type=1400 audit(1121.306:64741): avc: denied { connect } for pid=26346 comm="syz.4.12191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 610.337391][T26457] 9pnet_fd: Insufficient options for proto=fd [ 611.261338][T26919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:459 [ 611.322755][T26923] binder: Bad value for 'stats' [ 611.454535][T26976] FAULT_INJECTION: forcing a failure. [ 611.454535][T26976] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 611.468067][T26976] CPU: 0 UID: 0 PID: 26976 Comm: syz.4.12228 Not tainted syzkaller #0 33840401dc9524e2de0309c027e288ea06768364 [ 611.468096][T26976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 611.468110][T26976] Call Trace: [ 611.468118][T26976] [ 611.468127][T26976] __dump_stack+0x21/0x30 [ 611.468159][T26976] dump_stack_lvl+0x10c/0x190 [ 611.468180][T26976] ? __cfi_dump_stack_lvl+0x10/0x10 [ 611.468204][T26976] dump_stack+0x19/0x20 [ 611.468226][T26976] should_fail_ex+0x3d9/0x530 [ 611.468246][T26976] should_fail_alloc_page+0xeb/0x110 [ 611.468267][T26976] __alloc_pages_noprof+0x19b/0x7b0 [ 611.468294][T26976] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 611.468321][T26976] ? is_bpf_text_address+0x17b/0x1a0 [ 611.468344][T26976] pte_alloc_one+0x97/0x520 [ 611.468370][T26976] ? __kernel_text_address+0x11/0x40 [ 611.468393][T26976] ? unwind_get_return_address+0x51/0x90 [ 611.468416][T26976] ? __cfi_pte_alloc_one+0x10/0x10 [ 611.468433][T26976] ? arch_stack_walk+0x10b/0x170 [ 611.468452][T26976] do_pte_missing+0xf68/0x4240 [ 611.468477][T26976] ? __kasan_check_read+0x15/0x20 [ 611.468504][T26976] ? __thp_vma_allowable_orders+0x7f1/0x970 [ 611.468529][T26976] ? pte_marker_clear+0x1b0/0x1b0 [ 611.468552][T26976] ? x64_sys_call+0xe69/0x2ee0 [ 611.468580][T26976] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 611.468601][T26976] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 611.468626][T26976] ? mtree_range_walk+0x573/0x730 [ 611.468654][T26976] handle_mm_fault+0x1166/0x1b90 [ 611.468675][T26976] ? __cfi_handle_mm_fault+0x10/0x10 [ 611.468693][T26976] ? lock_vma_under_rcu+0x49d/0x530 [ 611.468717][T26976] ? __kasan_check_write+0x18/0x20 [ 611.468744][T26976] do_user_addr_fault+0x96c/0x1200 [ 611.468771][T26976] ? __cfi_ksys_write+0x10/0x10 [ 611.468793][T26976] exc_page_fault+0x59/0xc0 [ 611.468818][T26976] asm_exc_page_fault+0x2b/0x30 [ 611.468843][T26976] RIP: 0033:0x7f340ad56c0a [ 611.468861][T26976] Code: 00 01 00 00 00 74 9a 83 f9 c0 0f 87 8c fe ff ff c5 fe 6f 4e 20 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 0b fd ff ff 0f 1f 40 00 [ 611.468878][T26976] RSP: 002b:00007f340bb7c028 EFLAGS: 00010206 [ 611.468897][T26976] RAX: 0000200000ffb020 RBX: 00007f340afd5fa0 RCX: 000000000000fe0a [ 611.468912][T26976] RDX: 000000000000fe2a RSI: 00002000000001a0 RDI: 0000200000ffb040 [ 611.468925][T26976] RBP: 00007f340bb7c090 R08: 0000200000ffb020 R09: 0000000000000000 [ 611.468940][T26976] R10: 0000200000ffb000 R11: 0000200000000180 R12: 0000000000000001 [ 611.468954][T26976] R13: 00007f340afd6038 R14: 00007f340afd5fa0 R15: 00007ffef647f818 [ 611.468972][T26976] [ 611.469300][T26976] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 611.818222][T27036] tipc: Enabling of bearer rejected, already enabled [ 611.958386][T27143] __nla_validate_parse: 2 callbacks suppressed [ 611.958407][T27143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12233'. [ 612.348626][T27254] rust_binder: Write failure EINVAL in pid:470 [ 612.535990][T26128] overlayfs: statfs failed on './file0' [ 612.559203][ T400] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 612.567216][ T400] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 612.574522][ T400] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 612.587346][ T400] usb 3-1: USB disconnect, device number 63 [ 612.596783][ T36] audit: type=1326 audit(1123.503:64742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27263 comm="syz.2.12239" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22d2f8ec29 code=0x0 [ 612.647204][ T36] audit: type=1326 audit(1123.550:64743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27268 comm="syz.0.12241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea4058ec29 code=0x0 [ 612.813230][T27487] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12245'. [ 613.481066][T27699] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 613.481318][T27699] rust_binder: Error in use_page_slow: ESRCH [ 613.487756][T27699] rust_binder: use_range failure ESRCH [ 613.493941][T27699] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 613.499799][T27699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 613.508103][T27699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:885 [ 613.518379][T27699] rust_binder: Read failure Err(EAGAIN) in pid:885 [ 613.532905][T27699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:885 [ 613.616519][T27707] 9pnet_fd: Insufficient options for proto=fd [ 613.841703][ T45] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 614.003127][ T45] usb 3-1: config 26 has an invalid interface number: 102 but max is 1 [ 614.011382][ T45] usb 3-1: config 26 has an invalid interface number: 124 but max is 1 [ 614.019689][ T45] usb 3-1: config 26 has no interface number 0 [ 614.025940][ T45] usb 3-1: config 26 has no interface number 1 [ 614.032107][ T45] usb 3-1: config 26 interface 102 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 614.043072][ T45] usb 3-1: config 26 interface 124 altsetting 9 endpoint 0x1 is Bulk; changing to Interrupt [ 614.053223][ T45] usb 3-1: config 26 interface 124 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 614.063166][ T45] usb 3-1: config 26 interface 124 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 614.074040][ T45] usb 3-1: config 26 interface 102 has no altsetting 0 [ 614.080949][ T45] usb 3-1: config 26 interface 124 has no altsetting 0 [ 614.089864][ T45] usb 3-1: string descriptor 0 read error: -22 [ 614.096032][ T45] usb 3-1: New USB device found, idVendor=12d1, idProduct=9e5d, bcdDevice=f4.8f [ 614.105076][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.330722][ T10] usb 3-1: USB disconnect, device number 64 [ 614.419843][T27932] netlink: 'syz.0.12265': attribute type 7 has an invalid length. [ 614.427721][T27932] netlink: 'syz.0.12265': attribute type 5 has an invalid length. [ 614.435710][T27932] netlink: 17 bytes leftover after parsing attributes in process `syz.0.12265'. [ 615.435306][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 615.595720][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 615.601872][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.611973][ T10] usb 3-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 615.624943][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 615.632361][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 615.641449][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 615.649440][ T10] usb 3-1: SerialNumber: syz [ 615.873719][ T36] audit: type=1400 audit(1126.551:64744): avc: denied { map } for pid=27952 comm="syz.2.12275" path="/334/file0" dev="incremental-fs" ino=1801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 615.898137][ T10] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 615.906055][ T10] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 615.912471][ T10] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 615.922086][ T10] usb 3-1: USB disconnect, device number 65 [ 616.121393][T28063] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.12280' sets config #1 [ 616.131675][T28063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.140128][T28063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.442644][T28066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 616.669476][T28072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 616.683488][T28077] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12284'. [ 616.766651][T28189] tipc: Enabling of bearer rejected, media not registered [ 616.778644][T28189] 9pnet_fd: Insufficient options for proto=fd [ 616.876988][T28298] overlayfs: missing 'lowerdir' [ 616.958178][T28300] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12293'. [ 617.189190][T28302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.197692][T28302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.421170][T28302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.433528][T28302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.626861][T28314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 617.626999][T28314] rust_binder: Error in use_page_slow: ESRCH [ 617.633509][T28314] rust_binder: use_range failure ESRCH [ 617.639549][T28314] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 617.645008][T28314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 617.652952][T28314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:923 [ 617.663112][T28314] rust_binder: Read failure Err(EAGAIN) in pid:923 [ 617.689589][T28319] rust_binder: Write failure EFAULT in pid:928 [ 618.171076][T28355] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12313'. [ 618.186454][T28355] gretap0: entered promiscuous mode [ 618.192089][T28355] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12313'. [ 618.201152][T28355] 0{X: renamed from gretap0 [ 618.206694][T28355] 0{X: left promiscuous mode [ 618.211773][T28355] 0{X: entered allmulticast mode [ 618.217642][T28355] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 618.255403][T28358] netlink: 108 bytes leftover after parsing attributes in process `syz.4.12314'. [ 618.264827][T28358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12314'. [ 618.283075][T28364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 618.355242][T28364] rust_binder: Error in use_page_slow: ESRCH [ 618.355268][T28364] rust_binder: use_range failure ESRCH [ 618.361319][T28364] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 618.368180][T28364] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 618.376240][T28364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:517 [ 618.713514][T28375] netlink: 'syz.2.12320': attribute type 7 has an invalid length. [ 618.730417][T28375] netlink: 'syz.2.12320': attribute type 5 has an invalid length. [ 618.738206][T28375] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12320'. [ 618.757157][T28377] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=16409 sclass=netlink_xfrm_socket pid=28377 comm=syz.2.12321 [ 618.770276][T28377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12321'. [ 618.800610][T28382] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 619.050263][ T45] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 619.187252][T28384] rust_binder: Write failure EFAULT in pid:521 [ 619.222408][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.239549][ T45] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 619.248602][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.257451][ T45] usb 3-1: config 0 descriptor?? [ 619.369574][T28394] overlayfs: failed to clone upperpath [ 619.395900][T28398] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12329'. [ 619.508339][ T36] audit: type=1107 audit(1129.955:64745): pid=28401 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 619.521888][T28402] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34 sclass=netlink_audit_socket pid=28402 comm=syz.0.12331 [ 619.535550][T28402] netlink: 124 bytes leftover after parsing attributes in process `syz.0.12331'. [ 619.578803][T28506] fuse: Bad value for 'fd' [ 619.692385][ T45] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 619.702879][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0032/input/input33 [ 619.781626][ T45] keytouch 0003:0926:3333.0032: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 620.114941][ T36] audit: type=1326 audit(1130.525:64746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28510 comm="syz.4.12335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f340ad8ec29 code=0x0 [ 620.223729][T28620] rust_binder: 28620 RLIMIT_NICE not set [ 620.223887][T28620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 620.229582][T28620] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender. [ 620.239063][T28620] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:531 [ 620.694996][T28727] rust_binder: Error in use_page_slow: ESRCH [ 620.703291][T28727] rust_binder: use_range failure ESRCH [ 620.709490][T28727] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 620.715060][T28727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 620.723262][T28727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:963 [ 620.871682][T28729] overlayfs: failed to clone upperpath [ 621.009830][ T9] rust_binder: 28510: removing orphan mapping 0:1048 [ 621.221217][T29160] rust_binder: Read failure Err(EAGAIN) in pid:538 [ 621.261242][T29231] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 621.281388][T29286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.297249][T29286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.744963][T29901] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12370'. [ 621.857615][T30109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.866859][T30109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.101636][ T1788] usb 3-1: USB disconnect, device number 66 [ 622.419253][ T1788] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 622.580743][ T1788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.591697][ T1788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.601517][ T1788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 622.614361][ T1788] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 622.623416][ T1788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.631965][ T1788] usb 3-1: config 0 descriptor?? [ 623.067764][ T1788] nintendo 0003:057E:2019.0033: item fetching failed at offset 6/8 [ 623.075861][ T1788] nintendo 0003:057E:2019.0033: HID parse failed [ 623.082251][ T1788] nintendo 0003:057E:2019.0033: probe - fail = -22 [ 623.088812][ T1788] nintendo 0003:057E:2019.0033: probe with driver nintendo failed with error -22 [ 623.283023][ T36] audit: type=1400 audit(1133.489:64747): avc: denied { mounton } for pid=30214 comm="syz.2.12377" path="/356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 623.330271][T30215] netlink: 'syz.2.12377': attribute type 63 has an invalid length. [ 623.338255][T30215] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12377'. [ 623.348692][ T400] usb 3-1: USB disconnect, device number 67 [ 623.367504][T30338] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 623.367525][T30338] rust_binder: Read failure Err(EFAULT) in pid:564 [ 623.384046][T30341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.399072][T30341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.407697][T30341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.416291][T30341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.967674][T30350] input: syz1 as /devices/virtual/input/input34 [ 623.980423][T30350] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 624.013584][T30354] rtc_cmos 00:00: Alarms can be up to one day in the future [ 624.094339][T30356] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 624.103406][T30356] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 624.112238][T30356] rust_binder: Failed copying into alloc: EFAULT [ 624.112253][T30356] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 624.118609][T30356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 624.126892][T30356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:571 [ 624.136910][T30356] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 624.290893][ T9] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 624.452392][ T9] usb 3-1: config index 0 descriptor too short (expected 19492, got 36) [ 624.460782][ T9] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 624.469408][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 624.478378][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 624.489346][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.499086][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.511861][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 624.520910][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.529468][ T9] usb 3-1: config 0 descriptor?? [ 624.966383][ T9] lg-g15 0003:046D:C225.0034: hidraw1: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.2-1/input0 [ 625.191419][T30353] rtc_cmos 00:00: Alarms can be up to one day in the future [ 625.198842][ T1788] usb 3-1: USB disconnect, device number 68 [ 625.440675][T31021] 9pnet_fd: Insufficient options for proto=fd [ 625.820952][ T1788] rtc_cmos 00:00: Alarms can be up to one day in the future [ 625.828460][ T1788] rtc_cmos 00:00: Alarms can be up to one day in the future [ 625.836032][ T1788] rtc_cmos 00:00: Alarms can be up to one day in the future [ 625.843520][ T1788] rtc_cmos 00:00: Alarms can be up to one day in the future [ 625.850784][ T1788] rtc rtc0: __rtc_set_alarm: err=-22 [ 626.076076][ T36] audit: type=1400 audit(1136.098:64748): avc: denied { setattr } for pid=31354 comm="syz.4.12431" name="PACKET" dev="sockfs" ino=167126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 626.136103][T31364] binder: Binderfs stats mode cannot be changed during a remount [ 626.225074][T31371] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 626.234848][T31371] rust_binder: Write failure EINVAL in pid:615 [ 626.340184][T31375] FAULT_INJECTION: forcing a failure. [ 626.340184][T31375] name failslab, interval 1, probability 0, space 0, times 0 [ 626.359326][T31375] CPU: 0 UID: 0 PID: 31375 Comm: syz.4.12440 Not tainted syzkaller #0 33840401dc9524e2de0309c027e288ea06768364 [ 626.359360][T31375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 626.359373][T31375] Call Trace: [ 626.359380][T31375] [ 626.359388][T31375] __dump_stack+0x21/0x30 [ 626.359409][T31375] dump_stack_lvl+0x10c/0x190 [ 626.359425][T31375] ? __cfi_dump_stack_lvl+0x10/0x10 [ 626.359449][T31375] ? kernel_text_address+0xa9/0xe0 [ 626.359474][T31375] dump_stack+0x19/0x20 [ 626.359498][T31375] should_fail_ex+0x3d9/0x530 [ 626.359518][T31375] should_failslab+0xac/0x100 [ 626.359541][T31375] __kmalloc_cache_noprof+0x41/0x3c0 [ 626.359559][T31375] ? futex_lock_pi+0x77a/0xa10 [ 626.359581][T31375] futex_lock_pi+0x77a/0xa10 [ 626.359593][T31375] ? kstrtoull+0x13b/0x1e0 [ 626.359603][T31375] ? __cfi_futex_lock_pi+0x10/0x10 [ 626.359622][T31375] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 626.359641][T31375] ? selinux_file_permission+0x309/0xb30 [ 626.359666][T31375] ? __cfi_futex_wake_mark+0x10/0x10 [ 626.359691][T31375] ? vfs_write+0x8ba/0xe80 [ 626.359711][T31375] do_futex+0x2de/0x500 [ 626.359731][T31375] ? __cfi_do_futex+0x10/0x10 [ 626.359750][T31375] ? mutex_unlock+0x8b/0x240 [ 626.359775][T31375] ? __fget_files+0x2c5/0x340 [ 626.359787][T31375] __se_sys_futex+0x28f/0x300 [ 626.359798][T31375] ? fput+0x1a5/0x240 [ 626.359816][T31375] ? __x64_sys_futex+0x110/0x110 [ 626.359842][T31375] ? __cfi_ksys_write+0x10/0x10 [ 626.359862][T31375] __x64_sys_futex+0xe9/0x110 [ 626.359882][T31375] x64_sys_call+0x227f/0x2ee0 [ 626.359910][T31375] do_syscall_64+0x58/0xf0 [ 626.359930][T31375] ? clear_bhb_loop+0x50/0xa0 [ 626.359957][T31375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 626.359973][T31375] RIP: 0033:0x7f340ad8ec29 [ 626.359983][T31375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.359997][T31375] RSP: 002b:00007f340bb7c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 626.360019][T31375] RAX: ffffffffffffffda RBX: 00007f340afd5fa0 RCX: 00007f340ad8ec29 [ 626.360034][T31375] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000200000000b00 [ 626.360048][T31375] RBP: 00007f340bb7c090 R08: 0000000000000000 R09: 0000000000000002 [ 626.360061][T31375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.360074][T31375] R13: 00007f340afd6038 R14: 00007f340afd5fa0 R15: 00007ffef647f818 [ 626.360091][T31375] [ 626.581997][T31483] netlink: 'syz.4.12443': attribute type 7 has an invalid length. [ 626.617879][T31483] netlink: 'syz.4.12443': attribute type 5 has an invalid length. [ 626.625980][T31483] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12443'. [ 626.674003][T31527] tipc: Enabling of bearer rejected, failed to enable media [ 626.687618][T31594] netlink: 7 bytes leftover after parsing attributes in process `syz.0.12447'. [ 626.700263][T31596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 626.700374][T31596] rust_binder: Error in use_page_slow: ESRCH [ 626.706826][T31596] rust_binder: use_range failure ESRCH [ 626.712891][T31596] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 626.718358][T31596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 626.726364][T31596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:988 [ 626.737299][T31596] rust_binder: Read failure Err(EAGAIN) in pid:988 [ 626.746609][T31596] rust_binder: Read failure Err(EAGAIN) in pid:988 [ 626.754657][T31601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.775117][T31601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.050272][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 627.210687][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 627.216898][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 627.225159][ T9] usb 3-1: config 0 has no interface number 0 [ 627.232601][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 627.241631][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.249639][ T9] usb 3-1: Product: syz [ 627.253827][ T9] usb 3-1: Manufacturer: syz [ 627.258421][ T9] usb 3-1: SerialNumber: syz [ 627.271131][ T9] usb 3-1: config 0 descriptor?? [ 627.285082][ T9] smsc95xx v2.0.0 [ 627.289142][T31610] netlink: 'syz.0.12454': attribute type 7 has an invalid length. [ 627.311267][T31610] netlink: 'syz.0.12454': attribute type 5 has an invalid length. [ 627.333911][T31610] netlink: 17 bytes leftover after parsing attributes in process `syz.0.12454'. [ 627.436971][T31625] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 627.507969][T31617] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.526161][T31617] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.535865][T31617] bridge_slave_0: entered allmulticast mode [ 627.543539][T31617] bridge_slave_0: entered promiscuous mode [ 627.551461][T31617] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.558555][T31617] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.567639][T31617] bridge_slave_1: entered allmulticast mode [ 627.574872][T31617] bridge_slave_1: entered promiscuous mode [ 627.637774][T31617] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.644829][T31617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.652103][T31617] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.659132][T31617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.679399][ T2247] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.691278][ T2247] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.702466][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.709558][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.720578][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.727632][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.762542][T31617] veth0_vlan: entered promiscuous mode [ 627.775887][T31617] veth1_macvtap: entered promiscuous mode [ 628.066354][ T400] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 628.147667][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 628.158423][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 628.226735][ T400] usb 4-1: Using ep0 maxpacket: 32 [ 628.233695][ T400] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 628.242146][ T400] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 628.250805][ T400] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 628.259819][ T400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 628.269542][ T400] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 628.279287][ T400] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 628.292627][ T400] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 628.302128][ T400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.310840][ T400] usb 4-1: config 0 descriptor?? [ 628.324026][ T326] rust_binder: Write failure EINVAL in pid:644 [ 628.324057][ T326] rust_binder: Write failure EINVAL in pid:644 [ 628.344652][ T332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=332 comm=syz.4.12486 [ 628.410032][ T338] sit0: entered promiscuous mode [ 628.416704][ T338] netlink: 'syz.4.12488': attribute type 1 has an invalid length. [ 628.425315][ T338] netlink: 1 bytes leftover after parsing attributes in process `syz.4.12488'. [ 628.524914][ T344] /dev/rnullb0: Can't lookup blockdev [ 628.537243][ T400] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 628.549933][ T400] usb 4-1: USB disconnect, device number 17 [ 628.558599][ T400] usblp0: removed [ 628.585614][ T355] netlink: 'syz.4.12493': attribute type 4 has an invalid length. [ 628.593788][ T355] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 628.604393][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 628.616239][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 628.627786][ T9] usb 3-1: USB disconnect, device number 69 [ 628.673914][ T359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.682576][ T359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.692221][ T359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.701017][ T359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.710407][ T359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.718940][ T359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.727707][ T359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.736366][ T359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.889837][ T400] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 629.060952][ T400] usb 4-1: Using ep0 maxpacket: 32 [ 629.067170][ T400] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 629.075581][ T400] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 629.084246][ T400] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 629.093213][ T400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 629.102860][ T400] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 629.112524][ T400] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 629.125514][ T400] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 629.134528][ T400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.143508][ T400] usb 4-1: config 0 descriptor?? [ 629.365060][ T400] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 629.377466][ T400] usb 4-1: USB disconnect, device number 18 [ 629.379549][ T484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 629.384840][ T400] usblp0: removed [ 629.410477][ T490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.419469][ T490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.776861][ T400] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 629.938935][ T400] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 629.947718][ T400] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 629.957909][ T400] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 629.966848][ T400] usb 4-1: config 1 has no interface number 0 [ 629.972941][ T400] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 629.983649][ T400] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 629.997951][ T400] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.007169][ T400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.015167][ T400] usb 4-1: Product: syz [ 630.019334][ T400] usb 4-1: Manufacturer: syz [ 630.023935][ T400] usb 4-1: SerialNumber: syz [ 630.030103][ T400] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 630.036979][ T400] cdc_ncm 4-1:1.1: bind() failure [ 630.244725][ T65] usb 4-1: USB disconnect, device number 19 [ 630.389092][ T1045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:701 [ 630.433933][ T1052] netlink: 'syz.2.12531': attribute type 16 has an invalid length. [ 630.451020][ T1052] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.12531'. [ 630.461844][ T1054] netlink: 'syz.2.12531': attribute type 16 has an invalid length. [ 630.472795][ T1054] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.12531'. [ 630.500346][ T1059] rust_binder: Write failure EFAULT in pid:707 [ 630.500536][ T1059] binder: Bad value for 'max' [ 630.563022][ T1078] netlink: 'syz.4.12541': attribute type 15 has an invalid length. [ 630.571012][ T1078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12541'. [ 630.669721][ T1084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.678706][ T1084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.829240][ T1093] tipc: Started in network mode [ 630.834133][ T1093] tipc: Node identity ac14142c, cluster identity 4711 [ 630.843899][ T1093] tipc: Enabled bearer , priority 10 [ 630.852075][ T1093] tipc: Enabled bearer , priority 0 [ 630.859646][ T1093] tipc: Disabling bearer [ 631.040674][ T1110] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 631.103995][ T1120] devpts: called with bogus options [ 631.246206][ T1132] fuse: Bad value for 'fd' [ 631.259759][ T1135] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=39957 sclass=netlink_xfrm_socket pid=1135 comm=syz.4.12564 [ 631.298263][ T400] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 631.479115][ T400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.488931][ T400] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 631.497946][ T400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.506721][ T400] usb 4-1: config 0 descriptor?? [ 631.941995][ T400] lenovo 0003:17EF:6047.0035: item fetching failed at offset 2/5 [ 631.950062][ T400] lenovo 0003:17EF:6047.0035: hid_parse failed [ 631.956265][ T400] lenovo 0003:17EF:6047.0035: probe with driver lenovo failed with error -22 [ 632.034226][ T65] tipc: Node number set to 2886997036 [ 632.317929][ T9] usb 4-1: USB disconnect, device number 20 [ 632.373104][ T1402] netlink: 'syz.2.12592': attribute type 4 has an invalid length. [ 632.382270][ T1402] netlink: 'syz.2.12592': attribute type 4 has an invalid length. [ 632.643250][ T1431] tmpfs: Unknown parameter '0x0000000000000003' [ 632.881943][ T1461] __vm_enough_memory: pid: 1461, comm: syz.3.12617, bytes: 18014402804453376 not enough memory for the allocation [ 632.928522][ T1467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 632.928543][ T1467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:40 [ 632.956519][ T1471] netlink: 'syz.3.12621': attribute type 4 has an invalid length. [ 632.977322][ T1471] netlink: 'syz.3.12621': attribute type 4 has an invalid length. [ 632.987328][ T1471] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 632.996849][ T36] audit: type=1400 audit(1142.568:64749): avc: denied { relabelto } for pid=1470 comm="syz.3.12621" name="rnullb0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 633.019848][ T1473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.031641][ T1473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.039397][ T36] audit: type=1400 audit(1142.568:64750): avc: denied { associate } for pid=1470 comm="syz.3.12621" name="rnullb0" dev="devtmpfs" ino=788 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 633.220746][ T1490] rust_binder: Fixups oob 165 172 361 173 [ 633.220765][ T1490] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 633.226678][ T1490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 633.235163][ T1490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 633.403708][ T36] audit: type=1326 audit(1142.951:64751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1491 comm="syz.2.12629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f22d2f8ec29 code=0x0 [ 633.781895][ T1507] netlink: 'syz.0.12634': attribute type 7 has an invalid length. [ 633.790089][ T1507] netlink: 'syz.0.12634': attribute type 5 has an invalid length. [ 633.798099][ T1507] netlink: 17 bytes leftover after parsing attributes in process `syz.0.12634'. [ 634.101332][ T1526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57 [ 635.520847][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 635.691957][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 635.698393][ T9] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 635.708561][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 635.716493][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 635.725631][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.733611][ T9] usb 4-1: Product: syz [ 635.737812][ T9] usb 4-1: Manufacturer: syz [ 635.742395][ T9] usb 4-1: SerialNumber: syz [ 635.747901][ T1746] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 635.971490][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 635.980979][ T9] usb 4-1: USB disconnect, device number 21 [ 636.283433][ T2173] netlink: 'syz.0.12659': attribute type 1 has an invalid length. [ 636.318537][ T2179] overlayfs: failed to clone upperpath [ 636.332275][ T2181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12663'. [ 636.350127][ T36] audit: type=1400 audit(1145.710:64752): avc: denied { module_load } for pid=2182 comm="syz.0.12664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 636.350142][ T2183] Invalid ELF header type: 3 != 1 [ 636.374592][ T2183] Invalid ELF header type: 3 != 1 [ 636.380055][ T2183] Invalid ELF header type: 2 != 1 [ 636.432686][ T2292] overlayfs: failed to clone upperpath [ 636.440642][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 636.611768][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 636.617988][ T9] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 636.628231][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 636.636303][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 636.645370][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.653349][ T9] usb 4-1: Product: syz [ 636.657535][ T9] usb 4-1: Manufacturer: syz [ 636.662121][ T9] usb 4-1: SerialNumber: syz [ 636.667628][ T1746] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 637.103903][ T1746] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 637.206092][ T2839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:770 [ 637.206222][ T2839] rust_binder: 770: no such ref 2 [ 637.260538][ T2857] 9pnet: Unknown protocol version 9 [ 637.541276][ T9] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 637.760659][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 14! [ 637.769341][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification ab! [ 637.777993][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 9a! [ 637.786880][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification db! [ 637.795861][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 7c! [ 637.809977][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 50! [ 637.820882][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification dd! [ 638.049633][ T400] usb 4-1: USB disconnect, device number 22 [ 638.290330][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 638.294201][ T400] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 638.349202][ T36] audit: type=1400 audit(1147.580:64753): avc: denied { read } for pid=2890 comm="syz.4.12695" name="rnullb0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 638.377260][ T36] audit: type=1400 audit(1147.580:64754): avc: denied { open } for pid=2890 comm="syz.4.12695" path="/dev/rnullb0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 638.412875][ T36] audit: type=1400 audit(1147.580:64755): avc: denied { map } for pid=2890 comm="syz.4.12695" path="/dev/rnullb0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 638.489255][ T36] audit: type=1400 audit(1147.580:64756): avc: denied { execute } for pid=2890 comm="syz.4.12695" path="/dev/rnullb0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 638.550694][ T36] audit: type=1400 audit(1147.673:64757): avc: denied { write } for pid=2900 comm="syz.4.12697" name="rnullb0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 638.772309][ T2941] /dev/rnullb0: Can't lookup blockdev [ 638.910186][ T2960] netlink: 'syz.4.12711': attribute type 11 has an invalid length. [ 639.353858][ T2971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12717'. [ 639.411628][ T3079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.421825][ T3079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.659887][ T10] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 639.821328][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 639.832409][ T10] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 639.841446][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.850094][ T10] usb 4-1: config 0 descriptor?? [ 640.072960][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 640.078947][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 640.087469][ T10] usb 4-1: USB disconnect, device number 23 [ 640.216839][ T3090] overlayfs: failed to clone upperpath [ 640.223757][ T3090] IPv6: Can't replace route, no match found [ 640.230610][ T36] audit: type=1400 audit(1149.337:64758): avc: denied { lock } for pid=3089 comm="syz.0.12725" path="socket:[169477]" dev="sockfs" ino=169477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 640.506046][ T3227] overlayfs: failed to clone lowerpath [ 640.770260][ T3247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.779524][ T3247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.964704][ T1788] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 641.146504][ T1788] usb 4-1: Using ep0 maxpacket: 16 [ 641.153329][ T1788] usb 4-1: config 0 has an invalid interface number: 40 but max is 1 [ 641.161442][ T1788] usb 4-1: config 0 has an invalid interface number: 226 but max is 1 [ 641.169641][ T1788] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 641.178307][ T1788] usb 4-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 641.188570][ T1788] usb 4-1: config 0 has no interface number 0 [ 641.194664][ T1788] usb 4-1: config 0 has no interface number 1 [ 641.200803][ T1788] usb 4-1: config 0 interface 40 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 641.211595][ T1788] usb 4-1: config 0 interface 226 altsetting 11 endpoint 0x8 has an invalid bInterval 48, changing to 9 [ 641.222729][ T1788] usb 4-1: config 0 interface 226 altsetting 11 endpoint 0x8 has invalid maxpacket 8205, setting to 1024 [ 641.234209][ T1788] usb 4-1: config 0 interface 226 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 641.247332][ T1788] usb 4-1: config 0 interface 40 has no altsetting 0 [ 641.254082][ T1788] usb 4-1: config 0 interface 226 has no altsetting 0 [ 641.262212][ T1788] usb 4-1: Dual-Role OTG device on HNP port [ 641.268357][ T1788] usb 4-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=f0.13 [ 641.280247][ T1788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.288659][ T1788] usb 4-1: Product: ␊ [ 641.293324][ T1788] usb 4-1: Manufacturer: п [ 641.297927][ T1788] usb 4-1: SerialNumber: ఁ [ 641.303583][ T1788] usb 4-1: config 0 descriptor?? [ 641.358749][ T3260] tipc: Enabled bearer , priority 0 [ 641.366585][ T3260] tipc: Disabling bearer [ 641.385241][ T3262] overlayfs: failed to clone lowerpath [ 641.526027][ T3251] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 641.538322][ T3251] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 641.548713][ T3251] rust_binder: Write failure EINVAL in pid:88 [ 641.549013][ T3251] rust_binder: 88: no such ref 2 [ 641.560223][ T3251] rust_binder: 88: no such ref 0 [ 641.560281][ T3579] fuse: Bad value for 'fd' [ 641.697695][ T3692] overlayfs: failed to clone lowerpath [ 641.706147][ T3694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 641.706182][ T3694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:819 [ 641.707944][ T3696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12766'. [ 641.734143][ T3696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12766'. [ 641.750410][ T3698] fuse: Bad value for 'fd' [ 641.879827][ T3720] netlink: 'syz.4.12777': attribute type 7 has an invalid length. [ 641.887839][ T3720] netlink: 'syz.4.12777': attribute type 5 has an invalid length. [ 641.900641][ T3720] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12777'. [ 641.945077][ T3728] /dev/rnullb0: Can't lookup blockdev [ 641.961476][ T36] audit: type=1400 audit(1150.955:64759): avc: denied { read } for pid=3730 comm="syz.4.12782" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 641.985285][ T36] audit: type=1400 audit(1150.955:64760): avc: denied { open } for pid=3730 comm="syz.4.12782" path="/301/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 642.010026][ T36] audit: type=1400 audit(1150.955:64761): avc: denied { ioctl } for pid=3730 comm="syz.4.12782" path="/301/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 642.080404][ T3734] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12783'. [ 642.115278][ T3736] ./file0: Can't lookup blockdev [ 642.121397][ T3736] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12784'. [ 642.130834][ T3736] rust_binder: Error while translating object. [ 642.130865][ T3736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 642.137019][ T3736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:846 [ 642.400678][ T3744] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12788'. [ 642.801025][ T4076] fuse: Bad value for 'fd' [ 642.830120][ T4082] netlink: 'syz.0.12803': attribute type 4 has an invalid length. [ 642.838871][ T4082] netlink: 'syz.0.12803': attribute type 17 has an invalid length. [ 642.852103][ T4086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.883507][ T4086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.937394][ T4164] fuse: Bad value for 'fd' [ 643.072919][ T4455] SELinux: ebitmap: truncated map [ 643.078131][ T4455] SELinux: failed to load policy [ 643.105618][ T4535] fuse: Bad value for 'fd' [ 643.131452][ T4539] overlayfs: cannot append lower layer [ 643.319407][ T36] audit: type=1326 audit(1152.227:64762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.12829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea4058ec29 code=0x0 [ 643.437803][ T4746] netlink: 'syz.0.12829': attribute type 11 has an invalid length. [ 643.867686][ T4749] 9pnet_fd: Insufficient options for proto=fd [ 643.934906][ T1788] usb 4-1: USB disconnect, device number 24 [ 645.339040][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 645.372363][ T5128] bridge0: port 3(veth0_to_team) entered blocking state [ 645.379328][ T5128] bridge0: port 3(veth0_to_team) entered disabled state [ 645.386591][ T5128] veth0_to_team: entered allmulticast mode [ 645.392832][ T5128] veth0_to_team: entered promiscuous mode [ 645.510187][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 645.519306][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12861'. [ 645.519403][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 645.528531][ T5139] erspan0: entered promiscuous mode [ 645.536790][ T10] usb 4-1: config 7 has an invalid interface number: 103 but max is 2 [ 645.549448][ T10] usb 4-1: config 7 has an invalid interface number: 3 but max is 2 [ 645.563055][ T10] usb 4-1: config 7 has an invalid interface number: 134 but max is 2 [ 645.571408][ T10] usb 4-1: config 7 has no interface number 0 [ 645.572164][ T5144] bridge0: port 3(veth0_to_team) entered disabled state [ 645.577597][ T10] usb 4-1: config 7 has no interface number 1 [ 645.590615][ T10] usb 4-1: config 7 has no interface number 2 [ 645.598340][ T10] usb 4-1: config 7 interface 3 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 645.611850][ T10] usb 4-1: config 7 interface 103 has no altsetting 0 [ 645.618714][ T10] usb 4-1: config 7 interface 3 has no altsetting 0 [ 645.625395][ T10] usb 4-1: config 7 interface 134 has no altsetting 0 [ 645.633699][ T10] usb 4-1: New USB device found, idVendor=4971, idProduct=1012, bcdDevice=36.82 [ 645.643020][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.651067][ T10] usb 4-1: Product: syz [ 645.655223][ T10] usb 4-1: Manufacturer: syz [ 645.659890][ T10] usb 4-1: SerialNumber: syz [ 645.665329][ T10] usb 4-1: Interface #103 referenced by multiple IADs [ 645.672888][ T10] usb 4-1: Interface #134 referenced by multiple IADs [ 645.788237][ T36] audit: type=1326 audit(1154.527:64763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.2.12872" exe="/root/syz-executor" sig=9 arch=c000003e syscall=317 compat=0 ip=0x7f22d2f8ec29 code=0x0 [ 645.895897][ T5023] rust_binder: Write failure EINVAL in pid:115 [ 646.289775][ T400] usb 5-1: USB disconnect, device number 28 [ 646.549394][ T46] bridge_slave_1: left allmulticast mode [ 646.555412][ T46] bridge_slave_1: left promiscuous mode [ 646.561182][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.568822][ T46] bridge_slave_0: left allmulticast mode [ 646.574679][ T46] bridge_slave_0: left promiscuous mode [ 646.580426][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.785908][ T46] tipc: Left network mode [ 646.794878][ T46] veth1_macvtap: left promiscuous mode [ 646.800417][ T46] veth0_vlan: left promiscuous mode [ 646.863561][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.879864][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.886981][ T5184] bridge_slave_0: entered allmulticast mode [ 646.911118][ T5184] bridge_slave_0: entered promiscuous mode [ 646.918071][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.925586][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.933210][ T5184] bridge_slave_1: entered allmulticast mode [ 646.942461][ T5184] bridge_slave_1: entered promiscuous mode [ 646.998547][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.005606][ T5184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.012887][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.019930][ T5184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.045955][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.053904][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.063762][ T2247] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.070859][ T2247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.080285][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.087363][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.121251][ T5184] veth0_vlan: entered promiscuous mode [ 647.135211][ T5184] veth1_macvtap: entered promiscuous mode [ 647.472279][ T5232] rust_binder: Write failure EFAULT in pid:20 [ 648.301064][ T10] usb-storage 4-1:7.103: USB Mass Storage device detected [ 648.324955][ T10] usb-storage 4-1:7.103: Quirks match for vid 4971 pid 1012: 800000 [ 648.357204][ T10] usb-storage 4-1:7.3: USB Mass Storage device detected [ 648.364758][ T10] usb-storage 4-1:7.3: Quirks match for vid 4971 pid 1012: 800000 [ 648.396707][ T5584] binder: Unknown parameter '5G' [ 648.403370][ T5584] binder: Unknown parameter '5G' [ 648.409122][ T10] usb-storage 4-1:7.134: USB Mass Storage device detected [ 648.419829][ T10] usb-storage 4-1:7.134: Quirks match for vid 4971 pid 1012: 800000 [ 648.435055][ T36] audit: type=1400 audit(1157.004:64764): avc: denied { mounton } for pid=5587 comm="syz.1.12914" path="/proc/29/cgroup" dev="proc" ino=171570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 648.497926][ T10] usb 4-1: USB disconnect, device number 25 [ 648.804293][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 648.815253][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 648.964729][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 648.970907][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.982040][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.991863][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 649.004850][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 649.013952][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.023786][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.033948][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 649.045352][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 649.054745][ T9] usb 2-1: config 0 descriptor?? [ 649.059894][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 649.069396][ T10] usb 4-1: SerialNumber: syz [ 649.160749][ T5930] overlayfs: failed to clone upperpath [ 649.167366][ T5930] tmpfs: Invalid uid '0x00000000ffffffff' [ 649.187258][ T5932] tipc: Enabling of bearer rejected, already enabled [ 649.302860][ T10] usb 4-1: 0:2 : does not exist [ 649.317687][ T10] usb 4-1: unit 5 not found! [ 649.328613][ T10] usb 4-1: USB disconnect, device number 26 [ 649.497277][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0xd [ 649.505368][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0x2 [ 649.512905][ T9] microsoft 0003:045E:07DA.0036: unknown main item tag 0x5 [ 649.520112][ T9] microsoft 0003:045E:07DA.0036: report_id 6058 is invalid [ 649.527416][ T9] microsoft 0003:045E:07DA.0036: item 0 2 1 8 parsing failed [ 649.534965][ T9] microsoft 0003:045E:07DA.0036: parse failed [ 649.541083][ T9] microsoft 0003:045E:07DA.0036: probe with driver microsoft failed with error -22 [ 649.710831][ T5601] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 649.711441][ T6156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 649.722741][ T1788] usb 2-1: USB disconnect, device number 15 [ 649.881354][ T6171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:123 [ 650.106386][ T6155] netlink: 'syz.2.12941': attribute type 11 has an invalid length. [ 650.128556][ T6155] netlink: 'syz.2.12941': attribute type 2 has an invalid length. [ 650.226334][ T6612] binder: Unknown parameter 's [ 650.226334][ T6612] slabel' [ 650.263474][ T36] audit: type=1326 audit(1158.715:64765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.12965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2f8ec29 code=0x7ffc0000 [ 650.298337][ T36] audit: type=1326 audit(1158.715:64766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.12965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2f8ec29 code=0x7ffc0000 [ 650.321772][ T36] audit: type=1326 audit(1158.715:64767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.12965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2f8ec29 code=0x7ffc0000 [ 650.358724][ T36] audit: type=1326 audit(1158.715:64768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.12965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2f8ec29 code=0x7ffc0000 [ 650.381950][ T36] audit: type=1326 audit(1158.715:64769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.12965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f22d2f8ec29 code=0x7ffc0000 [ 650.405240][ T36] audit: type=1326 audit(1158.715:64770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.12965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2f8ec29 code=0x7ffc0000 [ 650.429365][ T36] audit: type=1326 audit(1158.715:64771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.12965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2f8ec29 code=0x7ffc0000 [ 650.464057][ T36] audit: type=1326 audit(1158.715:64772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6616 comm="syz.2.12965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d2f8ec29 code=0x7ffc0000 [ 650.489612][ T6630] overlay: filesystem on ./bus not supported as upperdir [ 650.498689][ T6630] overlay: filesystem on ./bus not supported as upperdir [ 650.515697][ T6630] overlay: filesystem on ./bus not supported as upperdir [ 650.529193][ T6630] overlay: filesystem on ./bus not supported as upperdir [ 650.542386][ T6630] overlay: filesystem on ./bus not supported as upperdir [ 651.266389][ T7302] netlink: 'syz.1.12995': attribute type 29 has an invalid length. [ 651.274317][ T7302] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.12995'. [ 651.440667][ T7314] rust_binder: 85: no such ref 0 [ 651.445647][ T7314] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 651.452820][ T7314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 651.512855][ T7321] rust_binder: 7319 RLIMIT_NICE not set [ 651.535065][ T1788] rust_binder: 7318: removing orphan mapping 0:4248 [ 651.699215][ T7332] cannot load conntrack support for proto=3 [ 651.788234][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 651.949727][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.960682][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.970440][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 651.979493][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.990210][ T10] usb 2-1: config 0 descriptor?? [ 652.433509][ T10] usb 2-1: string descriptor 0 read error: -71 [ 652.440214][ T10] uclogic 0003:256C:006D.0037: failed retrieving string descriptor #200: -71 [ 652.449096][ T10] uclogic 0003:256C:006D.0037: failed retrieving pen parameters: -71 [ 652.457206][ T10] uclogic 0003:256C:006D.0037: failed probing pen v2 parameters: -71 [ 652.465325][ T10] uclogic 0003:256C:006D.0037: failed probing parameters: -71 [ 652.472908][ T10] uclogic 0003:256C:006D.0037: probe with driver uclogic failed with error -71 [ 652.483567][ T10] usb 2-1: USB disconnect, device number 16 [ 652.566882][ T7342] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 652.574116][ T7342] rust_binder: Write failure EINVAL in pid:97 [ 652.601081][ T36] kauditd_printk_skb: 574 callbacks suppressed [ 652.618468][ T36] audit: type=1400 audit(1160.894:65347): avc: denied { append } for pid=7350 comm="syz.1.13010" name="rnullb0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 652.647453][ T36] audit: type=1400 audit(1160.894:65348): avc: denied { ioctl } for pid=7350 comm="syz.1.13010" path="/dev/rnullb0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 652.683053][ T7347] rust_binder: Got transaction with invalid offset. [ 652.683107][ T7347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 652.692279][ T7347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 652.775361][ T7374] overlayfs: missing 'lowerdir' [ 652.793098][ T7376] __vm_enough_memory: pid: 7376, comm: syz.1.13019, bytes: 18014402804453376 not enough memory for the allocation [ 652.821972][ T7382] rust_binder: 7382 RLIMIT_NICE not set [ 652.825341][ T1788] rust_binder: 7381: removing orphan mapping 0:1024 [ 652.871825][ T7380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:155 [ 652.871967][ T7378] rust_binder: 7379 RLIMIT_NICE not set [ 652.892403][ T7379] rust_binder: Read failure Err(EFAULT) in pid:155 [ 652.954691][ T7390] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 652.971774][ T7390] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 652.989300][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 652.998665][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.007986][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.017306][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.026696][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.036130][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.045411][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.054756][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.064038][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.073347][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.082620][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.091909][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.101429][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.110724][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.119976][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.129242][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.138504][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.147806][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.157087][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.166395][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.175717][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.185283][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.194611][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.203977][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.213582][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.222920][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.232506][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.241940][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.251336][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.260639][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.270369][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.279682][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.289032][ T7390] SELinux: security_context_str_to_sid (syVt_-A : ) failed with errno=-22 [ 653.571136][ T7512] rust_binder: 7509 RLIMIT_NICE not set [ 654.802545][ T7559] 9pnet_fd: Insufficient options for proto=fd [ 654.967813][ T36] audit: type=1400 audit(1163.119:65349): avc: denied { create } for pid=7788 comm="syz.0.13060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 656.550091][ T36] audit: type=1326 audit(1164.597:65350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7827 comm="syz.1.13074" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f88d8ec29 code=0x0 [ 656.619897][ T9] rust_binder: 7508: removing orphan mapping 0:4120 [ 656.634309][ T7833] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 656.634334][ T7833] rust_binder: Error while translating object. [ 656.646096][ T7833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 656.655472][ T7833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 657.534410][ T8208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 657.543654][ T8208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:155 [ 657.563299][ T8210] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 657.580913][ T8210] rust_binder: Write failure EINVAL in pid:157 [ 657.708692][ T12] bridge_slave_1: left allmulticast mode [ 657.721075][ T12] bridge_slave_1: left promiscuous mode [ 657.727218][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.735075][ T12] bridge_slave_0: left allmulticast mode [ 657.740756][ T12] bridge_slave_0: left promiscuous mode [ 657.746734][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.837758][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.844867][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.851974][ T8213] bridge_slave_0: entered allmulticast mode [ 657.859397][ T8213] bridge_slave_0: entered promiscuous mode [ 657.866726][ T12] veth1_macvtap: left promiscuous mode [ 657.872393][ T12] veth0_vlan: left promiscuous mode [ 657.916441][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.923631][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.931991][ T8213] bridge_slave_1: entered allmulticast mode [ 657.941122][ T8213] bridge_slave_1: entered promiscuous mode [ 658.021222][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.028284][ T8213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.035591][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.042645][ T8213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.061427][ T2247] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.068758][ T2247] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.086218][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.093305][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.103254][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.110333][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.142830][ T8213] veth0_vlan: entered promiscuous mode [ 658.161759][ T8213] veth1_macvtap: entered promiscuous mode [ 658.211730][ T8452] rust_binder: 2: no such ref 2 [ 658.472489][ T8476] rust_binder: 15: no such ref 2 [ 658.533048][ T8477] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 658.750833][ T8483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=8483 comm=syz.2.13125 [ 659.457386][ T36] audit: type=1326 audit(1167.317:65351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.2.13146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22d2f8ec29 code=0x0 [ 659.734806][ T400] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 659.895188][ T400] usb 8-1: Using ep0 maxpacket: 32 [ 659.901459][ T400] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 659.909700][ T400] usb 8-1: config 0 has no interface number 0 [ 659.915799][ T400] usb 8-1: config 0 interface 184 has no altsetting 0 [ 659.924000][ T400] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 659.933078][ T400] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.941147][ T400] usb 8-1: Product: syz [ 659.945328][ T400] usb 8-1: Manufacturer: syz [ 659.950123][ T400] usb 8-1: SerialNumber: syz [ 659.955329][ T400] usb 8-1: config 0 descriptor?? [ 659.961081][ T400] smsc75xx v1.0.0 [ 660.273701][ T36] audit: type=1400 audit(1168.075:65352): avc: denied { create } for pid=9053 comm="syz.0.13154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 660.449454][ T9078] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 660.457150][ T9078] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 660.464348][ T9078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:232 [ 660.478199][ T9081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 660.487413][ T9081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:234 [ 660.563298][ T9084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:236 [ 660.604307][ T400] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 660.624342][ T400] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 661.276421][ T400] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 661.287499][ T400] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 661.297582][ T400] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 661.307504][ T400] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61 [ 661.341466][ T36] audit: type=1400 audit(1169.075:65353): avc: denied { getattr } for pid=9191 comm="syz.3.13168" name="/" dev="incremental-fs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 661.371631][ T36] audit: type=1400 audit(1169.103:65354): avc: denied { read write } for pid=9191 comm="syz.3.13168" name=".log" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 661.394182][ T36] audit: type=1400 audit(1169.103:65355): avc: denied { open } for pid=9191 comm="syz.3.13168" path="/78/bus/.log" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 661.422367][ T36] audit: type=1400 audit(1169.150:65356): avc: denied { read write } for pid=31617 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 661.430463][ T9199] tipc: Enabling of bearer rejected, failed to enable media [ 661.446353][ T36] audit: type=1400 audit(1169.150:65357): avc: denied { open } for pid=31617 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 661.465562][ T9199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 661.479028][ T9199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:244 [ 661.480624][ T36] audit: type=1400 audit(1169.150:65358): avc: denied { ioctl } for pid=31617 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 661.522952][ T36] audit: type=1400 audit(1169.178:65359): avc: denied { set_context_mgr } for pid=9198 comm="syz.3.13170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 661.544235][ T36] audit: type=1400 audit(1169.178:65360): avc: denied { call } for pid=9198 comm="syz.3.13170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 662.445082][ T9222] SELinux: security_context_str_to_sid () failed with errno=-22 [ 662.703218][ T1788] usb 8-1: USB disconnect, device number 8 [ 663.043410][ T9261] rust_binder: Error in use_page_slow: ESRCH [ 663.043428][ T9261] rust_binder: use_range failure ESRCH [ 663.054944][ T9261] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 663.054971][ T9261] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 663.063299][ T9261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:44 [ 663.339042][ T1788] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 663.499443][ T1788] usb 8-1: Using ep0 maxpacket: 32 [ 663.505600][ T1788] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 663.514000][ T1788] usb 8-1: config 0 has no interface number 0 [ 663.520076][ T1788] usb 8-1: config 0 interface 184 has no altsetting 0 [ 663.528196][ T1788] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 663.537418][ T1788] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.545423][ T1788] usb 8-1: Product: syz [ 663.549660][ T1788] usb 8-1: Manufacturer: syz [ 663.554272][ T1788] usb 8-1: SerialNumber: syz [ 663.559475][ T1788] usb 8-1: config 0 descriptor?? [ 663.565118][ T1788] smsc75xx v1.0.0 [ 664.208390][ T1788] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 664.219472][ T1788] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 664.412736][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13199'. [ 664.422523][ T9292] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9292 comm=syz.2.13199 [ 664.871503][ T1788] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 664.882415][ T1788] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 664.891982][ T1788] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 664.901473][ T1788] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61 [ 665.923755][ T9517] netlink: 393 bytes leftover after parsing attributes in process `syz.0.13207'. [ 665.959362][ T1788] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 666.119764][ T1788] usb 4-1: Using ep0 maxpacket: 16 [ 666.125969][ T1788] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 666.136142][ T1788] usb 4-1: config 1 interface 0 has no altsetting 0 [ 666.144114][ T1788] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 666.153247][ T1788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.161228][ T1788] usb 4-1: Product: syz [ 666.165433][ T1788] usb 4-1: Manufacturer: syz [ 666.170021][ T1788] usb 4-1: SerialNumber: syz [ 666.175589][ T9306] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 666.308906][ T400] usb 8-1: USB disconnect, device number 9 [ 666.319962][ T9632] binder: Unknown parameter 'fscontext?}' [ 666.399058][ T1788] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 666.409010][ T1788] usb 4-1: USB disconnect, device number 27 [ 666.528811][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 666.528833][ T36] audit: type=1400 audit(1173.928:65362): avc: denied { bind } for pid=9635 comm="syz.7.13216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 666.662934][ T9844] overlayfs: failed to clone lowerpath [ 666.868456][ T1788] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 667.028862][ T1788] usb 4-1: Using ep0 maxpacket: 16 [ 667.034973][ T1788] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 667.045326][ T1788] usb 4-1: config 1 interface 0 has no altsetting 0 [ 667.053256][ T1788] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 667.062351][ T1788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.070324][ T1788] usb 4-1: Product: syz [ 667.074519][ T1788] usb 4-1: Manufacturer: syz [ 667.079103][ T1788] usb 4-1: SerialNumber: syz [ 667.084557][ T9306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 667.335226][T10163] batadv_slave_1: entered promiscuous mode [ 667.342575][T10164] overlayfs: missing 'lowerdir' [ 667.348046][T10164] tmpfs: Unknown parameter 'overlay' [ 667.358145][T10161] batadv_slave_1: left promiscuous mode [ 667.500562][ T12] bridge_slave_1: left allmulticast mode [ 667.506428][ T12] bridge_slave_1: left promiscuous mode [ 667.512197][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.519669][ T12] bridge_slave_0: left allmulticast mode [ 667.521309][ T9306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 667.525565][ T12] bridge_slave_0: left promiscuous mode [ 667.538723][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.616936][T10168] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.624032][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.631110][T10168] bridge_slave_0: entered allmulticast mode [ 667.637292][T10168] bridge_slave_0: entered promiscuous mode [ 667.643715][T10168] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.650763][T10168] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.657801][T10168] bridge_slave_1: entered allmulticast mode [ 667.664096][T10168] bridge_slave_1: entered promiscuous mode [ 667.695960][ T12] veth1_macvtap: left promiscuous mode [ 667.701555][ T12] veth0_vlan: left promiscuous mode [ 667.761234][T10168] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.768308][T10168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.775596][T10168] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.782645][T10168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.806445][ T2247] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.815396][ T2247] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.825017][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.832079][ T8450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.842051][ T2247] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.849124][ T2247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.875587][T10168] veth0_vlan: entered promiscuous mode [ 667.887221][T10168] veth1_macvtap: entered promiscuous mode [ 667.970789][ T1788] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 668.186400][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 14! [ 668.194442][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification ab! [ 668.203504][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 9a! [ 668.212290][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification db! [ 668.213412][T10347] rust_binder: Write failure EFAULT in pid:4 [ 668.221079][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 7c! [ 668.236091][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 50! [ 668.245156][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification dd! [ 668.253964][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification ae! [ 668.262884][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 13! [ 668.271702][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 49! [ 668.280387][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 46! [ 668.289076][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 85! [ 668.297706][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification c1! [ 668.300900][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13240'. [ 668.306329][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 58! [ 668.397897][T10417] netlink: 'syz.5.13238': attribute type 16 has an invalid length. [ 668.405925][T10417] netlink: 'syz.5.13238': attribute type 2 has an invalid length. [ 668.413975][T10417] netlink: 64086 bytes leftover after parsing attributes in process `syz.5.13238'. [ 668.525757][T10417] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 668.525785][T10417] rust_binder: Error while translating object. [ 668.540613][T10417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 668.546797][T10417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 668.558065][ T330] usb 4-1: USB disconnect, device number 28 [ 668.578804][ T330] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 668.602595][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 669.249702][T10569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 669.249809][T10569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 669.377791][ T36] audit: type=1400 audit(1176.583:65363): avc: denied { unlink } for pid=10572 comm="syz.5.13254" name="file0" dev="incremental-fs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 669.410024][ T36] audit: type=1400 audit(1176.621:65364): avc: denied { mounton } for pid=10572 comm="syz.5.13254" path="/6/file0/file0" dev="incremental-fs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 669.456802][ T36] audit: type=1400 audit(1176.667:65365): avc: denied { unmount } for pid=10168 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 669.485258][T10582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=10582 comm=syz.0.13257 [ 669.575815][T10586] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 669.586357][T10586] 9pnet_fd: Insufficient options for proto=fd [ 669.592562][T10586] 9pnet_fd: Insufficient options for proto=fd [ 669.734930][ T400] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 669.837154][T10807] overlayfs: failed to clone upperpath [ 669.895190][ T400] usb 6-1: Using ep0 maxpacket: 16 [ 669.901557][ T400] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 669.914912][ T400] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 669.924631][ T400] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 669.935189][ T400] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 669.944255][ T400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 669.952548][ T400] usb 6-1: SerialNumber: syz [ 669.958028][T10581] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 670.007061][T10812] rust_binder: Write failure EINVAL in pid:275 [ 670.038371][T10818] rust_binder: Error in use_page_slow: ESRCH [ 670.044645][T10818] rust_binder: use_range failure ESRCH [ 670.050915][T10818] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 670.056596][T10818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 670.064779][T10818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:281 [ 670.107438][ T36] audit: type=1400 audit(1177.266:65366): avc: denied { write } for pid=10819 comm="syz.3.13274" name="usbmon2" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 670.140308][ T36] audit: type=1400 audit(1177.285:65367): avc: denied { setattr } for pid=10819 comm="syz.3.13274" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 670.335783][ T400] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 670.345107][ T400] usb 6-1: USB disconnect, device number 84 [ 670.886286][T10844] rust_binder: Error while translating object. [ 670.886318][T10844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 670.892698][T10844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24 [ 670.988733][T10849] /dev/rnullb0: Can't lookup blockdev [ 671.013736][ T36] audit: type=1400 audit(1178.117:65368): avc: denied { transfer } for pid=10850 comm="syz.3.13285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 671.075914][T10857] overlayfs: failed to clone lowerpath [ 671.105679][T10865] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 3 [ 671.112941][T10865] rust_binder: Write failure EINVAL in pid:304 [ 671.167921][ T400] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 671.237860][ T36] audit: type=1326 audit(1178.322:65369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10871 comm="syz.0.13292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4058ec29 code=0x7fc00000 [ 671.341874][ T400] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.353198][ T400] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 671.363225][ T400] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 671.372731][ T400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 671.380948][ T400] usb 6-1: SerialNumber: syz [ 671.604250][ T400] usb 6-1: invalid UAC_HEADER (v1) [ 671.611250][ T400] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 671.621162][ T400] usb 6-1: USB disconnect, device number 85 [ 671.627997][T10809] udevd[10809]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 671.748084][T11709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 671.748115][T11709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:313 [ 672.003264][T11720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 672.013171][T11720] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 672.158459][T11734] overlayfs: failed to set uuid (11/file1, err=-1); falling back to uuid=null. [ 672.341642][T12049] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 672.369106][T12053] fuse: Unknown parameter 'grou00000000000000000000' [ 672.437765][T12261] netlink: 'syz.0.13335': attribute type 13 has an invalid length. [ 672.446007][T12261] erspan0: refused to change device tx_queue_len [ 672.451384][ T9] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 672.590367][ T9] usb 6-1: device descriptor read/64, error -71 [ 672.847061][ T9] usb 6-1: device descriptor read/64, error -71 [ 672.949035][T12391] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13345'. [ 673.114552][ T9] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 673.274854][ T9] usb 6-1: device descriptor read/64, error -71 [ 673.531551][ T9] usb 6-1: device descriptor read/64, error -71 [ 673.650631][ T9] usb usb6-port1: attempt power cycle [ 674.001414][T12830] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 674.001436][T12830] rust_binder: Read failure Err(EFAULT) in pid:350 [ 674.009874][T12830] netlink: 'syz.3.13360': attribute type 13 has an invalid length. [ 674.012855][ T9] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 674.035544][T12830] rust_binder: Error while translating object. [ 674.035587][T12830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 674.041761][T12830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:350 [ 674.045972][ T9] usb 6-1: device descriptor read/8, error -71 [ 674.206307][ T9] usb 6-1: device descriptor read/8, error -71 [ 674.246547][T12832] 9pnet_fd: Insufficient options for proto=fd [ 674.301598][ T400] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 674.462078][ T400] usb 4-1: Using ep0 maxpacket: 16 [ 674.462087][ T9] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 674.475732][ T400] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 674.483881][ T400] usb 4-1: config 0 has no interface number 0 [ 674.489964][ T400] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 674.499838][ T400] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 674.500662][ T9] usb 6-1: device descriptor read/8, error -71 [ 674.509765][ T400] usb 4-1: config 0 interface 41 has no altsetting 0 [ 674.523918][ T400] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 674.532968][ T400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.540980][ T400] usb 4-1: Product: syz [ 674.545125][ T400] usb 4-1: Manufacturer: syz [ 674.549730][ T400] usb 4-1: SerialNumber: syz [ 674.555504][ T400] usb 4-1: config 0 descriptor?? [ 674.561662][T12830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 674.568787][T12830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 674.655580][ T9] usb 6-1: device descriptor read/8, error -71 [ 674.772290][ T9] usb usb6-port1: unable to enumerate USB device [ 674.790194][T12830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 674.797396][T12830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 675.427474][T13066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 675.427502][T13066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:38 [ 675.477082][ T400] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 675.527797][T13070] rust_binder: Error while translating object. [ 675.527861][T13070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 675.534357][T13070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 676.148875][T13081] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 676.170795][T13085] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 676.186409][T13085] rust_binder: Write failure EINVAL in pid:355 [ 676.580046][ T400] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 676.596868][ T400] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 676.606564][ T400] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 676.616569][ T400] usb 4-1: USB disconnect, device number 29 [ 676.830398][T13208] 9pnet_fd: Insufficient options for proto=fd [ 676.887765][T13210] fuse: Bad value for 'user_id' [ 676.892719][T13210] fuse: Bad value for 'user_id' [ 676.899288][T13210] incfs: Error accessing: ./file0. [ 676.904661][T13210] incfs: mount failed -20 [ 676.943885][ T400] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 676.997024][ T10] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 677.096304][T13323] tc_dump_action: action bad kind [ 677.114419][ T400] usb 4-1: Using ep0 maxpacket: 16 [ 677.120599][ T400] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 677.129805][ T400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.138392][ T400] usb 4-1: config 0 descriptor?? [ 677.146190][ T400] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 677.178597][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 677.184871][ T10] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 677.195066][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 677.203148][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 677.212319][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.220305][ T10] usb 6-1: Product: syz [ 677.224545][ T10] usb 6-1: Manufacturer: syz [ 677.229145][ T10] usb 6-1: SerialNumber: syz [ 677.234733][T13206] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 677.364497][ T400] usb 4-1: Detected FT232A [ 677.369584][ T400] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 677.458168][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 677.467612][ T10] usb 6-1: USB disconnect, device number 90 [ 677.580435][ T9] usb 4-1: USB disconnect, device number 30 [ 677.588743][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 677.598330][ T9] ftdi_sio 4-1:0.0: device disconnected [ 677.749299][T13543] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13407'. [ 677.758379][T13543] netlink: 'syz.0.13407': attribute type 3 has an invalid length. [ 677.815088][ T36] audit: type=1400 audit(1184.475:65370): avc: denied { setattr } for pid=13649 comm="syz.0.13410" name="TIPC" dev="sockfs" ino=177742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 677.927272][ T10] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 678.098384][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 678.104619][ T10] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1024 [ 678.114748][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 678.125842][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.137773][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.147703][ T10] usb 6-1: Product: syz [ 678.152037][ T10] usb 6-1: Manufacturer: syz [ 678.156709][T13881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 678.156731][T13881] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 678.163215][ T10] usb 6-1: SerialNumber: syz [ 678.178297][T13206] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 678.203576][T13888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5920 sclass=netlink_route_socket pid=13888 comm=syz.3.13425 [ 678.217062][T13888] /dev/rnullb0: Can't lookup blockdev [ 678.223101][T13888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5920 sclass=netlink_route_socket pid=13888 comm=syz.3.13425 [ 678.615142][T13206] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 679.053276][ T10] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 679.216687][T14234] rust_binder: 14234 RLIMIT_NICE not set [ 679.216786][T14234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 679.222563][T14234] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender. [ 679.232258][T14234] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:379 [ 679.268167][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 14! [ 679.285516][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification ab! [ 679.295170][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 9a! [ 679.304321][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification db! [ 679.313034][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 7c! [ 679.321541][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 50! [ 679.331738][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification dd! [ 679.340863][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification ae! [ 679.349979][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 13! [ 679.359130][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 49! [ 679.368401][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 46! [ 679.377602][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 85! [ 679.386854][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification c1! [ 679.396332][ C1] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 58! [ 679.421621][ T9] rust_binder: 14233: removing orphan mapping 0:1048 [ 679.540118][T14342] fuse: Bad value for 'user_id' [ 679.545106][T14342] fuse: Bad value for 'user_id' [ 679.646969][ T9] usb 6-1: USB disconnect, device number 91 [ 679.710352][ T9] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 679.751227][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 679.973754][T14493] fuse: Bad value for 'user_id' [ 679.978730][T14493] fuse: Bad value for 'user_id' [ 680.058449][T14612] fuse: Bad value for 'user_id' [ 680.063377][T14612] fuse: Bad value for 'user_id' [ 680.370030][T14635] +$<: renamed from bridge0 (while UP) [ 680.379569][T14635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13471'. [ 680.390752][T14635] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13471'. [ 680.558305][T14647] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 680.565385][T14647] rust_binder: 384: no such ref 1 [ 680.590448][T14647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:384 [ 680.772070][T14649] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.809895][T14649] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.825719][T14649] bridge_slave_0: entered allmulticast mode [ 680.832163][T14649] bridge_slave_0: entered promiscuous mode [ 680.838899][T14649] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.846037][T14649] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.853366][T14649] bridge_slave_1: entered allmulticast mode [ 680.859905][T14649] bridge_slave_1: entered promiscuous mode [ 680.912235][ T12] bridge0: port 3(veth0_to_team) entered disabled state [ 680.920047][ T12] bridge_slave_1: left allmulticast mode [ 680.925976][ T12] bridge_slave_1: left promiscuous mode [ 680.931699][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.939504][ T12] bridge_slave_0: left allmulticast mode [ 680.945611][ T12] bridge_slave_0: left promiscuous mode [ 680.952821][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.054031][T14649] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.061116][T14649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.068395][T14649] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.075465][T14649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.084988][ T12] tipc: Left network mode [ 681.095113][ T12] veth1_macvtap: left promiscuous mode [ 681.134618][T31873] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.141915][T31873] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.153034][ T2247] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.160088][ T2247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.168881][T31873] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.175949][T31873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.205602][T14649] veth0_vlan: entered promiscuous mode [ 681.215531][T14649] veth1_macvtap: entered promiscuous mode [ 681.532640][T14688] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.540952][T14688] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.548085][T14688] bridge_slave_0: entered allmulticast mode [ 681.554492][T14688] bridge_slave_0: entered promiscuous mode [ 681.561013][T14688] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.568252][T14688] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.575418][T14688] bridge_slave_1: entered allmulticast mode [ 681.587888][T14688] bridge_slave_1: entered promiscuous mode [ 681.768614][T14688] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.775655][T14688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.782943][T14688] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.789986][T14688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.799214][ T2247] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.806527][ T2247] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.819568][ T12] bridge_slave_1: left allmulticast mode [ 681.825391][ T12] bridge_slave_1: left promiscuous mode [ 681.831109][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.838579][ T12] bridge_slave_0: left allmulticast mode [ 681.844476][ T12] bridge_slave_0: left promiscuous mode [ 681.850066][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.916924][T14701] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.924029][T14701] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.931380][T14701] bridge_slave_0: entered allmulticast mode [ 681.937844][T14701] bridge_slave_0: entered promiscuous mode [ 681.944506][T14701] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.951741][T14701] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.958782][T14701] bridge_slave_1: entered allmulticast mode [ 681.965095][T14701] bridge_slave_1: entered promiscuous mode [ 681.987143][ T12] veth1_macvtap: left promiscuous mode [ 681.992682][ T12] veth0_vlan: left promiscuous mode [ 682.063057][ T2247] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.070127][ T2247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.081659][ T2247] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.088734][ T2247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.128379][T31873] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.135457][T31873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.154278][T31873] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.161437][T31873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.184788][T14688] veth0_vlan: entered promiscuous mode [ 682.203533][T14688] veth1_macvtap: entered promiscuous mode [ 682.220293][T14701] veth0_vlan: entered promiscuous mode [ 682.249223][T14701] veth1_macvtap: entered promiscuous mode [ 682.254448][T14718] rust_binder: Write failure EINVAL in pid:2 [ 682.268533][ T36] audit: type=1400 audit(5540.631:65371): avc: denied { read } for pid=95 comm="acpid" name="mouse4" dev="devtmpfs" ino=1170 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 682.313230][ T36] audit: type=1400 audit(5540.631:65372): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/mouse4" dev="devtmpfs" ino=1170 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 682.337350][ T36] audit: type=1400 audit(5540.631:65373): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/mouse4" dev="devtmpfs" ino=1170 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 682.404972][T14737] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 682.412899][T14739] bridge0: port 3(macsec0) entered blocking state [ 682.427360][T14739] bridge0: port 3(macsec0) entered disabled state [ 682.434495][T14739] macsec0: entered allmulticast mode [ 682.439802][T14739] veth1_macvtap: entered allmulticast mode [ 682.446133][T14739] macsec0: entered promiscuous mode [ 682.457422][T14739] bridge0: port 3(macsec0) entered blocking state [ 682.463900][T14739] bridge0: port 3(macsec0) entered forwarding state [ 682.467958][T14742] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 682.479432][T14742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:16 [ 682.492500][T14746] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 682.509377][T14739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 682.563746][T14752] rust_binder: 10: no such ref 0 [ 682.578242][T14752] rust_binder: 10: no such ref 2 [ 682.685697][T14763] SELinux: security_context_str_to_sid () failed with errno=-22 [ 682.836364][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 682.879157][ T45] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 682.954089][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 682.996791][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 683.002998][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 683.011501][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 683.020229][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 683.029440][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 683.039086][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 683.049611][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 683.062684][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 683.071791][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.072787][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.080801][ T9] usb 1-1: config 0 descriptor?? [ 683.093949][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.106385][ T45] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 683.115459][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.124349][ T45] usb 4-1: config 0 descriptor?? [ 683.137114][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 683.143774][ T10] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 683.153065][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.162023][ T10] usb 3-1: config 0 descriptor?? [ 683.297852][ T8450] macsec0: left allmulticast mode [ 683.302912][ T8450] veth1_macvtap: left allmulticast mode [ 683.308547][ T8450] macsec0: left promiscuous mode [ 683.313607][ T8450] +$<: port 3(macsec0) entered disabled state [ 683.321374][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 683.333422][ T8450] bridge_slave_1: left allmulticast mode [ 683.339184][ T8450] bridge_slave_1: left promiscuous mode [ 683.344834][ T8450] +$<: port 2(bridge_slave_1) entered disabled state [ 683.353917][ T9] usb 1-1: USB disconnect, device number 27 [ 683.360951][ T9] usblp0: removed [ 683.365310][ T8450] bridge_slave_0: left allmulticast mode [ 683.370962][ T8450] bridge_slave_0: left promiscuous mode [ 683.376897][ T8450] +$<: port 1(bridge_slave_0) entered disabled state [ 683.386447][ T8450] tipc: Resetting bearer [ 683.470932][ T8450] tipc: Disabling bearer [ 683.598963][ T10] cypress 0003:04B4:ED81.0039: unknown main item tag 0x0 [ 683.606655][ T10] cypress 0003:04B4:ED81.0039: item fetching failed at offset 3/5 [ 683.614618][ T10] cypress 0003:04B4:ED81.0039: parse failed [ 683.620576][ T10] cypress 0003:04B4:ED81.0039: probe with driver cypress failed with error -22 [ 683.634542][ T8450] tipc: Disabling bearer [ 683.639903][ T8450] tipc: Left network mode [ 683.645411][ T8450] veth1_macvtap: left promiscuous mode [ 683.651120][ T8450] >: left promiscuous mode [ 683.687612][ T8450] vcan0 (unregistering): left allmulticast mode [ 683.766894][ T740] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 683.817544][T14765] rust_binder: 14765 RLIMIT_NICE not set [ 683.817679][T14765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 683.823460][T14765] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender. [ 683.833026][T14765] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:26 [ 683.863142][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 683.885929][ T10] usb 3-1: USB disconnect, device number 70 [ 683.927282][ T740] usb 7-1: Using ep0 maxpacket: 8 [ 683.933392][ T740] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.943238][ T740] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 683.954385][ T740] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 683.963453][ T740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.971579][ T740] usb 7-1: Product: о [ 683.975648][ T740] usb 7-1: Manufacturer: Щ [ 683.990154][ T45] hid-led 0003:27B8:01ED.0038: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 684.006227][ T45] hid-led 0003:27B8:01ED.0038: ThingM blink(1) initialized [ 684.044898][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 684.051196][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 684.059629][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 684.069147][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 684.078266][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 684.088272][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 684.097926][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 684.111355][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 684.120413][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.129029][ T9] usb 1-1: config 0 descriptor?? [ 684.207586][ T10] usb 4-1: USB disconnect, device number 31 [ 684.351943][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 684.410902][T14774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.419826][T14774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.428849][ T740] cdc_ncm 7-1:1.0: bind() failure [ 684.436404][ T740] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 684.440574][ T45] rust_binder: 14764: removing orphan mapping 0:1048 [ 684.443332][ T740] cdc_ncm 7-1:1.1: bind() failure [ 684.459735][ T740] usb 7-1: USB disconnect, device number 3 [ 684.567227][ T45] usb 1-1: USB disconnect, device number 28 [ 684.580122][ T45] usblp0: removed [ 684.901263][ T36] audit: type=1326 audit(5543.109:65374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14786 comm="syz.3.13517" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bad38ec29 code=0x0 [ 684.995163][T14792] sit0: entered promiscuous mode [ 685.001488][T14792] netlink: 'syz.6.13519': attribute type 1 has an invalid length. [ 685.009570][T14792] netlink: 9 bytes leftover after parsing attributes in process `syz.6.13519'. [ 685.135102][T14799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:20 [ 685.799931][T14805] rust_binder: Write failure EFAULT in pid:402 [ 685.861881][T14809] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 686.034057][T14819] binder: Unknown parameter 'pZcS8rectio' [ 686.048864][T14819] netlink: 'syz.0.13529': attribute type 7 has an invalid length. [ 686.058418][T14819] tmpfs: Too few inodes for current use [ 686.064323][T14819] binder: Unknown parameter 'dont_measure' [ 686.194643][ T45] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 686.262718][T14826] fuseblk: Unknown parameter '' [ 686.268377][T14826] tmpfs: Unknown parameter 'dev/kvm' [ 686.355067][ T45] usb 7-1: Using ep0 maxpacket: 32 [ 686.361307][ T45] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 686.369512][ T45] usb 7-1: config 4 has no interface number 0 [ 686.375609][ T45] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.386810][ T45] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.396970][ T45] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 686.406035][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.415712][ T45] hub 7-1:4.128: USB hub found [ 686.526209][ T400] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 686.629476][ T45] hub 7-1:4.128: 6 ports detected [ 686.634793][ T45] hub 7-1:4.128: Using single TT (err -22) [ 686.640847][ T45] hub 7-1:4.128: insufficient power available to use all downstream ports [ 686.687606][ T400] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 686.699280][ T400] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 686.708354][ T400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.716337][ T400] usb 3-1: Product: syz [ 686.721103][ T400] usb 3-1: Manufacturer: syz [ 686.725698][ T400] usb 3-1: SerialNumber: syz [ 686.731021][ T400] usb 3-1: config 0 descriptor?? [ 686.847961][T14815] rust_binder: Write failure EINVAL in pid:29 [ 687.000808][ T36] audit: type=1400 audit(5545.063:65375): avc: denied { map } for pid=14830 comm="syz.0.13534" path="socket:[179896]" dev="sockfs" ino=179896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 687.059004][T14835] rust_binder: Fixups oob 165 172 361 173 [ 687.059037][T14835] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 687.065078][T14835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 687.073347][T14835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 687.109899][T14839] fuse: Invalid rootmode [ 687.267847][T14846] kvm: kvm [14845]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5 [ 687.278616][T14846] kvm: kvm [14845]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5 [ 687.287200][T14846] kvm: kvm [14845]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5 [ 687.297697][T14846] kvm_intel: kvm [14845]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5 [ 687.499063][ T400] usb 3-1: bad CDC descriptors [ 687.513862][ T400] usb 3-1: unsupported MDLM descriptors [ 687.521339][ T400] usb 3-1: USB disconnect, device number 71 [ 687.692930][T14878] rust_binder: Error while translating object. [ 687.692970][T14878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 687.699154][T14878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 687.915648][T14886] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13554'. [ 687.934710][T14886] binder: Binderfs stats mode cannot be changed during a remount [ 687.961066][T14890] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13556'. [ 687.980863][ T740] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 688.002855][ T45] hub 7-1:4.128: hub_hub_status failed (err = -32) [ 688.009550][ T45] hub 7-1:4.128: config failed, can't get hub status (err -32) [ 688.043888][T14892] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 688.087025][T14904] rust_binder: Error while translating object. [ 688.087058][T14904] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 688.093684][T14904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 688.112510][T14906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 688.121619][T14906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:85 [ 688.130532][ T740] usb 3-1: device descriptor read/64, error -71 [ 688.260699][T14915] rust_binder: Error while translating object. [ 688.260778][T14915] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 688.267312][T14915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418 [ 688.409230][ T740] usb 3-1: device descriptor read/64, error -71 [ 688.476116][ T8450] bridge_slave_1: left allmulticast mode [ 688.481966][ T8450] bridge_slave_1: left promiscuous mode [ 688.488016][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.495824][ T8450] bridge_slave_0: left allmulticast mode [ 688.501684][ T8450] bridge_slave_0: left promiscuous mode [ 688.507637][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.627775][T14920] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.634854][T14920] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.641970][T14920] bridge_slave_0: entered allmulticast mode [ 688.648463][T14920] bridge_slave_0: entered promiscuous mode [ 688.655233][ T8450] tipc: Disabling bearer [ 688.663250][ T8450] tipc: Left network mode [ 688.664574][T14920] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.676095][ T740] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 688.683873][T14920] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.698658][T14920] bridge_slave_1: entered allmulticast mode [ 688.709000][T14920] bridge_slave_1: entered promiscuous mode [ 688.718515][ T8450] veth1_macvtap: left promiscuous mode [ 688.724074][ T8450] veth0_vlan: left promiscuous mode [ 688.815844][T14920] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.822881][T14920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.830155][T14920] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.837181][T14920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.847071][ T740] usb 3-1: device descriptor read/64, error -71 [ 688.859970][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.867211][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.876257][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.883313][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.892527][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.899580][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.922731][T14920] veth0_vlan: entered promiscuous mode [ 688.933119][T14920] veth1_macvtap: entered promiscuous mode [ 689.103851][ T740] usb 3-1: device descriptor read/64, error -71 [ 689.221960][ T740] usb usb3-port1: attempt power cycle [ 689.253633][ T10] usb 7-1: USB disconnect, device number 4 [ 689.368682][ T36] audit: type=1400 audit(5547.279:65376): avc: denied { write } for pid=14965 comm="syz.6.13582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 689.371751][T14966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=62 sclass=netlink_tcpdiag_socket pid=14966 comm=syz.6.13582 [ 689.405475][ T1788] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 689.405535][T14966] tipc: Started in network mode [ 689.418233][T14966] tipc: Node identity 82419553ca47, cluster identity 4711 [ 689.425505][T14966] tipc: Enabled bearer , priority 0 [ 689.435049][T14966] tipc: Disabling bearer [ 689.564692][ T1788] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.575723][ T1788] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.585706][ T1788] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 689.594818][ T1788] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.603921][ T1788] usb 10-1: config 0 descriptor?? [ 689.606428][ T740] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 689.639528][ T740] usb 3-1: device descriptor read/8, error -71 [ 689.778558][ T740] usb 3-1: device descriptor read/8, error -71 [ 689.827229][ T1788] usb 10-1: string descriptor 0 read error: -22 [ 690.023530][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 690.034223][ T740] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 690.049676][ T1788] input: HID 256c:006d as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.003A/input/input38 [ 690.057354][ T740] usb 3-1: device descriptor read/8, error -71 [ 690.078786][ T1788] uclogic 0003:256C:006D.003A: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.9-1/input0 [ 690.184983][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.195871][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.206446][ T740] usb 3-1: device descriptor read/8, error -71 [ 690.212965][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 690.224605][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 690.227295][T15003] cgroup: Need name or subsystem set [ 690.234267][ T10] usb 1-1: SerialNumber: syz [ 690.262701][T14951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 690.262761][T14951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 690.269340][T14951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 690.276079][T14987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 690.286016][T13541] usb 10-1: USB disconnect, device number 52 [ 690.334078][T15008] netlink: 'syz.6.13595': attribute type 16 has an invalid length. [ 690.334494][ T740] usb usb3-port1: unable to enumerate USB device [ 690.463777][ T10] usb 1-1: 0:2 : does not exist [ 690.479103][ T10] usb 1-1: unit 5 not found! [ 690.488544][ T10] usb 1-1: USB disconnect, device number 29 [ 690.506439][T15014] tipc: New replicast peer: 255.255.255.255 [ 690.512573][T15014] tipc: Enabled bearer , priority 10 [ 690.814982][ T45] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 690.847106][T15018] SELinux: security_context_str_to_sid () failed with errno=-22 [ 690.855371][T15018] SELinux: security_context_str_to_sid () failed with errno=-22 [ 691.015699][ T45] usb 7-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config [ 691.026447][ T45] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.041457][ T45] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 691.050863][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 691.058937][ T45] usb 7-1: SerialNumber: syz [ 691.068893][ T45] usb 7-1: 0:2 : does not exist [ 691.073997][ T45] usb 7-1: unit 173 not found! [ 691.155778][ T36] audit: type=1400 audit(5548.944:65377): avc: denied { append } for pid=15046 comm="syz.2.13610" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 691.233904][ T36] audit: type=1400 audit(5549.028:65378): avc: denied { getopt } for pid=15046 comm="syz.2.13610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 691.381821][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 691.542228][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 691.548330][ T10] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 691.556564][ T10] usb 1-1: config 0 has no interface number 0 [ 691.562729][ T10] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 691.574530][ T10] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 691.585595][ T10] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 691.597033][ T10] usb 1-1: config 0 interface 200 has no altsetting 0 [ 691.605143][ T10] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 691.614221][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.622231][ T10] usb 1-1: Product: syz [ 691.626371][ T10] usb 1-1: Manufacturer: syz [ 691.630976][ T10] usb 1-1: SerialNumber: syz [ 691.636065][ T10] usb 1-1: config 0 descriptor?? [ 691.641330][T15043] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 691.702712][ T45] tipc: Node number set to 1208390995 [ 691.831460][T15053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 691.831492][T15053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:32 [ 691.863611][T15043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 691.872692][T15043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 691.899317][T15060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.917174][T15060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.945250][ T36] audit: type=1400 audit(5549.682:65379): avc: denied { ioctl } for pid=15061 comm="syz.9.13614" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 692.060302][ T10] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input39 [ 692.072111][ C0] usb 1-1: hanwang_irq - urb shutting down with status: -2 [ 692.080490][ C1] usb 1-1: hanwang_irq - urb shutting down with status: -2 [ 692.094957][ T10] usb 1-1: USB disconnect, device number 30 [ 692.183791][T15080] fuse: Unknown parameter 'droup_id' [ 692.205837][T15084] /dev/rnullb0: Can't lookup blockdev [ 692.527297][T15091] netlink: 'syz.0.13626': attribute type 6 has an invalid length. [ 692.535197][T15091] netlink: 35 bytes leftover after parsing attributes in process `syz.0.13626'. [ 692.793812][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 692.891067][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.891102][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.897640][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.905686][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.912537][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.919044][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.925563][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.932049][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.938630][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.945185][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.951643][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.958131][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.964577][T15109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 692.975391][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.996203][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 693.005414][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.016834][ T10] usb 1-1: config 0 descriptor?? [ 693.242613][T15131] netlink: 'syz.9.13640': attribute type 29 has an invalid length. [ 693.250609][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13640'. [ 693.451898][ T10] keytouch 0003:0926:3333.003B: fixing up Keytouch IEC report descriptor [ 693.461435][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.003B/input/input40 [ 693.535204][ T10] keytouch 0003:0926:3333.003B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 693.649361][T13541] usb 10-1: new full-speed USB device number 53 using dummy_hcd [ 693.683349][ C0] usb 1-1: input irq status -75 received [ 693.759668][ T45] usb 7-1: USB disconnect, device number 5 [ 693.810713][T13541] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 693.824007][T13541] usb 10-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.00 [ 693.833410][T13541] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.842502][T13541] usb 10-1: config 0 descriptor?? [ 694.033942][T15143] __vm_enough_memory: pid: 15143, comm: syz.2.13643, bytes: 18014402804453376 not enough memory for the allocation [ 694.056650][ T36] audit: type=1400 audit(5551.664:65380): avc: denied { lock } for pid=15144 comm="syz.2.13644" path="socket:[181995]" dev="sockfs" ino=181995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 694.080405][ T36] audit: type=1400 audit(5551.664:65381): avc: denied { lock } for pid=15144 comm="syz.2.13644" path="socket:[181995]" dev="sockfs" ino=181995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 694.273690][T13541] usb 10-1: string descriptor 0 read error: -71 [ 694.282378][T13541] usbhid 10-1:0.0: can't add hid device: -71 [ 694.288432][T13541] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 694.297389][T13541] usb 10-1: USB disconnect, device number 53 [ 694.693493][T15164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4116 sclass=netlink_route_socket pid=15164 comm=syz.6.13651 [ 694.808054][T15168] fuseblk: Bad value for 'source' [ 695.060973][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 695.222380][ T10] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 695.231171][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.241728][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 695.251971][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 695.261087][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.269119][ T10] usb 7-1: Product: 룃콵ս꼆儮협꒜佈웳킲谌⹤筮舌뮗쨕㻫ጄﵞ츃靸삙샔龼뒮廦雷灳㎔᪦⯚奏窈捷᷅⟰갗ᦊ礄૲懧継篶⢺찏枴摐핗믍 [ 695.287815][ T10] usb 7-1: Manufacturer: ꯤ槉켼ޠ匳ꟿ둢심뜬ᖀ捇谖攕윓䑱뚱綡鹪➁⍡⬫虫ᗩଅ䔒┶恃㢣䷡⟼侷쳘풠䟵 [ 695.302011][ T10] usb 7-1: SerialNumber: syz [ 695.307342][ T10] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 695.316041][ T10] usb 7-1: no configuration chosen from 1 choice [ 695.632378][ T36] audit: type=1400 audit(5553.132:65382): avc: denied { shutdown } for pid=15177 comm="syz.9.13655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 695.689739][ T10] usb 1-1: USB disconnect, device number 31 [ 695.722832][T15184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15184 comm=syz.9.13658 [ 695.735746][T15184] rust_binder: Write failure EINVAL in pid:105 [ 696.034222][T13541] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 696.205328][T13541] usb 10-1: Using ep0 maxpacket: 16 [ 696.211553][T13541] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.222534][T13541] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.232366][T13541] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 696.245326][T13541] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 696.254449][T13541] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.263075][T13541] usb 10-1: config 0 descriptor?? [ 696.485489][T13541] input: HID 05ac:8241 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:05AC:8241.003C/input/input41 [ 696.515651][T13541] appleir 0003:05AC:8241.003C: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 696.643865][ T803] Bluetooth: hci0: command 0x1003 tx timeout [ 696.643878][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 696.700103][T15187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.708660][T15187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.717847][ T1788] usb 10-1: USB disconnect, device number 54 [ 697.159098][T15203] kvm: user requested TSC rate below hardware speed [ 697.166331][T15203] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 697.186841][T15203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 697.186861][T15203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:141 [ 697.261246][ T36] audit: type=1400 audit(5554.656:65383): avc: denied { create } for pid=15204 comm="syz.9.13665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 697.290201][ T36] audit: type=1400 audit(5554.675:65384): avc: denied { create } for pid=15204 comm="syz.9.13665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 697.311437][ T36] audit: type=1400 audit(5554.675:65385): avc: denied { write } for pid=15204 comm="syz.9.13665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 697.337279][ T36] audit: type=1400 audit(5554.675:65386): avc: denied { read } for pid=15204 comm="syz.9.13665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 697.360478][ T36] audit: type=1400 audit(5554.675:65387): avc: denied { ioctl } for pid=15204 comm="syz.9.13665" path="socket:[182315]" dev="sockfs" ino=182315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 697.387134][ T36] audit: type=1400 audit(5554.675:65388): avc: denied { bind } for pid=15204 comm="syz.9.13665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 697.388687][T15210] binder: Bad value for 'max' [ 697.407469][ T36] audit: type=1400 audit(5554.675:65389): avc: denied { write } for pid=15204 comm="syz.9.13665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 697.431828][ T36] audit: type=1400 audit(5554.675:65390): avc: denied { create } for pid=15204 comm="syz.9.13665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 697.451921][ T36] audit: type=1400 audit(5554.675:65391): avc: denied { connect } for pid=15204 comm="syz.9.13665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 697.471897][ T36] audit: type=1400 audit(5554.675:65392): avc: denied { name_connect } for pid=15204 comm="syz.9.13665" dest=4420 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 697.678904][T15229] rust_binder: 15228 RLIMIT_NICE not set [ 697.682702][ T1788] rust_binder: 15227: removing orphan mapping 0:4248 [ 697.949941][ T10] usb 7-1: USB disconnect, device number 6 [ 711.319330][T15235] tmpfs: Unknown parameter 'noswap;Η^gמ' [ 711.390461][T15251] rust_binder: Write failure EFAULT in pid:95 [ 711.435650][T15258] netlink: 128 bytes leftover after parsing attributes in process `syz.9.13682'. [ 711.501090][T15265] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 711.501108][T15265] rust_binder: Error while translating object. [ 711.512903][T15265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 711.525193][T15265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 711.646135][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 711.916569][ T10] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 712.078047][ T10] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 712.086227][ T10] usb 10-1: config 0 has no interface number 0 [ 712.092462][ T10] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.103466][ T10] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.113307][ T10] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 712.122452][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.131262][ T10] usb 10-1: config 0 descriptor?? [ 712.331862][T15295] usb usb8: usbfs: process 15295 (syz.6.13694) did not claim interface 0 before use [ 712.450541][T15300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13696'. [ 712.567238][T15282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.575821][T15282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.590385][ T330] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 712.750840][ T330] usb 7-1: Using ep0 maxpacket: 32 [ 712.756059][ T1788] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 712.764689][ T330] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 712.773110][ T330] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 712.781813][ T330] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 712.790797][ T330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 712.800491][ T330] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 712.810168][ T330] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 712.823185][ T330] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 712.832244][ T330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.840967][ T330] usb 7-1: config 0 descriptor?? [ 712.922994][ T1788] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.933169][ T1788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.942754][ T1788] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 712.951840][ T1788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 712.959859][ T1788] usb 1-1: SerialNumber: syz [ 713.061885][ T330] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 713.075802][ T330] usb 7-1: USB disconnect, device number 7 [ 713.082725][ T330] usblp0: removed [ 713.181488][ T1788] usb 1-1: 0:2 : does not exist [ 713.188643][ T1788] usb 1-1: USB disconnect, device number 32 [ 713.197881][T15292] udevd[15292]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 713.531535][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 713.691957][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 713.698165][ T9] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 713.706644][ T9] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 713.715365][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 713.724440][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 713.734112][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 713.743796][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 713.756777][ T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 713.765833][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.774495][ T9] usb 7-1: config 0 descriptor?? [ 713.791108][T15307] rust_binder: 15306 RLIMIT_NICE not set [ 713.791265][T15306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:170 [ 713.801431][ T1788] rust_binder: 15305: removing orphan mapping 0:4224 [ 713.823901][T15309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32821 sclass=netlink_route_socket pid=15309 comm=syz.0.13699 [ 713.842069][ T803] Bluetooth: hci0: command 0x1003 tx timeout [ 713.842334][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 713.854696][T15291] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 713.995370][ T9] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 714.205380][ T1838] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 714.215202][ T9] usb 7-1: USB disconnect, device number 8 [ 714.223106][ T9] usblp0: removed [ 714.366737][ T1838] usb 1-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 714.376983][ T1838] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 714.386517][ T1838] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 714.395619][ T1838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 714.403677][ T1838] usb 1-1: SerialNumber: syz [ 714.626144][T15318] SELinux: security_context_str_to_sid () failed with errno=-22 [ 714.638406][ T1838] usb 1-1: 0:2 : does not exist [ 714.643296][ T1838] usb 1-1: unit 5: unexpected type 0x0a [ 714.651117][T15332] kvm: Disabled LAPIC found during irq injection [ 714.653567][ T1838] usb 1-1: USB disconnect, device number 33 [ 714.657498][T15332] kvm: apic: phys broadcast and lowest prio [ 714.797901][ T36] audit: type=1400 audit(5571.056:65393): avc: denied { setattr } for pid=15338 comm="syz.2.13708" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 714.822224][T15344] incfs: mount failed -22 [ 714.826989][T15344] incfs: mount failed -22 [ 714.835907][T15344] incfs: mount failed -22 [ 714.852621][ T10] usbhid 10-1:0.1: can't add hid device: -71 [ 714.855770][T15344] incfs: mount failed -22 [ 714.864318][T15344] incfs: mount failed -22 [ 714.868453][ T10] usbhid 10-1:0.1: probe with driver usbhid failed with error -71 [ 714.885289][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 714.892012][ T10] usb 10-1: USB disconnect, device number 55 [ 714.896418][T15344] incfs: mount failed -22 [ 714.902807][T15344] incfs: mount failed -22 [ 714.907428][T15344] incfs: mount failed -22 [ 714.912344][T15344] incfs: mount failed -22 [ 714.916964][T15344] incfs: mount failed -22 [ 714.921482][T15344] incfs: mount failed -22 [ 714.926423][T15344] incfs: mount failed -22 [ 714.930994][T15344] incfs: mount failed -22 [ 714.935709][T15344] incfs: mount failed -22 [ 714.940304][T15344] incfs: mount failed -22 [ 714.944799][T15344] incfs: mount failed -22 [ 714.949287][T15344] incfs: mount failed -22 [ 714.953745][T15344] incfs: mount failed -22 [ 714.959818][T15344] incfs: mount failed -22 [ 714.965144][T15344] incfs: mount failed -22 [ 714.969612][T15344] incfs: mount failed -22 [ 714.974372][T15344] incfs: mount failed -22 [ 714.979170][T15344] incfs: mount failed -22 [ 714.983879][T15344] incfs: mount failed -22 [ 714.988772][T15344] incfs: mount failed -22 [ 714.996271][T15344] incfs: mount failed -22 [ 715.001251][T15344] incfs: mount failed -22 [ 715.005701][T15344] incfs: mount failed -22 [ 715.010352][T15344] incfs: mount failed -22 [ 715.014846][T15344] incfs: mount failed -22 [ 715.019589][T15344] incfs: mount failed -22 [ 715.050795][ T36] audit: type=1326 audit(5571.299:65394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.6.13718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb38ec29 code=0x7ffc0000 [ 715.082437][ T36] audit: type=1326 audit(5571.299:65395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.6.13718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb38ec29 code=0x7ffc0000 [ 715.108575][ T36] audit: type=1326 audit(5571.318:65396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.6.13718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc9fb38ec29 code=0x7ffc0000 [ 715.132075][ T36] audit: type=1326 audit(5571.318:65397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.6.13718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb38ec29 code=0x7ffc0000 [ 715.157230][ T1838] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 715.165226][ T36] audit: type=1326 audit(5571.318:65398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.6.13718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb38ec29 code=0x7ffc0000 [ 715.188766][ T36] audit: type=1326 audit(5571.318:65399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.6.13718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb38ec29 code=0x7ffc0000 [ 715.213080][ T36] audit: type=1326 audit(5571.318:65400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.6.13718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb38ec29 code=0x7ffc0000 [ 715.243752][ T36] audit: type=1326 audit(5571.318:65401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.6.13718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fc9fb38ec29 code=0x7ffc0000 [ 715.267136][ T36] audit: type=1326 audit(5571.318:65402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15362 comm="syz.6.13718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fb38ec29 code=0x7ffc0000 [ 715.290655][T15368] rust_binder: inc_ref_done called when no active inc_refs [ 715.349783][ T1838] usb 3-1: Using ep0 maxpacket: 8 [ 715.363049][ T1838] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 715.374338][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 715.381850][ T1838] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 715.394752][ T1838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 715.406564][ T1838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 715.417686][ T1838] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 715.431098][T15379] /dev/rnullb0: Can't lookup blockdev [ 715.432043][ T1838] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 715.445623][ T1838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.453668][ T1838] usb 3-1: Product: syz [ 715.457860][ T1838] usb 3-1: Manufacturer: syz [ 715.462453][ T1838] usb 3-1: SerialNumber: syz [ 715.467997][ T1838] usb 3-1: config 0 descriptor?? [ 715.475199][ T1838] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 715.552992][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 715.559499][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 715.567948][ T10] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 147, changing to 7 [ 715.579016][ T10] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 42128, setting to 1024 [ 715.590156][ T10] usb 7-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 715.602938][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 715.610957][ T10] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.40 [ 715.620029][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.628020][ T10] usb 7-1: Product: syz [ 715.632171][ T10] usb 7-1: Manufacturer: syz [ 715.636739][ T10] usb 7-1: SerialNumber: syz [ 715.702943][ T9] usb 3-1: USB disconnect, device number 76 [ 715.777524][ T1838] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 715.858407][T15366] fuse: Unknown parameter '0x00000000000000000x0000000000000005' [ 715.874385][ T10] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 715.884059][ T10] usb 7-1: USB disconnect, device number 9 [ 715.916609][ T1838] usb 10-1: device descriptor read/64, error -71 [ 716.173260][ T1838] usb 10-1: device descriptor read/64, error -71 [ 716.429985][ T1838] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 716.513445][T15393] rust_binder: 190: no such ref 1 [ 716.518610][T15395] rust_binder: Error while translating object. [ 716.518639][T15395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 716.524965][T15395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 716.568988][ T1838] usb 10-1: device descriptor read/64, error -71 [ 716.793568][ T1788] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 716.836373][ T1838] usb 10-1: device descriptor read/64, error -71 [ 716.954017][ T1788] usb 1-1: Using ep0 maxpacket: 16 [ 716.954089][ T1838] usb usb10-port1: attempt power cycle [ 716.960385][ T1788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.974814][ T1788] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 716.985137][ T1788] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.994228][ T1788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.002237][ T1788] usb 1-1: Product: syz [ 717.006405][ T1788] usb 1-1: Manufacturer: syz [ 717.011055][ T1788] usb 1-1: SerialNumber: syz [ 717.016294][ T1788] usb 1-1: config 0 descriptor?? [ 717.093056][ T803] Bluetooth: hci0: command 0x1003 tx timeout [ 717.093062][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 717.329887][ T1838] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 717.352572][ T1838] usb 10-1: device descriptor read/8, error -71 [ 717.394082][ T1788] usb 1-1: USB disconnect, device number 34 [ 717.489801][ T1838] usb 10-1: device descriptor read/8, error -71 [ 717.653875][T15403] can0: slcan on ttyS3. [ 717.745473][ T1838] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 717.767959][ T1838] usb 10-1: device descriptor read/8, error -71 [ 717.905908][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 717.914473][ T1838] usb 10-1: device descriptor read/8, error -71 [ 718.034399][ T1838] usb usb10-port1: unable to enumerate USB device [ 718.066317][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 718.072618][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.082888][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 718.092055][T15430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 718.092442][T15430] rust_binder: Write failure EINVAL in pid:207 [ 718.093357][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 718.116811][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.124848][ T10] usb 3-1: Product: syz [ 718.128999][ T10] usb 3-1: Manufacturer: syz [ 718.133661][ T10] usb 3-1: SerialNumber: syz [ 718.138985][ T10] usb 3-1: config 0 descriptor?? [ 718.190549][T15433] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 718.197760][T15433] rust_binder: Write failure EINVAL in pid:210 [ 718.277647][T15438] SELinux: security_context_str_to_sid () failed with errno=-22 [ 718.303002][T15444] /dev/rnullb0: Can't lookup blockdev [ 718.344787][T15448] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 718.369313][ T330] usb 3-1: USB disconnect, device number 77 [ 718.420677][T15403] can0 (unregistered): slcan off ttyS3. [ 718.428952][T15455] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 718.436440][T15455] rust_binder: Read failure Err(EAGAIN) in pid:130 [ 718.510647][T15478] pim6reg1: entered promiscuous mode [ 718.523595][T15478] pim6reg1: entered allmulticast mode [ 718.833330][T15511] netlink: 'syz.9.13756': attribute type 4 has an invalid length. [ 718.841306][T15511] netlink: 'syz.9.13756': attribute type 2 has an invalid length. [ 718.855202][T15511] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 719.056353][T15522] rust_binder: Error while translating object. [ 719.064741][T15522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 719.071001][T15522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 719.101220][T15531] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 719.114431][ T330] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 719.119381][T15531] overlayfs: missing 'lowerdir' [ 719.145022][T15533] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=15533 comm=syz.2.13764 [ 719.292261][ T330] usb 10-1: config 192 has an invalid interface number: 162 but max is 0 [ 719.302918][ T330] usb 10-1: config 192 has no interface number 0 [ 719.312817][ T330] usb 10-1: config 192 interface 162 has no altsetting 0 [ 719.321746][ T330] usb 10-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 719.333521][ T330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.341810][ T330] usb 10-1: Product: syz [ 719.346217][ T330] usb 10-1: Manufacturer: syz [ 719.352127][ T330] usb 10-1: SerialNumber: syz [ 719.576683][ T330] usb-storage 10-1:192.162: USB Mass Storage device detected [ 719.584874][ T330] usb-storage 10-1:192.162: device ignored [ 719.609252][ T330] usb 10-1: USB disconnect, device number 60 [ 719.617123][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 719.633848][T15557] sit0: entered promiscuous mode [ 719.639687][T15557] netlink: 'syz.0.13773': attribute type 1 has an invalid length. [ 719.647505][T15557] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13773'. [ 719.798913][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 719.805017][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 719.813401][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 719.825487][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 719.834742][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 719.844463][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 719.854102][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 719.867068][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 719.876127][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.884678][ T9] usb 3-1: config 0 descriptor?? [ 719.907179][T15569] can0: slcan on ttyS3. [ 720.044964][ T330] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 720.104984][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 78 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 720.117234][ T9] usb 3-1: USB disconnect, device number 78 [ 720.127873][ T9] usblp0: removed [ 720.134268][T15586] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 720.142700][T15586] rust_binder: Write failure EINVAL in pid:176 [ 720.205340][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 720.217731][ T330] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 720.227900][ T330] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.237494][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 720.238819][ T330] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.256072][ T330] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 720.268983][ T330] usb 1-1: config 7 interface 0 has no altsetting 0 [ 720.275632][ T330] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 720.284696][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.397866][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 720.404130][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.414450][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 720.424781][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 720.433886][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.441898][ T10] usb 7-1: Product: syz [ 720.446055][ T10] usb 7-1: Manufacturer: syz [ 720.450644][ T10] usb 7-1: SerialNumber: syz [ 720.456016][ T10] usb 7-1: config 0 descriptor?? [ 720.633158][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 720.677696][ T10] usb 7-1: USB disconnect, device number 10 [ 720.732626][ T330] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.003D/input/input43 [ 720.752086][T15569] can0 (unregistered): slcan off ttyS3. [ 720.766564][ T330] kye 0003:0458:5010.003D: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 720.793562][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 720.805974][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 720.821066][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 720.831244][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 720.840891][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 720.851368][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 720.886293][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 720.912912][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 720.933042][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.946012][ T1788] usb 1-1: USB disconnect, device number 35 [ 720.946414][ T9] usb 3-1: config 0 descriptor?? [ 721.054304][T15630] tipc: Started in network mode [ 721.059296][T15630] tipc: Node identity 6645f6f1c376, cluster identity 4711 [ 721.068465][T15630] tipc: Enabled bearer , priority 0 [ 721.077048][T15630] tipc: Disabling bearer [ 721.176330][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 721.223682][T15643] rust_binder: 15642 RLIMIT_NICE not set [ 721.223914][T15642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:182 [ 721.241277][T15646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=15646 comm=syz.9.13783 [ 721.383033][T15649] rust_binder: 15648 RLIMIT_NICE not set [ 721.383200][T15648] rust_binder: Error while translating object. [ 721.388909][T15648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 721.394358][ T9] usb 3-1: USB disconnect, device number 79 [ 721.395196][T15648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 721.411584][ T9] usblp0: removed [ 721.427972][ T10] rust_binder: 15647: removing orphan mapping 0:4224 [ 721.442187][T15652] netlink: 252 bytes leftover after parsing attributes in process `syz.9.13785'. [ 721.820314][T10211] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 721.927295][ T1788] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 721.973281][T15682] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 721.980365][T15682] rust_binder: Write failure EINVAL in pid:195 [ 721.980737][T10211] usb 1-1: Using ep0 maxpacket: 16 [ 722.007718][T10211] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.019224][T10211] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 722.029060][T10211] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 722.038131][T10211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 722.046181][T10211] usb 1-1: SerialNumber: syz [ 722.052828][T10211] usb 1-1: 0:2 : does not exist [ 722.087709][ T1788] usb 10-1: Using ep0 maxpacket: 16 [ 722.094777][ T1788] usb 10-1: config 3 has an invalid interface number: 64 but max is 0 [ 722.106200][ T1788] usb 10-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 722.115387][ T1788] usb 10-1: config 3 has no interface number 0 [ 722.121923][ T1788] usb 10-1: config 3 interface 64 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 722.136925][ T1788] usb 10-1: config 3 interface 64 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 722.148169][ T1788] usb 10-1: config 3 interface 64 has no altsetting 0 [ 722.156803][ T1788] usb 10-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=12.3f [ 722.166033][ T1788] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.174243][ T1788] usb 10-1: Product: syz [ 722.180148][ T1788] usb 10-1: Manufacturer: syz [ 722.184969][ T1788] usb 10-1: SerialNumber: syz [ 722.260115][ T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 722.418163][ T1788] ftdi_sio 10-1:3.64: FTDI USB Serial Device converter detected [ 722.420317][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 722.426548][ T1788] ftdi_sio ttyUSB0: unknown device type: 0x123f [ 722.434167][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 722.440533][ T1788] usb 10-1: USB disconnect, device number 61 [ 722.451304][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.459443][ T1788] ftdi_sio 10-1:3.64: device disconnected [ 722.461691][ T9] usb 3-1: Product: syz [ 722.471685][ T9] usb 3-1: Manufacturer: syz [ 722.476450][ T9] usb 3-1: SerialNumber: syz [ 722.488719][T15661] /dev/rnullb0: Can't lookup blockdev [ 722.494883][T10211] usb 1-1: USB disconnect, device number 36 [ 722.504813][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 722.675920][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 722.682064][ T10] usb 7-1: config 39 has an invalid interface number: 116 but max is 3 [ 722.690379][ T10] usb 7-1: config 39 has an invalid interface number: 212 but max is 3 [ 722.698682][ T10] usb 7-1: config 39 contains an unexpected descriptor of type 0x2, skipping [ 722.707781][ T10] usb 7-1: config 39 has an invalid interface number: 31 but max is 3 [ 722.715990][ T10] usb 7-1: config 39 has an invalid interface number: 221 but max is 3 [ 722.724270][ T10] usb 7-1: config 39 has no interface number 0 [ 722.730480][ T10] usb 7-1: config 39 has no interface number 1 [ 722.736644][ T10] usb 7-1: config 39 has no interface number 2 [ 722.743022][ T10] usb 7-1: config 39 has no interface number 3 [ 722.749212][ T10] usb 7-1: config 39 interface 116 altsetting 15 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 722.760724][ T10] usb 7-1: config 39 interface 212 altsetting 128 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 722.771929][ T10] usb 7-1: config 39 interface 31 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 722.782696][ T10] usb 7-1: config 39 interface 31 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 722.793486][ T10] usb 7-1: config 39 interface 31 altsetting 2 bulk endpoint 0x9 has invalid maxpacket 1024 [ 722.803621][ T10] usb 7-1: config 39 interface 31 altsetting 2 has an endpoint descriptor with address 0x78, changing to 0x8 [ 722.815241][ T10] usb 7-1: config 39 interface 31 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 722.825958][ T10] usb 7-1: config 39 interface 31 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 722.836653][ T10] usb 7-1: config 39 interface 31 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 722.849714][ T10] usb 7-1: config 39 interface 221 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 722.860685][ T10] usb 7-1: config 39 interface 221 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 722.871483][ T10] usb 7-1: config 39 interface 221 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 722.882280][ T10] usb 7-1: config 39 interface 221 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 722.893065][ T10] usb 7-1: config 39 interface 116 has no altsetting 0 [ 722.899912][ T10] usb 7-1: config 39 interface 212 has no altsetting 0 [ 722.906777][ T10] usb 7-1: config 39 interface 31 has no altsetting 0 [ 722.913576][ T10] usb 7-1: config 39 interface 221 has no altsetting 0 [ 722.921774][ T10] usb 7-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=48.32 [ 722.930905][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.939126][ T10] usb 7-1: Product: ခ [ 722.943380][ T10] usb 7-1: Manufacturer: 놐᜗鲯ࢌ褞℞ន쪘绢㔅贘㡌맠躯讘냠䥫쥞㸜鮪멁㗱ﶜ׺媢땯婳฼役Ꟊᢂ㥦㱡㰈鮣♡㙼ᰩ妫ᓏ㕹쮣ޭ䍴⸇磣嬒尘ꕆ会肭ⶍ༅뼭䖬쟐᪞ᑫᷢ曩ᬻ큍▛Ꮕᒦ㾵✓ً⠬伬谾芁㾢願 [ 722.968602][ T10] usb 7-1: SerialNumber: ᠊ [ 723.030437][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 723.030454][ T36] audit: type=1400 audit(5578.751:65411): avc: denied { accept } for pid=15703 comm="syz.9.13802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 723.063430][T15705] rust_binder: 15705 RLIMIT_NICE not set [ 723.063500][T15705] rust_binder: Read failure Err(EFAULT) in pid:210 [ 723.073334][T15707] __vm_enough_memory: pid: 15707, comm: syz.0.13803, bytes: 18014402804453376 not enough memory for the allocation [ 723.121426][T15709] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 723.208148][ T10] usb 7-1: USB disconnect, device number 11 [ 723.381811][ T1788] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 723.563638][ T1788] usb 1-1: Using ep0 maxpacket: 16 [ 723.571286][ T1788] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 723.581154][ T1788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.589416][ T1788] usb 1-1: Product: syz [ 723.593588][ T1788] usb 1-1: Manufacturer: syz [ 723.598253][ T1788] usb 1-1: SerialNumber: syz [ 723.604166][ T1788] usb 1-1: config 0 descriptor?? [ 723.610219][ T1788] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 723.618370][ T1788] usb 1-1: Detected FT4233HP [ 723.624633][T15718] rust_binder: 204: no such ref 3 [ 723.630316][T15718] rust_binder: Write failure EINVAL in pid:204 [ 723.667606][T15723] rust_binder: Write failure EINVAL in pid:209 [ 723.828613][T15741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 723.837563][ T1788] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 723.857601][ T1788] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 723.874534][ T1788] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 723.891408][ T1788] usb 1-1: USB disconnect, device number 37 [ 723.920687][ T1788] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 723.937893][ T1788] ftdi_sio 1-1:0.0: device disconnected [ 723.951389][T15756] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13820'. [ 723.961136][T15756] tipc: Started in network mode [ 723.966008][T15756] tipc: Node identity de354766f955, cluster identity 4711 [ 723.973224][T15756] tipc: Enabled bearer , priority 0 [ 723.981075][T15755] tipc: Disabling bearer [ 724.070476][T15760] netlink: 'syz.2.13821': attribute type 6 has an invalid length. [ 724.078397][T15760] netlink: 39 bytes leftover after parsing attributes in process `syz.2.13821'. [ 724.088935][T15760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.097402][T15760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.194661][T13541] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 724.355069][T13541] usb 10-1: Using ep0 maxpacket: 8 [ 724.361481][T13541] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 724.372430][T13541] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 724.384091][T13541] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 724.395404][T13541] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 724.406672][T13541] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 724.409055][T15762] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.13822'. [ 724.421208][T13541] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 724.438118][T13541] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.446258][T13541] usb 10-1: Product: syz [ 724.450574][T13541] usb 10-1: Manufacturer: syz [ 724.455346][T13541] usb 10-1: SerialNumber: syz [ 724.461491][T13541] usb 10-1: config 0 descriptor?? [ 724.471301][T13541] input: KB Gear Tablet as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input45 [ 724.521758][T15762] rust_binder: Error in use_page_slow: ESRCH [ 724.521782][T15762] rust_binder: use_range failure ESRCH [ 724.527930][T15762] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 724.533397][T15762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 724.541811][T15762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:261 [ 724.604494][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13826'. [ 724.712257][ T330] usb 10-1: USB disconnect, device number 62 [ 724.805489][T15793] fuse: Unknown parameter 'I arootmode' [ 724.833338][T15798] __vm_enough_memory: pid: 15798, comm: syz.0.13836, bytes: 18014402804453376 not enough memory for the allocation [ 724.945512][T15805] 9pnet_fd: Insufficient options for proto=fd [ 724.993699][T15816] support for the xor transformation has been removed. [ 725.001329][T15816] support for the xor transformation has been removed. [ 725.294856][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13844'. [ 725.323883][T15829] rust_binder: Write failure EFAULT in pid:219 [ 725.333011][ T36] audit: type=1400 audit(5580.902:65412): avc: denied { write } for pid=15831 comm="syz.9.13848" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 725.407440][T15839] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13850'. [ 725.451346][T15842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.459982][T15842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.466431][T15845] binder: Unknown parameter '01777777777777777777777' [ 725.600406][T15862] overlay: filesystem on ./bus not supported as upperdir [ 726.002147][ T1788] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 726.164732][ T1788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.179856][ T1788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1096, setting to 1024 [ 726.191134][ T1788] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 726.201524][T15883] fuse: Unknown parameter 'f\-0x00000000000000030000000000000000000300000000000000000000}' [ 726.205333][ T1788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.221007][ T1788] usb 7-1: config 0 descriptor?? [ 726.230469][T15870] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 726.449268][T15900] rust_binder: 248: no such ref 3 [ 726.454569][T15900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 726.455652][T15900] rust_binder: Write failure EINVAL in pid:248 [ 726.466616][T15869] IPv6: syztnl0: Disabled Multicast RS [ 726.485412][ T1788] usbhid 7-1:0.0: can't add hid device: -71 [ 726.494009][ T1788] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 726.508199][ T1788] usb 7-1: USB disconnect, device number 12 [ 726.532137][T15907] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 726.542012][T15907] rust_binder: Write failure EINVAL in pid:221 [ 726.555764][T15914] binder: Unknown parameter 'hash' [ 726.710141][T15928] syz.6.13881: attempt to access beyond end of device [ 726.710141][T15928] loop6: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 726.723433][T15928] EXT4-fs (loop6): unable to read superblock [ 726.782909][ T400] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 726.903769][T15939] /dev/rnullb0: Can't lookup blockdev [ 726.943340][ T400] usb 1-1: Using ep0 maxpacket: 32 [ 726.950164][ T400] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 726.958758][ T400] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 726.967631][ T400] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 726.976635][ T400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 726.986332][ T400] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 726.995968][ T400] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 727.013240][ T400] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 727.022667][ T400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.031685][ T400] usb 1-1: config 0 descriptor?? [ 727.253634][ T400] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 727.265678][ T400] usb 1-1: USB disconnect, device number 38 [ 727.272385][ T400] usblp0: removed [ 727.401367][T15970] netlink: 'syz.9.13896': attribute type 4 has an invalid length. [ 727.509470][T15973] netlink: 'syz.2.13897': attribute type 6 has an invalid length. [ 727.517558][T15973] netlink: 39 bytes leftover after parsing attributes in process `syz.2.13897'. [ 727.532386][T15973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.544912][T15973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.734775][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 727.895170][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 727.901419][ T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 727.909920][ T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 727.918574][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 727.927545][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 727.937169][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 727.946842][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 727.948648][ T1788] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 727.959835][ T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 727.976487][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.985363][ T10] usb 1-1: config 0 descriptor?? [ 728.098428][ T1788] usb 10-1: device descriptor read/64, error -71 [ 728.133549][ T9] usbhid 3-1:1.0: can't add hid device: -32 [ 728.139505][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -32 [ 728.205722][ T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 728.365787][ T1788] usb 10-1: device descriptor read/64, error -71 [ 728.423813][ T400] usb 1-1: USB disconnect, device number 39 [ 728.430598][ T400] usblp0: removed [ 728.622464][ T1788] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 728.761503][ T1788] usb 10-1: device descriptor read/64, error -71 [ 729.003056][T15988] can0: slcan on ttyS3. [ 729.018292][ T1788] usb 10-1: device descriptor read/64, error -71 [ 729.135920][ T1788] usb usb10-port1: attempt power cycle [ 729.264158][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 729.424586][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 729.430732][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.440921][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 729.451255][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 729.460346][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.468364][ T10] usb 1-1: Product: syz [ 729.472529][ T10] usb 1-1: Manufacturer: syz [ 729.477128][ T10] usb 1-1: SerialNumber: syz [ 729.482333][ T10] usb 1-1: config 0 descriptor?? [ 729.499476][ T1788] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 729.521868][ T1788] usb 10-1: device descriptor read/8, error -71 [ 729.660875][ T1788] usb 10-1: device descriptor read/8, error -71 [ 729.703670][ T10] usb 1-1: USB disconnect, device number 40 [ 729.746357][T15988] can0 (unregistered): slcan off ttyS3. [ 729.916615][ T1788] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 729.938947][ T1788] usb 10-1: device descriptor read/8, error -71 [ 730.077951][ T1788] usb 10-1: device descriptor read/8, error -71 [ 730.194731][ T1788] usb usb10-port1: unable to enumerate USB device [ 730.547640][ T1788] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 730.708996][ T1788] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.719455][ T1788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 730.729711][ T1788] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 730.741217][ T1788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 730.750999][ T1788] usb 1-1: SerialNumber: syz [ 730.757433][T16037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.766015][T16037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.776531][T16037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.785612][T16037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.804517][T16042] rust_binder: Read failure Err(EAGAIN) in pid:268 [ 730.914540][T16050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 730.921110][T16050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:274 [ 730.972973][ T1788] usb 1-1: 0:2 : does not exist [ 730.993856][ T1788] usb 1-1: USB disconnect, device number 41 [ 731.000761][T16055] netlink: 1367 bytes leftover after parsing attributes in process `syz.9.13913'. [ 731.011592][T15701] udevd[15701]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 731.084000][T16058] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13915'. [ 731.221819][T16062] rust_binder: Error while translating object. [ 731.221865][T16062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 731.228050][T16062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:283 [ 731.246626][T16067] rust_binder: 287: no such ref 1 [ 731.285584][ T10] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 731.294462][T16073] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 731.339328][T16076] rust_binder: Fixups oob 165 172 361 173 [ 731.339346][T16076] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 731.345086][T16076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 731.353553][T16076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 731.383950][T16081] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 731.400183][T16081] rust_binder: Write failure EINVAL in pid:302 [ 731.459034][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.477655][ T10] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 731.488895][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.497593][ T10] usb 10-1: config 0 descriptor?? [ 731.596053][T16091] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 731.628079][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13929'. [ 731.637116][T16095] erspan0: entered promiscuous mode [ 731.679900][T16096] rust_binder: 16093 RLIMIT_NICE not set [ 731.932617][ T10] keytouch 0003:0926:3333.003E: fixing up Keytouch IEC report descriptor [ 731.947633][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.003E/input/input46 [ 732.026661][ T10] keytouch 0003:0926:3333.003E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 732.195804][T16100] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 732.195830][T16100] rust_binder: Error while translating object. [ 732.208257][T16100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 732.214463][T16100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:350 [ 732.227737][ T36] audit: type=1400 audit(5587.353:65413): avc: denied { read } for pid=16099 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 732.240648][ T10] rust_binder: 16092: removing orphan mapping 0:4120 [ 732.282725][T16102] rust_binder: Error while translating object. [ 732.282780][T16102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 732.288948][T16102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:352 [ 732.403643][T16107] rust_binder: Error while translating object. [ 732.413532][T16107] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 732.419794][T16107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:317 [ 732.488057][T16110] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 732.504819][T16110] rust_binder: Write failure EINVAL in pid:355 [ 732.712711][ T36] audit: type=1400 audit(5587.802:65414): avc: denied { read write } for pid=16134 comm="ip" path="/dev/console" dev="rootfs" ino=1038 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 732.789278][ T36] audit: type=1400 audit(5587.868:65415): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK Stopping iptables: [ 732.836493][ T36] audit: type=1400 audit(5587.924:65416): avc: denied { read write } for pid=16140 comm="iptables" path="/dev/console" dev="rootfs" ino=1038 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 732.860006][ T36] audit: type=1400 audit(5587.924:65417): avc: denied { search } for pid=16140 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.881826][ T330] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 732.886648][ T36] audit: type=1400 audit(5587.924:65418): avc: denied { write } for pid=16140 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system [ 732.910875][ T36] audit: type=1400 audit(5587.924:65419): avc: denied { add_name } for pid=16140 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 message bus: [ 732.934173][ T36] audit: type=1400 audit(5587.924:65420): avc: denied { create } for pid=16140 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 732.955163][ T36] audit: type=1400 audit(5587.924:65421): avc: denied { read open } for pid=16140 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=12965 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done [ 732.982991][ T36] audit: type=1400 audit(5587.924:65422): avc: denied { lock } for pid=16140 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=12965 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 733.050284][ T330] usb 1-1: Using ep0 maxpacket: 32 [ 733.056737][ T330] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.067783][ T330] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.090976][ T330] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 733.108804][ T330] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 733.117280][ T330] usb 1-1: Product: syz [ 733.121482][ T330] usb 1-1: Manufacturer: syz Stopping klogd: [ 733.127607][ T330] hub 1-1:4.0: USB hub found OK Stopping acpid: [ 733.341900][ T330] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 733.494442][T16157] rust_binder: 16156 RLIMIT_NICE not set [ 733.498111][ T10] rust_binder: 16155: removing orphan mapping 0:112 [ 733.524615][T16159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.533138][T16159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.681394][ T10] usb 1-1: USB disconnect, device number 42 [ 734.156012][ T1788] usb 10-1: USB disconnect, device number 67 [ 734.169900][T16170] input: syz0 as /devices/virtual/input/input47 [ 734.258846][T16187] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 734.258939][T16187] rust_binder: Error while translating object. [ 734.269522][T16187] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } OK Stopping syslogd: [ 734.275680][T16187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:346 stopped /sbin/syslogd (pid 92) OK [ 734.300299][T16191] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 734.377358][T16198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13950'. umount: can't re[ 734.396403][T16198] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13950'. mount debugfs read-only Connection to 10.128.1.37 closed by remote host. umount: sysfs busy - remounted read-only umount: can't remount devtmpfs read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 734.668133][ T8450] bridge_slave_1: left allmulticast mode [ 734.673801][ T8450] bridge_slave_1: left promiscuous mode [ 734.679446][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.687113][ T8450] bridge_slave_0: left allmulticast mode [ 734.692753][ T8450] bridge_slave_0: left promiscuous mode [ 734.698645][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.720074][ T330] usb 3-1: USB disconnect, device number 80 [ 734.870984][ T8450] veth1_macvtap: left promiscuous mode [ 734.876506][ T8450] veth0_vlan: left promiscuous mode [ 735.126863][ T8450] macsec0: left allmulticast mode [ 735.131902][ T8450] veth1_macvtap: left allmulticast mode [ 735.137488][ T8450] macsec0: left promiscuous mode [ 735.142548][ T8450] bridge0: port 3(macsec0) entered disabled state [ 735.149419][ T8450] bridge_slave_1: left allmulticast mode [ 735.155046][ T8450] bridge_slave_1: left promiscuous mode [ 735.160659][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.168229][ T8450] bridge_slave_0: left allmulticast mode [ 735.173854][ T8450] bridge_slave_0: left promiscuous mode [ 735.179463][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.187004][ T8450] bridge_slave_1: left allmulticast mode [ 735.192678][ T8450] bridge_slave_1: left promiscuous mode [ 735.198240][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.205671][ T8450] bridge_slave_0: left allmulticast mode [ 735.211361][ T8450] bridge_slave_0: left promiscuous mode [ 735.216931][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.394036][ T8450] tipc: Left network mode [ 735.398466][ T8450] tipc: Left network mode [ 735.403966][ T8450] veth1_macvtap: left promiscuous mode [ 735.409458][ T8450] veth0_vlan: left promiscuous mode [ 735.414935][ T8450] veth1_macvtap: left promiscuous mode [ 735.420448][ T8450] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 736.704580][T16199] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 736.711450][T16199] ACPI: PM: Preparing to enter system sleep state S5 [ 736.718343][T16199] kvm: exiting hardware virtualization [ 736.723840][T16199] reboot: Power down serialport: VM disconnected.